class BCrypt::Engine
Experimental RBS support (using type sampling data from the type_fusion
project).
# sig/bcrypt/engine.rbs class BCrypt::Engine def self.valid_salt?: (String salt) -> true end
A Ruby wrapper for the bcrypt() C extension calls and the Java calls.
def self.autodetect_cost(salt)
def self.autodetect_cost(salt) salt[4..5].to_i end
def self.calibrate(upper_time_limit_in_ms)
# should take less than 1000ms
BCrypt::Password.create("woo", :cost => 10)
# should take less than 200ms
BCrypt::Engine.calibrate(1000) #=> 12
BCrypt::Engine.calibrate(200) #=> 10
Example:
Returns the cost factor which will result in computation times less than +upper_time_limit_in_ms+.
def self.calibrate(upper_time_limit_in_ms) (BCrypt::Engine::MIN_COST..BCrypt::Engine::MAX_COST-1).each do |i| start_time = Time.now Password.create("testing testing", :cost => i+1) end_time = Time.now - start_time return i if end_time * 1_000 > upper_time_limit_in_ms end end
def self.cost
Returns the cost factor that will be used if one is not specified when
def self.cost @cost || DEFAULT_COST end
def self.cost=(cost)
# cost can still be overridden as needed
BCrypt::Password.create('secret').cost #=> 8
BCrypt::Engine.cost = 8
BCrypt::Password.create('secret').cost #=> 12
BCrypt::Engine::DEFAULT_COST #=> 12
Example:
creating a password hash.
Set a default cost factor that will be used if one is not specified when
def self.cost=(cost) @cost = cost end
def self.generate_salt(cost = self.cost)
def self.generate_salt(cost = self.cost) cost = cost.to_i if cost > 0 if cost < MIN_COST cost = MIN_COST end if RUBY_PLATFORM == "java" Java.bcrypt_jruby.BCrypt.gensalt(cost) else __bc_salt("$2a$", cost, OpenSSL::Random.random_bytes(MAX_SALT_LENGTH)) end else raise Errors::InvalidCost.new("cost must be numeric and > 0") end end
def self.hash_secret(secret, salt, _ = nil)
Given a secret and a valid salt (see BCrypt::Engine.generate_salt) calculates
def self.hash_secret(secret, salt, _ = nil) unless _.nil? warn "[DEPRECATION] Passing the third argument to " \ "`BCrypt::Engine.hash_secret` is deprecated. " \ "Please do not pass the third argument which " \ "is currently not used." end if valid_secret?(secret) if valid_salt?(salt) if RUBY_PLATFORM == "java" Java.bcrypt_jruby.BCrypt.hashpw(secret.to_s.to_java_bytes, salt.to_s) else secret = secret.to_s secret = secret.byteslice(0, MAX_SECRET_BYTESIZE) if secret && secret.bytesize > MAX_SECRET_BYTESIZE __bc_crypt(secret, salt) end else raise Errors::InvalidSalt.new("invalid salt") end else raise Errors::InvalidSecret.new("invalid secret") end end
def self.valid_salt?(salt)
Experimental RBS support (using type sampling data from the type_fusion
project).
def self.valid_salt?: (String salt) -> true
This signature was generated using 1 sample from 1 application.
def self.valid_salt?(salt) !!(salt =~ /\A\$[0-9a-z]{2,}\$[0-9]{2,}\$[A-Za-z0-9\.\/]{22,}\z/) end
def self.valid_secret?(secret)
def self.valid_secret?(secret) secret.respond_to?(:to_s) end