1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
%% This Source Code Form is subject to the terms of the Mozilla Public
%% License, v. 2.0. If a copy of the MPL was not distributed with this
%% file, You can obtain one at https://mozilla.org/MPL/2.0/.
%%
%% Copyright (c) 2007-2020 VMware, Inc. or its affiliates. All rights reserved.
%%
-module(rabbit_password).
-include("rabbit.hrl").
-define(DEFAULT_HASHING_MODULE, rabbit_password_hashing_sha256).
%%
%% API
%%
-export([hash/1, hash/2, generate_salt/0, salted_hash/2, salted_hash/3,
hashing_mod/0, hashing_mod/1]).
hash(Cleartext) ->
hash(hashing_mod(), Cleartext).
hash(HashingMod, Cleartext) ->
SaltBin = generate_salt(),
Hash = salted_hash(HashingMod, SaltBin, Cleartext),
<<SaltBin/binary, Hash/binary>>.
generate_salt() ->
Salt = rand:uniform(16#ffffffff),
<<Salt:32>>.
salted_hash(Salt, Cleartext) ->
salted_hash(hashing_mod(), Salt, Cleartext).
salted_hash(Mod, Salt, Cleartext) ->
Fun = fun Mod:hash/1,
Fun(<<Salt/binary, Cleartext/binary>>).
hashing_mod() ->
rabbit_misc:get_env(rabbit, password_hashing_module,
?DEFAULT_HASHING_MODULE).
hashing_mod(rabbit_password_hashing_sha256) ->
rabbit_password_hashing_sha256;
hashing_mod(rabbit_password_hashing_md5) ->
rabbit_password_hashing_md5;
%% fall back to the hashing function that's been used prior to 3.6.0
hashing_mod(undefined) ->
rabbit_password_hashing_md5;
%% if a custom module is configured, simply use it
hashing_mod(CustomMod) when is_atom(CustomMod) ->
CustomMod.
|
