Online PHP editor | perf for 7fkQ0

<?php /** * This class helps building secure password-hashes (BCrypt) with PHP, * to store them in the database. It is provided with comments, for * educational purposes. * * @author Martin Stoeckli - www.martinstoeckli.ch/php * @copyright Martin Stoeckli 2013, this code may be freely used in every * type of project, it is provided without warranties of any kind. */ class StoPasswordHash { /** * Generates a bcrypt hash of a password, which can be stored in a database. * @param string $password Password whose hash-value we need. * @param int $cost Controls the number of iterations. Increasing the cost * by 1, doubles the needed calculation time. Must be in the range of 4-31. * @param string $serverSideKey This key acts similar to a pepper, but * can be exchanged when necessary. In certain situations, encrypting * the hash-value can protect weak passwords from a dictionary attack. * @return string Hash-value of the password. A random salt is included. * Without passing a $serverSideKey the result has a length of 60 * characters, with a $serverSideKey the length is 108 characters. */ public static function hashBcrypt($password, $cost=10, $serverSideKey='') { if (!defined('CRYPT_BLOWFISH')) throw new Exception('The CRYPT_BLOWFISH algorithm is required (PHP 5.3).'); if ($cost < 4 || $cost > 31) throw new InvalidArgumentException('The cost factor must be a number between 4 and 31'); if (version_compare(PHP_VERSION, '5.3.7') >= 0) $algorithm = '2y'; // BCrypt, with fixed unicode problem else $algorithm = '2a'; // BCrypt // BCrypt expects nearly the same alphabet as base64_encode returns, // but instead of the '+' characters it accepts '.' characters. // BCrypt alphabet: ./0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz $salt = str_replace('+', '.', StoPasswordHash::generateRandomBase64String(22)); // Create crypt parameters: $algorithm$cost$salt $cryptParams = sprintf('$%s$%02d$%s', $algorithm, $cost, $salt); $hash = crypt($password, $cryptParams); // Encrypt hash with the server side key if ($serverSideKey != '') { $encryptedHash = StoPasswordHash::encryptTwofish($hash, $serverSideKey); $hash = base64_encode($encryptedHash); } return $hash; } /** * Checks, if the password matches a given hash value. This is useful when * a user enters his password for login, to check if the password corresponds * to the hash stored in the database. * @param string $password Password to check. * @param string $existingHash Stored hash-value from the database. * @param string $serverSideKey Pass the same key that was used to encrypt * $existingHash, or omit this parameter if no key was used. * @return bool Returns true, if the password matches the hash, * otherwise false. */ public static function verify($password, $existingHash, $serverSideKey='') { if (!defined('CRYPT_BLOWFISH')) throw new Exception('The CRYPT_BLOWFISH algorithm is required (PHP 5.3).'); // Decrypt hash with the server side key if ($serverSideKey != '') { $encryptedHash = base64_decode($existingHash); $existingHash = StoPasswordHash::decryptTwofish($encryptedHash, $serverSideKey); } // The parameters that where used to generate $existingHash, will be // extracted automatically from the first 29 characters of $existingHash. $newHash = crypt($password, $existingHash); return $newHash === $existingHash; } /** * Allows to change the server-side key, or to add/remove the encryption. * @param string $existingHash Encrypted or unencrypted hash-value. * @param string $oldKey Pass the key, that was used to encrypt * $existingHash, or pass '' if the hash is not yet encrypted. * @param string $newKey Pass a new key, to encrypt $existingHash, or * pass '' to remove the encryption. * @return string New encrypted/decrypted hash-value. */ public static function changeServerSideKey($existingHash, $oldKey, $newKey) { // decrypt hash-value $hash = $existingHash; if ($oldKey != '') { $encryptedHash = base64_decode($hash); $hash = StoPasswordHash::decryptTwofish($encryptedHash, $oldKey); } // encrypt hash-value if ($newKey != '') { $encryptedHash = StoPasswordHash::encryptTwofish($hash, $newKey); $hash = base64_encode($encryptedHash); } return $hash; } /** * Generates a random string of a given length, using the random source of * the operating system. The string contains only characters of this * alphabet: +/0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz * @param int $length Number of characters the string should have. * @return string A random base64 encoded string. */ protected static function generateRandomBase64String($length) { if (!defined('MCRYPT_DEV_URANDOM')) throw new Exception('The MCRYPT_DEV_URANDOM source is required (PHP 5.3).'); // Generate random bytes, using the operating system's random source. // Since PHP 5.3 this also uses the random source on a Windows server. // Unlike /dev/random, the /dev/urandom does not block the server, if // there is not enough entropy available. $binaryLength = (int)($length * 3 / 4 + 1); $randomBinaryString = mcrypt_create_iv($binaryLength, MCRYPT_DEV_URANDOM); $randomBase64String = base64_encode($randomBinaryString); return substr($randomBase64String, 0, $length); } /** * Encrypts data with the TWOFISH algorithm. The IV vector will be * included in the resulting binary string. * @param string $data Data to encrypt. Trailing \0 characters will get lost. * @param string $key This key will be used to encrypt the data. The key * will be hashed to a binary representation before it is used. * @return string Returns the encrypted data in form of a binary string. */ public static function encryptTwofish($data, $key) { if (!defined('MCRYPT_DEV_URANDOM')) throw new Exception('The MCRYPT_DEV_URANDOM source is required (PHP 5.3).'); if (!defined('MCRYPT_TWOFISH')) throw new Exception('The MCRYPT_TWOFISH algorithm is required (PHP 5.3).'); // The cbc mode is preferable over the ecb mode $td = mcrypt_module_open(MCRYPT_TWOFISH, '', MCRYPT_MODE_CBC, ''); // Twofish accepts a key of 32 bytes. Because usually longer strings // with only readable characters are passed, we build a binary string. $binaryKey = hash('sha256', $key, true); // Create initialization vector of 16 bytes $iv = mcrypt_create_iv(mcrypt_enc_get_iv_size($td), MCRYPT_DEV_URANDOM); mcrypt_generic_init($td, $binaryKey, $iv); $encryptedData = mcrypt_generic($td, $data); mcrypt_generic_deinit($td); mcrypt_module_close($td); // Combine iv and encrypted text return $iv . $encryptedData; } /** * Decrypts data, formerly encrypted with @see encryptTwofish. * @param string $encryptedData Binary string with encrypted data. * @param string $key This key will be used to decrypt the data. * @return string Returns the original decrypted data. */ public static function decryptTwofish($encryptedData, $key) { if (!defined('MCRYPT_TWOFISH')) throw new Exception('The MCRYPT_TWOFISH algorithm is required (PHP 5.3).'); $td = mcrypt_module_open(MCRYPT_TWOFISH, '', MCRYPT_MODE_CBC, ''); // Extract initialization vector from encrypted data $ivSize = mcrypt_enc_get_iv_size($td); $iv = substr($encryptedData, 0, $ivSize); $encryptedData = substr($encryptedData, $ivSize); $binaryKey = hash('sha256', $key, true); mcrypt_generic_init($td, $binaryKey, $iv); $decryptedData = mdecrypt_generic($td, $encryptedData); mcrypt_generic_deinit($td); mcrypt_module_close($td); // Original data was padded with 0-characters to block-size return rtrim($decryptedData, "\0"); } protected static function calculateTwofishLength($inputLength) { $td = mcrypt_module_open(MCRYPT_TWOFISH, '', MCRYPT_MODE_CBC, ''); $ivSize = mcrypt_enc_get_iv_size($td); $blockSize = mcrypt_enc_get_block_size($td); mcrypt_module_close($td); return $ivSize + ceil($inputLength / $blockSize) * $blockSize; } } ?>

Here you find the average performance (time & memory) of each version. A grayed out version indicates it didn't complete successfully (based on exit-code).

