BCrypt.Net

Reviewed: BCrypt.Net R5 (May 29, 2013)

vucaonam — Wed, 29 May 2013 09:39:58 GMT

Rated 3 Stars (out of 5) - It is a good product!

New Post: No hashing of salt, string, workload?

TLM — Tue, 29 Jan 2013 08:47:24 GMT

this might be a year late but here's a good explanation why.

http://stackoverflow.com/questions/5393803/can-someone-explain-how-bcrypt-verifies-a-hash

Commented Issue: Documentation CHM not opening [6]

mrcoulson58 — Fri, 11 Jan 2013 21:16:07 GMT

Commented Issue: Documentation CHM not opening [6]

mbblum — Fri, 11 Jan 2013 17:31:10 GMT

Hello. I am quite interested in using BCrypt.Net in a project at work, but I can't seem to get the downloaded CHM documentation to open. It just tells me "Navigation to the web page was canceled."

Thanks in advance!
Comments: Not a BCrypt issue, it's an internet download issue. It is blocked by default because the file was downloaded from the internet and not known to be safe by windows. Find the Documentation.chm in File Explorer, right click and select Properties. At the bottom of the General tab, click the Unblock button.

Created Issue: Documentation CHM not opening [6]

mrcoulson58 — Thu, 03 Jan 2013 14:54:28 GMT

Commented Issue: OverflowException in Encipher(...) [4]

Atrejoe — Tue, 14 Aug 2012 14:09:43 GMT

After building BCrypt in order to sign the assembly, the unit test all fail at:

BCrypt.Encipher(uint[] blockArray, int offset)

At:
r ^= n ^ _P[++round];

Are there any additional instructions for building?
I haven't signed the assembly yet, nor modified the code. However, I do run the solution in vs2011.
Comments: Just to answer my own question; the unit tests need to be performed in Release mode

Created Issue: Exposing method to derive WorkFactor [5]

Atrejoe — Fri, 08 Jun 2012 10:29:24 GMT

In order to determine whether an existing hash used a weak WorkFactor it would be nice if BCrypt (next to providing Verify(...)) provided a method for officially determining the WorkFactor of a hash.

I see this is already in place internally for Verify(...), I'm refactoring this bit so I could be exposed as well. Care if I commit this?

Created Issue: OverflowException in Encipher(...) [4]

Atrejoe — Fri, 08 Jun 2012 10:20:25 GMT

New Post: Strong Name Signing

Atrejoe — Fri, 08 Jun 2012 09:58:09 GMT

Same here.

Is the idea that the source code cannot contain the key (maybe defeating the purpose of signing altogether), then maybe it would be an idea to ship the binaries with signed dlls, but keep the key out of the source, just for convenience?

For now compilation with my own key seems to be the way to go.

New Post: Strong Name Signing

DonLafferty — Wed, 18 Apr 2012 17:10:43 GMT

I'm trying to use this in a VS2010 VB project but because I have the project signed with a strong name every assembly must also be signed with a strong name. Is it possible for the next version to be signed with a strong name so I can use it in my project?

New Post: No hashing of salt, string, workload?

adamtuliper — Sat, 21 Jan 2012 07:48:09 GMT

The docs don't seem to be right here.

1. BCrypt..::..HashPassword Method (String, Int32)

Hash a password using the OpenBSD bcrypt scheme and a salt generated by GenerateSalt(Int32) using the given workFactor.

This seems to not be correct since there is no salt provided as a parameter for this overload.

Whats the use of having a work factor here but no salt? Ideally you want to provide the salt, text, and work factor to slow the computation time down.

Sure you can set the work factor when generating the salt, but if the salt is already generated, you would likely want to use it when a user types in a password for validation AND include a work factor to slow brute forcing down - the whole purpose as I would see it for the work factor to exist?

Thoughts?

Thanks!

Commented Issue: Change Set 1eef0262901c breaks BCrypt [3]

mammo — Thu, 14 Jul 2011 15:50:51 GMT

The removal of the unchecked keyword in BCrypt.Encipher (line 639) makes HashPassword crash with an OverflowException. The Feistel substitution must allow overflow to work.

Patch attached.

Kind regards,
Amanuel

Comments: A patch, that's sooo 1998. Forked and fixed at http://bcrypt.codeplex.com/SourceControl/network/Forks/mammo/UncheckedFix

Created Issue: Change Set 1eef0262901c breaks BCrypt [3]

mammo — Thu, 14 Jul 2011 15:02:10 GMT

New Post: .NET Membership Provider

mammo — Thu, 14 Jul 2011 14:01:33 GMT

Check the answers (especially the one from GalacticJello) on

http://stackoverflow.com/questions/6460711/adding-a-custom-hashalgorithmtype-in-c-asp-net

Kind regards,

Amanuel

Created Issue: Strong name [2]

tkstanczak — Wed, 06 Jul 2011 13:26:22 GMT

Could you please release a signed assembly?

New Post: .NET Membership Provider

enmaku — Thu, 23 Jun 2011 21:48:14 GMT

OK so I'm a bit of a noob when it comes to such things, but is there any way to set this library up so that I can specify hashAlgorithmType="BCrypt" in my web.config's <membership> section?

If so, you might consider including it in future sample code releases as it would make including BCrypt.Net into existing projects much easier when such projects are using ASP.NET's built-in Membership Provider.

Thanks,

David Perry

Closed Issue: HashString(string, int) workFactor bug [1]

rdez6173 — Tue, 08 Feb 2011 15:38:33 GMT

workFactor argument is not used in HashString(string, int):
public static string HashString(string source, int workFactor)
{
return HashPassword(source, GenerateSalt());
}

I think it should be:

public static string HashString(string source, int workFactor)
{
return HashPassword(source, GenerateSalt(workFactor));
}

Comments: Fixed in R5

Commented Issue: HashString(string, int) workFactor bug [1]

rdez6173 — Tue, 08 Feb 2011 15:38:18 GMT

Commented Issue: HashString(string, int) workFactor bug [1]

rdez6173 — Tue, 08 Feb 2011 15:38:09 GMT

Created Release: BCrypt.Net R5 (Feb 08, 2011)

rdez6173 — Tue, 08 Feb 2011 15:37:29 GMT

Fix for HashString(string, int) workFactor bug