A set of high-level APIs over PointyCastle to hash and verify passwords securely.<br> Heavily inspired on PHP's Password Hashing Functions.
Looking for two-way cryptography (encryption+decryption)? Please, visit encrypt.
Password.hash
#Password.hash('password', new PBKDF2());
// $pcks$64,10000,64$530f8afbc74536b9a963b4f1c4cb738bcea7403d4d606b6e074ec5d3baf39d18$56158864e365bd78f6afda27f9a239bcb3f2b7a4773d4c0d0858c86266119d1e35aae9ca1a4777ed3d85c42caeed0c57cc7e09fe7d152d5d4d4ee08506c2b41a
Password.verify
#Password.verify('password', previousOutput);
// true
Password.verify('secret', previousOutput);
// false
In almost cases, you should rely on default PRNG for salts. It is cryptographically secure and unique for each password.
On the other hand, you are encouraged to change interations count for what your hardware can handle.
Digest | SHA-512 |
Block size | 64 bytes |
Salt | 32 bytes Fortuna |
Iteration count | 10000 |
Key length | 64 bytes |
Waiting for Argon2.
example/main.dart
import 'package:password/password.dart';
void main() {
final password = 'secret';
final algorithm = PBKDF2();
final hash = Password.hash(password, algorithm);
print(hash);
print(Password.verify(password, hash));
print(Password.verify('wrongpass', hash));
}
Add this to your package's pubspec.yaml file:
dependencies:
password: ^1.0.0
You can install packages from the command line:
with pub:
$ pub get
with Flutter:
$ flutter packages get
Alternatively, your editor might support pub get
or flutter packages get
.
Check the docs for your editor to learn more.
Now in your Dart code, you can use:
import 'package:password/password.dart';
Version | Uploaded | Documentation | Archive |
---|---|---|---|
1.0.0 | Dec 17, 2018 |
|
|
0.1.1+2 | Jul 23, 2018 |
|
|
0.1.1+1 | Jun 2, 2018 |
|
|
0.1.1 | Jun 2, 2018 |
|
|
0.1.0 | Jun 2, 2018 |
|
|
Popularity:
Describes how popular the package is relative to other packages.
[more]
|
80
|
Health:
Code health derived from static analysis.
[more]
|
100
|
Maintenance:
Reflects how tidy and up-to-date the package is.
[more]
|
100
|
Overall:
Weighted score of the above.
[more]
|
90
|
We analyzed this package on Feb 20, 2019, and provided a score, details, and suggestions below. Analysis was completed with status completed using:
Detected platforms: Flutter, web, other
No platform restriction found in primary library
package:password/password.dart
.
Fix lib/src/algorithms/pbkdf2.dart
. (-0.50 points)
Analysis of lib/src/algorithms/pbkdf2.dart
reported 1 hint:
line 28 col 7: Don't explicitly initialize variables to null.
Package | Constraint | Resolved | Available |
---|---|---|---|
Direct dependencies | |||
Dart SDK | >=2.0.0 <3.0.0 | ||
pointycastle | ^1.0.0 | 1.0.0 | |
Dev dependencies | |||
test | ^1.5.1+1 |