Intermittent issue with Bcrypt package

Question

Using BCrypt package for encrypting and Verifying password. All works fine, But in some cases the encription in Not wrorking properly. Explained below in Detailed way. Password = Password@123 When i try to hash and store date in Databse, It is storing it with 2 ways as mentioned below. 1 . Stores as expected = $2a$12$ > 2. Stores password as it is = $2a$12Password@123 > Anyone help me with this and thanks in advance.

Sachin Singh · Answer

if bcrypt is not working well then use Pbkdf2 pblic void Save(User user) { YourDbContext db = new YourDbContext(); User User = new User(); User.UserName = user.UserName; var crypto = new SimpleCrypto.PBKDF2(); var EncryptedPassword = crypto.Compute(user.Password); // password includes salt , you will need this salt to compare psd in future. var Salt = crypto.Salt; // this is the salt that has been used behind the scene. User.Password = EncryptPassword; User.Salt = Salt; db.Users.Add(User); db.SaveChanges(); // do save with Ado.Net } /* if you want to check the same password is being entered by user as in database to confirm password/recovery*/ public static bool IsValidPassword( string EnteredPassword) { var salt= /* fetch salt from database*/ ; var PasswordInDb= /* fetch Password from database*/ ; var crypto = new SimpleCrypto.PBKDF2(); string originalPassword = crypto.Compute(PasswordInDb,Salt); return crypto.Compare(originalPassword,EnteredPassword); // it will return true/false; }

Raj kumar · Answer

Hi, Thanks for your reply but changing it from Bcrypt to Pbkdf2 then do we need to Migrate old data? Also is there any way we can use Bcrypt itself. Any idea on the root cause of the same?