ASPPY.crypto Password Hashing

ASPPY includes bcrypt via the ASPPY.crypto object.

Functions

ASPPY.crypto.Hash(password, rounds)
Hashes a password with bcrypt. Returns $2b$10$... hash string.

ASPPY.crypto.Verify(password, hash)
Verifies a password against a hash. Returns True/False.

Login Flow
Dim hash, valid
hash = ASPPY.crypto.Hash(userPassword, 10)
valid = ASPPY.crypto.Verify(inputPassword, hash)
If valid Then Session('auth') = True

Security Notes
bcrypt includes random salt automatically
Same password produces different hashes each time
Cost factor 10 = 2^10 iterations (~10ms)
Store the hash string in your database

Live Demo →