C#

if (!BCrypt.CheckPassword(txtPass.Text.Trim().ToString(), hashpassdb))

txtHash.Text = BCrypt.HashPassword(txtPass.Text.Trim().ToString(),BCrypt.GenerateSalt(12));

public static bool CheckPassword(string plaintext, string hashed) {
    return StringComparer.Ordinal.Compare(hashed, HashPassword(plaintext, hashed)) == 0;
}

Garth J Lancaster wrote:

C#

if (!BCrypt.CheckPassword(txtPass.Text.Trim().ToString(), hashpassdb))

 

is wrong - which I think stems from this

 

C#

txtHash.Text = BCrypt.HashPassword(txtPass.Text.Trim().ToString(),BCrypt.GenerateSalt(12));

Garth J Lancaster wrote:

Im sorry, I think you're missing the point - you're not getting the correct results because you're not comparing 'apples with apples'

ahmed_one wrote:

3. Now compare the user entered password with
BCrypt.CheckPassword(txtPass.Text.Trim().ToString(), hashpassdb))

txtPass.Text.Trim().ToString()

HashPassword(user entered password ,BCrypt.GenerateSalt(12));

HashPassword(user entered password ,BCrypt.GenerateSalt(12));

namespace DSBcryptTest
{
    class Program
    {
        static void Main(string[] args)
        {
            String Password_Text   = "Lorem_ipsum_dolor_sit_amet";

            String Password_Hashed = BCrypt.HashPassword(Password_Text, BCrypt.GenerateSalt(12));
            Console.WriteLine("Hashed Password {0}", Password_Hashed);

            String Test_Password_Text = Password_Text;

            if (BCrypt.CheckPassword(Test_Password_Text, Password_Hashed))
            {
                Console.WriteLine("Passwords Match");
            }

        }
    }

Garth J Lancaster wrote:

I copied BCrypt.cs into a new project, removed the assembly directive at the top, then used it directly as opposed to the dll version - but that wouldn't matter - it just means I can step into the code

Dave Kreskowiak wrote:

In short, this is NOT suitable as a school project