Stack Overflow
Stack Overflow

Questions tagged [bcrypt.net]

BCrypt Encryption Library for .NET Platform

25 questions
139
votes
2 answers

Is BCrypt a good hashing algorithm to use in C#? Where can I find it?

I have read that when hashing a password, many programmers recommend using the BCrypt algorithm. I am programming in C# and is wondering if anyone knows of a good implementation for BCrypt? I found this page, but I don't really know if it is bogus…
Svish
  • 152,914
  • 173
  • 462
  • 620
118
votes
6 answers

.net implementation of bcrypt

Does anyone know of a good implementation of bcrypt, I know this question has been asked before but it got very little response. I'm a bit unsure of just picking an implementation that turns up in google and am thinking that I may be better off…
Gareth
  • 2,061
  • 2
  • 17
  • 22
38
votes
2 answers

Can someone explain how BCrypt verifies a hash?

I'm using C# and BCrypt.Net to hash my passwords. For example: string salt = BCrypt.Net.BCrypt.GenerateSalt(6); var hashedPassword = BCrypt.Net.BCrypt.HashPassword("password", salt); //This evaluates to True. How? I'm not telling it the salt…
delete
22
votes
2 answers

Why does BCrypt.net GenerateSalt(31) return straight away?

I stumbled across BCrypt.net after reading Jeff Atwood's post about storing passwords which led me to Thomas Ptacek's recommendation to use BCrypt to store passwords. Which finally led me to this C# implementation of BCrypt In the comments on the…
David Murdoch
  • 87,823
  • 39
  • 148
  • 191
9
votes
3 answers

Preferred BCrypt.Net implementation

There are a few different ports of BCrypt.net out there and it's very hard to tell which is the "best". Has anyone taken the time to review them and come to any conclusion as to which project to patronize? I'm most interested in which has the most…
Michael La Voie
  • 27,772
  • 14
  • 72
  • 92
4
votes
1 answer

working with BCrypt.net

I'm working a custom membership system in ASP.NET MVC3 (explained here). And I want to use BCrypt. My question is about BCrypt.net arguments range. i.e. the minimum and maximum length of string that BCrypt can hash it, that min/max length of salt,…
amiry jd
  • 27,021
  • 30
  • 116
  • 215
4
votes
1 answer

.Net implementation of bcrypt, which implements HashAlgorithm?

I'm looking to allow bcrypt support in my authentication library. One of the problems right now is that I assume that the hasher will be of type HashAlgorithm. Bcrypt.net does not implement this class. Also, it's sealed so I would have to make my…
Earlz
  • 62,085
  • 98
  • 303
  • 499
3
votes
3 answers

Adding a custom hashAlgorithmType in C# ASP.NET

I've got a page that I need to beef up security on. I'm using the built-in MembershipProvider functionality and currently have hashAlgorithmType set to SHA512. I've got the BCrypt.NET library (http://bcrypt.codeplex.com/) and it seems to be working…
David Perry
  • 1,324
  • 5
  • 14
  • 31
3
votes
1 answer

Why is the hash generated by BCrypt non-deterministic

I've worked with a number of different hashing algorithms in the past and I was under the impression that they were all deterministic. I just switched some of my code to use BCrypt.Net and I have to admit I was completely stumped when all of my…
Kelly Robins
  • 7,168
  • 6
  • 43
  • 66
2
votes
1 answer

jBCrypt 0.3 C# Port (BCrypt.net)

After looking into a bug in the original jBCrypt v0.1 C# port: BCrypt.net (Related Question). I decided to compare the new jBCrypt code against the old C# port to look for discrepancies and potential issues like the related question's bug. Here is…
David Murdoch
  • 87,823
  • 39
  • 148
  • 191
2
votes
1 answer

PHP to C# Conversion using BCrypt

I am hoping someone might shed some light on which library I might use if any are available to convert a PHP based application that has been using BCrypt $2a to a .Net based application, the current BCrypt C# Library I used I just realized is using…
Ryan Fisch
  • 2,614
  • 5
  • 36
  • 57
1
vote
2 answers

Unable to verify bcrypt-hashed password from mysql with vb.net

I have an application in vb.net using mysql as database. The application has a login form. There is also a registration form that can enter a new password in the archive using bcrypt.net, as shown at this site: …
Tiago NET
  • 153
  • 9
1
vote
2 answers

Fast but secure method for verifying password?

I have client connecting to server over the internet (WCF). To calculate the hash to save in the DB I currently use: var hash = BCrypt.HashPassword(password, 13); To verify it I do: var isApproved = BCrypt.Verify(passwordFromUser,…
Tar
  • 8,529
  • 9
  • 56
  • 127
0
votes
1 answer

BCrypt Hashed Password Truncated in The Database

I'm using .Net implementation of BCrypt for storing passwords in the database. The password column is VARCHAR(MAX) This is the code that updates the Password via stored procedure: Update [User] Set [Password]= @NewPassword, ModifiedOn =…
FMFF
  • 1,652
  • 4
  • 32
  • 62
0
votes
0 answers

C# How To Efficiently Implement Large-Scale BCrypt.NET Authentication

I have a key authentication system with BCrypt.NET with 100 hard-coded hashes. At the time this was a quick fix to my authentication problem but now I'm realizing that I need to optimize this badly. Authentication is client-side and the local…
vx-dev
  • 1
  • 2
1
2