password_dart

Description:

password dart

password_dart #

Fork of password with null safety
A set of high-level APIs over PointyCastle to hash and verify passwords securely.
Heavily inspired on PHP's Password Hashing Functions.
API #
Password.hash #
Password.hash('password', new PBKDF2());
// $pcks$64,10000,64$530f8afbc74536b9a963b4f1c4cb738bcea7403d4d606b6e074ec5d3baf39d18$56158864e365bd78f6afda27f9a239bcb3f2b7a4773d4c0d0858c86266119d1e35aae9ca1a4777ed3d85c42caeed0c57cc7e09fe7d152d5d4d4ee08506c2b41a
copied to clipboard
Password.verify #
Password.verify('password', previousOutput);
// true

Password.verify('secret', previousOutput);
// false
copied to clipboard
Defaults #
In almost cases, you should rely on default PRNG for salts. It is cryptographically secure and unique for each password.
On the other hand, you are encouraged to change interations count for what your hardware can handle.
PBKDF2 #

PBKDF2(blockLength, iterationCount, desiredKeyLength, salt)

copied to clipboard
Default









Digest
SHA-512


Block size
64 bytes


Salt
32 bytes Fortuna


Iteration count
10000


Key length
64 bytes