of_salt s converts s to storage. The result is salt_size bytes long.

to_salt s converts s to a salt.

• raises Size_mismatch

  if s is not salt_size bytes long

wipe_to_password s copies a password s from storage and wipes s.

hash_password d pw uses the key derivation algorithm to create a safely storable hash of the password of size password_hash_size. It randomly generates a salt, and stores the result of the derivation, along with the salt and parameters d, so that verify_password can later verify the hash.

verify_password_hash h p uses the key derivation algorithm to check that a safely storable password hash h actually matches the password p.

• raises Size_mismatch

  if h is not password_hash_size bytes long