Pbkdf2PasswordUsingOpenSSL.php

Go to the documentation of this file.

<?php
declare( strict_types = 1 );
 
namespace MediaWiki\Password;
 
class Pbkdf2PasswordUsingOpenSSL extends AbstractPbkdf2Password {
    private static $digestAlgos;
 
    private const DIGEST_ALGOS = [
        'sha256' => 'sha256',
        'sha512' => 'sha512',
    ];
 
    protected function getDigestAlgo( string $algo ): ?string {
        if ( !isset( self::$digestAlgos ) ) {
            self::$digestAlgos = array_intersect( self::DIGEST_ALGOS, openssl_get_md_methods() );
        }
        return self::$digestAlgos[$algo] ?? null;
    }
 
    protected function pbkdf2(
        string $digestAlgo,
        string $password,
        string $salt,
        int $rounds,
        int $length
    ): string {
        // Clear error string
        while ( openssl_error_string() !== false );
        $hash = openssl_pbkdf2( $password, $salt, $length, $rounds, $digestAlgo );
        if ( !is_string( $hash ) ) {
            throw new PasswordError( 'Error when hashing password: ' . openssl_error_string() );
        }
        return $hash;
    }
}
 
class_alias( Pbkdf2PasswordUsingOpenSSL::class, 'Pbkdf2PasswordUsingOpenSSL' );