b7f382b979dc349948b0e69fbbf7fb2a7ef6b7d9
Supporting larger salts makes it possible to implement bcrypt-pbkdf (http://www.tedunangst.com/flak/post/bcrypt-pbkdf), which is used in the latest OpenSSH versions to encrypt key files. This change makes expandKeyWithSalt (and thus NewSaltedCipher) about 20% slower, but since it isn't used in the "heavy" phase of computation in bcrypt (it uses ExpandKey, which didn't change), the effect on bcrypt performance is negligible. The 16-byte limit was an artifact of optimization and due to the fact that it was enough for bcrypt; Eksblowfish spec or other implementations don't limit the salt size. Additionally, there was a bug in the previous implementation: it only generated correct results for salts consisting of 4, 8, or 16 bytes, and panicked if salt had zero length. LGTM=agl R=golang-codereviews, gobot, agl CC=golang-codereviews https://golang.org/cl/102720045
This repository holds supplementary Go cryptography libraries. To submit changes to this repository, see http://golang.org/doc/contribute.html.
Description
Mirror of ys-ll/crypto (GitHub), kept for paraterm builds
https://golang.org/x/crypto
8.1 MiB
Languages
Go
88.6%
Assembly
11.1%
C
0.3%