password_dart 2.0.1 icon indicating copy to clipboard operation
password_dart: ^2.0.1 copied to clipboard

A set of high-level APIs over PointyCastle to hash and verify passwords securely.

password_dart #

Pub Package

Fork of password with null safety

A set of high-level APIs over PointyCastle to hash and verify passwords securely.
Heavily inspired on PHP's Password Hashing Functions.

API #

Password.hash #

Password.hash('password', new PBKDF2());
// $pcks$64,10000,64$530f8afbc74536b9a963b4f1c4cb738bcea7403d4d606b6e074ec5d3baf39d18$56158864e365bd78f6afda27f9a239bcb3f2b7a4773d4c0d0858c86266119d1e35aae9ca1a4777ed3d85c42caeed0c57cc7e09fe7d152d5d4d4ee08506c2b41a

Password.verify #

Password.verify('password', previousOutput);
// true

Password.verify('secret', previousOutput);
// false

Defaults #

In almost cases, you should rely on default PRNG for salts. It is cryptographically secure and unique for each password.

On the other hand, you are encouraged to change interations count for what your hardware can handle.

PBKDF2 #


PBKDF2(blockLength, iterationCount, desiredKeyLength, salt)

Default

DigestSHA-512
Block size64 bytes
Salt32 bytes Fortuna
Iteration count10000
Key length64 bytes

6
likes
125
pub points
77%
popularity

Publisher

unverified uploader

A set of high-level APIs over PointyCastle to hash and verify passwords securely.

Homepage

Documentation

API reference

License

Icon for licenses.BSD-3-Clause (LICENSE)

Dependencies

pointycastle

More

Packages that depend on password_dart