Re: Secure password hashing: Scrypt, PBKDF2, or BCrypt binding?

[David Hollander <dhllndr@...>]

> Prosody's source (grep for pbkdf in util/)

Thanks, just looked. I think if go with PBKDF2 though, I would
re-implement using bit.bxor from LuaJIT instead of a pure Lua binary
xor function.
SCrypt is probably my 1st choice and BCrypt my 2nd choice though based
on what I've read.

[1] http://www.daemonology.net/blog/2009-05-09-scrypt-key-derivation.html


On Wed, Jul 20, 2011 at 10:05 PM, Matthew Wild <mwild1@gmail.com> wrote:
> Replying from my mobile, but take a look at Prosody's source (grep for pbkdf
> in util/). Prosody supports secure password hashing using it in the latest
> version. It's pure Lua and not terribly slow.
>
> Regards,
> Matthew
>
> On 20 Jul 2011 22:57, "David Hollander" <dhllndr@gmail.com> wrote:
>
> Is anyone aware of a Lua library for Scrypt, PBKDF2, or BCrypt that
> runs under Linux?
>
>