[anonymoushn]

I'm storing strings like

  > =bcrypt.digest("hello", bcrypt.salt(10))
  $2y$10$r4hm7bIEdyth2ni8ufmpvuIQqnPeJSOAHne1Mk1yC0FPsIxP.lKsS

This string includes the algorithm, the difficulty, the salt, and the hash, so bcrypt.verify can do everything for me when someone tries to log in.

I appreciate your line of questioning. My reply to the top-level thread is pretty low value, since most people are trying to build web services that need sessions that persist across connections.

Complaining about downvotes is usually a way to collect more downvotes. This is partially because people are aware that it is against the guidelines at https://news.ycombinator.com/newsguidelines.html and partially because people get some sadistic pleasure out of punishing minor transgressions.

[pushpop]

Ahhh awesome.

The game stuff sounds interesting too.