server/src/util/password.h

#pragma once

#include <stdbool.h>
#include <stddef.h>
typedef enum cryptalgo_t {
    PASSWORD_PLAINTEXT,
    PASSWORD_BCRYPT
} cryptalgo_t;
#define PASSWORD_DEFAULT PASSWORD_BCRYPT
#define PASSWORD_MAXSIZE 32

extern int bcrypt_workfactor;

#define VERIFY_OK 0
#define VERIFY_FAIL 1
#define VERIFY_UNKNOWN 2
int password_verify(const char *hash, const char *passwd);
const char * password_hash(const char *passwd, cryptalgo_t algo);
bool password_is_implemented(cryptalgo_t algo);
void password_generate(char *password, size_t length);
add a new password module start adding password hashing logic (WIP) does not yet pass all tests 2016-01-12 23:52:30 +01:00			`#pragma once`

continue fixing compilation (gcc/clang) 2017-01-10 18:05:48 +01:00			`#include <stdbool.h>`
write a warning in the template about password replacement. for new factions, put the generated password into the template. normalize and secure password generation. 2019-01-12 21:26:48 +01:00			`#include <stddef.h>`
fix bcrypt library, add to password.c (works on mac) 2018-09-26 17:09:29 +02:00			`typedef enum cryptalgo_t {`
			`PASSWORD_PLAINTEXT,`
			`PASSWORD_BCRYPT`
			`} cryptalgo_t;`
work factor 12 is incredibly slow, don't use it in tests. 2018-09-26 20:08:38 +02:00			`#define PASSWORD_DEFAULT PASSWORD_BCRYPT`
Bug 2527: PASSWORD command handling of bad passwords. 2018-12-03 19:19:06 +01:00			`#define PASSWORD_MAXSIZE 32`
as long as we use no encryption, all tests pass. 2016-01-13 16:16:02 +01:00
More WIN32 adaptations, configurable work factor. 2018-09-26 19:05:49 +02:00			`extern int bcrypt_workfactor;`

Be very strict about C standards. Compile with -std=c89 in gcc. remove all // comments (they are nice, but unnecessary). variables only declared at start of block. various pedantery. backwards compatible va_copy for pre-C99 gcc. 2017-02-18 21:15:14 +01:00			`#define VERIFY_OK 0`
			`#define VERIFY_FAIL 1`
			`#define VERIFY_UNKNOWN 2`
implement MD5 crypted passwords as default 2016-01-14 15:49:09 +01:00			`int password_verify(const char hash, const char passwd);`
rename password functions to match PHP. 2018-09-26 21:06:56 +02:00			`const char * password_hash(const char *passwd, cryptalgo_t algo);`
fix bcrypt library, add to password.c (works on mac) 2018-09-26 17:09:29 +02:00			`bool password_is_implemented(cryptalgo_t algo);`
write a warning in the template about password replacement. for new factions, put the generated password into the template. normalize and secure password generation. 2019-01-12 21:26:48 +01:00			`void password_generate(char *password, size_t length);`