pbkdf2

README

Go PBKDF2 Implementation

Wikipedia

This is a simple PBKDF2 implementation in golang.

Encryption

To encrypt a password use the following code: 'pbkdf2.Encrypt(password, saltLenght, iterations, hashAlgorithm)' password is the password to be encrypted. string format saltLenght is the lenght of the salt to be generated. unsigned int format(number of bytes) iterations is the number of iterations to be used. unsigned int format hashAlgorithm is any hash Algorithm compatible with crypto package(type crypto.Hash).

Verification

To verify a password digest use the following code: 'pbkdf2.Verify(encryptedPassword, password, hashAlgorithm)' encryptedPassword is the encrypted password to be verified. string format password is the password to be verified. string format hashAlgorithm is any hash Algorithm compatible with crypto package(type crypto.Hash), must be the same used on the encryption.

Documentation

Index

• func Encrypt(password string, saltSize, iterationCount uint, hash crypto.Hash) (string, error)
• func Verify(encryptedPassword, password string, hash crypto.Hash) (bool, error)

Functions

func Encrypt

func Encrypt(password string, saltSize, iterationCount uint, hash crypto.Hash) (string, error)

Encrypt encrypts a password using PBKDF2 algorithm The encrypted password is returned in the format: salt:iterationCount:hashedPassword The salt is a hexadecimal string The iterationCount is an integer The hashedPassword is a hexadecimal string The saltSize is the size of the salt in bytes The iterationCount is the number of iterations The hash is the hash function to be used(can be any crypto.Hash)

func Verify

func Verify(encryptedPassword, password string, hash crypto.Hash) (bool, error)

Verify verifies if a password matches an encrypted password The encrypted password must be in the format: salt:iterationCount:hashedPassword The salt is a hexadecimal string The iterationCount is an integer The hashedPassword is a hexadecimal string The hash is the hash function to be used(can be any crypto.Hash) it will throw an error if the encrypted password is not in the correct format