RustCrypto: bcrypt-pbkdf
Pure Rust implementation of the bcrypt_pbkdf password-based key derivation
function, a custom derivative of PBKDF2 used in OpenSSH.
About
bcrypt_pbkdf is a password-based key derivation function that uses a PBKDF2-style repeated
application of a hash function, but instead of using a standard hash function like SHA-2 it uses
a bcrypt-style core based on the Blowfish cipher. At its heart is a modified bcrypt operation
called "bhash" that repeatedly mixes the password and salt into Blowfish’s internal state and then
uses Blowfish to encrypt a fixed 256-bit constant, producing a block of output. This is
deliberately expensive to compute to thwart brute force attacks, with a user-controlled number of
rounds which control the compute cost of the derivation.
License
Licensed under either of:
at your option.
Contribution
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.