wachtwoord 0.14

Separate initialization and hashing

>>> from wachtwoord.pbkdf2 import Engine
>>> engine = Engine()
>>> hash_encoded_password = engine.hash('secret_123')
>>> print(hash_encoded_password)
pbkdf2$sha512$10000$2qf1oL9GU0gq+Zf2+vWmuliL0WizwvyFUMWV3jG3o/M=$gzSkk0/WjTHACyaeDBe3czNdI+3iukVUm3f+vzNop2b/LwLQWf0r8WKv1TfzWaqYOnPH8vC3tDTBxdGDzEDYRw==
>>>
>>> is_correct_password = engine.verify('secret_123', hash_encoded_password)
>>> print(is_correct_password)
True
>>>

The Engine object allows certain parameters to be set that influence all the hashes that are subsequently generated. For instance, say we want to use the sha256 hash function instead of the default sha512 hash function:

>>> from wachtwoord.pbkdf2 import Engine
>>> engine = Engine(digestmod='sha256')
>>>

Similarly if we want to change the salt size and number of iterations we would call Engine as follows:

>>> from wachtwoord.pbkdf2 import Engine
>>> engine = Engine(digestmod='sha256', iterations=20000, salt_size=64)
>>>

Initialization and hashing in one go

>>> from wachtwoord.pbkdf2 import hash_password, verify_password
>>> hash_encoded_password = hash_password('secret_123')
>>> print(hash_encoded_password)
pbkdf2$sha512$10000$f6ULrQBJspk6JiwHiEDL8fpFLCf90mOAxAM1LCY4dO0=$xzCLvTdp7eQUuY5pfgFl33dx7/uGIMaeZ5Bm5hmLTMx43zi/OCiNgORRmkb5KfkjxRDkD7VNc/45DbHX1zDhcA==
>>>
>>> is_correct_password = verify_password('secret_123', hash_encoded_password)
>>> print(is_correct_password)
True
>>>

The fact that the initialization and hashing happen in one go does not prevent us from changing the default values. We could have called hash_password as follows:

>>> from wachtwoord.pbkdf2 import hash_password
>>> hash_encoded_password = hash_password('secret_123', digestmod='sha256', iterations=20000, salt_size=64)