Struct PasswordHash 

pub struct PasswordHash {
    pub salt: Vec<u8>,
    pub iterations: u32,
    pub server_key: Vec<u8>,
    pub stored_key: Vec<u8>,
}

SCRAM-SHA-256 password hash with salt and iterations

Security Note

This struct implements a custom Debug that redacts sensitive key material to prevent accidental leakage to logs.

Fields

salt: Vec<u8>

Salt (32 bytes, base64 encoded for storage)

iterations: u32

Number of iterations

server_key: Vec<u8>

Server key

stored_key: Vec<u8>

Stored key

Implementations

impl PasswordHash

pub fn new(password: &str) -> Self

Create a new password hash from plaintext

pub fn with_salt(password: &str, salt: &[u8], iterations: u32) -> Self

Create a password hash with a specific salt (for testing/migration)

pub fn verify(&self, password: &str) -> bool

Verify a password against this hash (constant-time comparison)

pub fn constant_time_compare(a: &[u8], b: &[u8]) -> bool

Constant-time comparison to prevent timing attacks

pub fn hmac_sha256(key: &[u8], data: &[u8]) -> Vec<u8>

HMAC-SHA256

Trait Implementations

impl Clone for PasswordHash

fn clone(&self) -> PasswordHash

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PasswordHash

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PasswordHash

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for PasswordHash

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.