PBKDF2 Plugin for BB10 Cordova / Webworks

This Cordova/WebWorks plugin allows an app to hash a password using PBKDF2 for storage in a FAST manner. PBKDF2 is a Key Derivation Function used for securing passwords. Although JavaScript implementations for PBKDF2 already exist, this implementation ran at around 100x faster JavaScript implementations tested. Faster implementations means higher iteration counts can be used, leading to a more secure output. The OpenSSL Crypto library has been used to perform the hashing.

The sample code for this application is Open Source under the Apache 2.0 License.

Author

• Shikhir Singh

Release History

• V1.0.0 - Initial release

Dependencies

1. Minimal requirement for BlackBerry 10 Device Software is 10.0.9
2. Minimal requirement for BlackBerry 10 Native SDK is 10.0.9
3. Minimal requirement for BlackBerry 10 Webworks is 2.0

How to install this extension

In command prompt while in your Cordova/WebWorks project directory, type:

cordova plugin add <path to the /plugin/ directory>

How to Build SMS for BB10 Cordova

Assumption: You have installed the BlackBerry Native SDK 2.0+, and BlackBerry Webworks 2.0+

• Simply import the plugin/src/blackberry10/native directory into a workspace in your NDK. Build the project.

Usage

var passwdParam = {
	"password": "MyPassword",  
	"salt": "MySalt", // 
	"iterations": 50000, 
	"keyLength": "32" //  is bytes, not bits!
};
						
var hashedValue=community.PasswordCrypto.pbkdf2_Sync(passwdParam); 

Iterations Iterations as well as the keylength determine the speed of the algorithm. You want the algorithm to be slow to be secure, but not slow enough to irratate the user. A minimum iterations count of around 30,000 at a key length of 32 bytes is recommended.

Sample App

A sample app has been included only so that you may compare the speed of the algorithm with a JavaScript implementation vs the C++ implementation. JavaScript implementation of the algorithm is here under BSD license.

If you don't want to build this sample application yourself we've included a pre-built and signed BAR file. You can find it in the folder /build/ folder.

Known Issues

None!

Contributing Changes

Please see the README of the BB10-WebWorks-Community-Samples repository for instructions on how to add new Samples or make modifications to existing Samples.

Disclaimer

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.