database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-07-30 11:03:19 +03:00
Code Activity

Add modern SHA-2 based password hashes to pgcrypto.

Browse Source 
This adapts the publicly available reference implementation on
https://www.akkadia.org/drepper/SHA-crypt.txt and adds the new hash
algorithms sha256crypt and sha512crypt to crypt() and gen_salt()
respectively.

Author: Bernd Helmle <mailings@oopsware.de>
Reviewed-by: Japin Li <japinli@hotmail.com>
Discussion: https://postgr.es/m/c763235a2757e2f5f9e3e27268b9028349cef659.camel@oopsware.de
This commit is contained in:
Álvaro Herrera
2025-04-05 19:16:58 +02:00
parent e33f2335a9
commit 749a9e20c9
9 changed files with 1114 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
contrib/pgcrypto/px-crypt.c
View File

@ -67,6 +67,16 @@ run_crypt_bf(const char *psw, const char *salt,
return res;
}
static char *
run_crypt_sha(const char *psw, const char *salt,
char *buf, unsigned len)
{
char *res;
res = px_crypt_shacrypt(psw, salt, buf, len);
return res;
}
struct px_crypt_algo
{
char *id;
@ -81,6 +91,8 @@ static const struct px_crypt_algo
{"$2x$", 4, run_crypt_bf},
{"$2$", 3, NULL}, /* N/A */
{"$1$", 3, run_crypt_md5},
{"$5$", 3, run_crypt_sha},
{"$6$", 3, run_crypt_sha},
{"_", 1, run_crypt_des},
{"", 0, run_crypt_des},
{NULL, 0, NULL}
@ -127,6 +139,16 @@ static struct generator gen_list[] = {
{"md5", _crypt_gensalt_md5_rn, 6, 0, 0, 0},
{"xdes", _crypt_gensalt_extended_rn, 3, PX_XDES_ROUNDS, 1, 0xFFFFFF},
{"bf", _crypt_gensalt_blowfish_rn, 16, PX_BF_ROUNDS, 4, 31},
{
"sha256crypt", _crypt_gensalt_sha256_rn,
PX_SHACRYPT_SALT_MAX_LEN, PX_SHACRYPT_ROUNDS_DEFAULT,
PX_SHACRYPT_ROUNDS_MIN, PX_SHACRYPT_ROUNDS_MAX
},
{
"sha512crypt", _crypt_gensalt_sha512_rn,
PX_SHACRYPT_SALT_MAX_LEN, PX_SHACRYPT_ROUNDS_DEFAULT,
PX_SHACRYPT_ROUNDS_MIN, PX_SHACRYPT_ROUNDS_MAX
},
{NULL, NULL, 0, 0, 0, 0}
};