scryptauth is a go / golang library for secure password handling
Go Makefile
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
.gitignore
LICENSE
Makefile
README.md
scryptauth.go
scryptauth_parse.go
scryptauth_parse_test.go
scryptauth_test.go

README.md

scryptauth

scryptauth is a GO library for secure password handling using scrypt

It uses sha256_hmac(scrypt(user_password, salt), server_key) to protect against both dictionary attacks and DB leaks.

scryptauth additionally provides encode/decode routines using base64 to create strings for storing into a DB.

Usage

Choose your scrypt pw_cost factor (make bench helps you on this). Typical values used in production are between 11 and 14 which means a login will take at least 15 to 130ms, and your service will be able to handle only 66 and 8 logins per second with 100% load on a single CPU (keep that in mind!).

Documentation

http://godoc.org/github.com/gebi/scryptauth

Author

Michael Gebetsroither (michael \x40 mgeb \x2e org)

License

BSD 2 clause