如何使用bcrypt比较纯文本密码和散列密码？

Question

我想使用bcrypt来散列密码，然后验证提供的密码是否正确。

散列密码很简单：

import bcrypt

password = u'foobar'
password_hashed = bcrypt.hashpw(password, bcrypt.gensalt())

# then store password_hashed in a database

如何将纯文本密码与存储的哈希进行比较？

Answer 1

文件中没有提到储存盐，只是说你必须：

#Initial generation
hashed = bcrypt.hashpw(password, bcrypt.gensalt())
#Store hashed in your db

#Load hashed from the db and check the provided password
if bcrypt.hashpw(password, hashed) == hashed:
    print "It matches"
else:
    print "It does not match"

http://www.mindrot.org/projects/py-bcrypt/