Re: Erlang PBKDF2 library

ср, 10 февр. 2021 г. в 15:17, Bryan Frimin <[email protected]>:

> Hello Sergey,
>
> > Is there some difference from this implementation?
> > https://github.com/basho/erlang-pbkdf2
> The two libraries are very similar. The main differences are:
> - Released under ISC license;
> - Uses the new Erlang crypto API;
> - Strictly follows the RFC implementation instead of being compliant
>   with the Apache CouchDB.
>
> Ah, nice! Thanks!


> > We have a ticket in `epgsql` to replace our "homemade" implementation of
> > this algorithm https://github.com/epgsql/epgsql/issues/172, but never
> > actually had time to look into it.
> Not sure I understand the motivation you can have to use external
> dependency instead of your implementation.
>
>
I guess, mainly the rule of thumb "try to not implement your own crypto,
when there are already available well-tested libraries for that".
Also, as the ticket says, Elixir's postgres driver uses an external library
for pbkdf2 as well, doubling this opinion.


> Regards,
>
> --
> Bryan Frimin
> https://www.frimin.fr
> [email protected]
>