File: BCrypt_replacement.patch

package info (click to toggle)
megan-ce 6.21.1%2Bdfsg-2
  • links: PTS, VCS
  • area: main
  • in suites: bookworm
  • size: 146,408 kB
  • sloc: java: 123,712; sh: 273; xml: 92; makefile: 15; csh: 14
file content (34 lines) | stat: -rw-r--r-- 1,212 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
Description: using a replacement BCrypt implementation, which is Debian-packaged
Author: Pierre Gruet <pgt@debian.org>
Forwarded: not-needed
Last-Update: 2022-01-08

--- a/src/megan/ms/Utilities.java
+++ b/src/megan/ms/Utilities.java
@@ -20,8 +20,9 @@
 
 package megan.ms;
 
-import at.favre.lib.crypto.bcrypt.BCrypt;
-import jloda.util.Basic;
+//import at.favre.lib.crypto.bcrypt.BCrypt;
+import org.mindrot.jbcrypt.BCrypt;
+//import jloda.util.Basic;
 import megan.daa.connector.ClassificationBlockDAA;
 import megan.daa.io.ByteInputStream;
 import megan.daa.io.ByteOutputStream;
@@ -124,10 +125,12 @@
     }
 
     public static  String computeBCryptHash(byte[] password) {
-        return Basic.toString(BCrypt.withDefaults().hash(6, SALT, password));
+        //return Basic.toString(BCrypt.withDefaults().hash(6, SALT, password));
+        return BCrypt.hashpw(new String(password), BCrypt.gensalt(6));
     }
 
     public static boolean verify (char[] password,String bcryptHash) {
-        return BCrypt.verifyer().verify(password,bcryptHash).verified;
+        //return BCrypt.verifyer().verify(password,bcryptHash).verified;
+        return BCrypt.checkpw(new String(password), bcryptHash);
     }
 }