Secure, extensible, forward-compatable passwords.
authorJeremy Stanley <fungi@yuggoth.org>
Thu, 17 Jun 2010 23:49:58 +0000 (23:49 +0000)
committerJeremy Stanley <fungi@yuggoth.org>
Thu, 17 Jun 2010 23:49:58 +0000 (23:49 +0000)
commit660cb2e0a13ee01318dd90f77f6a83c4adefdf74
tree537e7648b663121ff86415ec77c219b2143f52d9
parent8461873b84dc8e79b68c18b930b8379566d4234c
Secure, extensible, forward-compatable passwords.

* lib/mudpy/__init__.py (modules): Added the new password module to
the list.

* lib/mudpy/misc.py (handler_checking_password)
(handler_entering_new_password, handler_verifying_new_password):
Replaced existing md5 usage with calls to the new password
functions.

* lib/mudpy/password.py: Implemented a new module to handle creating
and verifying account password hashes. The functions and format are
forward-compatable to new hashing algorithms, and can be scaled to
allow tuning for CPU utilization/brute-force mitigation trade-offs.
The new functions are not directly backward-compatable with the old
format, but a utility function (upgrade_legacy_hash) is included to
upgrade those hexdigests if needed.
lib/mudpy/__init__.py
lib/mudpy/misc.py
lib/mudpy/password.py [new file with mode: 0644]