Merge pull request #1380 from kijin/fix/pbkdf2-hexsalt

PBKDF2 해시 생성시 솔트의 엔트로피 개선
This commit is contained in:
bnu 2015-04-13 12:48:23 +09:00
commit c5c890bd4b

View file

@ -111,7 +111,7 @@ class Password
case 'pbkdf2':
$iterations = pow(2, $this->getWorkFactor() + 5);
$salt = $this->createSecureSalt(12);
$salt = $this->createSecureSalt(12, 'alnum');
$hash = base64_encode($this->pbkdf2($password, $salt, 'sha256', $iterations, 24));
return 'sha256:'.sprintf('%07d', $iterations).':'.$salt.':'.$hash;