{"categories":[{"label":"Libraries","url":"https://skillfed.io/packages/category/software-development-libraries/6"},{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography/2"}],"enrichment":{"capability":"Python bindings for the scrypt key derivation function, enabling password-based encryption and decryption with tunable time costs to resist brute-force attacks.","skillfed_tags":["password-hashing","key-derivation","compiled-extension"],"use_cases":["Secure password storage in web applications where you want to enforce a minimum verification time (e.g., 0.1 seconds per login attempt).","Building a password verifier that rejects guesses that decrypt too quickly, indicating a wrong password or corrupted hash.","Protecting against credential stuffing by making each password check computationally expensive without requiring external services.","Legacy systems already using scrypt that need Python bindings to migrate or maintain existing password databases."],"what_it_does":"Scrypt is a Python wrapper around the scrypt key derivation function, a cryptographic algorithm designed specifically for password hashing. Unlike fast hash functions such as MD5 or SHA, scrypt allows you to specify a minimum time cost for encryption and decryption operations\u2014typically 0.05 to 0.5 seconds per operation. This makes brute-force password attacks computationally expensive: a user won't notice the delay when signing in, but an attacker trying billions of passwords will face hours or days of computation.\n\nThe package exports two main functions: `encrypt()` to hash a password with a time cost, and `decrypt()` to verify a password against a stored hash. It has no runtime dependencies and ships with precompiled wheels for modern Python versions on common platforms, though building from source requires OpenSSL headers. The library is stable but aging, with infrequent releases and modest maintenance activity.","worth_installing":"Yes, if you need scrypt specifically and can tolerate medium install friction (compiled extension + OpenSSL dependency). The package is stable, permissively licensed, and has no known vulnerabilities. However, consider whether argon2 or PBKDF2 alternatives better suit your threat model\u2014scrypt's time-cost model is effective but less commonly recommended for new projects than memory-hard functions like argon2. Install only if scrypt is your deliberate choice, not a default."},"id":"scrypt","links":{"html":"https://skillfed.io/packages/scrypt","md":"https://skillfed.io/packages/scrypt.md","pypi":"https://pypi.org/project/scrypt/"},"maintenance":{"status":"aging"},"meta":{"latest_release":"2025-08-05","license_spdx":null,"license_treatment":"permissive","name":"scrypt","python_support":"unspecified","summary":"Bindings for the scrypt key derivation function library"},"popularity":{"monthly_downloads":314155,"position":7706,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.9.4"}