Q_uC2S'3j<@HHH3qX\}S |lUm]=#v2}@3My ˜]_w@;\w}"Fv /l. bfZVմ4U -Yvo!%SFz a[ٯx.4Tz, C>f3Xqp%xQY.ŝ/zPi?|3zfHΑSUP ׻z4[+WΣ. fx5!\8Liܹ V~ vR 3@6BJ+LoOu> &\5$_$@%UFQ"~ɢ*`2 Fn>:GqyEw!#` L0Ճ_ I5yt·TExdRMS>2t"H% Lw \)3-s(SVc/W,DEdC( زgO]N0OM#aksw뛞F@aŮHd0$T3 SSh($}ô>ۏ`5#vqo bO:ArữF6_^`ښ6>[zNRŤ_Z?Z`68چ~x`q3%%las= ciqu+!Y8^B~e0wM N%ւ-fRfl7Zّ֒Dˇ^9>ϰ77[Z^S`DAZ6;p)W-`sظ!54v݌ɓ)mrO?tU\ uRbd97qjĸ'?/R!B(>Ꮺ ? >e J:!"\^ː@nIP ź<Y[ o\&AdU5(az۾?i7l&ZQ4kgv3w\c^"t@]-ƻ BCRYPT_VERSION) { /* How do I handle errors ? Return ':' */ strcpy(encrypted, error); return; } /* Check for minor versions */ if (salt[1] != '$') { switch (salt[1]) { case 'a': /* 'ab' should not yield the same as 'abab' */ case 'b': /* cap input length at 72 bytes */ minor = salt[1]; salt++; break; default: strcpy(encrypted, error); return; } } else minor = 0; /* Discard version + "$" identifier */ salt += 2; if (salt[2] != '$') { /* Out of sync with passwd entry */ strcpy(encrypted, error); return; } /* Computer power doesn't increase linear, 2^x should be fine */ n = atoi(salt); if (n > 31 || n < 0) { strcpy(encrypted, error); return; } logr = (u_int8_t)n; if ((rounds = (u_int32_t) 1 << logr) < BCRYPT_MINROUNDS) { strcpy(encrypted, error); return; } /* Discard num rounds + "$" identifier */ salt += 3; if (strlen(salt) * 3 / 4 < BCRYPT_MAXSALT) { strcpy(encrypted, error); return; } /* We dont want the base64 salt but the raw data */ decode_base64(csalt, BCRYPT_MAXSALT, (u_int8_t *) salt); salt_len = BCRYPT_MAXSALT; if (minor <= 'a') key_len = (u_int8_t)(key_len + (minor >= 'a' ? 1 : 0)); else { /* cap key_len at the actual maximum supported * length here to avoid integer wraparound */ if (key_len > 72) key_len = 72; key_len++; /* include the NUL */ } /* Setting up S-Boxes and Subkeys */ Blowfish_initstate(&state); Blowfish_expandstate(&state, csalt, salt_len, (u_int8_t *) key, key_len); for (k = 0; k < rounds; k++) { Blowfish_expand0state(&state, (u_int8_t *) key, key_len); Blowfish_expand0state(&state, csalt, salt_len); } /* This can be precomputed later */ j = 0; for (i = 0; i < BCRYPT_BLOCKS; i++) cdata[i] = Blowfish_stream2word(ciphertext, 4 * BCRYPT_BLOCKS, &j); /* Now do the encryption */ for (k = 0; k < 64; k++) blf_enc(&state, cdata, BCRYPT_BLOCKS / 2); for (i = 0; i < BCRYPT_BLOCKS; i++) { ciphertext[4 * i + 3] = cdata[i] & 0xff; cdata[i] = cdata[i] >> 8; ciphertext[4 * i + 2] = cdata[i] & 0xff; cdata[i] = cdata[i] >> 8; ciphertext[4 * i + 1] = cdata[i] & 0xff; cdata[i] = cdata[i] >> 8; ciphertext[4 * i + 0] = cdata[i] & 0xff; } i = 0; encrypted[i++] = '$'; encrypted[i++] = BCRYPT_VERSION; if (minor) encrypted[i++] = minor; encrypted[i++] = '$'; snprintf(encrypted + i, 4, "%2.2u$", logr & 0x001F); encode_base64((u_int8_t *) encrypted + i + 3, csalt, BCRYPT_MAXSALT); encode_base64((u_int8_t *) encrypted + strlen(encrypted), ciphertext, 4 * BCRYPT_BLOCKS - 1); memset(&state, 0, sizeof(state)); memset(ciphertext, 0, sizeof(ciphertext)); memset(csalt, 0, sizeof(csalt)); memset(cdata, 0, sizeof(cdata)); } u_int32_t bcrypt_get_rounds(const char * hash) { /* skip past the leading "$" */ if (!hash || *(hash++) != '$') return 0; /* skip past version */ if (0 == (*hash++)) return 0; if (*hash && *hash != '$') hash++; if (*hash++ != '$') return 0; return atoi(hash); } static void encode_base64(u_int8_t *buffer, u_int8_t *data, u_int16_t len) { u_int8_t *bp = buffer; u_int8_t *p = data; u_int8_t c1, c2; while (p < data + len) { c1 = *p++; *bp++ = Base64Code[(c1 >> 2)]; c1 = (c1 & 0x03) << 4; if (p >= data + len) { *bp++ = Base64Code[c1]; break; } c2 = *p++; c1 |= (c2 >> 4) & 0x0f; *bp++ = Base64Code[c1]; c1 = (c2 & 0x0f) << 2; if (p >= data + len) { *bp++ = Base64Code[c1]; break; } c2 = *p++; c1 |= (c2 >> 6) & 0x03; *bp++ = Base64Code[c1]; *bp++ = Base64Code[c2 & 0x3f]; } *bp = '\0'; }