| Crates.io | bcrypt-pbkdf |
| lib.rs | bcrypt-pbkdf |
| version | 0.11.0-rc.3 |
| created_at | 2018-08-22 22:31:30.768929+00 |
| updated_at | 2026-01-21 16:27:53.133556+00 |
| description | bcrypt-pbkdf password-based key derivation function |
| homepage | https://github.com/RustCrypto/password-hashes/tree/master/bcrypt-pbkdf |
| repository | https://github.com/RustCrypto/password-hashes |
| max_upload_size | |
| id | 80815 |
| size | 36,215 |
Pure Rust implementation of the bcrypt_pbkdf password-based key derivation
function, a custom derivative of PBKDF2 used in OpenSSH.
bcrypt_pbkdf is a password-based key derivation function that uses a PBKDF2-style repeated
application of a hash function, but instead of using a standard hash function like SHA-2 it uses
a bcrypt-style core based on the Blowfish cipher. At its heart is a modified bcrypt operation
called "bhash" that repeatedly mixes the password and salt into Blowfish’s internal state and then
uses Blowfish to encrypt a fixed 256-bit constant, producing a block of output. This is
deliberately expensive to compute to thwart brute force attacks, with a user-controlled number of
rounds which control the compute cost of the derivation.
Licensed under either of:
at your option.
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.