https://hshlib.com/ hsh is a password hashing library for Rust: Argon2id, bcrypt, scrypt and PBKDF2 behind one policy, PHC strings, rehash on login when the policy changes, a versioned pepper, a FIPS 140-3 mode and a command-line tool. en https://hshlib.com/documentation/ A guide to hsh's API: the two calls, the policy presets and builder, the outcomes, errors, every Cargo feature and the crates in the workspace. https://hshlib.com/documentation/ Sebastien Rousseau https://hshlib.com/about/ Who builds hsh, and the facts about the project: its crates, licence, Rust version, latest release, and where its source and security policy live. https://hshlib.com/about/ Sebastien Rousseau https://hshlib.com/accessibility/ How hshlib.com is built to be accessible, how it is checked on every build, and how to report a barrier. https://hshlib.com/accessibility/ Sebastien Rousseau https://hshlib.com/changelog/ What changed in hsh's recent releases, from the 0.0.9 rewrite to the FIPS backend in 0.0.10 and the partial 0.0.12 release, with links to the full changelog. https://hshlib.com/changelog/ Sebastien Rousseau https://hshlib.com/contact/ Send a question or feedback about hsh or hshlib.com. Bugs and feature requests are best filed as GitHub issues, and security reports go privately. https://hshlib.com/contact/ Sebastien Rousseau https://hshlib.com/contribute/ How to contribute to hsh: filing a useful issue, the checks a pull request passes, the commit style and the rules on unsafe code and random sources. https://hshlib.com/contribute/ Sebastien Rousseau https://hshlib.com/features/ What hsh does: hashing and verifying under one policy, rehash on login, Argon2id, bcrypt, scrypt and PBKDF2, a versioned HMAC pepper, a fail-closed FIPS 140-3 mode, safety rails, a command-line tool and general-purpose digests. https://hshlib.com/features/ Sebastien Rousseau https://hshlib.com/faqs/ Answers about hsh: what it is, quantum resistance, choosing an algorithm, migrating hashes, FIPS 140-3, cloud peppers, long bcrypt passwords, no_std, versions and the licence. https://hshlib.com/faqs/ Sebastien Rousseau https://hshlib.com/getting-started/ Add hsh to a Rust project, hash a password under the OWASP 2025 policy, verify it and save the upgraded hash, choose another algorithm, and install the command-line tool. https://hshlib.com/getting-started/ Sebastien Rousseau https://hshlib.com/made-with-ssg/ hshlib.com is built with Static Site Generator (SSG) and the cipher theme, and deployed to GitHub Pages by GitHub Actions. https://hshlib.com/made-with-ssg/ Sebastien Rousseau https://hshlib.com/migration/ How to move password storage to hsh from the bcrypt, rust-argon2 or argonautica crates or from an older hsh, keeping existing hashes valid and upgrading them as users sign in. https://hshlib.com/migration/ Sebastien Rousseau https://hshlib.com/404/ The page you asked for is not on hshlib.com. https://hshlib.com/404/ Sebastien Rousseau https://hshlib.com/benchmarks/ How long hsh takes to hash a password depends on the parameters and the machine. How to measure it with hsh calibrate and the Criterion benchmarks, and why no fixed numbers are published. https://hshlib.com/benchmarks/ Sebastien Rousseau https://hshlib.com/privacy/ What happens to your data on hshlib.com: hosting on GitHub Pages, the contact form, and the theme preference stored in your browser. https://hshlib.com/privacy/ Sebastien Rousseau https://hshlib.com/security/ How to report a vulnerability in hsh, what it defends against, what is a stub or not yet done, the checks that run, and how to verify a release. https://hshlib.com/security/ Sebastien Rousseau https://hshlib.com/terms/ The terms for using hshlib.com and the licences that apply to hsh and to this website's source. https://hshlib.com/terms/ Sebastien Rousseau