hash.php

<?php 

class generateHash {

/*
 * Informacinės saugos pagrindai - Hashing 
 * Only for learning the Concepts of Hashing.
 */

public $study_book_no = '000000000';

private $pepper = array();
	
private $options;

public function __construct()
{
	echo "From the command line and http(s)." . PHP_EOL;
	
	/* Application specific hash security measure - the Pepper */
	$this->pepper[] = array('first+128+letters+long+text+value+or+so+aaaaAaaaaA+aaaAaaaaAa+aaAaaaaAaa+aAaaaaAaaa+AaaaaAaaaa+aaaaAaaaaA+aaaAaaaaAa+aaAaaaaAaa+', '2021-01-01 00:00:00');
	$this->pepper[] = array('second+128+letters+long+text+value+or+so+bbbBbbbbbB+bbbbBBbbbb+BbbbbbBbbb+bBbbbbbBbb+bbBbbbbbBb+bbbBbbbbbB+bbbbBBbbbb+BbbbbbBbbb', '2022-01-01 00:00:00');
	$this->pepper[] = array('third+128+letters+long+text+value+or+so+ccCccccCcc+cccCccccCc+ccccCccccC+cCccccCccc+CccccCcccc+cccCccCccc+ccccCCcccc+CccccccccC+', '2023-01-01 00:00:00');
	
	if((int)$this->study_book_no > 0)
	{
		$this->generateHash($this->study_book_no);
	}
	else
	{
		echo "Error: Invalid value of the variable study_book_no .";
		echo $this->PHP_EOL();
		echo "Tip. Edit the file and change the variable \$study_book_no .";
		echo $this->PHP_EOL();
		echo "For later: ";
		echo $this->showOpenSSLMethods();
		echo $this->PHP_EOL();
	}
}

protected function generateHash($number = 0)
{
	$i = 0;
	$j = 0;
	if(isset($this->study_book_no) and (int)$number > 0)
	{
		$i = $i + 1;
		echo $i .".".$this->PHP_EOL();
		$j++;
		/* Does it is a hash? */
		print('Hint: empty; Hash: '. $number);
		
		$i = $i + 1;
		echo $i .".".$this->PHP_EOL();
		$j++;
		/* Does it is a hash? */
		print('Hint: base64; Hash: '. base64_encode($number));

		if (function_exists('md5')) {

			$i = $i + 1;
			echo $i .".".$this->PHP_EOL();
			$j++;
			/* Does it is a good hash? */
			print('Hint: MD5; Hash: '. md5($number));

			$i = $i + 1;
			echo $i .".".$this->PHP_EOL();
			$j++;
			/* Does it is a better hash? */
			/* Let's make assumption that there are hardcoded repetitions of the same algorithm. */
			print('Hint: MD5(MD5); Hash: '. md5(md5(md5($number))));

			$i = $i + 1;
			echo $i .".".$this->PHP_EOL();
			$j++;
			/* Does it is even better hash? */
			/* Let's make assumption that there are hardcoded join of the password with the fixed value of the salt. */
			print('Hint: MD5+Salt(1); Hash: '. md5('security'.$number));
		
		}
		
		if (function_exists('crypt')) {
		
			$i = $i + 1;
			echo $i .".".$this->PHP_EOL();
			$j++;
			/* Does it is a strong hash? */
			/* Let's make assumption that some kind of library for hashing is in use, which accepts various (i.e. fixed) parameters. */
			print('Hint: MD5+Salt(2); Hash: '. crypt($number, '$1$security$'));

			$i = $i + 1;
			echo $i .".".$this->PHP_EOL();
			$j++;
			/* Does it is a strong hash? */
			/* Let's make assumption that some kind of library for hashing is in use, which accepts various (i.e. random) parameters. */
			/* Does it is good idea to join the salt of bytes with the value of non-bytes? */
			print('Hint: MD5+Salt(3); Hash: '. crypt($number, '$1$'.$this->basicSalt(12).'$'));

			$i = $i + 1;
			echo $i .".".$this->PHP_EOL();
			$j++;
			/* Does it is a strong hash? */
			/* Let's make assumption that some kind of library for hashing is in use, which accepts various (i.e. random) parameters. */
			/* Does it is good idea to join the salt of bytes with the value of non-bytes? */
			/* Does by having pepper we would need to collect additional data for usability of the Hash? */
			print('Hint: MD5+Salt(3)+Pepper; Hash: '. crypt($this->returnPepper().$number, '$1$'.$this->basicSalt(12).'$'));

			$i = $i + 1;
			echo $i .".".$this->PHP_EOL();
			$j++;
			/* Does it is a strong hash? */
			/* Does by having pepper we would need to collect additional data for usability of the Hash? */
			print('Hint: SHA1+Pepper; Hash: '. sha1($this->returnPepper().$number));

