hashpasswd 0.1.1

data/lib/hashpasswd.rb

@@ -0,0 +1,50 @@
+module Hashpasswd
+  VERSION = '0.1.0'
+  HASH_SECTIONS = 4
+  ITERATIONS_INDEX = 1
+  SALT_INDEX = 2
+  HASH_INDEX = 3
+
+  require 'securerandom'
+  require 'base64'
+
+  def self.version()
+    return VERSION
+  end
+
+  def self.createhash(password, options={})
+    @pbkdf2_iterations = options[:pbkdf2_iterations] || 2000
+    @salt_byte_size = options[:salt_byte_size] ||24
+    @hash_byte_size = options[:hash_byte_size]|| 24
+    @delimeter = options[:delimter] || ':'
+    @digest = options[:digest] || 'SHA1'
+
+    salt = SecureRandom.base64( @salt_byte_size )
+    pbkdf2 = OpenSSL::PKCS5::pbkdf2_hmac(
+      password,
+      salt,
+      @pbkdf2_iterations,
+      @hash_byte_size,
+      @digest
+    )
+    return [@digest, @pbkdf2_iterations, salt, Base64.encode64( pbkdf2 )].join( @delimeter )
+  end
+
+  def self.validatepasswd(password, hash, options={})
+    @delimeter = options[:delimter] || ':'
+
+    params = hash.split(@delimeter)
+    return false if params.length != HASH_SECTIONS
+
+    pbkdf2 = Base64.decode64( params[HASH_INDEX] )
+    testhash = OpenSSL::PKCS5::pbkdf2_hmac(
+      password,
+      params[SALT_INDEX],
+      params[ITERATIONS_INDEX].to_i,
+      pbkdf2.length,
+      params[0] 
+    )
+
+    return pbkdf2 == testhash
+  end
+end

metadata

@@ -0,0 +1,47 @@
+--- !ruby/object:Gem::Specification
+name: hashpasswd
+version: !ruby/object:Gem::Version
+  version: 0.1.1
+  prerelease: 
+platform: ruby
+authors:
+- Ben Tuttle
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2013-07-23 00:00:00.000000000 Z
+dependencies: []
+description: Password hashing and validation using OpenSSL::PKCS5::pbkdf2_hmac for
+  the hash and SecureRandom.base64 for the salt. Digest defaults to SHA1, but can
+  be set to any digest (eg SHA256) supported by your systems OpenSSL lib.
+email: bentuttle.du@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/hashpasswd.rb
+homepage: http://rubygems.org/gems/hashpasswd
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 1.8.10
+signing_key: 
+specification_version: 3
+summary: Password hashing and validation
+test_files: []