ncb000gt/node.bcrypt.js
Node.bcrypt.js
This is a Node.js library for securely hashing and verifying passwords using the bcrypt adaptive hashing algorithm. It functions as a password security module that transforms plain-text credentials into protected hashes and generates cryptographically secure salts.
The implementation allows for the adjustment of computational cost to resist brute-force attacks. It provides utilities for password hash verification and the extraction of hash metadata to determine the number of encryption rounds used.
The project covers a range of security and access control capabilities, including credential storage security and user authentication. These utilities enable the creation of secure random salts and the transformation of passwords into hashes that store the salt and cost factor within the resulting string.
Features
- Password Hashing Utilities - Provides specialized utilities to transform plain-text passwords into secure, irreversible bcrypt hashes.
- Adaptive - Implements the adaptive bcrypt algorithm, allowing computational costs to be increased to resist brute-force attacks.
- Adaptive Hashing Costs - Allows the number of hashing iterations to be configured to increase the computational effort required for brute-force attacks.
- Credential Storage - Provides the means to store passwords as secure hashes, preventing recovery if the database is compromised.
- Cryptographic Salt Generation - Creates secure random salts to prevent rainbow table attacks when hashing sensitive credentials.
- Password Verification - Provides a secure way to compare plain-text passwords against stored hashes for authentication.
- User Authentication Systems - Implements mechanisms to verify user identity by comparing provided passwords against stored bcrypt hashes.
- Node.js Native Addons - Utilizes a C++ native addon to provide high-performance implementations of the bcrypt algorithm.
- Salt-Embedded Hashes - Stores the salt and cost factor directly within the resulting hash string for simplified verification.
- Hash Metadata Extraction - Allows for the extraction of encryption rounds and other metadata from a stored password hash.
- JavaScript Cryptography - Bcrypt password hashing implementation for Node.js.
