库中的密码（盐/哈希）在C？(Library for passwords (salt/hash) in C?)

库中的密码（盐/哈希）在C？(Library for passwords (salt/hash) in C?)

有没有人知道在C中加密和散列密码的库或框架？ 我会如何去做这个程序？

Does anyone know of a library or framework to salt and hash a password in C? How would I go about doing this in a program?

最满意答案

我肯定会选择OpenSSL 。 请谈谈加密时，请不要尝试自己推出，或者找一些在互联网上发布的人。 使用经过验证的OpenSSL，每天都有数百万人信任。 在我看来，家庭酿造和不正确的加密措施是互联网上安全漏洞的主要原因。

正如Tibor所提到的，在散列之前通常会在密码中附加一个salt。 独特的盐大大降低了基于彩虹表攻击的能力。

I would definitely go with OpenSSL. Please, when it comes to encryption, don't try and roll your own, or just find something someone posted on the Internet. Go with something like OpenSSL that is verified, and trusted by millions every day. Home-brew and improperly implemented encrytion is in my opinion a leading cause of security breaches on the Internet.

As Tibor mentioned, a salt is typically appended to the password before hashing. A unique salt greatly decreases the ability of a rainbow table based attack.