As @VJean allready pointed out....
Is this some kind of a joke?
PHP Code:
generatePassword: function(password, email)
{
var hmacSHA512 = function (key) {
var hasher = new sjcl.misc.hmac(key, sjcl.hash.sha512);
this.encrypt = function ()
{
return hasher.encrypt.apply(hasher, arguments);
};
};
var salt = email.toLowerCase() + "ts3Login" + password;
var iterations = 10000;
var bits = 384;
return sjcl.codec.base64.fromBits(sjcl.misc.pbkdf2(password, salt, iterations, bits, hmacSHA512));
}
Why is the complete hash algorithm for the password written in JS this could be easily done in php, where nobody could view the hash algorithm with everything needed to reverse to the original password from the hash?
Also, why didn't anyone answer to VJeans post yet? This is (at least for me) a deal breaker in using this.