sha512 password digesting function

gistfile1.lisp

(defun 5-random-base64-encoded-bytes ()
  (base64:usb8-array-to-base64-string
   (map 'vector (lambda (place)
                  (declare (ignore place))
                  (random 255))
        (make-sequence 'vector 5))))

(defun digest-password (password &optional (salt (5-random-base64-encoded-bytes)))
  (values
   (base64:usb8-array-to-base64-string
    (ironclad:digest-sequence 'ironclad::sha512
                              (babel:string-to-octets (concatenate 'string password salt))))
   salt))

(defparameter *key-derivation-iterations* 720)
(defparameter *key-length* 32)
(defun hash-password (password salt
                      &key
                        (key-iterations *key-derivation-iterations*)
                        (key-length *key-length*))
  "Password hashing function."
  (ironclad:derive-key
   (make-instance 'ironclad:pbkdf2 :digest :sha256)
   (ironclad:ascii-string-to-byte-array password)
   salt
   key-iterations
   key-length))