Exemple #1
0
        public override string Crypt(byte[] key, string salt)
        {
            CheckKey(key);
            Helper.CheckNull("salt", salt);

            Match saltMatch = _regex.Match(salt);

            if (!saltMatch.Success)
            {
                throw new ArgumentException("Invalid salt.", "salt");
            }

            int rounds = int.Parse(saltMatch.Groups[1].Value);

            if (rounds < 4 || rounds > 31)
            {
                throw new ArgumentException("Invalid number of rounds.", "salt");
            }
            byte[] saltBytes = UnixBase64.Decode(saltMatch.Groups[2].Value, 128);

            bool resized = key.Length < MaxKeyLength;

            if (resized)
            {
                Array.Resize(ref key, key.Length + 1);
            }             // The ending null terminator is vital for compatibility

            byte[] crypt = BlowfishCipher.BCrypt(key, saltBytes, rounds);

            string result = string.Format("$2a${0}${1}{2}", rounds.ToString("00"),
                                          new string(UnixBase64.Encode(saltBytes)),
                                          new string(UnixBase64.Encode(crypt)));

            Array.Clear(crypt, 0, crypt.Length);
            Array.Clear(saltBytes, 0, saltBytes.Length);

            if (resized)
            {
                Array.Clear(key, 0, key.Length);
            }             // This is new since we resized it.
            return(result);
        }
Exemple #2
0
 public override string GenerateSalt(int rounds)
 {
     Helper.CheckRange("rounds", rounds, 4, 31);
     return(string.Format("$2a${0}${1}", rounds.ToString("00"),
                          new string(UnixBase64.Encode(GenerateSaltBytes(16)))));
 }