NodeJS: bcrypt vs native crypto

node.js cryptography bcrypt
fancy picture fancy · Aug 5, 2011 · Viewed 28.9k times · Source

Can someone point out the differences between the two and example situations where use each?

bcrypt looks great.

Answer

Mike Scott picture Mike Scott · Aug 5, 2011

Use bcrypt where you want to do slow and computationally expensive hashing -- this will generally be for hashes where you really don't want an attacker to be able to reverse the hash, e.g. user passwords. Use native crypto for everything else.

Related questions

What is an alternative for bcrypt to use with node?

I have tried for days to get bcrypt installed on my windows machine with no luck. One of the dependencies (Windows 7 SDK) does not want to be installed even though I have tried numerous suggestions from around the net it …

Read More
How can I decrypt a HMAC?

I can make an HMAC using the following: var encrypt = crypto.createHmac("SHA256", secret).update(string).digest('base64'); I am trying to decrypt an encoded HMAC with the secret: var decrypt = crypto.createDecipher("SHA256", secret).update(string).final("ascii"); …

Read More
Node.js hashing of passwords

I am currently using the following for hashing passwords: var pass_shasum = crypto.createHash('sha256').update(req.body.password).digest('hex'); Could you please suggest improvements to make the project safer?

Read More