password_hasher.hpp

/* -*- mode: c++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*-
 *
 * Copyright (C) 2025 Marco Craveiro <marco.craveiro@gmail.com>
 *
 * This program is free software; you can redistribute it and/or modify it under
 * the terms of the GNU General Public License as published by the Free Software
 * Foundation; either version 3 of the License, or (at your option) any later
 * version.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
 * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
 * details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program; if not, write to the Free Software Foundation, Inc., 51
 * Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
 *
 */
#ifndef ORES_SECURITY_CRYPTO_PASSWORD_HASHER_HPP
#define ORES_SECURITY_CRYPTO_PASSWORD_HASHER_HPP
 
#include <string>
#include "ores.logging/make_logger.hpp"
 
namespace ores::security::crypto {
 
class password_hasher {
private:
    inline static std::string_view logger_name =
        "ores.security.crypto.password_hasher";
 
    [[nodiscard]] static auto& lg() {
        using namespace ores::logging;
        static auto instance = make_logger(logger_name);
        return instance;
    }
 
    static std::string base64_encode(const std::vector<unsigned char>& data);
 
    static std::vector<unsigned char> base64_decode(const std::string& encoded);
 
    // scrypt parameters - OWASP recommendations for production
    static constexpr std::uint64_t PRODUCTION_N = 1 << 14; 
    static constexpr std::uint32_t DEFAULT_r = 8;          
    static constexpr std::uint32_t DEFAULT_p = 1;          
    static constexpr std::size_t SALT_LEN = 16;
    static constexpr std::size_t HASH_LEN = 64;
 
    // Fast scrypt parameters for testing (16x faster)
    static constexpr std::uint64_t TEST_N = 1 << 10;
 
    static std::uint64_t get_n_parameter();
 
public:
    static std::string hash(const std::string &password);
 
    static bool verify(const std::string& password, const std::string &hash);
};
 
}
 
#endif