[Python-Dev] Right place for PBKDF2 wrapper

Nick Coghlan ncoghlan at gmail.com
Sun Oct 13 08:32:13 CEST 2013


On 13 Oct 2013 06:34, "Brett Cannon" <brett at python.org> wrote:
>
>
>
>
> On Sat, Oct 12, 2013 at 1:19 PM, Christian Heimes <christian at python.org>
wrote:
>>
>> Hi,
>>
>> I have written a interface to OpenSSL's PKCS5_PBKDF2_HMAC() function. It
>> implements PKCS#5's password based key derivation function 2 with HMAC
>> as pseudo-random function. It supports any digest that is supported by
>> OpenSSL, e.g. SHA-1, SHA-256 and SHA-512. It's a low level inteface that
>> takes the digest as unicode name, password and salt as bytes/buffer,
>> keylen and rounds as int.
>>
>> I'd like to add the feature to Python 3.4. Now I'm looking for a good
>> place to put it and some high level functions. In the future I like to
>> add scrypt and bcrypt key stretching and key derivation functions, too.
>> What's a good place for them??
>>
>> [SNIP]
>>
>> * add PBKDF2 to ``hashlib``
>> * make ``hashlib`` a package and add PBKDF2 to a new ``hashlib.kdf``
module
>> * make ``hashlib`` a package and add PBKDF2 to a new ``hashlib.pbkdf2``
>> module
>
>
> One of these three depending on how bug the new API is (smaller the less
need to add new modules).

+1 to hashlib from me (especially since we used that as the best available
home for compare_digest).

Cheers,
Nick.

>
> _______________________________________________
> Python-Dev mailing list
> Python-Dev at python.org
> https://mail.python.org/mailman/listinfo/python-dev
> Unsubscribe:
https://mail.python.org/mailman/options/python-dev/ncoghlan%40gmail.com
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/python-dev/attachments/20131013/56ba8c76/attachment.html>


More information about the Python-Dev mailing list