Function derivePasswordValues

apps/app-server/src/utils/crypto.ts:17–41

(input: {
  password: Uint8Array;
  salt?: Uint8Array;
})

import { pack, unpack } from 'msgpackr';

export function derivePasswordValues(input: {
  password: Uint8Array;
  salt?: Uint8Array;
}) {
  mainLogger.info('Started hashing password');

  input.salt ??= sodium.randombytes_buf(sodium.crypto_pwhash_SALTBYTES);

  const derivedKey = sodium.crypto_pwhash(
    32 + 64,
    input.password,
    input.salt,
    2,
    32 * 1048576,
    sodium.crypto_pwhash_ALG_ARGON2ID13,
  );

  mainLogger.info('Finished hashing password');

  return {
    key: wrapSymmetricKey(derivedKey.slice(0, 32)),
    hash: derivedKey.slice(32),
    salt: input.salt,
  };
}

export type PasswordValues = ReturnType<typeof derivePasswordValues>;