Version	System time (s)	User time (s)	Memory (MiB)
8.3.6	0.011	0.007	18.28
8.3.5	0.015	0.003	18.20
8.3.4	0.010	0.006	18.61
8.3.3	0.011	0.004	18.69
8.3.2	0.000	0.007	20.29
8.3.1	0.008	0.000	20.44
8.3.0	0.006	0.003	20.76
8.2.18	0.013	0.003	16.50
8.2.17	0.008	0.008	22.96
8.2.16	0.010	0.003	20.35
8.2.15	0.004	0.004	24.18
8.2.14	0.005	0.003	24.66
8.2.13	0.003	0.005	19.23
8.2.12	0.004	0.004	26.35
8.2.11	0.009	0.000	20.96
8.2.10	0.004	0.008	17.50
8.2.9	0.000	0.008	19.15
8.2.8	0.012	0.000	17.97
8.2.7	0.005	0.003	17.50
8.2.6	0.005	0.003	17.80
8.2.5	0.008	0.000	18.09
8.2.4	0.004	0.004	20.59
8.2.3	0.005	0.003	19.24
8.2.2	0.004	0.004	17.67
8.2.1	0.004	0.004	17.89
8.2.0	0.004	0.004	17.89
8.1.28	0.004	0.011	25.92
8.1.27	0.000	0.008	23.95
8.1.26	0.004	0.004	28.09
8.1.25	0.005	0.003	28.09
8.1.24	0.003	0.006	22.80
8.1.23	0.000	0.012	17.42
8.1.22	0.008	0.000	17.74
8.1.21	0.004	0.004	18.77
8.1.20	0.003	0.009	17.10
8.1.19	0.000	0.008	17.10
8.1.18	0.008	0.000	18.10
8.1.17	0.003	0.006	18.52
8.1.16	0.004	0.004	20.77
8.1.15	0.000	0.007	18.79
8.1.14	0.007	0.000	19.42
8.1.13	0.000	0.009	17.54
8.1.12	0.003	0.005	17.39
8.1.11	0.000	0.008	17.42
8.1.10	0.000	0.007	17.37
8.1.9	0.004	0.004	17.27
8.1.8	0.004	0.004	17.30
8.1.7	0.005	0.003	17.43
8.1.6	0.003	0.005	17.39
8.1.5	0.004	0.004	17.41
8.1.4	0.003	0.005	17.45
8.1.3	0.003	0.005	17.53
8.1.2	0.003	0.005	17.61
8.1.1	0.000	0.008	17.30
8.1.0	0.003	0.006	17.29
8.0.30	0.002	0.005	18.77
8.0.29	0.007	0.000	16.75
8.0.28	0.003	0.005	18.37
8.0.27	0.003	0.003	17.32
8.0.26	0.003	0.003	17.11
8.0.25	0.003	0.003	16.80
8.0.24	0.005	0.003	16.90
8.0.23	0.005	0.003	16.88
8.0.22	0.000	0.007	16.86
8.0.21	0.000	0.007	16.80
8.0.20	0.004	0.004	16.77
8.0.19	0.000	0.007	16.76
8.0.18	0.000	0.007	16.82
8.0.17	0.004	0.004	16.81
8.0.16	0.004	0.003	16.91
8.0.15	0.003	0.005	16.86
8.0.14	0.004	0.004	16.66
8.0.13	0.000	0.006	13.20
8.0.12	0.005	0.005	16.82
8.0.11	0.000	0.008	16.75
8.0.10	0.005	0.003	16.73
8.0.9	0.000	0.008	16.88
8.0.8	0.014	0.007	16.73
8.0.7	0.000	0.007	16.92
8.0.6	0.004	0.004	16.86
8.0.5	0.004	0.004	16.72
8.0.3	0.014	0.003	17.10
8.0.2	0.011	0.008	17.40
8.0.1	0.000	0.008	16.79
8.0.0	0.008	0.012	16.63
7.4.33	0.004	0.000	15.08
7.4.32	0.000	0.006	16.36
7.4.30	0.003	0.003	16.42
7.4.29	0.007	0.000	16.41
7.4.28	0.004	0.004	16.49
7.4.27	0.000	0.007	16.45
7.4.26	0.007	0.000	16.46
7.4.25	0.007	0.000	16.34
7.4.24	0.007	0.000	16.42
7.4.23	0.008	0.000	16.41
7.4.22	0.010	0.010	16.48
7.4.21	0.009	0.006	16.44
7.4.20	0.000	0.007	16.62
7.4.16	0.006	0.011	16.39
7.4.15	0.003	0.014	17.40
7.4.14	0.008	0.008	17.86
7.4.13	0.008	0.009	16.52
7.4.12	0.009	0.009	16.51
7.4.11	0.007	0.010	16.32
7.4.10	0.010	0.010	16.33
7.4.9	0.015	0.008	16.42
