I think this must be a stupid question, but why do the results of urlsafe_b64encode() always end with a ‘=’ for me? ‘=’ isn’t url safe?
from random import getrandbits from base64 import urlsafe_b64encode from hashlib import sha256 from time import sleep def genKey(): keyLenBits = 64 a = str(getrandbits(keyLenBits)) b = urlsafe_b64encode(sha256(a).digest()) print b while 1: genKey() sleep(1)
output :
DxFOVxWvvzGdOSh2ARkK-2XPXNavnpiCkD6RuKLffvA= xvA99ZLBrLvtf9-k0-YUFcLsiKl8Q8KmkD7ahIqPZ5Y= jYbNK7j62KCBA5gnoiSpM2AGOPxmyQTIJIl_wWdOwoY= CPIKkXPfIX4bd8lQtUj1dYG3ZOBxmZTMkVpmR7Uvu4s= HlTs0tBW805gaxfMrq3OPOa6Crg7MsLSLnqe-eX0JEA= FKRu0ePZEppHsvACWYssL1b2uZhjy9UU5LI8sWIqHe8= aY_kVaT8kjB4RRfp3S6xG2vJaL0vAwQPifsBcN1LYvo= 6Us3XsewqnEcovMb5EEPtf4Fp4ucWfjPVso-UkRuaRc= _vAI943yOWs3t2F6suUGy47LJjQsgi_XLiMKhYZnm9M= CcUSXVqPNT_eb8VXasFXhvNosPOWQQWjGlipQp_68aY=
Base64 uses ‘=’ for padding. Your string bit length isn’t divisible by 24, so it’s padded with ‘=’. By the way, ‘=’ should be URL safe as it’s often used for parameters in URLs.
See this discussion, too.