Skip to content
GitLab
Select Git revision
Find file BlameHistoryPermalink
class_passwordMethodSsha.inc 2.85 KiB
1 
<?php
2 
/*
3 
  This code is part of FusionDirectory (http://www.fusiondirectory.org/)
4
5 
  Copyright (C) 2003-2010  Cajus Pollmeier
6 
  Copyright (C) 2011-2019  FusionDirectory
7
8 
  This program is free software; you can redistribute it and/or modify
9 
  it under the terms of the GNU General Public License as published by
10 
  the Free Software Foundation; either version 2 of the License, or
11 
  (at your option) any later version.
12
13 
  This program is distributed in the hope that it will be useful,
14 
  but WITHOUT ANY WARRANTY; without even the implied warranty of
15 
  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16 
  GNU General Public License for more details.
17
18 
  You should have received a copy of the GNU General Public License
19 
  along with this program; if not, write to the Free Software
20 
  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA.
21 
*/
22
23 
/*!
24 
 * \file class_passwordMethodSsha.inc
25 
 * Source code for class passwordMethodSsha
26 
 */
27
28 
/*!
29 
 * \brief This class contains all the functions for ssha password method
30 
 * \see passwordMethod
31 
 */
32 
class passwordMethodSsha extends passwordMethod
33 
{
34 
  /*!
35 
   * \brief passwordMethodSsha Constructor
36 
   */
37 
  function __construct ()
38 
  {
39 
  }
40
41 
  /*!
42 
   * \brief Is available
43 
   *
44 
   * \return TRUE if is avaibable, otherwise return false
45 
   */
46 
  public function is_available (): bool
47 
  {
48 
    return (function_exists('sha1') || function_exists('mhash'));
49 
  }
50
51 
  /*!
52 
   * \brief Generate template hash
53 
   *
54 
   * \param string $pwd Password
55 
   * \param bool $locked Should the password be locked
56 
   *
57 
   * \return string the password hash
58 
   */
59 
  public function generate_hash (string $pwd, bool $locked = FALSE): string
60 
  {
61 
    if (function_exists('sha1')) {
62 
      $salt = substr(pack('h*', md5(random_int(0, PHP_INT_MAX))), 0, 8);
63 
      $salt = substr(pack('H*', sha1($salt.$pwd)), 0, 4);
64 
      $pwd  = '{SSHA}'.($locked ? '!' : '').base64_encode(pack('H*', sha1($pwd.$salt)).$salt);
65 
    } elseif (function_exists('mhash')) {
66 
      $salt = mhash_keygen_s2k(MHASH_SHA1, $pwd, substr(pack('h*', md5(random_int(0, PHP_INT_MAX))), 0, 8), 4);
67 
      $pwd  = '{SSHA}'.($locked ? '!' : '').base64_encode(mhash(MHASH_SHA1, $pwd.$salt).$salt);
68 
    } else {
69 
      throw new FusionDirectoryException(msgPool::missingext('mhash'));
70 
    }
7172737475767778798081828384858687888990919293949596979899
return $pwd; } function checkPassword ($pwd, $hash): bool { $hash = base64_decode(substr($hash, 6)); $salt = substr($hash, 20); $hash = substr($hash, 0, 20); if (function_exists('sha1')) { $nhash = pack('H*', sha1($pwd . $salt)); } elseif (function_exists('mhash')) { $nhash = mhash(MHASH_SHA1, $pwd.$salt); } else { $error = new FusionDirectoryError(msgPool::missingext('mhash')); $error->display(); return FALSE; } return ($nhash == $hash); } /*! * \brief Get the hash name */ static function get_hash_name () { return 'ssha'; } }