PBKDF2 Hash Oluşturucu

import bcrypt

# Hash a password (cost factor 12)
password = "my_secure_password"
hashed = bcrypt.hashpw(password.encode(), bcrypt.gensalt(rounds=12))
print("Hash:", hashed.decode())
# $2b$12$...

# Verify a password
is_valid = bcrypt.checkpw(password.encode(), hashed)
print("Valid:", is_valid)  # True

is_invalid = bcrypt.checkpw(b"wrong_password", hashed)
print("Invalid:", is_invalid)  # False

# The salt is embedded in the hash — no need to store it separately
# Always use checkpw() for comparison (constant-time)