EncryptedPassword.php

Go to the documentation of this file.

<?php
class EncryptedPassword extends ParameterizedPassword {
    protected function getDelimiter() {
        return ':';
    }

    protected function getDefaultParams() {
        return array(
            'cipher' => $this->config['cipher'],
            'secret' => count( $this->config['secrets'] ) - 1
        );
    }

    public function crypt( $password ) {
        $secret = $this->config['secrets'][$this->params['secret']];

        if ( $this->hash ) {
            $underlyingPassword = $this->factory->newFromCiphertext( openssl_decrypt(
                    base64_decode( $this->hash ), $this->params['cipher'],
                    $secret, 0, base64_decode( $this->args[0] )
                ) );
        } else {
            $underlyingPassword = $this->factory->newFromType( $this->config['underlying'], $this->config );
        }

        $underlyingPassword->crypt( $password );
        $iv = MWCryptRand::generate( openssl_cipher_iv_length( $this->params['cipher'] ), true );

        $this->hash = openssl_encrypt(
            $underlyingPassword->toString(), $this->params['cipher'], $secret, 0, $iv );
        $this->args = array( base64_encode( $iv ) );
    }

    public function update() {
        if ( count( $this->args ) != 2 || $this->params == $this->getDefaultParams() ) {
            // Hash does not need updating
            return false;
        }

        // Decrypt the underlying hash
        $underlyingHash = openssl_decrypt(
            base64_decode( $this->args[1] ),
            $this->params['cipher'],
            $this->config['secrets'][$this->params['secret']],
            0,
            base64_decode( $this->args[0] )
        );

        // Reset the params
        $this->params = $this->getDefaultParams();

        // Check the key size with the new params
        $iv = MWCryptRand::generate( openssl_cipher_iv_length( $this->params['cipher'] ), true );
        $this->hash = base64_encode( openssl_encrypt(
                $underlyingHash,
                $this->params['cipher'],
                $this->config['secrets'][$this->params['secret']],
                0,
                $iv
            ) );
        $this->args = array( base64_encode( $iv ) );

        return true;
    }
}