https://github.com/aykevl/pwhash

Simple password hashing library for Go.
https://github.com/aykevl/pwhash

argon2 argon2id golang passwords pbkdf2

Last synced: 6 months ago
JSON representation

Simple password hashing library for Go.

• Host: GitHub
• URL: https://github.com/aykevl/pwhash
• Owner: aykevl
• License: unlicense
• Created: 2019-03-14T13:06:36.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2019-03-14T13:55:19.000Z (over 6 years ago)
• Last Synced: 2025-04-04T18:54:40.472Z (6 months ago)
• Topics: argon2, argon2id, golang, passwords, pbkdf2
• Language: Go
• Homepage:
• Size: 3.91 KB
• Stars: 3
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE.txt

Awesome Lists containing this project

README

          
# Opinionated password hashing library

[![GoDoc](https://godoc.org/github.com/aykevl/pwhash?status.svg)](https://godoc.org/github.com/aykevl/pwhash)

[![CircleCI](https://circleci.com/gh/aykevl/pwhash.svg?style=svg)](https://circleci.com/gh/aykevl/pwhash)

This library implements password hashing functions for Go web applications. It

is intentionally not configurable to avoid security mistakes.

Using it is very simple. There are only two methods: `Hash` and `Verify`:

```go

// When storing a password in the database:

password := "correct horse battery staple"

hash := pwhash.Hash(password)

// When checking a password for validity:

if !pwhash.Verify(password, hash) {

	// Oh no, the user entered the wrong password!

	showLoginPage()

	return

}

// User is logged in. Set up a session etc.

```

In the current configuration, it hashes passwords using argon2id, with 64MB

memory, a time parameter of 1, and uses 4 threads. Passwords hashed this way

should take under 50ms to verify on most systems.

Some other password formats are supported for backwards compatibility. This

includes the PBKDF2-SHA256 hash in the Python hashlib and the Django format.

More formats can be added if the need arises. Remember that this is only for

legacy purposes, newly stored passwords will be in the argon2 format and thus

better protected against cracking.

## License

This library has been put into the public domain. For details, see `LICENSE.txt`

or [unlicense.org](https://unlicense.org).