boughtonp / cfpassphrase

MOVED TO https://codeberg.org/boughtonp/cfpassphrase
https://www.sorcerersisle.com/software/cfpassphrase
GNU Lesser General Public License v3.0
17 stars 2 forks source link

Implement "bcrypt+SHA256" as default algorithm (independent to straight bcrypt). #4

Open boughtonp opened 11 years ago

boughtonp commented 11 years ago

The straight implementation of bcrypt only uses the first 72 characters of a passphraase. Whilst this is sufficient for most needs, it would also make sense to pre-hash with SHA-2 to use the full passphraase, and make this the default option. (The straight bcrypt option would remain available for compatibility with other implementations).