CWP\Core\PasswordEncryptor\PBKDF2

Complexity

Total Complexity

4

Size/Duplication

Total Lines	36
Duplicated Lines	0 %

Importance

Changes	2
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	encrypt()	0	3	1
A	__construct()	0	6	2
A	getIterations()	0	3	1

<?php declare(strict_types=1);

namespace CWP\Core\PasswordEncryptor;

use Exception;
use SilverStripe\Security\PasswordEncryptor_PHPHash;

/**
 * Provides Password-Based Key Derivation Function hashing for passwords, using the provided algorithm (default
 * is SHA512), which is NZISM compliant under version 3.2 section 17.2.
 */
class PBKDF2 extends PasswordEncryptor_PHPHash
{
    /**
     * The number of internal iterations for hash_pbkdf2() to perform for the derivation. Please note that if you
     * change this from the default value you will break existing hashes stored in the database, so these would
     * need to be regenerated.
     *
     * @var int
     */
    protected $iterations = 30000;

    /**
     * @param string $algorithm
     * @param int|null $iterations
     * @throws Exception If the provided algorithm is not available in the current environment
     */
    public function __construct(string $algorithm, int $iterations = null)
    {
        parent::__construct($algorithm);

        if ($iterations !== null) {
            $this->iterations = $iterations;
        }
    }

    /**
     * @return int
     */
    public function getIterations(): int
    {
        return $this->iterations;
    }

    public function encrypt($password, $salt = null, $member = null)
    {
        return hash_pbkdf2($this->getAlgorithm(), (string) $password, (string) $salt, $this->getIterations());
    }
}