#1016 Deprecate MD5, SHA1, SHA512: no longer allowed for active use

- Deprecate unsalted hashes: if such a hash is configured, move it to the legacy hashes setting to still support the existing hashes in the database but hash all passwords from now on with our default, SHA256.
2017-10-19 21:30:19 +02:00
parent 7d445217d6
commit fca77b940f
14 changed files with 121 additions and 87 deletions
@@ -5,6 +5,7 @@ import fr.xephi.authme.security.crypts.description.Usage;

 import static fr.xephi.authme.security.HashUtils.md5;

+@Deprecated
@Recommendation(Usage.DEPRECATED)
 public class DoubleMd5 extends UnsaltedMethod {

@@ -4,6 +4,7 @@ import fr.xephi.authme.security.HashUtils;
 import fr.xephi.authme.security.crypts.description.Recommendation;
 import fr.xephi.authme.security.crypts.description.Usage;

+@Deprecated
@Recommendation(Usage.DEPRECATED)
 public class Md5 extends UnsaltedMethod {

@@ -4,6 +4,7 @@ import fr.xephi.authme.security.HashUtils;
 import fr.xephi.authme.security.crypts.description.Recommendation;
 import fr.xephi.authme.security.crypts.description.Usage;

+@Deprecated
@Recommendation(Usage.DEPRECATED)
 public class Sha1 extends UnsaltedMethod {

@@ -4,6 +4,7 @@ import fr.xephi.authme.security.HashUtils;
 import fr.xephi.authme.security.crypts.description.Recommendation;
 import fr.xephi.authme.security.crypts.description.Usage;

+@Deprecated
@Recommendation(Usage.DEPRECATED)
 public class Sha512 extends UnsaltedMethod {

@@ -64,6 +64,7 @@ import fr.xephi.authme.security.crypts.description.Usage;

 import java.util.Arrays;

+@Deprecated
@Recommendation(Usage.DEPRECATED)
 public class Whirlpool extends UnsaltedMethod {