summaryrefslogtreecommitdiff
path: root/pkg/helpers/crypto.go
diff options
context:
space:
mode:
authorJulien Dessaux2024-11-17 00:05:22 +0100
committerJulien Dessaux2024-11-17 00:05:22 +0100
commit206182fcb9c4ab2b49e8e44c6a2711a988e3f968 (patch)
tree5cfc55047d833400028fb69a7f069f5cedecaacd /pkg/helpers/crypto.go
parentfix(tfstated): hash passwords instead of relying on the database encryption key (diff)
downloadtfstated-206182fcb9c4ab2b49e8e44c6a2711a988e3f968.tar.gz
tfstated-206182fcb9c4ab2b49e8e44c6a2711a988e3f968.tar.bz2
tfstated-206182fcb9c4ab2b49e8e44c6a2711a988e3f968.zip
chore(tfstated): refactored helpers to their own package
Diffstat (limited to '')
-rw-r--r--pkg/helpers/crypto.go21
1 files changed, 21 insertions, 0 deletions
diff --git a/pkg/helpers/crypto.go b/pkg/helpers/crypto.go
new file mode 100644
index 0000000..ce73cd3
--- /dev/null
+++ b/pkg/helpers/crypto.go
@@ -0,0 +1,21 @@
+package helpers
+
+import (
+ "crypto/sha256"
+
+ "git.adyxax.org/adyxax/tfstated/pkg/scrypto"
+ "golang.org/x/crypto/pbkdf2"
+)
+
+const (
+ PBKDF2Iterations = 600000
+ SaltSize = 32
+)
+
+func GenerateSalt() []byte {
+ return scrypto.RandomBytes(SaltSize)
+}
+
+func HashPassword(password string, salt []byte) []byte {
+ return pbkdf2.Key([]byte(password), salt, PBKDF2Iterations, 32, sha256.New)
+}