Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/sonofra/pwhash
A PHP-inspired password hashing library for Java
https://github.com/sonofra/pwhash
Last synced: about 1 month ago
JSON representation
A PHP-inspired password hashing library for Java
- Host: GitHub
- URL: https://github.com/sonofra/pwhash
- Owner: sonOfRa
- License: other
- Created: 2018-01-23T09:44:07.000Z (almost 7 years ago)
- Default Branch: master
- Last Pushed: 2023-07-07T21:37:25.000Z (over 1 year ago)
- Last Synced: 2023-11-30T01:40:22.439Z (12 months ago)
- Language: Java
- Homepage: https://pwhash.slevermann.de
- Size: 265 KB
- Stars: 3
- Watchers: 3
- Forks: 0
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE.md
Awesome Lists containing this project
README
[](https://travis-ci.org/sonOfRa/pwhash)
[](https://sonarcloud.io/dashboard/index/de.slevermann:pwhash)
[](https://sonarcloud.io/component_measures/metric/coverage/list?id=de.slevermann:pwhash)
[](https://sonarcloud.io/component_measures/metric/reliability_rating/list?id=de.slevermann:pwhash)
[](https://sonarcloud.io/component_measures/metric/security_rating/list?id=de.slevermann:pwhash)
# UNMAINTAINED
I am no longer actively maintaining this project. As far as I know, it never gained any users and is generally of limited usefulness because most web frameworks bring their own hashing mechanisms these days.
# pwhash
Pwhash is a library inspired by ``password_hash()`` family of function in the PHP standard library. It is meant to offer
modern password hashing algorithms to be used by a unified interface allowing simple hashing, verification and upgrading
of existing hashes
## Supported algorithms
For now, it is planned to support argon2 and bcrypt as modern password hashing algorithms. The interface can be extended
to easily include newer strategies if they become available.
### Modern
#### Argon2
For argon2, this library uses [this library](https://github.com/phxql/argon2-jvm). It comes in two flavors, one with the
native libraries bundled, and one without the native libraries bundled. This is why the dependency to it is listed as
provided in the [pom](pom.xml). This means that when depending on this library, you also need to depend on either
```xml
de.mkammerer
argon2-jvm-nolibs
```
or
```xml
de.mkammerer
argon2-jvm
```
If you depend on the former, you will need to install the argon2 native libraries on your system. If you depend on the latter,
they will come bundled with the JVM library.
#### Bcrypt
Bcrypt is supported via [jBcrypt](https://github.com/jeremyh/jBCrypt)
### Compatibility
#### PBKDF2
PBKDF2 is supported for use with older, existing password hashes. It should not be used for new applications.
Currently, the library supports the flavors using SHA512, SHA256 and SHA1.
## Maven dependency
### Release version
The root ``pom.xml`` of this project functions as a [BOM](https://maven.apache.org/guides/introduction/introduction-to-dependency-mechanism.html).
In order to use it, add this to your ```` section in your ``pom.xml``
```xml
de.slevermann
pwhash
3.0.0
import
pom
```
After this, you can define your dependencies without specifying versions, as they are handled by the BOM.
For core support, you need to depend on
```xml
de.slevermann
pwhash-core
```
and your choice of one argon2 provider as listed above.
If you also need PBKDF2 support for legacy reasons, use
```xml
de.slevermann
pwhash-pbkdf2
```
### Development version
For the current development snapshot version, use
```xml
de.slevermann
pwhash
3.1.0-SNAPSHOT
import
pom
```