Skip to content

Commit 30f1cf4

Browse files
committed
Add inspiration source
1 parent d32a0c3 commit 30f1cf4

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

src/app/infrastructure/adapters/password_hasher_bcrypt.py

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,7 @@ def hash(self, raw_password: RawPassword) -> bytes:
2424
This issue can be resolved by applying `base64` encoding to the digest.
2525
The resulting `base64(hmac-sha256(password, pepper))` string is then ready for bcrypt hashing.
2626
Salt is added to this string before passing it to `bcrypt` for the final hashing step.
27+
Inspired by: https://blog.ircmaxell.com/2015/03/security-issue-combining-bcrypt-with.html
2728
"""
2829
base64_hmac_password: bytes = self._add_pepper(raw_password, self._pepper)
2930
salt: bytes = bcrypt.gensalt()

0 commit comments

Comments
 (0)