Abdi

Hide! - a dead simple library for verifying and hashing passwords, following the Mozilla Password guidelines found here using the prescribed salted bcrypt + hmac.

Contains a 1000 word password Blacklist derived from here

Usage

Install with go get github.com/fortytw2/abdi

Example -

package main

import (
  "fmt"
  "github.com/fortyw2/abdi"
)

func main() {
  // by default, abdi.Hash enforces an 8 character minimum password length
  // change this by changing abdi.MinPasswordLength

  // to change the default Blacklist, simply edit abdi.Blacklist, a []string

  hash, err := abdi.Hash("thispassword", []byte("my hmac key"))
  if err != nil {
    panic(err)
  }

  if err = abdi.Check("thispassword", hash, []byte("my hmac key")); err == nil {
    fmt.Println("Password looks good to me :)")
  }
}

LICENSE

Public Domain, see UNLICENSE

Blacklist.go is not Public Domain - derived from here