Summary - Security

Combine crypto, HMAC and encrypt to write an encryptor.

Summary - Security

In this group we learned Dart's security tools. crypto provides hash functions (sha256); HMAC produces keyed signatures; encrypt does AES symmetric encryption; Random.secure produces cryptographic random; bcrypt offers password hashing.

In this summary we will write a small program that brings crypto and HMAC together. The program computes the SHA-256 hash of data and the HMAC-SHA256 signature of the same data. This is a small example of an application's data integrity and authentication layer.

Exercise Hash and HMAC summary

Add import 'dart:convert'; and import 'package:crypto/crypto.dart';. In main add final data = utf8.encode('test');. Compute the hash with final hash = sha256.convert(data);. Create the HMAC with final key = utf8.encode('anahtar'); and final hmac = Hmac(sha256, key);, compute the signature with final digest = hmac.convert(data);. Print with print('Hash: $hash') and print('HMAC: $digest').

Show example solution

import 'dart:convert';
import 'package:crypto/crypto.dart';

void main() {
  final data = utf8.encode('test');
  final hash = sha256.convert(data);
  final key = utf8.encode('anahtar');
  final hmac = Hmac(sha256, key);
  final digest = hmac.convert(data);
  print('Hash: $hash');
  print('HMAC: $digest');
}

Test yourself

Which is the password hashing algorithm?
- jaspr
- crypto
- encrypt
- bcrypt
Show answer

bcrypt — bcrypt is the password hashing algorithm.
Match the security tools

sha256

Hash
Hmac

Signed hash
AES

Encryption
bcrypt

Password

The sha256 call

final hash = ____.convert(utf8.encode('test'));

Show answer

final hash = sha256.convert(utf8.encode('test'));

Next lesson: Benchmark

We Are Enhancing Your Experience

Cookie Preferences

Strictly Necessary Cookies

Analytical Cookies