Simple, effective, easy to implement hashing for JavaScript, with KeyHasher


    const { encrypt, decrypt, hash, hashCompare } = require('keyhasher');
    
    const passCode = process.env.PASS_CODE || 572; // set passCode in .env or use directly
    
    var encryptedWord = encrypt('passwordInput', passCode);
    console.log(`Encrypted Phrase: ${encryptedWord}`) // Output: "QGFkX1NeEkVXYGZXYFVX"
    
    var rawWord = decrypt(encryptedWord, passCode);
    console.log(`Output: ${rawWord}`) // Output: "Normal Sentence"
    
    const hashed = hash(encryptedWord); // encryption + hashing
    console.log(`Hashed: ${hashed}`);
    // Output: "5bf22a00c0df8757f68e700066bd56c5edffc4103f9587666ccbde062a0f52f5"
    
    const isCorrect = hashCompare(hash('user given password'), hashed);
    // it hashes user input And compares with the hashed value stored in database
    
    console.log(isCorrect); // returns a boolean

KeyHasher

on GitHub

Last months download:

# Note:

  • - Keyhasher does not store any passwords.
  • - Create a special combination of both uppercase, lowercase letters, numbers and special characters, then Do encrypt them, at last hash them for maximum security.
  • - Note that encrypt and decrypt are used for symmetric encryption of data, whereas hash and hashCompare are used for one-way hashing of data, typically for password storage and authentication.

# How to use:

  • - use 'encrypt()' function with a Passcode number, and convert any sentence to encrypted format.
  • - use 'decrypt()' function with the same Passcode number, to get back the Real sentence.
  • - use 'hash()' function to finally hash the encrypted value, and later compare
  • - use 'hashCompare()' to compare user input password and previously stored hashed password, if match, authenticate

# How hashCompare() is Secure?

The hashCompare() function can't be affected with Timing attack.
Timing attacks are a type of attack that can be used to determine the contents of a secret string by measuring the time it takes to compare two strings character-by-character. To prevent timing attacks, Keyhasher uses a constant-time string comparison algorithm.
The use of Buffer in the implementation of the secure string comparison function is to convert the input strings into a format that can be easily compared byte-by-byte in a constant-time manner. Buffer is a built-in class in Node.js that provides a way to represent binary data in the form of a fixed-size sequence of bytes