./security/ruby-bcrypt, OpenBSDs bcrypt() password hashing algorithm for Ruby

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2015Q3, Version: 3.1.10, Package name: ruby200-bcrypt-3.1.10, Maintainer: pkgsrc-users

bcrypt() is a sophisticated and secure hash algorithm designed by The OpenBSD
project for hashing passwords. bcrypt-ruby provides a simple, humane wrapper for
safely handling passwords.

= bcrypt-ruby

An easy way to keep your users' passwords secure.

* http://bcrypt-ruby.rubyforge.org/
* http://github.com/codahale/bcrypt-ruby/tree/master

== Why you should use bcrypt

If you store user passwords in the clear, then an attacker who steals a copy of
your database has a giant list of emails and passwords. Some of your users will
only have one password - for their email account, for their banking account, for
your application. A simple hack could escalate into massive identity theft.

It's your responsibility as a web developer to make your web application secure
- blaming your users for not being security experts is not a professional
response to risk.

bcrypt allows you to easily harden your application against these
kinds of attacks.

Master sites:

SHA1: 73a43c013aecb0992ed31f893c4d4680f3b29ed9
RMD160: 7b93b3b744ed5ed2f5a95536dff14f098d519db5
Filesize: 43 KB

Version history: (Expand)