7.4.8	0.011	0.009	19.39
7.4.7	0.006	0.016	16.25
7.4.6	0.006	0.010	16.36
7.4.5	0.006	0.009	16.52
7.4.4	0.009	0.006	16.37
7.4.3	0.013	0.003	16.36
7.4.0	0.002	0.017	14.73
7.3.33	0.002	0.002	13.00
7.3.32	0.000	0.006	13.23
7.3.31	0.003	0.003	16.26
7.3.30	0.003	0.003	16.04
7.3.29	0.007	0.009	16.17
7.3.28	0.007	0.009	16.21
7.3.27	0.014	0.007	17.40
7.3.26	0.008	0.009	16.26
7.3.25	0.014	0.003	16.16
7.3.24	0.014	0.003	16.24
7.3.23	0.009	0.006	16.39
7.3.21	0.008	0.008	16.27
7.3.20	0.011	0.009	16.20
7.3.19	0.010	0.010	16.34
7.3.18	0.017	0.000	16.18
7.3.17	0.016	0.000	16.33
7.3.16	0.011	0.006	16.20
7.3.12	0.003	0.013	14.36
7.3.11	0.015	0.004	14.42
7.3.10	0.000	0.018	14.99
7.3.9	0.003	0.009	14.67
7.3.8	0.003	0.010	14.81
7.3.7	0.006	0.003	14.64
7.3.6	0.011	0.000	14.83
7.3.5	0.004	0.004	14.63
7.3.4	0.003	0.006	14.72
7.3.3	0.004	0.007	14.48
7.3.2	0.008	0.008	16.29
7.3.1	0.004	0.011	16.70
7.3.0	0.008	0.008	16.61
7.2.33	0.010	0.013	16.26
7.2.32	0.006	0.010	16.46
7.2.31	0.009	0.013	16.25
7.2.30	0.003	0.013	16.41
7.2.29	0.009	0.006	16.59
7.2.25	0.010	0.010	14.97
7.2.24	0.009	0.009	14.91
7.2.23	0.004	0.012	14.62
7.2.22	0.014	0.000	14.85
7.2.21	0.003	0.010	14.74
7.2.20	0.006	0.009	14.91
7.2.19	0.008	0.008	14.78
7.2.18	0.004	0.008	14.70
7.2.17	0.006	0.003	14.96
7.2.16	0.007	0.007	14.89
7.2.15	0.004	0.012	16.41
7.2.14	0.006	0.003	16.72
7.2.13	0.000	0.016	16.53
7.2.12	0.010	0.007	16.92
7.2.11	0.009	0.000	16.67
7.2.10	0.004	0.009	16.73
7.2.9	0.004	0.015	16.88
7.2.8	0.003	0.007	16.62
7.2.7	0.006	0.009	16.59
7.2.6	0.004	0.012	16.67
7.2.5	0.003	0.007	16.69
7.2.4	0.000	0.014	16.89
7.2.3	0.007	0.007	16.73
7.2.2	0.004	0.008	16.78
7.2.1	0.004	0.011	16.60
7.2.0	0.007	0.006	17.97
7.1.33	0.007	0.011	15.80
7.1.32	0.010	0.003	15.69
7.1.31	0.006	0.003	15.55
7.1.30	0.003	0.007	15.46
7.1.29	0.010	0.003	15.27
7.1.28	0.006	0.009	15.60
7.1.27	0.003	0.006	15.59
7.1.26	0.003	0.006	15.43
7.1.25	0.011	0.003	15.52
7.1.24	0.003	0.007	15.63
7.1.23	0.006	0.006	15.64
7.1.22	0.000	0.015	15.60
7.1.21	0.012	0.006	15.21
7.1.20	0.010	0.003	15.58
7.1.19	0.007	0.007	15.71
7.1.18	0.005	0.003	15.59
7.1.17	0.003	0.010	15.64
7.1.16	0.009	0.003	15.43
7.1.15	0.006	0.009	15.36
7.1.14	0.008	0.003	15.54
7.1.13	0.013	0.003	15.73
7.1.12	0.000	0.014	15.77
7.1.11	0.007	0.007	15.78
7.1.10	0.007	0.006	16.81
7.1.9	0.000	0.011	15.60
7.1.8	0.014	0.000	15.50
7.1.7	0.003	0.008	16.33
7.1.6	0.008	0.010	17.29
7.1.5	0.007	0.007	15.68
7.1.4	0.007	0.007	15.59
7.1.3	0.003	0.007	15.37
7.1.2	0.000	0.010	15.43
7.1.1	0.007	0.007	15.69
7.1.0	0.005	0.040	18.89
7.0.33	0.000	0.017	15.20
7.0.32	0.008	0.008	15.12
7.0.31	0.000	0.008	15.39
7.0.30	0.000	0.009	15.38
7.0.29	0.002	0.009	15.42
7.0.28	0.003	0.009	15.03
