Elad Amsalem
Elad Amsalem

Reputation: 1881

What is the auth_user.password field format in web2py

I see the auth_user.password is kept in the following format: pbkdf2(1000,20,sha512)$<xxx>$<yyy>

what are <xxx> and <yyy>?

Upvotes: 0

Views: 66

Answers (2)

Tim Nyborg
Tim Nyborg

Reputation: 1649

Yes, <xxx> is 16 hex-encoded characters of salt, <yyy> is the hash, encoded to hex and truncated at 40 characters

Upvotes: 1

Elad Amsalem
Elad Amsalem

Reputation: 1881

It seems like <xxx> is the salt and <yyy> is the password hash.

Upvotes: 0

Related Questions