60 lines
2.7 KiB
C#
60 lines
2.7 KiB
C#
/*************************************************************************
|
|
* ModernUO *
|
|
* Copyright 2019-2025 - ModernUO Development Team *
|
|
* Email: hi@modernuo.com *
|
|
* File: PBKDF2PasswordProtection.cs *
|
|
* *
|
|
* This program is free software: you can redistribute it and/or modify *
|
|
* it under the terms of the GNU General Public License as published by *
|
|
* the Free Software Foundation, either version 3 of the License, or *
|
|
* (at your option) any later version. *
|
|
* *
|
|
* You should have received a copy of the GNU General Public License *
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>. *
|
|
*************************************************************************/
|
|
|
|
using System;
|
|
using System.Buffers.Binary;
|
|
using System.Security.Cryptography;
|
|
using Server.Text;
|
|
|
|
namespace Server.Accounting.Security;
|
|
|
|
public class PBKDF2PasswordProtection : IPasswordProtection
|
|
{
|
|
private const ushort m_MinIterations = 1024;
|
|
private const ushort m_MaxIterations = 1536;
|
|
private const int m_SaltSize = 8;
|
|
private const int m_HashSize = 32;
|
|
private const int m_OutputSize = 2 + m_SaltSize + m_HashSize;
|
|
public static readonly IPasswordProtection Instance = new PBKDF2PasswordProtection();
|
|
|
|
public string EncryptPassword(string plainPassword)
|
|
{
|
|
Span<byte> output = stackalloc byte[m_OutputSize];
|
|
var iterations = Utility.RandomMinMax(m_MinIterations, m_MaxIterations);
|
|
BinaryPrimitives.WriteUInt16LittleEndian(output[..2], (ushort)iterations);
|
|
|
|
var salt = output.Slice(2, m_SaltSize);
|
|
RandomNumberGenerator.Fill(salt);
|
|
|
|
var hash = output.Slice(2 + m_SaltSize, m_HashSize);
|
|
Rfc2898DeriveBytes.Pbkdf2(plainPassword, salt, hash, iterations, HashAlgorithmName.SHA256);
|
|
|
|
return output.ToHexString();
|
|
}
|
|
|
|
public bool ValidatePassword(string encryptedPassword, string plainPassword)
|
|
{
|
|
Span<byte> encryptedBytes = stackalloc byte[m_OutputSize];
|
|
encryptedPassword.GetBytes(encryptedBytes);
|
|
|
|
var iterations = BinaryPrimitives.ReadUInt16LittleEndian(encryptedBytes[..2]);
|
|
var salt = encryptedBytes.Slice(2, m_SaltSize);
|
|
|
|
Span<byte> hash = stackalloc byte[m_HashSize];
|
|
Rfc2898DeriveBytes.Pbkdf2(plainPassword, salt, hash, iterations, HashAlgorithmName.SHA256);
|
|
|
|
return hash.SequenceEqual(encryptedBytes[(m_SaltSize + 2)..]);
|
|
}
|
|
}
|