Secure Password Hashing | Dataford Interview Questions

Implement a basic hashing algorithm or explain how to securely store and verify user passwords.

For the coding portion, implement password verification using PBKDF2-HMAC-SHA256. The stored record contains an algorithm name, hexadecimal salt, iteration count, and hexadecimal digest. Return True only when the supplied password matches, and compare digests in constant time.

Function: def verify_password(password, record):

Input: a UTF-8 password string and a record dictionary.

Output: a Boolean indicating whether verification succeeds.

Constraints

password is a UTF-8 string with length from 0 to 1024 characters
record contains algorithm, salt, iterations, and digest keys
salt and digest are valid hexadecimal strings
iterations is a positive integer
Production systems should choose a deliberately expensive iteration count and periodically increase it

Function Signature

def verify_password(password, record):

Your question is Secure Password Hashing. Start with the requirements in the Question tab.

Run and submit as often as you like. When you're ready, talk me through your approach or go straight to the code.

Problem