[libeufin] branch master updated: salt password hashes

[gnunet]

This is an automated email from the git hooks/post-receive script.

dold pushed a commit to branch master
in repository libeufin.

The following commit(s) were added to refs/heads/master by this push:
     new ed74169  salt password hashes
ed74169 is described below

commit ed7416917e4094eb66d3829acf7fe8a9878d9c54
Author: Florian Dold <florian@dold.me>
AuthorDate: Sat Aug 7 22:55:34 2021 +0200

    salt password hashes
---
 util/src/main/kotlin/CryptoUtil.kt | 39 ++++++++++++++++++++++++--------------
 1 file changed, 25 insertions(+), 14 deletions(-)

diff --git a/util/src/main/kotlin/CryptoUtil.kt 
b/util/src/main/kotlin/CryptoUtil.kt
index c946e7a..b92b626 100644
--- a/util/src/main/kotlin/CryptoUtil.kt
+++ b/util/src/main/kotlin/CryptoUtil.kt
@@ -21,8 +21,6 @@ package tech.libeufin.util
 
 import net.taler.wallet.crypto.Base32Crockford
 import org.bouncycastle.jce.provider.BouncyCastleProvider
-import org.slf4j.Logger
-import org.slf4j.LoggerFactory
 import java.io.ByteArrayOutputStream
 import java.math.BigInteger
 import java.security.*
@@ -131,7 +129,7 @@ object CryptoUtil {
     fun getEbicsPublicKeyHash(publicKey: RSAPublicKey): ByteArray {
         val keyBytes = ByteArrayOutputStream()
         
keyBytes.writeBytes(publicKey.publicExponent.toUnsignedHexString().lowercase().trimStart('0').toByteArray())
-        keyBytes.write(' '.toInt())
+        keyBytes.write(' '.code)
         
keyBytes.writeBytes(publicKey.modulus.toUnsignedHexString().lowercase().trimStart('0').toByteArray())
         println("buffer before hashing: 
'${keyBytes.toString(Charsets.UTF_8)}'")
         val digest = MessageDigest.getInstance("SHA-256")
@@ -235,7 +233,7 @@ object CryptoUtil {
         val digest = MessageDigest.getInstance("SHA-256")
         for (b in orderData) {
             when (b) {
-                '\r'.toByte(), '\n'.toByte(), (26).toByte() -> Unit
+                '\r'.code.toByte(), '\n'.code.toByte(), (26).toByte() -> Unit
                 else -> digest.update(b)
             }
         }
@@ -303,21 +301,34 @@ object CryptoUtil {
     }
 
     fun hashpw(pw: String): String {
-        val pwh = bytesToBase64(CryptoUtil.hashStringSHA256(pw))
-        return "sha256\$$pwh"
+        val saltBytes = ByteArray(8)
+        SecureRandom().nextBytes(saltBytes)
+        val salt = bytesToBase64(saltBytes)
+        val pwh = bytesToBase64(CryptoUtil.hashStringSHA256("$salt|$pw"))
+        return "sha256-salted\$$salt\$$pwh"
     }
 
     fun checkpw(pw: String, storedPwHash: String): Boolean {
-        val idx = storedPwHash.indexOf("\$")
-        if (idx <= 0) {
+        val components = storedPwHash.split('$')
+        if (components.size < 2) {
             throw Exception("bad password hash")
         }
-        val algo = storedPwHash.substring(0, idx)
-        if (algo != "sha256") {
-            throw Exception("unsupported hash algo")
+        val algo = components[0]
+        // Support legacy unsalted passwords
+        if (algo == "sha256") {
+            val hash = components[1]
+            val pwh = bytesToBase64(CryptoUtil.hashStringSHA256(pw))
+            return pwh == hash
         }
-        val rest = storedPwHash.substring(idx + 1)
-        val pwh = bytesToBase64(CryptoUtil.hashStringSHA256(pw))
-        return pwh == rest
+        if (algo == "sha256-salted") {
+            if (components.size != 3) {
+                throw Exception("bad password hash")
+            }
+            val salt = components[1]
+            val hash = components[2]
+            val pwh = bytesToBase64(CryptoUtil.hashStringSHA256("$salt|$pw"))
+            return pwh == hash
+        }
+        throw Exception("unsupported hash algo: '$algo'")
     }
 }

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.