This repository is the bcrypt-ruby gem, a Ruby library implementing OpenBSD's bcrypt() password hashing algorithm. It provides a secure, computationally expensive hash for storing user passwords. The gem includes a native C extension (MRI) and a pure Java implementation (JRuby), wrapping the well-known crypt_blowfish public domain code by Solar Designer. The Ruby API is clean and minimal, exposing BCrypt::Password for creating and verifying hashes, and BCrypt::Engine for lower-level salt generation and cost calibration. The library is heavily tested, interoperable with other bcrypt implementations, and includes constant-time comparison to prevent timing attacks. It is a mature, widely-used security library with active maintenance.
This repository is a high-quality .NET library implementing the OpenBSD BCrypt password hashing algorithm. It serves as a security-critical dependency for authentication systems, providing robust password hashing, verification, and salt generation. The codebase is multi-targeted, supporting legacy .NET Framework versions (4.6.2+) alongside modern .NET standards (2.0/2.1) and recent runtimes (.NET 8.0, 10.0). It includes specialized extensions for ASP.NET Core Identity, allowing seamless integration into existing authentication pipelines without custom implementation. The architecture prioritizes security through constant-time comparisons, secure memory handling, and thread-safe key schedule management using ThreadLocal storage. The library includes extensive test vectors from the original Java reference implementation to ensure algorithmic correctness across different BCrypt revisions (2a, 2b, 2y, 2x). While the core library is production-ready and widely adopted, the repository exhibits some hygiene issues, including the presence of a signing key file in the root directory and a 'dists/' folder containing legacy binary artifacts, which suggests a mix of automated and manual release processes. For engineers evaluating reuse, this library offers a reliable, well-tested foundation for password security. The Identity extension component is particularly valuable for .NET developers needing to replace default password hashers. However, consumers should be aware of the technical drift regarding legacy framework support and the potential security implications of the repository's artifact management practices.