Question

In this highly-praised answer to the question How do you use bcrypt for hashing passwords in PHP?, the code delegates the cryptographic calculation to the crypt function.

According to the original definition of bcrypt password hashing, three 64-bit blocks derived from the constant "OrpheanBeholderScryDoubt" should be Blowfish-encrypted 64 times. I would like to check that portion of the source code, in PHP sources if that’s in there, or wherever PHP delegates; that’s in order to improve this answer I made, and wikipedia’s bcrypt entry as I read it now.

Where should I look for the source code of PHP’s built-in crypt, and specifically the part used in bcrypt password hashing?

Answer 1

I believe that the following links would be helpful

• crypt.c from PHP-SRC
• php_crypt_blowfish_rn in crypt_blowfish.c from PHP-SRC