Class Argon2PasswordHasher

django.contrib.auth.hashers.Argon2PasswordHasher

Secure password hashing using the argon2 algorithm.

Declaration

class Argon2PasswordHasher(BasePasswordHasher)

Documentation

This is the winner of the Password Hashing Competition 2013-2015
(https://password-hashing.net). It requires the argon2-cffi library which
depends on native C code and might cause portability issues.

Methods

▶ def decode(self, encoded) override
inherited doc Return a decoded database value.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.decode.
```
The result is a dictionary and should contain `algorithm`, `hash`, and
`salt`. Extra keys can be algorithm specific like `iterations` or
`work_factor`.
```
▶ def encode(self, password, salt) override
inherited doc Create an encoded database value.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.encode.
```
The result is normally formatted as "algorithm$salt$hash" and
must be fewer than 128 characters.
```

▶ def harden_runtime(self, password, encoded) override

inherited doc Bridge the runtime gap between the work factor supplied in `encoded` and the work factor suggested by this hasher.

source link

This method overrides django.contrib.auth.hashers.BasePasswordHasher.harden_runtime.

Taking PBKDF2 as an example, if `encoded` contains 20000 iterations and
`self.iterations` is 30000, this method should run password through
another 10000 iterations of PBKDF2. Similar approaches should exist
for any hasher that has a work factor. If not, this method should be
defined as a no-op to silence the warning.

▶ def must_update(self, encoded) override
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.must_update.
▷ def params(self)
source link
▶ def safe_summary(self, encoded) override
inherited doc Return a summary of safe values.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.safe_summary.
```
The result is a dictionary and will be used where the password field
must be displayed to construct a safe representation of the password.
```
▶ def verify(self, password, encoded) override
inherited doc Check if the given password is correct.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.verify.

Inherited methods

Methods inherited from django.contrib.auth.hashers.BasePasswordHasher:
salt

Django

Class Argon2PasswordHasher

Declaration

Documentation

Methods

Inherited methods