Packages
comeonin
0.11.0
5.5.1
5.5.0
5.4.0
5.3.3
5.3.2
5.3.1
5.3.0
5.2.0
5.1.3
5.1.2
5.1.1
5.1.0
5.0.0
4.1.2
4.1.1
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0
4.0.0-rc.0
3.2.0
3.1.0
3.0.2
3.0.1
3.0.0
2.6.0
2.5.3
2.5.2
2.5.1
2.5.0
2.4.0
2.3.1
2.3.0
2.2.0
2.1.1
2.1.0
2.0.3
2.0.2
2.0.1
2.0.0
1.6.0
1.5.0
1.4.1
1.4.0
1.3.2
1.3.1
1.3.0
1.2.2
1.2.1
1.2.0
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
0.11.3
0.11.2
0.11.1
0.11.0
0.10.0
0.9.0
0.8.2
0.8.1
0.8.0
0.7.0
0.6.0
0.5.1
0.5.0
0.4.0
0.3.1
0.3.0
0.2.4
0.2.3
0.2.2
0.2.1
0.2.0
0.1.1
0.1.0
A specification for password hashing libraries
Current section
Files
Jump to
Current section
Files
lib/comeonin/tools.ex
defmodule Comeonin.Tools do
@moduledoc """
Module that provides various tools for the hashing algorithms.
"""
use Bitwise
@doc """
Use erlang's crypto.strong_rand_bytes by default. Falls back to
crypto.rand_bytes if there is too little entropy for strong_rand_bytes
to work.
"""
def random_bytes(number) when is_integer(number) do
try do
:crypto.strong_rand_bytes(number)
rescue
_error ->
:crypto.rand_bytes(number)
end
end
def random_bytes(_) do
raise ArgumentError, message: "Wrong type. You must call this function with an integer."
end
@doc """
Compares the two binaries in constant time to avoid timing attacks.
"""
def secure_check(hash, stored) do
if byte_size(hash) == byte_size(stored) do
secure_check(hash, stored, 0) == 0
else
false
end
end
defp secure_check(<<h, rest_h :: binary>>, <<s, rest_s :: binary>>, acc) do
secure_check(rest_h, rest_s, acc ||| (h ^^^ s))
end
defp secure_check("", "", acc) do
acc
end
end