verifySCryptHash

This function compares a plaintext entry to the hashed string.
NOTE 1:Hashing is one-way, so you can't "decrypt" a hashed value. You have to hash the value you want to check and then compare that to the saved hash.

verifySCryptHash(plaintext,hashedstring); → returns boolean

This function requires Adobe ColdFusion 2021 and up.  Not supported on Lucee, etc.

verifySCryptHash Argument Reference

plaintext string
Required

The unhashed string to compare.

hashedString string
Required

The hashed string to compare.

options struct
Default: {"memorycost":8,"CpuCost":16348,"Parallel":1,"KeyLength":32,"saltLength":8}

A struct containg the optional values:
--memorycost - Default is 8.
--CpuCost - CPU cost of the algorithm (as defined in scrypt, this is N) that must be a power of 2 and greater than 1. Default is currently 16,348 or 2^14.
--Parallel - the parallelization of the algorithm (as defined in scrypt, this is P). Default is currently 1.
--Keylength - key length for the algorithm (as defined in scrypt, this is dkLen). Default is currently 32.
--saltLength - length of the salt to use. Default is 8.

Links more information about verifySCryptHash

Examples sample code invoking the verifySCryptHash function

This is an example of using the function to check against a hashed value.

secretMsg="$e0801$21aGCy86deU=$Yp2UaxwONLNgp0kUaBwuXAqsnFaAjOAUislNejW6Bjs=";
checkMe="My voice is my passport. Verify me."
writeOutput(verifySCryptHash(checkMe,secretMsg);

Expected Result: YES

This is an example of using the function to check against a hashed value when the options were previously set.

secretMsg="$c0401$Eg7sS/HsxhHTWA==$sejraZ7kZZ82adEz8uHHUz51Hk36YkkJ4KZk3w==";
checkMe="Setec Astronomy"
writeOutput(verifySCryptHash(checkMe,secretMsg);

Expected Result: YES


Fork me on GitHub