[SOLVED] hash passwords

[gatz]

Hello,
I have to make a qt4 application that involves creating user profiles and login. For that I need a one way hashing algorithm, like bcrypt, but I can't find a qt4 library for that.

I gave it a try to hash the passwords using QCA::Cipher but I keep getting 'undefined reference' and I'm not so sure if that does what I really need.

If someone could give me a hint how to do it, I would be very grateful.
Thanks

[mcosta]

Hi and welcome to devnet,

are you forced to use Qt4 instead of Qt5? Just curious why.

Can you show the code having the issue you described??

[AlexRoot]

Hi,
I've downloaded a C++ bcrypt lib for that and included it in my Qt project with the following code in my .pro file:
Edit: I think this is the lib I've used: http://bcrypt.sourceforge.net/

unix:!macx: LIBS += -L$$PWD/../bcrypt/ -lbcrypt

INCLUDEPATH += $$PWD/../bcrypt
DEPENDPATH += $$PWD/../bcrypt

unix:!macx: PRE_TARGETDEPS += $$PWD/../bcrypt/libbcrypt.a

Then I've written something like this:

#include <bcrypt.h>
#include <QString>
static bool CheckPassword(const QString &_password, const QString &_hash)
{
    QString salt(_hash.left(29));
    char test[BCRYPT_HASHSIZE];
    char hash[BCRYPT_HASHSIZE];

    bcrypt_hashpw(_password.toStdString().c_str(), salt.toStdString().c_str(), hash);
    bcrypt_hashpw(hash, salt.toStdString().c_str(), test);

    int result = 0;
    for (int i = 0; i < _hash.length(); i++)
        result |= _hash.toStdString().c_str()[i] ^ test[i];
    return result == 0;
}

It's not perfect, but it's enough for most cases.

Regards
AlexRoot

[mcosta]

Hi,

in Qt4 you can always use QCryptographicHash

[gatz]

Is an application that must run on desktop and raspbian. Unfortunately raspbian by default comes with qt4.
QCryptographicHash has only md4/5, sha1.
I'm following this example http://delta.affinix.com/docs/qca/ciphertest_8cpp-example.html#_a7

[mcosta]

What error you're getting?
Have you linked the library to the App?

As suggested by @AlexRoot , you could try also with bcrypt

[gatz]

• I installed libqca2 from repo (using ubuntu 15.04),

• On LoginWindow.cpp I do
  #include <QtCrypto/QtCrypto>
  (if I include only <QtCrypto> I get No such file or directory)

• and I get this error for all QCA calls
  undefined reference to `QCA::Initializer::Initializer(QCA::MemoryMode, int)'

[AlexRoot]

@gatz
Like I wrote in my last post:
you need a few lines in your .pro file. With these lines you tell can tell the linker to link against your lib.
Just open your project file, right click in it and select "Add library...", then External Library.
Now you can set the include path and the library file and select your target systems.

Cheers
AlexRoot

[gatz]

thanks. It works.