PBKDF2 SHA-512 Ruby script for creating Mac OS >= 10.7 password parameters that Puppet can manage

pbkdf2.rb

#!/usr/bin/env ruby

require 'openssl'

puts "enter the password that you would like to hash:\n"
password   = gets
password   = password.chomp

salt       = OpenSSL::Random.random_bytes(32)
iterations = 40_000
digest     = OpenSSL::Digest::SHA512.new
hash       = OpenSSL::PKCS5.pbkdf2_hmac(password, salt, iterations, 128, digest)

puts "\nhere's the PBKDF2 SHA-512 details for the supplied password:\n\n"
puts "password   => '#{hash.unpack('H*').first}',"
puts "salt       => '#{salt.unpack('H*').first}',"
puts "iterations => #{iterations}"