Looking for C # equivalent php password-verify ()

Question

I need to import a bunch of Moodle user accounts into a system written in C #.

Moodle uses the password_hash () function to create password hashes. I need to check these passwords in C #.

In other words, I am looking for a C # implementation of the PHP password verification function ( http://www.php.net/manual/en/function.password-verify.php ).

I searched a little Google, but could not find anything close, so I ask in the hope of avoiding rethinking the wheel :-)

Thanks!

Answer 1

Got it!

Install CryptSharp first through the NuGet package. (Use the official "2.0" package), and by the way, BCrypt.net did not work for me.

Then:

using CryptSharp; bool matches = Crypter.CheckPassword("password goes here", "hash goes here"); 

Note that the hash should start with something like: "$ 2y $ ..."

Works like a charm !:-)

Answer 2

Well, I know that you do not want to write code for it .Net has a built-in cryptography library that calculates the hash and encrypts it. You must use it when importing Security.Cryptography. You can compare the result with the one that was saved in your database. Here is the code.

 class Program { static int SaltValueSize = 8; static void Main(string[] args) { string pass = "Password"; string result = ComputeHash(pass, new MD5CryptoServiceProvider()); Console.WriteLine("Original: " + pass + "\nEncrypted: " + result); Console.WriteLine("Is user valid: " + IsUserValid("UserName", pass)); Console.WriteLine("With Salt, Original: " + pass + "\nEcrypted: " + System.Text.Encoding.Default.GetString(ComputePasswordHash(pass, salted))); Console.ReadLine(); } private static byte[] ComputePasswordHash(string password, int salt) { byte[] saltBytes = new byte[4]; saltBytes[0] = (byte)(salt >> 24); saltBytes[1] = (byte)(salt >> 16); saltBytes[2] = (byte)(salt >> 8); saltBytes[3] = (byte)(salt); byte[] passwordBytes = UTF8Encoding.UTF8.GetBytes(password); byte[] preHashed = new byte[saltBytes.Length + passwordBytes.Length]; System.Buffer.BlockCopy(passwordBytes, 0, preHashed, 0, passwordBytes.Length); System.Buffer.BlockCopy(saltBytes, 0, preHashed, passwordBytes.Length, saltBytes.Length); SHA1 sha1 = SHA1.Create(); return sha1.ComputeHash(preHashed); } public static string ComputeHash(string input, HashAlgorithm algorithm) { Byte[] inputBytes = Encoding.UTF8.GetBytes(input); Byte[] hashedBytes = algorithm.ComputeHash(inputBytes); return BitConverter.ToString(hashedBytes); } public static bool IsUserValid(string userName, string password) { bool isValid; string result = VerifyPassword(password); // isValid = Your database call in a form of Inverted statement which you //can check if the user with the hashed password exists or Not return isValid; } public static string VerifyPassword(string password) { return ComputeHash(password, new MD5CryptoServiceProvider()); } }