Utilities for creating and comparing hashes, salts, and stretches for passwords

Available at https://www.npmjs.com/package/pass-smash

npm install pass-smash

Import the package (const passMash = require('pass-mash')), then create a PassMash object using new PassMash

passMash.createHash(password)

Password should be a string. This returns a hash (string) of the input.

passMash.createSalt()

Randomly generated decimal; used in the storePassword and comparePassword functions.

passMash.processHash(password, stretch, salt)

Concatenates the password with the salt, then the resulting hash again with the salt. Repeats for stretch iterations before returning the resulting hash.

passMash.storePassword(password, stretch)

Returns a record object, which contains

{
    hash: password, // the password, having been hashed with the salt a number of times equal to the stretch
    salt: salt, // generated on the fly with createSalt()
    stretch: stretch
}

passMash.comparePassword(password, record)

Returns true if the provided password, once hashed and stretched with the salt and stretch of the record object, matches the hash stored in the record object.