search

Purexo-GoogleExportation / javascript-bcrypt

Automatically exported from code.google.com/p/javascript-bcrypt
0 stars 0 forks source link

Initiation takes to long. #3

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
Initiation takes to long, becouse of PRNG.defaultRandomGenerator(), at least i 
think it's becouse ot if. It takes around 14 seconds on my computer before 
firebug prints "DEBUG: ### PRNG.readyToGenerateRandomBytes" an

What is the expected output? What do you see instead?
Being able to use jsbcrypt for login page the moment the page loads.

What version of the product are you using? On what operating system?
mar 7

Please provide any additional information below.
Is it necessary to use PRNG. Does generating salt from ie. 
$2a$<iterations>$md5(new Date().getTime()); is not enough to make bcrypt safe?

Original issue reported on code.google.com by grzesgr...@gmail.com on 14 Apr 2011 at 7:23

GoogleCodeExporter commented 9 years ago 
Sadly if you want to secure implementation of bcrypt the date is not enough for 
salt generation. I haven't had time to see if there is a faster PRNG 
implementation I could use. It is possible that a Mersenne Twist PRNG could do 
the job better and may be used in the future.

Original comment by nevins.bartolomeo@gmail.com on 14 Dec 2011 at 9:26