1. class
  2. Neos
  3. \
  4. Flow
  5. \
  6. Security
  7. \
  8. Cryptography
  9. \
  10. Pbkdf2HashingStrategy

Pbkdf2HashingStrategy

class Pbkdf2HashingStrategy implements PasswordHashingStrategyInterface (View source)

A PBKDF2 based password hashing strategy

Properties

protected int $dynamicSaltLength

Length of the dynamic random salt to generate in bytes
protected int $iterationCount

Hash iteration count, high counts (>10.000) make brute-force attacks unfeasible
protected int $derivedKeyLength

Derived key length
protected string $algorithm

Hash algorithm to use, see hash_algos()

Methods

__construct(int $dynamicSaltLength, int $iterationCount, int $derivedKeyLength, string $algorithm)

Construct a PBKDF2 hashing strategy with the given parameters

string
hashPassword(string $password, string $staticSalt = null)

Hash a password for storage using PBKDF2 and the configured parameters.

bool
validatePassword(string $password, string $hashedPasswordAndSalt, string $staticSalt = null)

Validate a password against a derived key (hashed password) and salt using PBKDF2.

Details

at line 55
__construct(int $dynamicSaltLength, int $iterationCount, int $derivedKeyLength, string $algorithm)

Construct a PBKDF2 hashing strategy with the given parameters

Parameters

int $dynamicSaltLength

Length of the dynamic random salt to generate in bytes
int $iterationCount

Hash iteration count, high counts (>10.000) make brute-force attacks unfeasible
int $derivedKeyLength

Derived key length
string $algorithm

Hash algorithm to use, see hash_algos()

at line 71
string hashPassword(string $password, string $staticSalt = null)

Hash a password for storage using PBKDF2 and the configured parameters.

Will use a combination of a random dynamic salt and the given static salt.

Parameters

string $password

Cleartext password that will be hashed
string $staticSalt

Optional static salt that will not be stored in the hashed password

Return Value

string

The hashed password with dynamic salt (if used)

at line 88
bool validatePassword(string $password, string $hashedPasswordAndSalt, string $staticSalt = null)

Validate a password against a derived key (hashed password) and salt using PBKDF2.

Iteration count and algorithm have to match the parameters when generating the derived key.

Parameters

string $password
string $hashedPasswordAndSalt

Hashed password with dynamic salt (if used)
string $staticSalt

Optional static salt that will not be stored in the hashed password

Return Value

bool

true if the given cleartext password matched the hashed password

Exceptions

InvalidArgumentException