Spring Security Blowfish Encryption (bcrypt)

Bcrypt

Use bcrypt

Description

This plugin let you use the bcrypt file encryption algorithm to hash your users passwords instead of the regular algorithm provided by spring-security-core plugin. You can customize the computation cost of the algorithm to get stronger hashes.

Installation

To install the plugin :

grails install-plugin spring-security-bcrypt

Optional

To configure the log rounds (to add computation cost) :

In 'grails-app/conf/Config.groovy' add :

grails.plugins.springsecurity.bcrypt.logrounds = 12

The default log rounds number is 10.

TODO

Support

For more information, see my blog post : http://niclupien.blogspot.com/2011/02/grails-bcrypt-plugin.html