Re: Secure password hashing: Scrypt, PBKDF2, or BCrypt binding?

[David Hollander <dhllndr@...>]

> the scrypt utility, but it does not contain a standalone library,
> though it seems that one could be extracted without much work.

I'll try and write one. I'm not very experienced with writing Lua C
bindings yet so it seems like a good excuse to learn.

It appears that I'll need to wrap the functions "calibrate" for
setting memory and processor costs and "crypto_scrypt". Additionally,
as I want to use this for password hashing, I'll need to decide what
random source to use for salting, and whether this functionality
should be included in the shared object, a higher level, or excluded.

On Thu, Jul 21, 2011 at 7:14 AM, Luiz Henrique de Figueiredo
<lhf@tecgraf.puc-rio.br> wrote:
>> Is anyone aware of a Lua library for Scrypt, PBKDF2, or BCrypt that
>> runs under Linux?
>
> Do you mean a pure Lua library or would a Lua binding to a C library do?
> If there is a C library for Scrypt, it should be easy to write a Lua
> binding for it.
>
> However, I did not find a C library for Scrypt. The closest thing I found
> was the scrypt utility, but it does not contain a standalone library,
> though it seems that one could be extracted without much work.
>
> http://www.tarsnap.com/scrypt.html
>
>