Increase target security to 32 bytes

1 files changed, 18 insertions, 0 deletions

diff --git a/internal/pwhash/pwhash.go b/internal/pwhash/pwhash.go
new file mode 100644
index 0000000..22b5368
--- /dev/null
+++ b/internal/pwhash/pwhash.go
@@ -0,0 +1,18 @@
+package pwhash
+
+import (
+	"crypto/pbkdf2"
+	"crypto/sha512"
+)
+
+const SaltSize = 8
+
+const defaultIter = 12500992 // from tools/finditer
+
+func HashIter(password string, salt []byte, iter int) ([]byte, error) {
+	return pbkdf2.Key(sha512.New, password, salt, iter, 32)
+}
+
+func Hash(password string, salt []byte) ([]byte, error) {
+	return HashIter(password, salt, defaultIter)
+}