...

cqlsh> GENERATE HASHED PASSWORD;

 password   |             salted_hash
------------+-------------------------
 Lr5l:73&oM |      where will be hash

(1 rows) 

We will not include the last two commands into the initial implementation.

The advantage of this approach:

...

There is working validation as well as generation via implemented. The code contains both hash_password tool shown. However, we expect that to be rewritten so respective CQL statements will be changed as discussed above.modifications as well as the changes for CQL statements (CREATE / ALTER role ... WITH GENERATED PASSWORD)

Compatibility, Deprecation, and Migration Plan

...