hydro_pwhash_create without a master key about libhydrogen HOT 5 CLOSED

No problem :) You can use NULL as the master key.

from libhydrogen.

Great, thanks!

from libhydrogen.

Passing in NULL for the master_key parameter actually leads to a segmentation fault in hydro_secretbox, which (unlike hydro_hash) isn't set up to accept NULL key pointers. Passing in a pointer to an array of NULL bytes works for my purposes, but I could submit a patch to hydro_secretbox if this is intended to work.

from libhydrogen.

Being able to pass NULL as the master key was not the original intent. But as you asked, I saw that it would be fine with with hydro_hash, but indeed, we need a key for secretbox.

There's no point in trying to encrypt with a predicable key, so we should skip this if a NULL key is provided. This requires changes to all the current functions, but more importantly, I'm not sure that making encryption optional is a good idea.

This in fine for your use case, but in most applications, encryption is useful, even if this is with a static, hard-coded key.

from libhydrogen.

Alright! I can definitely understand making it harder to veer away from the known-safe path unless the developer is really sure what they're doing.

from libhydrogen.