Package org.keycloak.crypto.hash

Class Argon2PasswordHashProvider

java.lang.Object

org.keycloak.crypto.hash.Argon2PasswordHashProvider

All Implemented Interfaces:

PasswordHashProvider, Provider

public class Argon2PasswordHashProvider
extends Object
implements PasswordHashProvider

Constructor Summary

Constructors

Constructor	Description
Argon2PasswordHashProvider(String version, String type, int hashLength, int memory, int iterations, int parallelism, Semaphore cpuCoreSemaphore)

Method Summary

Modifier and Type	Method	Description
void	close()
String	credentialHashingStrength(PasswordCredentialModel credential)
PasswordCredentialModel	encodedCredential(String rawPassword, int iterations)	Password hashing iterations from password policy is intentionally ignored for now for two reasons.
boolean	policyCheck(PasswordPolicy policy, PasswordCredentialModel credential)
boolean	verify(String rawPassword, PasswordCredentialModel credential)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.credential.hash.PasswordHashProvider

encode, encode, policyCheck, verify

Constructor Details

Argon2PasswordHashProvider

public Argon2PasswordHashProvider(String version,
 String type,
 int hashLength,
 int memory,
 int iterations,
 int parallelism,
 Semaphore cpuCoreSemaphore)

Method Details

policyCheck

public boolean policyCheck(PasswordPolicy policy,
 PasswordCredentialModel credential)

Specified by:

policyCheck in interface PasswordHashProvider

encodedCredential

public PasswordCredentialModel encodedCredential(String rawPassword,
 int iterations)

Password hashing iterations from password policy is intentionally ignored for now for two reasons. 1) default iterations are 210K, which is way too large for Argon2, and 2) it makes little sense to configure iterations only for Argon2, which should be combined with configuring memory, which is not currently configurable in password policy.

Specified by:

encodedCredential in interface PasswordHashProvider

verify

public boolean verify(String rawPassword,
 PasswordCredentialModel credential)

Specified by:

verify in interface PasswordHashProvider

credentialHashingStrength

public String credentialHashingStrength(PasswordCredentialModel credential)

Specified by:

credentialHashingStrength in interface PasswordHashProvider

close

public void close()

Specified by:

close in interface Provider