From 240e6e995745185c34249f1939d4c0d469a6746e Mon Sep 17 00:00:00 2001
From: Rose Hogenson <rosehogenson@posteo.net>
Date: Thu, 25 Sep 2025 21:53:40 -0700
Subject: Move complex crypto logic into a helper package

---
 internal/pwhash/pwhash.go | 33 ---------------------------------
 1 file changed, 33 deletions(-)
 delete mode 100644 internal/pwhash/pwhash.go

(limited to 'internal/pwhash')

diff --git a/internal/pwhash/pwhash.go b/internal/pwhash/pwhash.go
deleted file mode 100644
index 9ef5d2a..0000000
--- a/internal/pwhash/pwhash.go
+++ /dev/null
@@ -1,33 +0,0 @@
-package pwhash
-
-import (
-	"crypto/hkdf"
-	"crypto/pbkdf2"
-	"crypto/sha256"
-)
-
-const SaltLen = 2 * sha256.Size
-
-const defaultIterations = 3749890 // from cmd/finditers
-
-func HashIter(password string, salt []byte, iter int) ([]byte, error) {
-	return pbkdf2.Key(sha256.New, password, salt, iter, sha256.Size)
-}
-
-func Hash(password string, salt []byte) (rawKey, pwHash []byte, err error) {
-	const hashLen = 32
-
-	key, err := HashIter(password, salt[:sha256.Size], defaultIterations)
-	if err != nil {
-		return nil, nil, err
-	}
-	key, err = hkdf.Extract(sha256.New, key, salt[sha256.Size:])
-	if err != nil {
-		return nil, nil, err
-	}
-	pwHash, err = hkdf.Expand(sha256.New, key, "pwhash", hashLen)
-	if err != nil {
-		return nil, nil, err
-	}
-	return key, pwHash, nil
-}
-- 
cgit v1.3.1