19 lines
794 B
Plaintext
19 lines
794 B
Plaintext
:sig
|
|
bool password_needs_rehash(String encoded)
|
|
|
|
:params
|
|
encoded : stored password credential
|
|
return value : true when the encoding is malformed or does not use UCE's current parameters
|
|
|
|
:content
|
|
Checks whether a stored UCE password encoding should be replaced. Call it only after successful verification, then hash the known-correct password again and atomically replace the old credential. Non-UCE legacy formats are reported as needing rehash but must be verified by the application before upgrade.
|
|
|
|
:example
|
|
String old = "$uce$scrypt$16384$8$1$00112233445566778899aabbccddeeff$29fdfb3d991961e926a19c1136a07e252afa5fdb8d3a0fb74cdcfa5016956f34";
|
|
print(password_verify("legacy password", old) && password_needs_rehash(old) ? "upgrade" : "keep", "\n");
|
|
|
|
:see
|
|
>sys
|
|
password_hash
|
|
password_verify
|