File Coverage

blib/lib/App/Raps2/Password.pm

Criterion	Covered	Total	%
statement	60	60	100.0
branch	12	12	100.0
condition	13	17	76.4
subroutine	14	14	100.0
pod	7	7	100.0
total	106	110	96.3

package App::Raps2::Password;

use strict;
use warnings;
use 5.010;

use Carp 'confess';
use Crypt::CBC;
use Crypt::Eksblowfish;
use Crypt::Eksblowfish::Bcrypt qw(bcrypt_hash en_base64 de_base64);

our $VERSION = '0.54';

sub new {
	my ( $obj, %conf ) = @_;

	$conf{cost} //= 12;

	if ( not defined $conf{salt} ) {
		$conf{salt} = create_salt();
	}

	if ( length( $conf{salt} ) != 16 ) {
		confess('incorrect salt length');
	}

	if ( not( defined $conf{passphrase} and length $conf{passphrase} ) ) {
		confess('no passphrase given');
	}

	my $ref = \%conf;

	return bless( $ref, $obj );
}

sub create_salt {
	my ($self) = @_;
	my $salt = q{};

	for ( 1 .. 16 ) {
		$salt .= chr( 0x21 + int( rand(90) ) );
	}

	return $salt;
}

sub salt {
	my ( $self, $salt ) = @_;

	if ( defined $salt ) {
		if ( length($salt) != 16 ) {
			confess('incorrect salt length');
		}

		$self->{salt} = $salt;
	}

	return $self->{salt};
}

sub encrypt {
	my ( $self, %opt ) = @_;

	$opt{salt} //= $self->{salt};
	$opt{cost} //= $self->{cost};

	my $eksblowfish
	  = Crypt::Eksblowfish->new( $opt{cost}, $opt{salt}, $self->{passphrase}, );
	my $cbc = Crypt::CBC->new( -cipher => $eksblowfish );

	return $cbc->encrypt_hex( $opt{data} );
}

sub decrypt {
	my ( $self, %opt ) = @_;

	$opt{cost} //= $self->{cost};
	$opt{salt} //= $self->{salt};

	my $eksblowfish
	  = Crypt::Eksblowfish->new( $opt{cost}, $opt{salt}, $self->{passphrase}, );
	my $cbc = Crypt::CBC->new( -cipher => $eksblowfish );

	return $cbc->decrypt_hex( $opt{data} );
}

sub bcrypt {
	my ($self) = @_;

	return en_base64(
		bcrypt_hash(
			{
				key_nul => 1,
				cost    => $self->{cost},
				salt    => $self->{salt},
			},
			$self->{passphrase},
		)
	);
}

sub verify {
	my ( $self, $testhash ) = @_;

	my $myhash = $self->bcrypt();

	if ( $testhash eq $myhash ) {
		return 1;
	}
	confess('Passwords did not match');
}

1;

__END__