Giters

BcryptNet / bcrypt.net

BCrypt.Net - Bringing updates to the original bcrypt package

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

What is the maximum character limit that this bcrypt library can handle?

penguinawesome opened this issue · comments

commented

What is the maximum character limit that this bcrypt library can handle? I saw on others that it can handle up to 72 characters, or 55 characters, I am not sure with this library. I would like to know what is the maximum characters.

commented

In the case of the library 72
https://github.com/BcryptNet/bcrypt.net/blob/main/src/BCrypt.Net.UnitTests/BCryptTests.cs#L105-L112

But you can retain entropy above this with the 'enhanced hashing' functionality.

commented

@ChrisMcKee if we're gonna use the enhanced hashing, what would be the new max characters limit?

commented

Heat death of the universe or the maximum achievable entropy of SHA384 whichever comes first

commented

The enhanced hashing basically pre-hashes the key in order to avoid loss of entropy over the 72 character limit.
Its a common implementation (rather than one pulled out of my ... head) 😄

commented

Thanks @ChrisMcKee :D this library is awesome! We will try to use this.