gistfile1.js

function makePass(pass, done) {
    crypto.randomBytes(10, function(err, bytes) {
        if(err) return done(err);
        var s = bytes.toString('hex');
        done(makeHash(pass, s));
    });
}

function makeHash(pass, salt) {
    return salt + "$" + require('crypto').createHmac('sha256', salt).update(pass).digest('hex');
}

function checkPass(pass, hash) {
    var tmp = hash.split('$');
    if(!tmp || tmp.length != 2) return false;
    var salt = tmp[0];
    return hash === makeHash(pass, salt)
}