I'm planning to use jBCrypt for password hashing in a new web application, as it is supposed to be the best from what I've read. As I haven't used it before I'm looking into if there is any reason not to use it. I have this: I haven't found it in the Maven repository (searched for jbcrypt and bcrypt at mvnrepository.org) which is a do...
Hello, I'm writing a program where I use MD5 to hash login details before I send them to a server, but there I have to compare it to a blowfish (jBCrypt) hashed password retrieved from a database. jBCrypt uses: if (BCrypt.checkpw("candidatePassword", hashedPwd)) { // they are the same } The problem is that, I don't have a candidate ...
After looking into a bug in the original jBCrypt v0.1 C# port: BCrypt.net (Related Question). I decided to compare the new jBCrypt code against the old C# port to look for discrepancies and potential issues like the related question's bug. Here is what I've found: // original java (jBCrypt v0.3): private static int streamtoword(byte da...