Francis, I can relate to the idea of easily embedding PBKDF2/bcrypt into your code. However the functionality of /managing/ the salt is not specificed in PBKDF2. The spec only covers the actual the hashing part. However wrapping it into a simple to use wrapper is pretty simple. The code below is something I use in my code for example: "Create a new password instance" pwd := KNPassword fromPlaintext: 'secret'. "Now store that instance. It encapsulates hash, generated salt and the load parameter. Because all the load parameters are accessed via methods you can also back them with ivars and have different instances with different load parameters. E.g. for adapting to advances in hash cracking." pwd verify: 'secret'. "Verify the password" CU, Udo 'From Pharo5.0 of 16 April 2015 [Latest update: #50772] on 1 July 2017 at 10:01:05.207245 am'! Object subclass: #KNPassword instanceVariableNames: 'salt hash' classVariableNames: 'PRNG' poolDictionaries: '' category: 'ThreatNews-Core'! !KNPassword methodsFor: 'accessing' stamp: 'UdoSchneider 5/26/2017 11:48'! salt ^ salt ifNil: [ salt := ((1 to: self saltLength) collect: [ :each | self class prng nextInt: 255 ]) asByteArray ]! ! !KNPassword methodsFor: 'accessing' stamp: 'UdoSchneider 7/1/2017 09:58'! iterations ^ 1000! ! !KNPassword methodsFor: 'accessing' stamp: 'UdoSchneider 7/1/2017 09:58'! length ^ 64! ! !KNPassword methodsFor: 'accessing' stamp: 'UdoSchneider 7/1/2017 09:58'! saltLength ^ 16! ! !KNPassword methodsFor: 'accessing' stamp: 'UdoSchneider 7/1/2017 09:57'! hashClass ^ SHA256! ! !KNPassword methodsFor: 'as yet unclassified' stamp: 'UdoSchneider 5/26/2017 11:51'! setPlaintext: aString hash := self hashString: aString! ! !KNPassword methodsFor: 'as yet unclassified' stamp: 'UdoSchneider 5/26/2017 11:52'! verify: aString ^ (self hashString: aString) = hash! ! !KNPassword methodsFor: 'as yet unclassified' stamp: 'UdoSchneider 5/26/2017 11:51'! hashString: aString ^ PBKDF2 derivedKeyHashFunction: self hashClass password: aString salt: self salt iterations: self iterations length: self length! ! "-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- "! KNPassword class instanceVariableNames: ''! !KNPassword class methodsFor: 'as yet unclassified' stamp: 'UdoSchneider 5/26/2017 11:49'! reset PRNG := nil! ! !KNPassword class methodsFor: 'as yet unclassified' stamp: 'UdoSchneider 5/26/2017 11:49'! fromPlaintext: aString ^ self new setPlaintext: aString; yourself! ! !KNPassword class methodsFor: 'as yet unclassified' stamp: 'UdoSchneider 5/26/2017 11:49'! prng ^ PRNG ifNil: [ PRNG := Random new ]! !