3 * Implements the Pbkdf2Password class for the MediaWiki software.
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License as published by
7 * the Free Software Foundation; either version 2 of the License, or
8 * (at your option) any later version.
10 * This program is distributed in the hope that it will be useful,
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 * GNU General Public License for more details.
15 * You should have received a copy of the GNU General Public License along
16 * with this program; if not, write to the Free Software Foundation, Inc.,
17 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
18 * http://www.gnu.org/copyleft/gpl.html
24 * A PBKDF2-hashed password
26 * This is a computationally complex password hash for use in modern applications.
27 * The number of rounds can be configured by $wgPasswordConfig['pbkdf2']['cost'].
31 class Pbkdf2Password
extends ParameterizedPassword
{
32 protected function getDefaultParams() {
34 'algo' => $this->config
['algo'],
35 'rounds' => $this->config
['cost'],
36 'length' => $this->config
['length']
40 protected function getDelimiter() {
44 public function crypt( $password ) {
45 if ( count( $this->args
) == 0 ) {
46 $this->args
[] = base64_encode( random_bytes( 16 ) );
50 $this->params
['algo'],
52 base64_decode( $this->args
[0] ),
53 (int)$this->params
['rounds'],
54 (int)$this->params
['length'],
57 if ( !is_string( $hash ) ) {
58 throw new PasswordError( 'Error when hashing password.' );
61 $this->hash
= base64_encode( $hash );