Golang: bcrypt, Blowfish password hashing

This library is a golang wrapper modeled after py-bcrypt, http://www.mindrot.org/projects/py-bcrypt/

This system hashes passwords using a version of Bruce Schneier's Blowfish block cipher with modifications designed to raise the cost of off-line password cracking and frustrate fast hardware implementation. The computation cost of the algorithm is parametised, so it can be increased as computers get faster. The intent is to make a compromise of a password database less likely to result in an attacker gaining knowledge of the plaintext passwords (e.g. using John the Ripper).

They're for different things. Blowfish is a block cipher. Bcrypt is a password hashing function build on top of a modified version of Blowfish.

If you want to store hashed passwords, Bcrypt is a Right Way to do it. Blowfish doesn't really get much use anymore.

Cool. My advice is that you should get into the habit of writing tests.