mirror of
https://we.phorge.it/source/phorge.git
synced 2025-02-16 08:48:38 +01:00
4af2e3c4e2
Summary: Does this seem reasonable? It's a bit more compact than digest() (6 bits / byte instead of 4 bits / byte) and 72 bits of entropy @ 12 bytes instead of 128 bits of entropy @ 32 bytes. I feel like it's important to preserve the printability, though, and this seemed like a fairly good balance of concerns. Test Plan: unit tests Reviewers: vrana Reviewed By: vrana CC: aran, yemao932 Differential Revision: https://secure.phabricator.com/D4253
57 lines
1.5 KiB
PHP
57 lines
1.5 KiB
PHP
<?php
|
|
|
|
final class PhabricatorHash {
|
|
|
|
|
|
/**
|
|
* Digest a string for general use, including use which relates to security.
|
|
*
|
|
* @param string Input string.
|
|
* @return string 32-byte hexidecimal SHA1+HMAC hash.
|
|
*/
|
|
public static function digest($string) {
|
|
$key = PhabricatorEnv::getEnvConfig('security.hmac-key');
|
|
if (!$key) {
|
|
throw new Exception(
|
|
"Set a 'security.hmac-key' in your Phabricator configuration!");
|
|
}
|
|
|
|
return hash_hmac('sha1', $string, $key);
|
|
}
|
|
|
|
|
|
/**
|
|
* Digest a string for use in, e.g., a MySQL index. This produces a short
|
|
* (12-byte), case-sensitive alphanumeric string with 72 bits of entropy,
|
|
* which is generally safe in most contexts (notably, URLs).
|
|
*
|
|
* This method emphasizes compactness, and should not be used for security
|
|
* related hashing (for general purpose hashing, see @{method:digest}).
|
|
*
|
|
* @param string Input string.
|
|
* @return string 12-byte, case-sensitive alphanumeric hash of the string
|
|
* which
|
|
*/
|
|
public static function digestForIndex($string) {
|
|
$hash = sha1($string, $raw_output = true);
|
|
|
|
static $map;
|
|
if ($map === null) {
|
|
$map = "0123456789".
|
|
"abcdefghij".
|
|
"klmnopqrst".
|
|
"uvwxyzABCD".
|
|
"EFGHIJKLMN".
|
|
"OPQRSTUVWX".
|
|
"YZ._";
|
|
}
|
|
|
|
$result = '';
|
|
for ($ii = 0; $ii < 12; $ii++) {
|
|
$result .= $map[(ord($hash[$ii]) & 0x3F)];
|
|
}
|
|
|
|
return $result;
|
|
}
|
|
|
|
}
|