mirror of
https://github.com/opentffoundation/opentf.git
synced 2025-12-21 10:47:34 -05:00
Co-authored-by: Damian Stasik <920747+damianstasik@users.noreply.github.com> Co-authored-by: Roman Grinovski <roman.grinovski@gmail.com>
37 lines
1.1 KiB
Plaintext
37 lines
1.1 KiB
Plaintext
---
|
|
sidebar_label: bcrypt
|
|
description: |-
|
|
The bcrypt function computes a hash of the given string using the Blowfish
|
|
cipher.
|
|
---
|
|
|
|
# `bcrypt` Function
|
|
|
|
`bcrypt` computes a hash of the given string using the Blowfish cipher,
|
|
returning a string in
|
|
[the _Modular Crypt Format_](https://passlib.readthedocs.io/en/stable/modular_crypt_format.html)
|
|
usually expected in the shadow password file on many Unix systems.
|
|
|
|
```hcl
|
|
bcrypt(string, cost)
|
|
```
|
|
|
|
The `cost` argument is optional and will default to 10 if unspecified.
|
|
|
|
Since a bcrypt hash value includes a randomly selected salt, each call to this
|
|
function will return a different value, even if the given string and cost are
|
|
the same. Using this function directly with resource arguments will therefore
|
|
cause spurious diffs. We recommend using this function only in `provisioner`
|
|
blocks, or in data resources whose results are only used in `provisioner`
|
|
blocks.
|
|
|
|
The version prefix on the generated string (e.g. `$2a$`) may change in future
|
|
versions of OpenTofu.
|
|
|
|
## Examples
|
|
|
|
```
|
|
> bcrypt("hello world")
|
|
$2a$10$D5grTTzcsqyvAeIAnY/mYOIqliCoG7eAMX0/oFcuD.iErkksEbcAa
|
|
```
|