Skip to content

Latest commit

 

History

History
67 lines (45 loc) · 2.02 KB

README.md

File metadata and controls

67 lines (45 loc) · 2.02 KB
Raw

PostfixAdmin\PasswordHashing

Standalone PHP library for creating various password hashes

Note, this library is still quite new (2021/07/02). It's quite likely to have major refactoring / renaming as it's reviewed.

Supported Mechanisms (hash formats)

See:

pacrypt/src/Crypt.php

Line 12 in 46ddd21

public const SUPPORTED = [

Some mechanisms support either HEX (.HEX) encoded or BASE64 (.B64) encoded output.

Currently:

  • SHA1, SHA1.HEX, SHA1.B64
  • SSHA
  • SSHA512
  • BLF-CRYPT, BLF-CRYPT.B64
  • SHA512-CRYPT, SHA512-CRYPT.B64
  • ARGON2I, ARGON2I.B64
  • ARGON2ID, ARGON2ID.B64
  • SHA256, SHA256-CRYPT, SHA256-CRYPT.B64
  • SHA512, SHA512.B64
  • MD5-CRYPT, MD5
  • PLAIN-MD5
  • CRYPT ({CRYPT} prefix, defaults to use Blowfish)
  • SYSTEM (DES CRYPT, best avoid)
  • PLAIN, CLEAR, CLEARTEXT (useful for testing)
  • COURIER:MD5
  • COURIER:MD5RAW
  • COURIER:SSHA (same as SSHA)
  • COURIER:SHA256 (same as SHA256)

Example usage

The main functionality reflects legacy behaviour in PostfixAdmin with a 'pacrypt' function, which when given ...

  • one argument - clear text password - returns a hash.
  • two arguments - clear text password and stored hash - if the return value matches the stored hash, then the clear text password was a match for the hash we have.
$tool = new \PostfixAdmin\PasswordHashing\Crypt('ARGON2I');

// should output something to indicate what your system supports (may be dependent on PHP variant, PHP modules etc)

$hash = $tool->crypt('fishbeans');

echo "Hash is: $hash \n";

echo "Verify: " . json_encode($hash == $tool->crypt('fishbeans', $hash)) . "\n";
echo "Verify fails with: " . json_encode('cat' == $tool->crypt('fishbeans', $hash)) . "\n";

the above code will output something similar to:

Hash is: {ARGON2I}$argon2i$v=19$m=65536,t=4,p=1$d1JMUXVHSUtLTGhxYnowVQ$4raz6DDUbtRysi+1ZTdNL3L5j4tcSYnzWxyLVDtFjKc
Verify: true
Verify fails with: false

ChangeLog

2021/07/03 - Initial release / copying of code from https://github.com/postfixadmin/postfixadmin ...