CodeSampleX

Sample

golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e: bcrypt.InvalidHashPrefixError

Verified sample for golang golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e: bcrypt.InvalidHashPrefixError. The contract ran on go 1.26 · linux…

sha256:158a440827facdb30ab845757f46bc50e2e9bfdee141e7b9d094bb1c00e327c1

This network offers one thing: a sample that builds. It ran the sample in a sandbox and kept the signed receipt. It grades nothing and warrants nothing — whether the same code builds where you are is not something it measured. How many distinct signing keys filed a passing contract receipt. One is the author alone; more than one means somebody else built it too. A key is self-generated with nothing registered behind it, so it counts keys, not people. MIT-0

Execution evidence

The declared environment and the signed runs are kept apart, so you can see exactly what this sample ran and where.

Evidence basis
Signed contract pass
Verification receipts
1
Signing keys that built it
1
Declared environment linux 24 · ubuntu · glibc 2.39 x64 go

Verification-run environments

Environment Contract Stages Run
go 1.26 · linux debian/x64 · docker ed25519:c1973797be207ac4 PASS compile:SKIPPED · contract:PASS · load:PASS · resolve:PASS
CONTAINER_RUN · golang@1golang:1.26@sha256:e30143be198a…
2026-10-22

Case

HOW
Goal
verify golang.org/x/crypto/bcrypt.InvalidHashPrefixError in pkg:golang/golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
Packages
Symbols
  • golang.org/x/crypto/bcrypt.InvalidHashPrefixError
Created
2026-10-22T02:21:22Z

Contract

  1. bcrypt.InvalidHashPrefixError('#').Error() returns "crypto/bcrypt: bcrypt hashes must start with '$', but hashedSecret started with '#'"
  2. bcrypt.CompareHashAndPassword returns bcrypt.InvalidHashPrefixError('#') when given a full-length hash starting with '#' instead of '$'
  3. bcrypt.Cost returns bcrypt.InvalidHashPrefixError('!') when given a full-length hash starting with '!'

Files

  • PROMPT.md
  • csx.json
  • go.mod
  • go.sum
  • main.go
  • spec.json
  • test/contract.go

Download the source artifact (tar.gz)

Source

PROMPT.md
Clean-room public code sample — generation instructions

Write a brand-new, minimal, self-contained code sample in this clean-room directory.
Do not copy, paraphrase, or reference any existing project source. Work only from this spec.

A csx.json manifest scaffold already exists. Do not recreate it from memory. Preserve its case.goal, packages and symbols; fill its empty case.contract with exact assertions and correct its environment, commands and verifierAdapter for the files you generate.

Goal: verify golang.org/x/crypto/bcrypt.InvalidHashPrefixError in pkg:golang/golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
Kind: HOW

Use EXACTLY these public packages and versions:
  - pkg:golang/golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
Demonstrate these symbols/APIs:
  - golang.org/x/crypto/bcrypt.InvalidHashPrefixError

Rules:
  - One focused purpose; the smallest project that proves the goal.
  - Include a contract test (test/contract.*) that runs OFFLINE and exits 0 exactly when the goal behavior works.
  - Pin every dependency with a lockfile so resolution is reproducible.
  - No secrets, credentials, or tokens. No real URLs (only example.com or localhost). No absolute paths.
  - No personal names, emails, company names, or project identifiers of any kind.
  - No binaries and no generated output (node_modules, dist, target, venv, .git, .env).
  - Keep it under 200 files and 256KB packed.
csx.json
{"case":{"caseId":"case:sha256:d3f79b1efd0c7e549fa8e336f74b9975d1551c7c3f83a4ba8f7f6d57e7beb5e0","contract":["bcrypt.InvalidHashPrefixError('#').Error() returns \"crypto/bcrypt: bcrypt hashes must start with '$', but hashedSecret started with '#'\"","bcrypt.CompareHashAndPassword returns bcrypt.InvalidHashPrefixError('#') when given a full-length hash starting with '#' instead of '$'","bcrypt.Cost returns bcrypt.InvalidHashPrefixError('!') when given a full-length hash starting with '!'"],"goal":"verify golang.org/x/crypto/bcrypt.InvalidHashPrefixError in pkg:golang/golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e","kind":"HOW","packages":["pkg:golang/golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e"],"schemaVersion":1,"symbols":["golang.org/x/crypto/bcrypt.InvalidHashPrefixError"]},"contractCommand":["go","run","./test"],"environment":{"arch":"x64","distro":"ubuntu","ecosystem":"golang","libc":"glibc","libcVersion":"2.39","os":"linux","osVersionBucket":"24","packageManager":"go","schemaVersion":1},"license":"MIT-0","packages":["pkg:golang/golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e"],"schemaVersion":1,"subject":"pkg:golang/golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e","symbols":["golang.org/x/crypto/bcrypt.InvalidHashPrefixError"],"verifierAdapter":"golang@1"}
go.mod
module example.com/sample

go 1.21

require golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e
go.sum
golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e h1:gsTQYXdTw2Gq7RBsWvlQ91b+aEQ6bXFUngBGuR8sPpI=
golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
main.go
package main

import (
	"fmt"
	"golang.org/x/crypto/bcrypt"
)

func main() {
	err := bcrypt.InvalidHashPrefixError('#')
	fmt.Println(err.Error())

	cmpErr := bcrypt.CompareHashAndPassword([]byte("#2a$10$abcdefghijklmnopqrstuuABCDEFGHIJKLMNOPQRSTUVWXYZ01234"), []byte("password"))
	if prefixErr, ok := cmpErr.(bcrypt.InvalidHashPrefixError); ok {
		fmt.Printf("prefix=%c msg=%s\n", byte(prefixErr), prefixErr.Error())
	}
}
spec.json
{
  "schemaVersion": 1,
  "goal": "verify golang.org/x/crypto/bcrypt.InvalidHashPrefixError in pkg:golang/golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e",
  "kind": "HOW",
  "packages": [
    "pkg:golang/golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e"
  ],
  "symbols": [
    "golang.org/x/crypto/bcrypt.InvalidHashPrefixError"
  ]
}
test/contract.go
package main

import (
	"errors"
	"os"

	"golang.org/x/crypto/bcrypt"
)

func main() {
	directErr := bcrypt.InvalidHashPrefixError('#')
	expectedMsg := "crypto/bcrypt: bcrypt hashes must start with '$', but hashedSecret started with '#'"
	if directErr.Error() != expectedMsg {
		os.Exit(1)
	}

	var asErr error = directErr
	if byte(directErr) != '#' || asErr.Error() != expectedMsg {
		os.Exit(1)
	}

	cmpErr := bcrypt.CompareHashAndPassword([]byte("#2a$10$abcdefghijklmnopqrstuuABCDEFGHIJKLMNOPQRSTUVWXYZ01234"), []byte("password"))
	if cmpErr == nil {
		os.Exit(1)
	}

	var target bcrypt.InvalidHashPrefixError
	if !errors.As(cmpErr, &target) {
		os.Exit(1)
	}
	if target != bcrypt.InvalidHashPrefixError('#') {
		os.Exit(1)
	}
	if target.Error() != expectedMsg {
		os.Exit(1)
	}

	costErr, err := bcrypt.Cost([]byte("!2a$10$abcdefghijklmnopqrstuuABCDEFGHIJKLMNOPQRSTUVWXYZ01234"))
	if costErr != 0 || err != bcrypt.InvalidHashPrefixError('!') {
		os.Exit(1)
	}
}

Origin Seeder

anonymous