We are porting a PHP application that runs on Linux to our new single sign-on (SSO) infrastructure, implemented in C # and running on Windows.
As part of the migration process, we need our SSO SSO infrastructure to be able to hash passwords just like a PHP application.
While the PHP application uses a fairly reasonable password hashing algorithm, in addition to password and salt, the string that receives the hash, unfortunately, also contains the cosine of the salt value (interpreted as an integer) ... Quite an unusual solution, put it on average.
Not surprisingly, calculating the cosine of a large integer in PHP and C # leads to slightly different results. This means that we probably cannot reliably redefine the hash algorithm for outdated passwords in our new single sign-on infrastructure.
One of the solutions that we were thinking about is to start the PHP password hash function in AWS Lambda and request that Lambda from our single sign-on infrastructure.
Can you come up with other options?
source
share