How deeply does Rust Servers, Services, and Apps cover password hashing?

Explains the one-way hash and salt, then applies Argon2 inside a registration handler without detailing its internals.

Password hashing

As explained in Rust Servers, Services, and Apps

Password hashing is the one-way transformation of a password into a value intended for secure storage and later verification.

Password hashing transforms a submitted password into a one-way value for storage and later verification. The original password cannot be reconstructed from the hash. section 8.3

A registration handler applies the technique in this sequence:

Receive the registration form through the POST /register route. section 8.3
Use the Argon2 library to hash the submitted password, supplying a salt to construct the hash. section 8.3
Persist the resulting value with the user record rather than retaining the recoverable password. section 8.3

Tutor registration

A Rust Actix Web handler reads TutorRegisterForm, checks that the password and confirmation match, hashes the password with Argon2, and continues registration. Successful registration produces a tutor identifier; invalid input produces messages such as “Passwords do not match.”

How Rust Servers, Services, and Apps covers it

Cover of Rust Servers, Services, and Apps

liveBook manning.com

Read Rust Servers, Services, and Apps on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

ASP.NET Core in Action, 3eA password hash is a one-way derived value stored instead of the plaintext password for later password verification.
liveBook manning.com

Build Python Web Apps with StreamlitPassword hashing is the process of transforming passwords into one-way cryptographic representations for safer credential storage.
liveBook manning.com

Real-World CryptographyThe use of a deliberately configured password-processing function to derive values suitable for storing and verifying passwords without retaining the passwords themselves.
liveBook manning.com

Just Use Postgres!A password hash is a one-way derived value representing a password, typically incorporating the salt needed for later verification.

Compare how 5 books explain password hashing →

Related concepts

Argon2includes · Argon2 is a memory-hard password-hashing and key-derivation algorithm designed to make password-guessing attacks costly in time and memory.
hash functionuses · A hash function deterministically maps input data to a value in a bounded output range, commonly for indexing, lookup, comparison, or integrity checking.
cryptproduced by · crypt is a pgcrypto function that hashes a password with a salt and can reproduce a hash for password verification.
encryptioncontrasts with · Encryption is the cryptographic transformation of readable data into ciphertext to conceal its contents, reversible through decryption with appropriate information.
cryptographic saltused by · A cryptographic salt is an additional typically random value combined with input before hashing to distinguish identical inputs and hinder precomputed attacks.
hash valueuses · A hash value is a deterministic, typically fixed-size value produced by applying a hash function to input data, often for lookup, comparison, identification, or integrity checking.

This explainer was generated by Manning's knowledge graph from the text of Rust Servers, Services, and Apps. The section links point to the parts of the book it draws on.