Function hashWithSaltAndIter

coderd/userpassword/userpassword.go:125–136

Produces a string representation of the hash.

(password string, salt []byte, iter int)

// Produces a string representation of the hash.
func hashWithSaltAndIter(password string, salt []byte, iter int) string {
	var (
		hash    = pbkdf2.Key([]byte(password), salt, iter, hashLength, sha256.New)
		encHash = make([]byte, base64Encoding.EncodedLen(len(hash)))
		encSalt = make([]byte, base64Encoding.EncodedLen(len(salt)))
	)

	base64Encoding.Encode(encHash, hash)
	base64Encoding.Encode(encSalt, salt)

	return fmt.Sprintf("$%s$%d$%s$%s", hashScheme, iter, encSalt, encHash)
}

// Validate checks that the plain text password meets the minimum password requirements.
// It returns properly formatted errors for detailed form validation on the client.