使用Python加密密码时出错

Question

当我使用Python的bz2模块加密密码时，我得到了以下错误。在这里，我将加密值保存在DB中。

错误：

ProgrammingError at /signsave/
You must not use 8-bit bytestrings unless you use a text_factory that can interpret 8-bit bytestrings (like text_factory = str). It is highly recommended that you instead just switch your application to Unicode strings.
Request Method: POST
Request URL:    http://127.0.0.1:8000/signsave/
Django Version: 1.11.2
Exception Type: ProgrammingError
Exception Value:    
You must not use 8-bit bytestrings unless you use a text_factory that can interpret 8-bit bytestrings (like text_factory = str). It is highly recommended that you instead just switch your application to Unicode strings.

下面是我的代码：

def signsave(request):
    """This function helps to save signup data"""

    if request.method == 'POST':
        name = request.POST.get('uname')
        password = request.POST.get('pass')
        con_pass = request.POST.get('conpass')
        new_pass = bz2.compress(password) 
        if password == con_pass:
            passw = User(
                uname=name,
                password=new_pass,
                raw_password=password,
            )
            passw.save()
            message = "Registered successfully"
            return render(request, 'bookingservice/login.html', {'msg': message})
        else:
            message = "The password did not match "
            return render(request, 'bookingservice/signup.html', {'msg': message})

在这里，当我试图保存加密值时，这些错误就来了。

Answer 1

除了压缩，你不应该使用bz2做任何事情。改用内置的hashlib模块。

用hashlib.sha256(str.encode(password)).digest()替换bz2.compress(password。您将获得密码字符串的SHA256散列，您可以将其与其他字符串的散列进行比较，以证明其有效性。