Thanks for the pointer. I have updated my small C wrapper around the Solar Designer implementation to fix the bug too. See http://github.com/rg3/bcrypt/