encryption

You are currently browsing articles tagged encryption.

{SSHA} Salted SHA1 with PHP

August 2, 2009 in encryption, OOP, PHP | No comments

I was in need of a PHP class to encrypt hash and verify passwords using salted sha1 hashes. Here it is, quick but not too dirty:

?
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
<?php
 
class SSHA
{
 
  public static function newSalt()
  {
    return chr(rand(0,255)).chr(rand(0,255)).chr(rand(0,255)).chr(rand(0,255)).chr(rand(0,255)).chr(rand(0,255)).chr(rand(0,255)).chr(rand(0,255));
  }
 
  public static function hash($pass,$salt)
  {
    return '{SSHA}'.base64_encode(sha1($pass.$salt,true).$salt);
  }
 
  public static function getSalt($hash)
  {
    return substr(base64_decode(substr($hash,6)),20);
  }
 
  public static function newHash($pass)
  {
    return self::hash($pass,self::newSalt());
  }
 
  public static function verifyPassword($pass,$hash)
  {
    return $hash == self::hash($pass,self::getSalt($hash));
  }
 
}