I'm currently developing a C app in which I'll need to hash user's passwords. I know scrypt is currently one of the best methods to "hash" passwords (memory-bound, slow), but I can't seem to find a simple cross-platform C library that would do it for me.
And, since I'm neither a C expert or a cryptography/hashing expert, I'm afraid doing it myself will induce some obvious flaws in the system (it's easy to get these things wrong).
So, is there a C library that can do that, or, if not, other libraries that would implement similar solutions ? (bcrypt would work, although not as good as scrypt, ...)
Google says yes: scrypt_1.1.6.orig.tar.gz
(the relevant files seem to be in the lib
subfolder)