Changeset 102375 in vbox for trunk/include/iprt/crypto

Timestamp:

Nov 29, 2023 10:58:18 AM (15 months ago)

Author:

vboxsync

Message:

IPRT/crypto: Implemented handing-in crypt password strings as the salt into RTCrShaCrypt256/512(). This approach is used by many *crypt implementations -- it allows feeding the user-provided password and the crypted password from "the password file" to the function. If it returns the same crypted password then the user-provided password must be the correct one.Extended testcases. bugref:10551

File:

• trunk/include/iprt/crypto/shacrypt.h (modified) (2 diffs)

trunk/include/iprt/crypto/shacrypt.h

@@ -77 +77 @@
  * @param   pszSalt             Salt to use.
  *                              Must be >= RT_SHACRYPT_MIN_SALT_LEN and <= RT_SHACRYPT_MAX_SALT_LEN.
- * @param   cRounds             Number of rounds to use.  @sa RT_SHACRYPT_DEFAULT_ROUNDS
+ *
+ *                              This parameter also accepts crypted password strings produced by RTCrShaCrypt256ToString().
+ *
+ *                              This approach is used by many *crypt implementations -- it allows feeding the user-provided
+ *                              password and the crypted password from "the password file" to the function. If it returns the
+ *                              same crypted password then the user-provided password must be the correct one.
+ * @param   cRounds             Number of rounds to use. @sa RT_SHACRYPT_DEFAULT_ROUNDS
  * @param   abHash              Where to return the hash on success.
  *
@@ -108 +114 @@
  * @param   pszSalt             Salt to use.
  *                              Must be >= RT_SHACRYPT_MIN_SALT_LEN and <= RT_SHACRYPT_MAX_SALT_LEN.
+ *
+ *                              This parameter also accepts crypted password strings produced by RTCrShaCrypt512ToString().
+ *
+ *                              This approach is used by many *crypt implementations -- it allows feeding the user-provided
+ *                              password and the crypted password from "the password file" to the function. If it returns the
+ *                              same crypted password then the user-provided password must be the correct one.
  * @param   cRounds             Number of rounds to use. @sa RT_SHACRYPT_DEFAULT_ROUNDS
  * @param   abHash              Where to return the hash on success.