Module crypto 

Cryptographic UDF implementations.

Enums

SaltStrength

Classification of a configured salt’s strength. Deliberately carries NO salt value — only the verdict class — so it is safe to log and to assert on in tests without exposing secret material.

Constants

MIN_SALT_LEN

Minimum acceptable salt length (in characters, after trimming) for the sha2_salted pseudonym to be considered safe.

Functions

make_sha2_salted_udf

sha2_salted(col, prefix_len) — one-way pseudonym generator for producing a hashed id to share with third parties.

salt_strength

Pure, deterministic salt-strength classifier shared by the sha2_salted UDF and the startup warning. Returns a verdict class WITHOUT retaining or exposing the value.

warn_if_salt_unusable

Emit a ONE-TIME startup warning if the configured salt is not usable.