Re:Okta Bcrypt incident lessons for designing better APIs
by jszymborski on Wednesday February 05, 2025 @06:12PM
(#42956706)
Sounds like it would then make sense to hide crypto primitives and their footguns under a "hazmat" or "danger" namespace, sorta like webcrypto or libsodium.
So something like crypto.danger.bcrypt and crypto.bcryptWithTruncation
These choices are documented in the function's docstring, but not obvious, nor do they seem encoded in a custom version.