7.0.27	0.004	0.008	15.28
7.0.26	0.004	0.008	15.27
7.0.25	0.004	0.011	15.09
7.0.24	0.004	0.011	15.38
7.0.23	0.007	0.003	15.22
7.0.22	0.004	0.008	15.32
7.0.21	0.008	0.006	15.09
7.0.20	0.003	0.007	15.93
7.0.19	0.004	0.004	15.45
7.0.18	0.000	0.014	15.45
7.0.17	0.003	0.007	15.24
7.0.16	0.000	0.008	15.25
7.0.15	0.000	0.013	15.33
7.0.14	0.000	0.008	15.13
7.0.13	0.006	0.006	15.46
7.0.12	0.004	0.004	15.23
7.0.11	0.000	0.009	15.44
7.0.10	0.007	0.007	15.38
7.0.9	0.004	0.004	15.16
7.0.8	0.003	0.006	14.85
7.0.7	0.004	0.011	15.41
7.0.6	0.018	0.036	17.62
7.0.5	0.005	0.045	16.63
7.0.4	0.013	0.025	16.63
7.0.3	0.017	0.020	16.71
7.0.2	0.013	0.035	16.58
7.0.1	0.010	0.025	16.78
7.0.0	0.005	0.041	16.72
5.6.40	0.008	0.000	13.98
5.6.39	0.012	0.003	14.45
5.6.38	0.008	0.008	14.23
5.6.37	0.006	0.003	14.34
5.6.36	0.003	0.013	14.17
5.6.35	0.007	0.010	14.14
5.6.34	0.007	0.007	14.07
5.6.33	0.011	0.003	14.17
5.6.32	0.013	0.003	14.12
5.6.31	0.003	0.010	13.86
5.6.30	0.012	0.003	14.32
5.6.29	0.003	0.010	14.16
5.6.28	0.008	0.033	17.64
5.6.27	0.003	0.005	14.43
5.6.26	0.006	0.006	14.11
5.6.25	0.010	0.006	14.03
5.6.24	0.000	0.009	14.23
5.6.23	0.010	0.003	14.32
5.6.22	0.004	0.012	14.20
5.6.21	0.013	0.043	17.37
5.6.20	0.003	0.044	16.32
5.6.19	0.003	0.029	17.25
5.6.18	0.002	0.049	17.24
5.6.17	0.017	0.047	17.32
5.6.16	0.010	0.035	17.42
5.6.15	0.001	0.024	16.21
5.6.14	0.005	0.023	16.14
5.6.13	0.002	0.042	16.23
5.6.12	0.008	0.040	17.49
5.6.11	0.008	0.037	17.63
5.6.10	0.007	0.027	17.61
5.6.9	0.005	0.029	17.36
5.6.8	0.007	0.036	17.14
5.6.7	0.003	0.009	14.01
5.6.6	0.009	0.000	14.02
5.6.5	0.008	0.004	14.07
5.6.4	0.007	0.007	14.12
5.6.3	0.003	0.012	14.16
5.6.2	0.003	0.009	14.18
5.6.1	0.003	0.010	14.18
5.6.0	0.009	0.000	14.03
5.5.38	0.008	0.004	14.35
5.5.37	0.009	0.006	13.90
5.5.36	0.000	0.015	14.28
5.5.35	0.007	0.037	17.26
5.5.34	0.012	0.035	16.09
5.5.33	0.009	0.037	16.98
5.5.32	0.016	0.022	17.09
5.5.31	0.013	0.027	17.34
5.5.30	0.009	0.038	16.01
5.5.29	0.005	0.031	15.97
5.5.28	0.002	0.026	17.55
5.5.27	0.005	0.049	17.42
5.5.26	0.005	0.049	17.38
5.5.25	0.003	0.048	17.21
5.5.24	0.012	0.035	17.05
5.5.23	0.008	0.004	13.85
5.5.22	0.000	0.009	14.31
5.5.21	0.007	0.008	13.85
5.5.20	0.003	0.012	14.07
5.5.19	0.010	0.007	13.74
5.5.18	0.007	0.007	13.96
5.5.17	0.011	0.004	14.09
5.5.16	0.003	0.009	14.06
5.5.15	0.000	0.013	14.04
5.5.14	0.009	0.006	13.88
5.5.13	0.009	0.006	13.98
5.5.12	0.008	0.008	14.05
5.5.11	0.005	0.009	13.86
5.5.10	0.010	0.010	13.88
5.5.9	0.010	0.010	14.03
5.5.8	0.003	0.009	14.09
5.5.7	0.000	0.015	14.15
5.5.6	0.004	0.011	13.88
5.5.5	0.004	0.012	13.98
5.5.4	0.003	0.010	13.93
5.5.3	0.003	0.009	13.78
5.5.2	0.003	0.007	13.73
5.5.1	0.004	0.008	13.92
5.5.0	0.000	0.008	13.92