-
-
Save XaviTorello/89a5d3b2faa149675d9f1a0ac0acfb0a to your computer and use it in GitHub Desktop.
An answer to http://stackoverflow.com/questions/13654492/how-to-use-scrypt-to-generate-hash-for-password-and-salt-in-python How to generate and check a password hash with scrypt and python.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
import struct | |
from binascii import b2a_base64 as e64 | |
from binascii import a2b_base64 as d64 | |
import scrypt | |
import Crypto.Random | |
random = Crypto.Random.new().read | |
from passlib.utils import consteq | |
_PARAMS = struct.Struct("!BBBB") | |
def pack_verifier( logN,r,p, salt, hash): | |
packed = _PARAMS.pack(logN,r,p,len(salt)) + salt + hash | |
return packed | |
def unpack_verifier(verifier): | |
logN,r,p,salt_bytes = _PARAMS.unpack_from(verifier) | |
i = _PARAMS.size+salt_bytes | |
salt = verifier[_PARAMS.size:i] | |
hash = verifier[i:] | |
return logN,r,p,salt,hash | |
def make_verifier( password, logN=14, r=8, p=1, salt_bytes=16,hash_bytes=16): | |
salt = random(salt_bytes) | |
hash = scrypt.hash(password,salt,1<<logN,r,p,hash_bytes) | |
return pack_verifier(logN,r,p,salt,hash) | |
def verify_password( password, verifier ): | |
logN,r,p,salt,hash = unpack_verifier(verifier) | |
newhash = scrypt.hash(password,salt,1<<logN,r,p,len(hash)) | |
return consteq(newhash,hash) | |
if __name__=="__main__": | |
v = make_verifier( "password" ) | |
print(verify_password( "password", v)) | |
print(verify_password( "Password", v)) | |
ev = e64(v).strip() | |
print(ev) | |
# store ev in database | |
print( verify_password("password",d64(ev))) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment