python - What encryption is used by default SecureSocial for SecureSocialPasswordHasher? -
i've got passwords on datastore hashed using method securesocialpasswordhasher.passwordhash
package securesocial.utils.securesocialpasswordhasher
of securesocial
, , have validate them through python.
therefore, use of securesocial
(or whole play framework) out of question. question is: use hashing when calling method? documentation seems bcrypt
, wasn't clear enough me sure.
---------edit---------
i've been told on securesocial
forums indeed uses bcrypt
work factor 10 default. doens't reflect see on datastore.
there 2 columns there, 1 salt, , 1 fro hashed password. neither of them have bcrypt
header (such $2a$10$
). also, salt size 11 characters long, , hashed password 22 characters long (and no signs of having salt inside string).
found out default hashing passwords on securesocial
indeed bcrypt
.
the default implementation it's hash method is:
def hash(plainpassword: string): passwordinfo = { passwordinfo(id, bcrypt.hashpw(plainpassword, bcrypt.gensalt(logrounds))) }
this applies latest version of securesocial
.
on specific problem, main issue was not communicated code dealing using older version of securesocial
, , has method overriden.
Comments
Post a Comment