RustCrypto: bcrypt-pbkdf

Pure Rust implementation of the bcrypt_pbkdf password-based key derivation function, a custom derivative of PBKDF2 used in OpenSSH.

About

bcrypt_pbkdf is a password-based key derivation function that uses a PBKDF2-style repeated application of a hash function, but instead of using a standard hash function like SHA-2 it uses a bcrypt-style core based on the Blowfish cipher. At its heart is a modified bcrypt operation called "bhash" that repeatedly mixes the password and salt into Blowfish’s internal state and then uses Blowfish to encrypt a fixed 256-bit constant, producing a block of output. This is deliberately expensive to compute to thwart brute force attacks, with a user-controlled number of rounds which control the compute cost of the derivation.

License

Licensed under either of:

• Apache License, Version 2.0
• MIT license

at your option.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.