summaryrefslogtreecommitdiff
path: root/inc/PassHash.class.php
Commit message (Collapse)AuthorAge
* added SHA512 hashing method FS#2663Andreas Gohr2013-01-26
|
* allow varying salt length in password hasherAndreas Gohr2013-01-26
|
* added mediawiki password method FS#2559Andreas Gohr2013-01-26
| | | | This should make migrating from MediaWiki a bit easier.
* make MD5 crypt without salts always use PHP implementationAndreas Gohr2012-07-01
| | | | | crypt seems to behave different on different systems when the salt is empty.
* code cleanupAndreas Gohr2012-06-23
|
* avoid integer overflow in PassHash::pmd5 methodAndreas Gohr2012-05-01
| | | | | | Input iteration counts are squared in the function and passing something above 30 is giving integer overflows on 32 bit systems (and causes insane iteration counts on 64bit systems).
* coding style updatesAndreas Gohr2012-03-16
|
* fixed error in bcrypt password methodAndreas Gohr2012-03-16
|
* Merge branch 'lmd5' into bcryptAndreas Gohr2011-11-27
|\ | | | | | | | | Conflicts: lib/plugins/config/settings/config.metadata.php
| * renamed passhash method smd6 to lsmd5Andreas Gohr2011-11-27
| |
| * MD5 password hash format of the LDAP RFC FS#2378Patrick Michel2011-11-27
| | | | | | | | | | | | | | This implements the salted MD5 password hash format of the LDAP RFC. The format is quite simple the password, followed by the 8 byte hash in base64 encoding, which results in 32 characters, prepended with the string "{smd5}".
* | Added bcrypt support for password hashesAndreas Gohr2011-10-14
|/ | | | This method require PHP 5.3+ it will fail otherwise!
* Fixed test and broken salt generation in PassHash classAndreas Gohr2011-10-14
| | | | | | | Turned out a test wasn't really testing what it should have been testing and thus did hide a bug. Still puzzles me why it still worked some times. This patch also sets the default iteration count for bmd5 and pmd5 to 8.
* fixed typo in PassHash classAndreas Gohr2011-05-01
| | | | The pure PHP implementation for smd5 failed.
* use a bigger range of characters for password saltsAndreas Gohr2011-01-23
|
* django pass hashes have no leading $Andreas Gohr2011-01-23
|
* refactored passowrd hashing functions to a classAndreas Gohr2011-01-22
this splits the long auth_cryptPassword() function into many member functions of a new class PassHash which should make it more maintainable and reusable for other projects. This also adds two new methods djangomd5 and djangosha1 as used by the popular python framework Django. Maybe the auth_cryptPassword() and auth_verifyPassword() functions should be deprecated in favor of using the class directly?