hcrypt

Documentation

Index

• type HmacCrypt
  • func New(hash func() hash.Hash, pepper []byte) *HmacCrypt
  • func (c *HmacCrypt) Bcrypt(password []byte, cost int) ([]byte, error)
  • func (c *HmacCrypt) BcryptCompare(digest, password []byte) error

Types

type HmacCrypt

type HmacCrypt struct {
	// contains filtered or unexported fields
}

func New

func New(hash func() hash.Hash, pepper []byte) *HmacCrypt

Returns a HmacCrypt using the specified hash (e.g. sha512.New) and pepper for its HMAC function. The pepper should be stored separately from the returned digests. If the digests are stored in a database, it is a good idea to store the pepper on the disk, or as a constant in the application itself.

func (*HmacCrypt) Bcrypt

func (c *HmacCrypt) Bcrypt(password []byte, cost int) ([]byte, error)

Generates a new bcrypt(HMAC-hash(password, pepper), salt(cost)) digest of a password with a given bcrypt cost/work factor, e.g. 10 (bcrypt.DefaultCost). Use BcryptCompare to compare a password to an existing digest.

func (*HmacCrypt) BcryptCompare

func (c *HmacCrypt) BcryptCompare(digest, password []byte) error

Compares an existing bcrypt digest to HMAC-hash(password, pepper). Returns an error if there is no match.