Liking cljdoc? Tell your friends :D

Clojure Scrypt Library

scrypt is a tiny Clojure library for the scrypt key derivation function.

Why Use Scrypt

Scrypt has a significantly higher cost of carrying out brute force attacks on hashed values:

Key derivation function comparison

For more details, see the Scrypt paper.

Community

To subscribe for announcements of releases, important changes and so on, please follow @ClojureWerkz on Twitter.

Project Maturity

ClojureWerkz Scrypt is a young project but it builds on a Java implementation of Scrypt that has been around for a couple of years.

Artifacts

Scrypt artifacts are released to Clojars. If you are using Maven, add the following repository definition to your pom.xml:

<repository>
  <id>clojars.org</id>
  <url>http://clojars.org/repo</url>
</repository>

The Most Recent Release

With Leiningen:

[clojurewerkz/scrypt "1.1.0"]

With Maven:

<dependency>
  <groupId>clojurewerkz</groupId>
  <artifactId>scrypt</artifactId>
  <version>1.1.0</version>
</dependency>

Documentation

Scrypt has a single namespace: clojurewerkz.scrypt.core, and two functions:

clojurewerkz.scrypt.core/encrypt encrypts a string using Scrypt
clojurewerkz.scrypt.core/verify verifies a string against a hash produced by encrypt

An example to demonstrate them:

(require '[clojurewerkz.scrypt.core :as sc])

(let [h (sc/encrypt "secret" 16384 8 1)]
        (sc/verify "secret" h))
;= true

(let [h (sc/encrypt "secret" 16384 8 1)]
        (sc/verify "another value" h))
;= false

Arguments that clojurewerkz.scrypt.core/encrypt takes control CPU, RAM and parallelization cost. The values in the example above are optimal starting points for many applications.

See the Scrypt paper for a detailed information.

Native Scrypt Implementation

It is possible to use a native implementation as of ClojureWerkz Scrypt 1.1.0. From Lambdaworks Scrypt documentation:

  When the native library can be loaded it will be used instead of the pure
  Java implementation. On a J2SE compliant JVM the native library will be
  extracted from the jar and loaded, and on other VMs System.loadLibrary will
  be called.

  The system property "com.lambdaworks.jni.loader" may be set to override
  the default native library loader with one of the following values:

   * nil: refuse to load native libraries and revert to pure Java implementation
   * jar: extract native library from jar and load with System.load
   * sys: use System.loadLibrary, which may require java.library.path to be set