PasswordHash::crypt_private() │ public │ WP 1.0

Method of the class: PasswordHash{}

No Hooks.

Return

null. Nothing (null).

Usage

$PasswordHash = new PasswordHash();
$PasswordHash->crypt_private( $password, $setting );

$password (required)

-

$setting (required)

-

PasswordHash::crypt_private() PasswordHash::crypt private code ^{WP 6.7.1}

function crypt_private($password, $setting)
{
	$output = '*0';
	if (substr($setting, 0, 2) === $output) {
		$output = '*1';
	}

	$id = substr($setting, 0, 3);
	# We use "$P$", phpBB3 uses "$H$" for the same thing
	if ($id !== '$P$' && $id !== '$H$') {
		return $output;
	}

	$count_log2 = strpos($this->itoa64, $setting[3]);
	if ($count_log2 < 7 || $count_log2 > 30) {
		return $output;
	}

	$count = 1 << $count_log2;

	$salt = substr($setting, 4, 8);
	if (strlen($salt) !== 8) {
		return $output;
	}

	# We were kind of forced to use MD5 here since it's the only
	# cryptographic primitive that was available in all versions
	# of PHP in use.  To implement our own low-level crypto in PHP
	# would have resulted in much worse performance and
	# consequently in lower iteration counts and hashes that are
	# quicker to crack (by non-PHP code).
	$hash = md5($salt . $password, TRUE);
	do {
		$hash = md5($hash . $password, TRUE);
	} while (--$count);

	$output = substr($setting, 0, 12);
	$output .= $this->encode64($hash, 16);

	return $output;
}