[coolgoose]

But why not bcrypt the password, but sha the cache key on top?

[stavros]

I guess because they didn't anticipate this flaw.

[masklinn]

Also prehashing opens you up to an other bcrypt flaw you need to be aware of: it stops at the first NUL byte, so you need to use some sort of binary-to-text encoding on top of the hash to ensure you don't have any of those in the data you ultimately hand off to bcrypt.

[Dylan16807]

It's astounding how bad the default API for Bcrypt is.

[coolgoose]

Thank you