Looks nicely designed. The one issue I can see is that it's not clear how to serialize and deserialize the PassHash type for storage. Internally, it's a bytestring, and the constructor is exported, but this is not an ideal API. In all other respects, though, this looks like a good module, and a technically superior alternative to my pwstore module (which uses PBKDF1-SHA256).
On Mon, Jun 20, 2011 at 9:39 PM, Royce Williams <royce@alaska.net> wrote: