keystone.common.password_hashers package

Submodules

• keystone.common.password_hashers.bcrypt module
  • Bcrypt
    • Bcrypt.hash()
    • Bcrypt.ident_values
    • Bcrypt.name
    • Bcrypt.needs_rehash()
    • Bcrypt.verify()
  • Bcrypt_sha256
    • Bcrypt_sha256.hash()
    • Bcrypt_sha256.ident_values
    • Bcrypt_sha256.name
    • Bcrypt_sha256.needs_rehash()
    • Bcrypt_sha256.prefix
    • Bcrypt_sha256.verify()
• keystone.common.password_hashers.pbkdf2 module
  • Sha512
    • Sha512.hash()
    • Sha512.hash_algo
    • Sha512.ident
    • Sha512.name
    • Sha512.needs_rehash()
    • Sha512.verify()
• keystone.common.password_hashers.scrypt module
  • Scrypt
    • Scrypt.hash()
    • Scrypt.ident_values
    • Scrypt.name
    • Scrypt.needs_rehash()
    • Scrypt.verify()

Module contents

class keystone.common.password_hashers.PasswordHasher

Bases: ABC

Abstract password hasher class

ident: str | None

name: str

static needs_rehash(hashed: str, **params) → bool

Return True if the stored hash should be upgraded.

Subclasses compare hashed against the current work-factor parameters. The default returns False: only an algorithm mismatch (handled by the caller) would trigger a rehash.

keystone.common.password_hashers.b64s_decode(data: bytes)

decode from shortened base64 format which omits padding & whitespace

uses default +/ altchars.