Re: effect of bcrypt hash $cost on HTTP Basic authentication's login performance?

2019-07-02 Thread Maxim Dounin
Hello! On Tue, Jul 02, 2019 at 05:55:01PM -0700, PGNet Dev wrote: > On 7/2/19 5:23 PM, Maxim Dounin wrote: > > On Sat, Jun 29, 2019 at 09:48:01AM -0700, PGNet Dev wrote: > > > >> When generating hashed data for "HTTP Basic" login auth > >> protection,

Re: effect of bcrypt hash $cost on HTTP Basic authentication's login performance?

2019-07-02 Thread PGNet Dev
auth protection, using bcrypt as the hash algorithm, one can vary the resultant hash strength by varying specify bcrypt's $cost, e.g. [...] For site login usage, does *client* login time vary at all with the hash $cost? Other than the initial, one-time hash generation, is there any login-perf

Unable to use bcrypt with nginx 1.12.2 on CentOS 74

2018-04-29 Thread blason
Hi Nginx Team, I am unable to use bcrypt function on CentOS 7.4 with nginx version 1.12.2. Any idea what could be the reason? This is working fine with MD5 nginx -v nginx version: nginx/1.12.2 CentOS Linux release 7.4.1708 (Core) nginx version: nginx/1.12.2 built by gcc 4.8.5 20150623 (Red Hat

Re: bcrypt

2017-06-24 Thread Maxim Dounin
Hello! On Fri, Jun 23, 2017 at 09:37:27PM +, Lukas Tribus wrote: > > One of the bcrypt scheme main properties is that it allows to > > control number of rounds, and thus control hashing speed.  With > > low number of rounds it is reasonably fast.  For example, with 2^5 &

AW: bcrypt

2017-06-23 Thread Lukas Tribus
Hello! > One of the bcrypt scheme main properties is that it allows to > control number of rounds, and thus control hashing speed.  With > low number of rounds it is reasonably fast.  For example, with 2^5 > rounds (default used by htpasswd) it takes about 4 milliseconds > her

Re: bcrypt

2017-06-23 Thread Maxim Dounin
Hello! On Fri, Jun 23, 2017 at 01:24:19PM +, Lukas Tribus wrote: > Hello, > > > > In nginx there is no native support for bcrypt passwords as > > produced by Apache's htpasswd.  On the other hand, nginx can use > > all password schemes support

AW: bcrypt

2017-06-23 Thread Lukas Tribus
Hello, > In nginx there is no native support for bcrypt passwords as > produced by Apache's htpasswd.  On the other hand, nginx can use > all password schemes supported by crypt(3) on your OS.  Many > operating systems do support bcrypt-encrypted passwords in > crypt

Re: bcrypt

2017-06-23 Thread Maxim Dounin
Hello! On Thu, Jun 22, 2017 at 06:26:50PM -0400, Dwight Marzolf wrote: > We have an installation of nginx 1.10.3 in which we are using an htpasswd > file that contains bcrypt encyrpted passwords. This is a file that is used > by multiple apps that require authentication. Everyt

bcrypt

2017-06-22 Thread Dwight Marzolf
We have an installation of nginx 1.10.3 in which we are using an htpasswd file that contains bcrypt encyrpted passwords. This is a file that is used by multiple apps that require authentication. Everything I am reading online says that nginx does not support bcrypt passwords. The other apps