bolt icon indicating copy to clipboard operation
bolt copied to clipboard

Use crypto-password

Open sw1nn opened this issue 10 years ago • 4 comments

crypto-password seems to be a good thing to capture community knowledge about the best way to handled passwords.

Let's standardise on it: https://github.com/weavejester/crypto-password/

sw1nn avatar Mar 27 '14 16:03 sw1nn

Agree strongly!

malcolmsparks avatar Mar 27 '14 16:03 malcolmsparks

You also can consider use buddy as low level security layer: http://niwibe.github.io/buddy/#_password_hashers

PD: I'm also working on security library for clojure but it obviously not the same target that cylon, because it works in more low level layer. But I have done some thing similar autentication/authorization abstractions. It may be interesting to collaborate?

niwinz avatar Jul 12 '14 19:07 niwinz

Yes, indeed. Cylon is designed to help developers construct real-world applications building on the meta-architecture of component. Like modular, it is mostly a collection of wrappers to other libraries. For example, modular's cljs-build wraps Thomas Heller's shadowbuild library. I like the idea of integrating with buddy, beginning with your password hashers, this makes a lot of sense and I subscribe to your design philosophy. Thanks for letting me know about buddy, I actually prefer it to crypto-password as there are less overall dependencies and I've always liked bouncycastle. I'd very much like to collaborate on this with you.

malcolmsparks avatar Jul 14 '14 10:07 malcolmsparks

Awesome! Let me know if you have any problem. And any colaboration is obviously welcome!

niwinz avatar Jul 16 '14 09:07 niwinz