FastHash final class

Minn\Auth\FastHash · public/minn/src/Minn/Auth/FastHash.php · 23 lines

The reference's hash for high-entropy secrets ("$generic$", WordPress 6.8 and later): a 30-byte keyed BLAKE2b digest (sodium's generic hash, keyed by the scheme's fixed label) in URL-safe base64 without padding. Reset keys and application passwords are stored this way, so a secret minted on either stack verifies on the other. Pinned against hashes the reference made (tests/unit/auth-hashes.php). Without the sodium extension nothing can be hashed or verified this way.

Used by 2

ApplicationPasswords PasswordReset

Constants and properties

const	`PREFIX` = `'$generic$'`
private	`KEY` = `'wp_fast_hash_6.8+'`

Public

static	`available(): bool`#	Whether this PHP can make and check these hashes (the sodium extension).
static	`hash(string $secret): string`#	The "$generic$" hash of a secret.
static	`verify(string $secret, string $hash): bool`#	Whether a secret matches a "$generic$" hash; false for any other kind of hash.