Class: BCrypt::Engine

### Home Classes Methods

### In Files

- lib/bcrypt/engine.rb

### Parent

Object

### Methods

- ::autodetect_cost
- ::calibrate
- ::cost
- ::cost=
- ::generate_salt
- ::hash_secret
- ::valid_salt?
- ::valid_secret?

### Files

- CHANGELOG
- COPYING

### Class/Module Index

Quicksearch

- BCrypt
- BCrypt::Engine
- BCrypt::Errors
- BCrypt::Errors::InvalidCost
- BCrypt::Errors::InvalidHash
- BCrypt::Errors::InvalidSalt
- BCrypt::Errors::InvalidSecret
- BCrypt::Password

No matching classes.

# BCrypt::Engine

A Ruby wrapper for the bcrypt() C extension calls and the Java calls.

### Constants

DEFAULT_COST

  The default computational expense parameter.

MAX_SALT_LENGTH

  Maximum possible size of bcrypt() salts.

MIN_COST

  The minimum cost supported by the algorithm.

### Public Class Methods

autodetect_cost(salt) click to toggle source

Autodetects the cost from the salt string.

    # File lib/bcrypt/engine.rb, line 111
    def self.autodetect_cost(salt)
      salt[4..5].to_i
    end

calibrate(upper_time_limit_in_ms) click to toggle source

Returns the cost factor which will result in computation times less than `upper_time_limit_in_ms`.

Example:

    BCrypt::Engine.calibrate(200)  #=> 10
    BCrypt::Engine.calibrate(1000) #=> 12

    # should take less than 200ms
    BCrypt::Password.create("woo", :cost => 10)

    # should take less than 1000ms
    BCrypt::Password.create("woo", :cost => 12)

    # File lib/bcrypt/engine.rb, line 101
    def self.calibrate(upper_time_limit_in_ms)
      40.times do |i|
        start_time = Time.now
        Password.create("testing testing", :cost => i+1)
        end_time = Time.now - start_time
        return i if end_time * 1_000 > upper_time_limit_in_ms
      end
    end

cost() click to toggle source

Returns the cost factor that will be used if one is not specified when creating a password hash. Defaults to DEFAULT_COST if not set.

    # File lib/bcrypt/engine.rb, line 22
    def self.cost
      @cost || DEFAULT_COST
    end

cost=(cost) click to toggle source

Set a default cost factor that will be used if one is not specified when creating a password hash.

Example:

    BCrypt::Engine::DEFAULT_COST            #=> 10
    BCrypt::Password.create('secret').cost  #=> 10

    BCrypt::Engine.cost = 8
    BCrypt::Password.create('secret').cost  #=> 8

    # cost can still be overridden as needed
    BCrypt::Password.create('secret', :cost => 6).cost  #=> 6

    # File lib/bcrypt/engine.rb, line 39
    def self.cost=(cost)
      @cost = cost
    end

generate_salt(cost = self.cost) click to toggle source

Generates a random salt with a given computational cost.

    # File lib/bcrypt/engine.rb, line 62
    def self.generate_salt(cost = self.cost)
      cost = cost.to_i
      if cost > 0
        if cost < MIN_COST
          cost = MIN_COST
        end
        if RUBY_PLATFORM == "java"
          Java.bcrypt_jruby.BCrypt.gensalt(cost)
        else
          prefix = "$2a$05$CCCCCCCCCCCCCCCCCCCCC.E5YPO9kmyuRGyh0XouQYb4YMJKvyOeW"
          __bc_salt(prefix, cost, OpenSSL::Random.random_bytes(MAX_SALT_LENGTH))
        end
      else
        raise Errors::InvalidCost.new("cost must be numeric and > 0")
      end
    end

hash_secret(secret, salt, _ = nil) click to toggle source

Given a secret and a valid salt (see BCrypt::Engine.generate_salt) calculates a bcrypt() password hash.

    # File lib/bcrypt/engine.rb, line 45
    def self.hash_secret(secret, salt, _ = nil)
      if valid_secret?(secret)
        if valid_salt?(salt)
          if RUBY_PLATFORM == "java"
            Java.bcrypt_jruby.BCrypt.hashpw(secret.to_s, salt.to_s)
          else
            __bc_crypt(secret.to_s, salt)
          end
        else
          raise Errors::InvalidSalt.new("invalid salt")
        end
      else
        raise Errors::InvalidSecret.new("invalid secret")
      end
    end

valid_salt?(salt) click to toggle source

Returns true if `salt` is a valid bcrypt() salt, false if not.

    # File lib/bcrypt/engine.rb, line 80
    def self.valid_salt?(salt)
      !!(salt =~ /^\$[0-9a-z]{2,}\$[0-9]{2,}\$[A-Za-z0-9\.\/]{22,}$/)
    end

valid_secret?(secret) click to toggle source

Returns true if `secret` is a valid bcrypt() secret, false if not.

    # File lib/bcrypt/engine.rb, line 85
    def self.valid_secret?(secret)
      secret.respond_to?(:to_s)
    end

[Validate]

Generated with the Darkfish Rdoc Generator 2.