backports.pbkdf2 0.1

Usage

>>> from backports.pbkdf2 import pbkdf2_hmac, compare_digest
>>> dkey = pbkdf2_hmac('sha1', passwordbytes, saltbytes, iterations=100000)
>>> compare_digest(dkey, originalkey)
True

pbkdf2_hmac(hash_name, password, salt, iterations, dklen=None)

hash_name

name of the digest algorithm as string

password

password as bytes, bytearray or bytes-like object (*)

salt

salt as bytes, bytearray or bytes-like object (*). The salt should be generated with a CPRNG like os.urandom(). You should never use random.random(). About 16 bytes seem to be a good choice.

iterations

number of rounds, 100,000 rounds of SHA-1 take about 30ms on a modern CPU.

dklen

length of the derived key (defaults to digest_size)

returns

derived key as bytes

(*) bytearray and bytes-like objects are not supported on Python 2.6

Benchmarks

algorithm

sha1

rounds

50000

dklen

20

saltlen

16

number of runs per test

10

Python

Python 3.3 on Linux AMD64

CPU

Intel i7-2860QM @ 2.50GHz

Changelog

pbkdf2 0.1

Release date: 19-Oct-2013

• initial release of backports.pbkdf2