coto/gae-boilerplate — pull request #144 by tmeryu (2012-09-26 15:23:31+00:00)
Title: Added AES Encryption to the hashing functions in utils

Simple AES Encryption added at the end of the hashing utils as an extra security layer to passwords. This new feature needs to set a 12, 24 or 32 bytes key at the config file.

The initialization vector can not be randomly generated as usual because is difficult to retrieve them later if we do not know which password we are trying to match. Given that I'm using the same password+salt hash generate the vector making it at least different for each plaintext.