Last revised: October 28, 2020
Eggdrop encrypts its userfile, so users can have secure passwords. Eggdrop will not start without an encryption module.
As of Eggdrop 1.9.0, a new encryption module was added, the PBKDF2 module. The PBKDF2 module was designed to work with the previous encryption module (blowfish) to make the transition easier. If this is a new bot, you can safely load just the PBKDF2 module. If you are transitioning a userfile from 1.8 or earlier, you should load this AND the blowfish module. By doing so, Eggdrop will seamlessly update the old blowfish hashes to the new PBKDF2 hashes once a user logs in for the first time, and allow you to (eventually) remove the blowfish module altogether.
Outside of the specific case noted above, please note that if you change your encryption method later (i.e. using other modules like a rijndael module), you can’t use your current userfile anymore.
- Put this line into your Eggdrop configuration file to load the server module::
There are also some variables you can set in your config file:
- set pbkdf2-method “SHA256”
Cryptographic hash function used. Use
openssl list -digest-algorithmsto view all available options
- set pbkdf2-rounds 1600
Number of rounds. The higher the number, the longer hashing takes; but also generally the higher the protection against brute force attacks.
This module requires: none
Copyright (C) 2000 - 2023 Eggheads Development Team