Hashing

Hash sensitive information like passwords and email addresses.

Hashing is the practise of converting data into another format to secure or hide it. Hashing is done by hashing algorithms that are mathematically designed to be one-way, meaning it’s hard to decode back to the original format without some sort of key for example.

Ask’s built-in hashing solution uses sha256 encryption. SHA256 turns a given string into a 256 character long string.

Use the hash object for this.

hash()

Returns the given value enypted by the SHA256 algorithm.

Usage

hash.hash([value])

Parameters:

Value

• Typically a string.

check()

Check if a value corresponds with a hash. Used for e.g. verifying passwords. Returns True/False.

Usage

hash.check([hash], [value])

Parameters:

Hash

• A SHA256 encrypted value.

Value

• The value to compare.

• This will e.g. be the user-submitted plain text password your verifying with the one stored in the database that has been hashed.

This function only helps you save a bit of typing. Technically you could just do:

if hash_string == hash.hash(’not hashed’):
    # True
    ...
else:
    # False
    ...

But using .check is a bit easier to both read and write.