Password storage format

[Camilo]

Hi,

So am trying to validate passwords against a db generated by web2py.

The format is "pbkdf2(N,M,sha512)$X$Y". I suppose N is iterations (although it seems kind of low), X is salt and Y is encrypted. What would M be?

Thank you

[Massimo Di Pierro]

N is iterations and M is key length.

You can use the CRYPT validator to check them automatically

>>> alg = 'pbkdf2(1000,20,sha512)' 

>>> a = str(CRYPT(digest_alg=alg,salt=True)('test')[0])

>>> a == 'pbkdf2(1000,20,sha512)$...$...'