froydnj/ironclad — pull request #27 by howeyc (2012-09-08 19:31:03+00:00)
Title: Scrypt

Hi,

I'm not sure if you're interested in adding scrypt key derivation to ironclad, but if you are, here are the changes to add it.

scrypt information: http://www.tarsnap.com/scrypt.html

A couple (possible) issues:

1. I'm using the same derive-key generic function signature as used for PBKDF (and ignoring iteration-count), but not the same make-kdf function. The scrypt implementation in C assumes SHA256 and has it's own cost factors than can be supplied (N r p). I have created a new make-scrypt-kdf. This may need to be changed to either make it consistent with the PBKDF functions, or perhaps differentiated from them.

2. The changes I made to documentation may not be the best for the overall flow. I also do not know how you generate the html, so that is not in the patch.

Please let me know if there are things you'd like me to change.