			$i = $i + 1;
			echo $i .".".$this->PHP_EOL();
			$j++;
			/* Does it is a strong hash */
			/* Let's make assumption that some kind of library for hashing is in use with passed additional hashing controls. */
			print('Hint: SHA256; Hash: '. crypt($this->returnPepper().$number,'$5$rounds=1000$additionalsalts.'));
		
		}
		
		if(defined("PASSWORD_DEFAULT")) {
		
        	$i = $i + 1;
			echo $i .".".$this->PHP_EOL();
			$j++;
			/* Does it is a strongest hash */
			print('Hint: BCRYPT; Hash: '. password_hash($number, PASSWORD_DEFAULT));
		
		}
		
		if(defined("PASSWORD_BCRYPT")) {
		
			$i = $i + 1;
			echo $i .".".$this->PHP_EOL();
			$j++;
			/* Does it is a strongest hash */
			$this->options = array("cost" => 12,);
			print('Hint: BCRYPT; Hash: '. password_hash($number, PASSWORD_BCRYPT, $this->options));
			
			// Does password_hash has something with crypt_blowfish?
		
		}
		
		if(defined("PASSWORD_ARGON2I")) {
		
			$i = $i + 1;
			echo $i .".".$this->PHP_EOL();
			$j++;
			/* Does it is a strongest hash */
		
			foreach ($this->options as $key => $value) {
				unset($this->options[$key]);
			}
			
			$this->options = array("memory_cost" => 1<<10, "time_cost" => 1, "threads" => 1);
			print('Hint: ARGON2; Hash: '. password_hash($number, PASSWORD_ARGON2I, $this->options));
			
			// Does this hash algorithm is a winner of Password Hashing Competition?
		
			$i = $i + 1;
			echo $i .".".$this->PHP_EOL();
			$j++;
			/* Does it is a strongest hash */
			print('Hint: ARGON2; Hash: '. password_hash($number, PASSWORD_ARGON2I));

			// Does this hash algorithm is a winner of Password Hashing Competition?
		}
		
		echo "__.".$this->PHP_EOL();
		
		echo "Generated " .$i." out of ". $j.".".$this->PHP_EOL();
		
		

		echo $this->PHP_EOL();
}

}

protected function PHP_EOL()
{
	print("\n");
}

protected function basicSalt($length = 32) {
    if (function_exists('random_bytes')) {
        return random_bytes($length);
    }
    
    if (function_exists('mcrypt_create_iv')) {
        return mcrypt_create_iv($length, MCRYPT_DEV_URANDOM);
    }
    
    if (function_exists('openssl_random_pseudo_bytes')) {
        return openssl_random_pseudo_bytes($length);
    }
    
    $min = '1';
    $max = '9';
    for($i = 1; $i < $length; $i++) {
        $min = $min.'0';
        $max = $max.'9';
    }
    
    settype($min, "integer");
    settype($max, "integer");
    
    return rand($min, $max);
}
	
protected function returnPepper() {
    $pepper = '';
    $time_today = date("Y-m-d H:i:s");
    $time_limit = date("Y-m-d H:i:s", strtotime("+1 years"));
    
    foreach ($this->pepper as $key => $value) {
        if ($value[1] > $time_today and $value[1] < $time_limit) {
		$pepper .= $value[0]; 
        }
    }
    
    return $pepper;
}

public function showOpenSSLMethods()
{
	if(extension_loaded("openssl")) {
		echo "OpenSSL Message Digest Algo:";
		echo $this->PHP_EOL();
		print_r(openssl_get_md_methods());
		echo $this->PHP_EOL();
		echo "OpenSSL Ciphers:";
		echo $this->PHP_EOL();
		print_r(openssl_get_cipher_methods());
	}
	elseif(extension_loaded("mcrypt")) {
		echo "Mcrypt - available.";
		
		//for encryption & decryption only
		//i.e.
		//$encrypted_data = mcrypt_ecb (MCRYPT_3DES, 'symmetric_cryptography_key', 'Plaintext message', MCRYPT_ENCRYPT);
		
		//$encrypted_data = mcrypt_ecb (MCRYPT_3DES, 'symmetric_cryptography_key', 'Encrypted message', MCRYPT_DECRYPT);
		
		//mcrypt_list_algorithms()
		//mcrypt_list_modes() 
		
		echo $this->PHP_EOL();
	}
	else {
		echo "OpenSSL - not available.";
		echo $this->PHP_EOL();
	}
} 

public function __destruct()
{
	unset($this->study_book_no);
}

}

$gH = new generateHash;