class.ilBasePasswordEncoder.php

Go to the documentation of this file.

<?php

declare(strict_types=1);

abstract class ilBasePasswordEncoder implements ilPasswordEncoder
{
    private const MAX_PASSWORD_LENGTH = 4096;

    protected function comparePasswords(string $knownString, string $userString): bool
    {
        $knownString .= chr(0);
        $userString .= chr(0);

        $known_string_length = strlen($knownString);
        $user_string_length = strlen($userString);

        $result = $known_string_length - $user_string_length;

        for ($i = 0; $i < $user_string_length; ++$i) {
            $result |= (ord($knownString[$i % $known_string_length]) ^ ord($userString[$i]));
        }

        return 0 === $result;
    }

    protected function isPasswordTooLong(string $password): bool
    {
        return strlen($password) > self::MAX_PASSWORD_LENGTH;
    }

    public function isSupportedByRuntime(): bool
    {
        return true;
    }

    public function requiresSalt(): bool
    {
        return false;
    }

    public function requiresReencoding(string $encoded): bool
    {
        return false;
    }
}