46 lines
		
	
	
		
			1.6 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
			
		
		
	
	
			46 lines
		
	
	
		
			1.6 KiB
		
	
	
	
		
			Markdown
		
	
	
	
	
	
Port of the OpenBSD `bcrypt_pbkdf` function to pure Javascript. `npm`-ified
 | 
						|
version of [Devi Mandiri's port](https://github.com/devi/tmp/blob/master/js/bcrypt_pbkdf.js),
 | 
						|
with some minor performance improvements. The code is copied verbatim (and
 | 
						|
un-styled) from Devi's work.
 | 
						|
 | 
						|
This product includes software developed by Niels Provos.
 | 
						|
 | 
						|
## API
 | 
						|
 | 
						|
### `bcrypt_pbkdf.pbkdf(pass, passlen, salt, saltlen, key, keylen, rounds)`
 | 
						|
 | 
						|
Derive a cryptographic key of arbitrary length from a given password and salt,
 | 
						|
using the OpenBSD `bcrypt_pbkdf` function. This is a combination of Blowfish and
 | 
						|
SHA-512.
 | 
						|
 | 
						|
See [this article](http://www.tedunangst.com/flak/post/bcrypt-pbkdf) for
 | 
						|
further information.
 | 
						|
 | 
						|
Parameters:
 | 
						|
 | 
						|
 * `pass`, a Uint8Array of length `passlen`
 | 
						|
 * `passlen`, an integer Number
 | 
						|
 * `salt`, a Uint8Array of length `saltlen`
 | 
						|
 * `saltlen`, an integer Number
 | 
						|
 * `key`, a Uint8Array of length `keylen`, will be filled with output
 | 
						|
 * `keylen`, an integer Number
 | 
						|
 * `rounds`, an integer Number, number of rounds of the PBKDF to run
 | 
						|
 | 
						|
### `bcrypt_pbkdf.hash(sha2pass, sha2salt, out)`
 | 
						|
 | 
						|
Calculate a Blowfish hash, given SHA2-512 output of a password and salt. Used as
 | 
						|
part of the inner round function in the PBKDF.
 | 
						|
 | 
						|
Parameters:
 | 
						|
 | 
						|
 * `sha2pass`, a Uint8Array of length 64
 | 
						|
 * `sha2salt`, a Uint8Array of length 64
 | 
						|
 * `out`, a Uint8Array of length 32, will be filled with output
 | 
						|
 | 
						|
## License
 | 
						|
 | 
						|
This source form is a 1:1 port from the OpenBSD `blowfish.c` and `bcrypt_pbkdf.c`.
 | 
						|
As a result, it retains the original copyright and license. The two files are
 | 
						|
under slightly different (but compatible) licenses, and are here combined in
 | 
						|
one file. For each of the full license texts see `LICENSE`.
 |