I'm looking for a reference about the weird initial BCrypt text "OrpheanBeholderScryDoubt"

  • Why was this string used?
  • Would using 192 zeros or ones not have worked well in practice for some reason?
  • Was that just four random dictionary words (orphean, beholder, scry, doubt), or is there some special meaning to the bcrypt authors, maybe some kind of cryptography joke that flew over my head?

The google results have so many hits where the magic string is mentioned, in pseudocode or description of the implementation, that I am unable to find relevant historical explanations (if any exist).



This isn't authoritative, since I couldn't find a reference, but I found the commit where the string was introduced dated 1997/02/16.

The earlier version used the string OpenBSDbcrypthashfunc, since it was designed to be used with OpenBSD (it is the default on OpenBSD). The new string keeps the same initials OpenBSD (OrpheanBeholderScryDoubt`) as a nod to its origins.

So all things point to it just being a 24 character string with a nod to OpenBSD.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.