uu59 / phpass-ruby

porting of phpass for ruby

This is a porting of phpass

All files within this package are in public domain.

Install

$ gem install phpass-ruby

Usage

require "rubygems"
require "phpass"

# 12 is password strength / calculation time. This is trade-off. 
# 8 <= strength <= 30 (default: 8)
phpass = Phpass.new(12) 

# Get hashed string. These are different result each time.
p phpass.hash('foo')
p phpass.hash('foo')
p phpass.hash('foo')

# Compare input and stored hash
known = '$P$9IQRaTwmfeRo7ud9Fh4E2PdI0S3r.L0'
p phpass.check('test12345', known) # => true
p phpass.check('test12346', known) # => false

Caution

phpass-ruby is supporting portable(MD5) hashing only.

However, nonportable phpass hashes can be validated using bcrypt:

require 'bcrypt'
BCrypt::Engine.cost = 8
p BCrypt::Password.new(stored_hash) == password + stored_salt