PasswordPbkdf2: remove the 'use-hash-extension' option

[lhc/web/wiklou.git] / includes / password / Pbkdf2Password.php

diff --git a/includes/password/Pbkdf2Password.php b/includes/password/Pbkdf2Password.php
index 6ffada3..ce684de 100644 (file)
--- a/includes/password/Pbkdf2Password.php
+++ b/includes/password/Pbkdf2Password.php
@@ -43,48 +43,19 @@ class Pbkdf2Password extends ParameterizedPassword {
 
        public function crypt( $password ) {
                if ( count( $this->args ) == 0 ) {
-                       $this->args[] = base64_encode( MWCryptRand::generate( 16, true ) );
+                       $this->args[] = base64_encode( random_bytes( 16 ) );
                }
 
-               if ( function_exists( 'hash_pbkdf2' ) ) {
-                       $hash = hash_pbkdf2(
-                               $this->params['algo'],
-                               $password,
-                               base64_decode( $this->args[0] ),
-                               (int)$this->params['rounds'],
-                               (int)$this->params['length'],
-                               true
-                       );
-                       if ( !is_string( $hash ) ) {
-                               throw new PasswordError( 'Error when hashing password.' );
-                       }
-               } else {
-                       $hashLenHash = hash( $this->params['algo'], '', true );
-                       if ( !is_string( $hashLenHash ) ) {
-                               throw new PasswordError( 'Error when hashing password.' );
-                       }
-                       $hashLen = strlen( $hashLenHash );
-                       $blockCount = ceil( $this->params['length'] / $hashLen );
-
-                       $hash = '';
-                       $salt = base64_decode( $this->args[0] );
-                       for ( $i = 1; $i <= $blockCount; ++$i ) {
-                               $roundTotal = $lastRound = hash_hmac(
-                                       $this->params['algo'],
-                                       $salt . pack( 'N', $i ),
-                                       $password,
-                                       true
-                               );
-
-                               for ( $j = 1; $j < $this->params['rounds']; ++$j ) {
-                                       $lastRound = hash_hmac( $this->params['algo'], $lastRound, $password, true );
-                                       $roundTotal ^= $lastRound;
-                               }
-
-                               $hash .= $roundTotal;
-                       }
-
-                       $hash = substr( $hash, 0, $this->params['length'] );
+               $hash = hash_pbkdf2(
+                       $this->params['algo'],
+                       $password,
+                       base64_decode( $this->args[0] ),
+                       (int)$this->params['rounds'],
+                       (int)$this->params['length'],
+                       true
+               );
+               if ( !is_string( $hash ) ) {
+                       throw new PasswordError( 'Error when hashing password.' );
                }
 
                $this->hash = base64_encode( $hash );