password-hashes
A collection of password hashing algorithms and key derivation functions implemented in pure Rust.
What is password-hashes?
RustCrypto/password-hashes is a collection of password hashing algorithms and key derivation functions implemented in pure Rust. It provides secure implementations of algorithms like Argon2, bcrypt, PBKDF2, and scrypt for storing and verifying passwords in Rust applications. The project solves the problem of securely handling user passwords by offering modern, audited cryptographic primitives.
Rust developers building applications that require secure password storage and authentication systems, particularly those implementing user login functionality or password-based encryption.
Developers choose this collection because it provides pure Rust implementations of multiple password hashing algorithms with a unified API, eliminating C dependencies and ensuring memory safety. It follows cryptographic best practices and references OWASP guidelines for secure password storage.
Overview
Password hashing functions / KDFs
Use Cases
Best For
- Implementing secure password storage in Rust web applications
- Building authentication systems with multiple password hashing algorithm support
- Migrating legacy password hashes to modern algorithms like Argon2
- Developing password managers or credential storage tools in Rust
- Creating educational tools for learning about password hashing algorithms
- Benchmarking different password hashing algorithms in Rust environments
Not Ideal For
- Applications built in languages other than Rust that require password hashing
- Projects needing integrated authentication with user management, session handling, and social logins out-of-the-box
- Systems where hardware-accelerated password hashing (e.g., via GPU or specialized ASICs) is critical for maximum performance
- Teams preferring a single, pre-configured algorithm without the burden of selecting and tuning from multiple options
Pros & Cons
Pros
Supports seven algorithms including Argon2, bcrypt, and scrypt, providing flexibility to choose based on security needs and compatibility, as detailed in the README's table.
Implemented entirely in Rust with no C dependencies, ensuring memory safety and eliminating FFI complexities, which is emphasized in the project's philosophy.
Offers a common trait-based interface (PasswordVerifier) for verifying passwords across different algorithms, simplifying code as shown in the usage example.
References the OWASP Password Storage Cheat Sheet directly, helping developers select secure algorithms following modern best practices.
Dual-licensed under Apache 2.0 or MIT, allowing easy integration into both open-source and commercial projects without licensing conflicts.
Cons
Each algorithm is a separate crate, requiring multiple dependencies and potentially increasing setup complexity and maintenance overhead.
Prioritizes correctness and safety over performance optimizations, which may result in slower hashing compared to optimized C libraries, as noted in the philosophy.
Lacks a recommended default algorithm or configuration, forcing developers to make informed choices that could lead to suboptimal or insecure setups.
MSRV bumps are treated as breaking changes with minor version updates, potentially causing disruption in long-term projects, as stated in the MSRV policy.
Frequently Asked Questions
Related Projects
rustlsA modern TLS library in Rust
BLAKE3the official Rust and C implementations of the BLAKE3 cryptographic hash function
OckamOrchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
ringAn experiment.
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.