3m-portal/lib/password.js

const crypto = require('crypto');

const PARAMS = { N: 16384, r: 8, p: 1, keylen: 64 };

function hash(plain) {
    const salt = crypto.randomBytes(16);
    const key  = crypto.scryptSync(plain, salt, PARAMS.keylen, { N: PARAMS.N, r: PARAMS.r, p: PARAMS.p });
    return `scrypt$${PARAMS.N}$${salt.toString('base64')}$${key.toString('base64')}`;
}

function verify(plain, stored) {
    try {
        const [, N, saltB64, hashB64] = stored.split('$');
        const salt    = Buffer.from(saltB64, 'base64');
        const expected = Buffer.from(hashB64, 'base64');
        const actual   = crypto.scryptSync(plain, salt, expected.length, { N: parseInt(N, 10), r: PARAMS.r, p: PARAMS.p });
        return crypto.timingSafeEqual(actual, expected);
    } catch {
        return false;
    }
}

module.exports = { hash, verify };