Class UnsaltedMD5PasswordHasher

django.contrib.auth.hashers.UnsaltedMD5PasswordHasher

Incredibly insecure algorithm that you should *never* use; stores unsalted MD5 hashes without the algorithm prefix, also accepts MD5 hashes with an empty salt.

Declaration

class UnsaltedMD5PasswordHasher(BasePasswordHasher)

source link

Documentation

This class is implemented because Django used to store passwords this way
and to accept such password hashes. Some older Django installs still have
these values lingering around so we need to handle and upgrade them
properly.

Methods

▶ def decode(self, encoded) override
inherited doc Return a decoded database value.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.decode.
```
The result is a dictionary and should contain `algorithm`, `hash`, and
`salt`. Extra keys can be algorithm specific like `iterations` or
`work_factor`.
```
▶ def encode(self, password, salt) override
inherited doc Create an encoded database value.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.encode.
```
The result is normally formatted as "algorithm$salt$hash" and
must be fewer than 128 characters.
```

▶ def harden_runtime(self, password, encoded) override

inherited doc Bridge the runtime gap between the work factor supplied in `encoded` and the work factor suggested by this hasher.

source link

This method overrides django.contrib.auth.hashers.BasePasswordHasher.harden_runtime.

Taking PBKDF2 as an example, if `encoded` contains 20000 iterations and
`self.iterations` is 30000, this method should run password through
another 10000 iterations of PBKDF2. Similar approaches should exist
for any hasher that has a work factor. If not, this method should be
defined as a no-op to silence the warning.

▶ def safe_summary(self, encoded) override
inherited doc Return a summary of safe values.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.safe_summary.
```
The result is a dictionary and will be used where the password field
must be displayed to construct a safe representation of the password.
```
▶ def salt(self) override
inherited doc Generate a cryptographically secure nonce salt in ASCII.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.salt.
▶ def verify(self, password, encoded) override
inherited doc Check if the given password is correct.
source link
This method overrides django.contrib.auth.hashers.BasePasswordHasher.verify.

Inherited methods

Methods inherited from django.contrib.auth.hashers.BasePasswordHasher:
must_update