Type:	Package
Title:	'Blowfish' Key Derivation and Password Hashing
Version:	1.2.0
Description:	Bindings to the 'blowfish' password hashing algorithm https://www.openbsd.org/papers/bcrypt-paper.pdf derived from the 'OpenBSD' implementation.
URL:	https://jeroen.r-universe.dev/bcrypt
BugReports:	https://github.com/jeroen/bcrypt/issues
License:	BSD_2_clause + file LICENSE
Imports:	openssl
RoxygenNote:	6.1.1
Suggests:	spelling
Language:	en-US
Encoding:	UTF-8
NeedsCompilation:	yes
Packaged:	2024-10-03 16:15:56 UTC; jeroen
Author:	Jeroen Ooms [aut, cre], Damien Miller [cph] (blowfish algorithm), Niels Provos [cph] (py_bcrypt code)
Maintainer:	Jeroen Ooms <jeroenooms@gmail.com>
Repository:	CRAN
Date/Publication:	2024-10-04 13:30:10 UTC

Bcrypt password hashing

Description

Bcrypt is used for secure password hashing. The main difference with regular digest algorithms such as MD5 or SHA256 is that the bcrypt algorithm is specifically designed to be CPU intensive in order to protect against brute force attacks. The exact complexity of the algorithm is configurable via the log_rounds parameter. The interface is fully compatible with the Python one.

Usage

gensalt(log_rounds = 12, iv = openssl::rand_bytes(16))

hashpw(password, salt = gensalt())

checkpw(password, hash)

Arguments

Details

The hashpw function calculates a hash from a password using a random salt. Validating the hash is done by rehashing the password using the hash as a salt. The checkpw function is a simple wrapper that does exactly this.

gensalt generates a random text salt for use with hashpw. The first few characters in the salt string hold the bcrypt version number and value for log_rounds. The remainder stores 16 bytes of base64 encoded randomness for seeding the hashing algorithm.

Examples

# Secret message as a string
passwd <- "supersecret"

# Create the hash
hash <- hashpw(passwd)
hash

# To validate the hash
identical(hash, hashpw(passwd, hash))

# Or use the wrapper
checkpw(passwd, hash)

# Use varying complexity:
hash11 <- hashpw(passwd, gensalt(11))
hash12 <- hashpw(passwd, gensalt(12))
hash13 <- hashpw(passwd, gensalt(13))

# Takes longer to verify (or crack)
system.time(checkpw(passwd, hash11))
system.time(checkpw(passwd, hash12))
system.time(checkpw(passwd, hash13))

Bcrypt PWKDF

Description

Password based key derivation function with bcrypt.

Usage

pbkdf(password, salt, rounds = 16L, size = 32L)

Arguments