MeshCentral/pass.js

63 lines
2.1 KiB
JavaScript
Raw Normal View History

2017-08-28 19:27:45 +03:00
// check out https://github.com/tj/node-pwd
/*jslint node: true */
/*jshint node: true */
/*jshint strict:false */
/*jshint -W097 */
/*jshint esversion: 6 */
"use strict";
2018-08-27 22:24:15 +03:00
2017-08-28 19:27:45 +03:00
// Module dependencies.
2018-05-03 21:09:29 +03:00
const crypto = require('crypto');
2017-08-28 19:27:45 +03:00
// Bytesize.
2018-05-03 21:09:29 +03:00
const len = 128;
2017-08-28 19:27:45 +03:00
// Iterations. ~300ms
2018-05-03 21:09:29 +03:00
const iterations = 12000;
2017-08-28 19:27:45 +03:00
/**
* Hashes a password with optional `salt`, otherwise
* generate a salt for `pass` and invoke `fn(err, salt, hash)`.
*
* @param {String} password to hash
* @param {String} optional salt
* @param {Function} callback
* @api public
*/
2019-05-15 00:39:26 +03:00
exports.hash = function (pwd, salt, fn, tag) {
if (4 == arguments.length) {
2017-08-28 19:27:45 +03:00
try {
2019-05-15 00:39:26 +03:00
crypto.pbkdf2(pwd, salt, iterations, len, 'sha384', function (err, hash) { fn(err, hash.toString('base64'), tag); });
2017-08-28 19:27:45 +03:00
} catch (e) {
// If this previous call fails, it's probably because older pbkdf2 did not specify the hashing function, just use the default.
2019-05-15 00:39:26 +03:00
crypto.pbkdf2(pwd, salt, iterations, len, function (err, hash) { fn(err, hash.toString('base64'), tag); });
2017-08-28 19:27:45 +03:00
}
} else {
2019-05-15 00:39:26 +03:00
tag = fn;
2017-08-28 19:27:45 +03:00
fn = salt;
crypto.randomBytes(len, function (err, salt) {
if (err) return fn(err);
salt = salt.toString('base64');
try {
2019-05-15 00:39:26 +03:00
crypto.pbkdf2(pwd, salt, iterations, len, 'sha384', function (err, hash) { if (err) { return fn(err); } fn(null, salt, hash.toString('base64'), tag); });
2017-08-28 19:27:45 +03:00
} catch (e) {
// If this previous call fails, it's probably because older pbkdf2 did not specify the hashing function, just use the default.
2019-05-15 00:39:26 +03:00
crypto.pbkdf2(pwd, salt, iterations, len, function (err, hash) { if (err) { return fn(err); } fn(null, salt, hash.toString('base64'), tag); });
2017-08-28 19:27:45 +03:00
}
});
}
2017-11-03 04:44:27 +03:00
};
exports.iishash = function (type, pwd, salt, fn) {
if (type == 0) {
fn(null, pwd);
} else if (type == 1) {
const hash = crypto.createHash('sha1');
hash.update(Buffer.concat([Buffer.from(salt, 'base64'), Buffer.from(pwd, 'utf16le')]));
2017-11-03 04:44:27 +03:00
fn(null, hash.digest().toString('base64'));
} else {
fn('invalid type');
}
};