Fix to finish feature/commands merge (#28).

earwigbot/config.py

@@ -27,6 +27,7 @@ import logging.handlers
 from os import mkdir, path
 
 from Crypto.Cipher import Blowfish
+import bcrypt
 import yaml
 
 from earwigbot.exceptions import NoConfigError
@@ -263,6 +264,8 @@ class BotConfig(object):
             if not self._decryption_cipher:
                 key = getpass("Enter key to decrypt bot passwords: ")
                 self._decryption_cipher = Blowfish.new(sha256(key).digest())
+            signature = self.metadata["signature"]
+            assert bcrypt.hashpw(key, signature) == signature
             for node, nodes in self._decryptable_nodes:
                 self._decrypt(node, nodes)
 

setup.py

@@ -37,6 +37,7 @@ setup(
                         "mwparserfromhell >= 0.1",  # Wikicode parsing
                         "oursql >= 0.9.3",  # Talking with MediaWiki databases
                         "oauth2 >= 1.5.211",  # Talking with Yahoo BOSS Search
+                        "py-bcrypt >= 0.2",  # Password hashing in config
                         "pycrypto >= 2.5",  # Storing bot passwords and keys
                         "pytz >= 2012c",  # Timezone handling
                         ],