https://github.com/leocavalcante/password-dart

A set of high-level APIs over PointyCastle and CryptoUtils to hash and verify passwords securely.
https://github.com/leocavalcante/password-dart

cryptography dart digest hash password pbkdf2

Last synced: 1 day ago
JSON representation

A set of high-level APIs over PointyCastle and CryptoUtils to hash and verify passwords securely.

• Host: GitHub
• URL: https://github.com/leocavalcante/password-dart
• Owner: leocavalcante
• License: bsd-3-clause
• Created: 2018-06-01T19:02:06.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2021-05-12T08:43:46.000Z (over 3 years ago)
• Last Synced: 2023-08-20T22:53:32.542Z (about 1 year ago)
• Topics: cryptography, dart, digest, hash, password, pbkdf2
• Language: Dart
• Homepage:
• Size: 13.7 KB
• Stars: 48
• Watchers: 2
• Forks: 15
• Open Issues: 3
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# password

[![Pub Package](https://img.shields.io/pub/v/password.svg)](https://pub.dartlang.org/packages/password)

[![Build Status](https://travis-ci.org/leocavalcante/password-dart.svg?branch=master)](https://travis-ci.org/leocavalcante/password-dart)

[![Donate](https://www.paypalobjects.com/en_US/i/btn/btn_donate_SM.gif)](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=E4F45BFVMFVQW)

A set of high-level APIs over [PointyCastle](https://pub.dartlang.org/packages/pointycastle) to hash and verify passwords securely.


Heavily inspired on [PHP's Password Hashing Functions](http://php.net/manual/en/ref.password.php).

> Looking for two-way cryptography (encryption+decryption)? Please, visit [encrypt](https://github.com/leocavalcante/encrypt).

## API

### `Password.hash`

```dart

Password.hash('password', new PBKDF2());

// $pcks$64,10000,64$530f8afbc74536b9a963b4f1c4cb738bcea7403d4d606b6e074ec5d3baf39d18$56158864e365bd78f6afda27f9a239bcb3f2b7a4773d4c0d0858c86266119d1e35aae9ca1a4777ed3d85c42caeed0c57cc7e09fe7d152d5d4d4ee08506c2b41a

```

### `Password.verify`

```dart

Password.verify('password', previousOutput);

// true

Password.verify('secret', previousOutput);

// false

```

## Defaults

In almost cases, you should rely on default PRNG for salts. It is cryptographically secure and unique for each password.

On the other hand, you are encouraged to change interations count for what your hardware can handle.

### PBKDF2

|   |   |

| - | - |

| Digest | SHA-512 |

| Block size | 64 bytes |

| Salt | 32 bytes [Fortuna](https://en.wikipedia.org/wiki/Fortuna_(PRNG)) |

| Iteration count | 10000 |

| Key length | 64 bytes |

***

Waiting for [Argon2](https://en.wikipedia.org/wiki/Argon2).