Questions tagged [blowfish]

Blowfish is a block cipher designed in 1993 to be fast on the general purpose CPUs of the time. It features a 64 bits block size and a variable key size up to 448 bits.

One should likely not use use Blowfish in any new designs, to quote Bruce Schneier its designer in a 2007 interview,

There weren't enough alternatives to DES out there. I wrote Blowfish as such an alternative, but I didn't even know if it would survive a year of cryptanalysis. Writing encryption algorithms is hard, and it's always amazing if one you write actually turns out to be secure. At this point, though, I'm amazed it's still being used. If people ask, I recommend Twofish instead.

One should note that Twofish was one of the losing contestant to the AES competition, so the general cryptography community would likely recommend instead of .

Wikipedia page on Blowfish

460 questions
10
votes
1 answer

Blowfish salt length for the Crypt() function?

According to the crypt() documentation, the salt needs to be 22 base 64 digits from the alphabet "./0-9A-Za-z". This is the code example they give: crypt('rasmuslerdorf', '$2a$07$usesomesillystringforsalt$'); The first confusing part is that salt…
Burak Guzel
  • 1,267
  • 1
  • 12
  • 12
10
votes
1 answer

How to make Ubuntu's crypt(3) support Blowfish?

According to the crypt(3) manual, Blowfish (indicated by the $2a$ prefix) is one of the supported cypher methods: ID | Method ───────────────────────────────────────────────────────── 1 | MD5 2a | Blowfish (not in mainline glibc; added in some …
mae
  • 14,947
  • 8
  • 32
  • 47
9
votes
5 answers

Using Android NDK for encryption of data passed from normal android app

Is it possible and worth trying to develop some server application using android NDK which will encrypt data (or just use some built in Linux encryption library) passed to it from normal Java based application? I tried using Cipher library, but it…
shtolik
  • 1,341
  • 22
  • 29
9
votes
1 answer

Objective C and PHP generate different encryption result in Blowfish algorithm

I am trying to implement Blowfish algorithm with CBC mode and kCCOptionPKCS7Padding padding . Scenario like performs encoding and decoding between two systems like IOS(Objective C) and PHP. But, Encryption result are not same in two platform .…
Shourob Datta
  • 1,886
  • 22
  • 30
9
votes
3 answers

Exactly how do I use blowfish in PHP?

Possible Duplicate: Best way to use PHP to encrypt and decrypt passwords? I've been doing a lot with PHP recently and want to make my first login/registration system. As such I've been doing a lot of reading online to figure out the best…
sharf
  • 2,123
  • 4
  • 24
  • 47
8
votes
2 answers

Blowfish objective-c implementation

What objective-c implementation of Blowfish would you advice to use? (Or may be I just missed some standard implementations available?)
Vladimir
  • 170,431
  • 36
  • 387
  • 313
7
votes
2 answers

Difference in blowfish encryption between perl and ruby

Why is there a difference in blowfish encryption between Crypt::CBC (perl) and OpenSSL (ruby)? Perl use Crypt::CBC; my $cipher = Crypt::CBC->new( -key => 'length32length32length32length32', -cipher => 'Blowfish' ); my $ciphertext =…
joepestro
  • 128
  • 7
7
votes
5 answers

Cryptacular is broken

this weekend our docker image broke because it cannot be build anymore. While looking into the stats, I saw this line: crypt_blowfish-1.2/crypt.h:17:23: fatal error: gnu-crypt.h: No such file or directory In more detail: Running setup.py…
Tobias S
  • 1,275
  • 8
  • 23
7
votes
2 answers

phpMyAdmin errors (count, blowfish, etc.) after php7.2 upgrade on Ubuntu 16

phpMyAdmin errors after php7.2 upgrade After upgrading to php7.2 on Ubuntu 16.04 LTS, phpMyAdmin shows annoying popup warnings when I view tables: "Some errors have been detected on the server! Please look at the bottom of this window. Ignore All.…
Justin
  • 663
  • 7
  • 19
7
votes
2 answers

Best Blowfish command line tool?

Our application needs to encrypt/decrypt files using (for instance) Blowfish encryption algorithm. We know bcrypt could be a good choice, but it cannot be called directly from our application (as it prompts for key phrase). Which is the best…
German Latorre
  • 10,058
  • 14
  • 48
  • 59
7
votes
6 answers

Perfect way to encrypt & decrypt password, files in PHP?

I did a series of research on this topic, but unfortunately I couldn't find a perfect way to encrypt and decrypt files in PHP. Which mean what I'm trying to do is find some way to encrypt & decrypt my items without worry of cracker knew my…
1myb
  • 3,536
  • 12
  • 53
  • 73
6
votes
2 answers

Decrypting blowfish-ecb with nodejs crypto vs php's mcrypt

I'm trying to decode the following base64-encoded ciphertext in Node.js with the built-in crypto…
Adam M-W
  • 3,509
  • 9
  • 49
  • 69
6
votes
5 answers

Blowfish encryption in android

cipher = Cipher.getInstance("Blowfish"); This throws an exception java.security.NoSuchAlgorithmException: Cipher Blowfish implementation not found. I checked both local_policy.jar and US_export_policy.jar exist and they weren't changed from the…
Sergey
  • 11,548
  • 24
  • 76
  • 113
6
votes
1 answer

Authenticating password encrypted in PHP using Blowfish with Ruby

There is an application written in PHP which I am converting to Ruby. When encrypting passwords the PHP app uses the following code: if($method == 2 && CRYPT_BLOWFISH) return crypt($pass,…
Luke Saunders
  • 97
  • 1
  • 5
6
votes
1 answer

OpenSSL 3.0 command fail to setting cipher

Starting with OpenSSL 3.0 the following command (which work on OpenSSL 1.1) openssl bf-cbc -d -nopad -bufsize 2048 -K 000102030405060708090A0B0C0D0E0F -iv 0001020304050607 < enc now fail with Error setting cipher…
Nathan Agio
  • 119
  • 1
  • 5
1
2
3
30 31