Following several resources on the web (e.g. here), I'd like to use the $6$rounds=500000$%.16s format for password hashing.

One option is mkpasswd -m sha-512 -R 50000. However, I would prefer a Ruby implementation or interface. There is the unix-crypt library, but is seems to be unavailable on Debian or Ubuntu. I do not want to install any gems manually, only via the package manager.

Allegedly, String::crypt can be used, but it is deprecated.

Any other options? I'm also open to other cryptographic mehtods, as long as they are state-of-the-art security-wise. Would the bcrypt library be a good alternative (using cost 12 or greater)?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.