PhabricatorHash.php
No OneTemporary
Actions

Subscribers

None

File Metadata

	<?php

	final class PhabricatorHash {


	/**
	* Digest a string for general use, including use which relates to security.
	*
	* @param string Input string.
	* @return string 32-byte hexidecimal SHA1+HMAC hash.
	*/
	public static function digest($string) {
	$key = PhabricatorEnv::getEnvConfig('security.hmac-key');
	if (!$key) {
	throw new Exception(
	"Set a 'security.hmac-key' in your Phabricator configuration!");
	}

	return hash_hmac('sha1', $string, $key);
	}


	/**
	* Digest a string for use in, e.g., a MySQL index. This produces a short
	* (12-byte), case-sensitive alphanumeric string with 72 bits of entropy,
	* which is generally safe in most contexts (notably, URLs).
	*
	* This method emphasizes compactness, and should not be used for security
	* related hashing (for general purpose hashing, see @{method:digest}).
	*
	* @param string Input string.
	* @return string 12-byte, case-sensitive alphanumeric hash of the string
	* which
	*/
	public static function digestForIndex($string) {
	$hash = sha1($string, $raw_output = true);

	static $map;
	if ($map === null) {
	$map = "0123456789".
	"abcdefghij".
	"klmnopqrst".
	"uvwxyzABCD".
	"EFGHIJKLMN".
	"OPQRSTUVWX".
	"YZ._";
	}

	$result = '';
	for ($ii = 0; $ii < 12; $ii++) {
	$result .= $map[(ord($hash[$ii]) & 0x3F)];
	}

	return $result;
	}

	}