为什么加密后的密码不一样？

Question

2 个变量“x”和“l”的输出应该是相同的，因为它们使用完全相同的加盐和加密过程。

我想要一些关于为什么它不一样的信息，以及我如何为一个简单的登录算法修复它。

代码：

import os
import hashlib
import mysql.connector
from cryptography.fernet import Fernet
from cryptography.hazmat.backends import default_backend
from cryptography.hazmat.primitives import hashes
from cryptography.hazmat.primitives.kdf.pbkdf2 import PBKDF2HMAC
import base64


def encrypt_password(password, salt=None):
    # Create a password hash
    if not salt:
        salt = os.urandom(64)
        #print("salt", salt)
        #print("1", salt)
        print("...")
        token = base64.b64encode(salt).decode('utf-8')
        #print("2", token)

        #print("3", salt_again)
        #print(salt == salt_again)

    else: pass #token = salt
    password = password.encode()
    kdf = PBKDF2HMAC(
        algorithm=hashes.SHA256,
        iterations=100000,
        length=32,
        salt=salt,
        backend=default_backend()
    )
    key = base64.urlsafe_b64encode(kdf.derive(password))
    # Encrypt the password
    f = Fernet(key)
    encrypted_password = f.encrypt(password)
    return encrypted_password, salt

x, salt2 = encrypt_password("Hello")
#print(x)
print(salt2)
l, salt1 = encrypt_password("Hello", salt2)
#print(l)
print(salt1)
print(salt1 == salt2)

我已经检查了 20 次盐，我几乎可以肯定它们在任何过程中都不会发生变化。我能想到的是，对于过程中使用的任何不一致的库，我都不知道。

Answer 1

else 声明后有 pass。删除它应该可以解决问题：

import os
import hashlib
import mysql.connector
from cryptography.fernet import Fernet
from cryptography.hazmat.backends import default_backend
from cryptography.hazmat.primitives import hashes
from cryptography.hazmat.primitives.kdf.pbkdf2 import PBKDF2HMAC
import base64


def encrypt_password(password, salt=None):
    # Create a password hash
    if not salt:
        salt = os.urandom(64)
        #print("salt", salt)
        #print("1", salt)
        print("...")
        token = base64.b64encode(salt).decode('utf-8')
        #print("2", token)

        #print("3", salt_again)
        #print(salt == salt_again)

    else: #token = salt
        password = password.encode()
        kdf = PBKDF2HMAC(
            algorithm=hashes.SHA256,
            iterations=100000,
            length=32,
            salt=salt,
            backend=default_backend()
        )
        key = base64.urlsafe_b64encode(kdf.derive(password))
        # Encrypt the password
        f = Fernet(key)
        encrypted_password = f.encrypt(password)
    return encrypted_password, salt

x, salt2 = encrypt_password("Hello")
#print(x)
print(salt2)
l, salt1 = encrypt_password("Hello", salt2)
#print(l)
print(salt1)
print(salt1 == salt2)

如果不进行此更改，如果将 salt 变量传递给 encrypt_password，函数将不会返回任何内容。