ferd / erlpass

A library to handle password hashing and changing in a safe manner, independent from any kind of storage whatsoever.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

PBKDF 2 support ?

jeromer opened this issue · comments

Hi there,

How about adding PBKDF2 support ?

Erlpass could be some kind of an abstraction layer for different crypto algorithm ?

The API could be like (This will break with the current API):

Hash = erlpass:hash(pbkd2, "my voice is my password").
erlpass:match("hello, sir", Hash).

What do you think ?

I currently have no plan to do this and it might be tricky to handle dependencies well given the current dependency model of OTP. It might be more interesting to abstract out the internals of the lib and let people write 'hashing' behaviours that can be passed in, though.