Check if a plaintext password matches a hash This function is blocking and computationally expensive but requires no additonal flags. Using the async variant is highly recommended.