class.ilBasePasswordEncoder.php

Go to the documentation of this file.

<?php declare(strict_types=1);
/* Copyright (c) 1998-2014 ILIAS open source, Extended GPL, see docs/LICENSE */

abstract class ilBasePasswordEncoder implements ilPasswordEncoder
{
    const MAX_PASSWORD_LENGTH = 4096;

    protected function comparePasswords(string $knownString, string $userString) : bool
    {
        $knownString .= chr(0);
        $userString .= chr(0);

        $known_string_length = strlen($knownString);
        $user_string_length = strlen($userString);

        $result = $known_string_length - $user_string_length;

        for ($i = 0; $i < $user_string_length; $i++) {
            $result |= (ord($knownString[$i % $known_string_length]) ^ ord($userString[$i]));
        }

        // They are only identical strings if $result is exactly 0...
        return 0 === $result;
    }

    protected function isPasswordTooLong(string $password) : bool
    {
        return strlen($password) > self::MAX_PASSWORD_LENGTH;
    }

    public function isSupportedByRuntime() : bool
    {
        return true;
    }

    public function requiresSalt() : bool
    {
        return false;
    }

    public function requiresReencoding(string $encoded) : bool
    {
        return false;
    }
}