Switch from SHA-1 to SHA-256 in the security key HMACs.

src/wp-includes/class-wp-recovery-mode-key-service.php

@@ -37,15 +37,17 @@ public function generate_recovery_mode_token() {
 	 * Creates a recovery mode key.
 	 *
 	 * @since 5.2.0
-	 * @since x.y.z The stored key is now hashed using sha1 via wp_hash() instead of phpass.
+	 * @since x.y.z The stored key is now hashed using SHA-256 instead of phpass.
 	 *
 	 * @param string $token A token generated by {@see generate_recovery_mode_token()}.
 	 * @return string Recovery mode key.
 	 */
 	public function generate_and_store_recovery_mode_key( $token ) {
 		$key = wp_generate_password( 22, false );
 
-		$hashed = wp_hash( $key, 'auth', 'sha1' );
+		// If ext/hash is not present, compat.php's hash_hmac() does not support sha256.
+		$algo   = function_exists( 'hash' ) ? 'sha256' : 'sha1';
+		$hashed = wp_hash( $key, 'auth', $algo );
 
 		$records = $this->get_keys();
 
@@ -96,8 +98,11 @@ public function validate_recovery_mode_key( $token, $key, $ttl ) {
 			return new WP_Error( 'invalid_recovery_key_format', __( 'Invalid recovery key format.' ) );
 		}
 
-		// @TODO check this function is always available when this is called
-		if ( ! hash_equals( $record['hashed_key'], wp_hash( $key, 'auth', 'sha1' ) ) ) {
+		// If ext/hash is not present, compat.php's hash_hmac() does not support sha256.
+		$algo = function_exists( 'hash' ) ? 'sha256' : 'sha1';
+
+		// @TODO check `wp_hash()` is always available when this is called
+		if ( ! hash_equals( $record['hashed_key'], wp_hash( $key, 'auth', $algo ) ) ) {
 			return new WP_Error( 'hash_mismatch', __( 'Invalid recovery key.' ) );
 		}
 
@@ -152,7 +157,7 @@ private function remove_key( $token ) {
 	 * Gets the recovery key records.
 	 *
 	 * @since 5.2.0
-	 * @since x.y.z Each key is now hashed using sha1 via wp_hash() instead of phpass.
+	 * @since x.y.z Each key is now hashed using SHA-256 instead of phpass.
 	 *              Existing keys may still be hashed using phpass.
 	 *
 	 * @return array {
@@ -175,7 +180,7 @@ private function get_keys() {
 	 * Updates the recovery key records.
 	 *
 	 * @since 5.2.0
-	 * @since x.y.z Each key should now be hashed using sha1 via wp_hash() instead of phpass.
+	 * @since x.y.z Each key should now be hashed using SHA-256 instead of phpass.
 	 *
 	 * @param array $keys {
 	 *     Associative array of token => data pairs, where the data is an associative

src/wp-includes/class-wp-user-request.php

@@ -92,7 +92,7 @@ final class WP_User_Request {
 	 * Key used to confirm this request.
 	 *
 	 * @since 4.9.6
-	 * @since x.y.z The key is now hashed using sha1 via wp_hash() instead of phpass.
+	 * @since x.y.z The key is now hashed using SHA-256 instead of phpass.
 	 *
 	 * @var string
 	 */

src/wp-includes/user.php

@@ -2996,7 +2996,8 @@ function get_password_reset_key( $user ) {
 	 */
 	do_action( 'retrieve_password_key', $user->user_login, $key );
 
-	$hashed = time() . ':' . wp_hash( $key, 'auth', 'sha1' );
+	$algo   = function_exists( 'hash' ) ? 'sha256' : 'sha1';
+	$hashed = time() . ':' . wp_hash( $key, 'auth', $algo );
 
 	$key_saved = wp_update_user(
 		array(
@@ -3070,7 +3071,9 @@ function check_password_reset_key( $key, $login ) {
 
 		$hash_is_correct = ( new PasswordHash( 8, true ) )->CheckPassword( $key, $pass_key );
 	} else {
-		$hash_is_correct = hash_equals( $pass_key, wp_hash( $key, 'auth', 'sha1' ) );
+		$algo = function_exists( 'hash' ) ? 'sha256' : 'sha1';
+
+		$hash_is_correct = hash_equals( $pass_key, wp_hash( $key, 'auth', $algo ) );
 	}
 
 	if ( $hash_is_correct && $expiration_time && time() < $expiration_time ) {
@@ -4891,12 +4894,14 @@ function wp_generate_user_request_key( $request_id ) {
 	// Generate something random for a confirmation key.
 	$key = wp_generate_password( 20, false );
 
+	$algo = function_exists( 'hash' ) ? 'sha256' : 'sha1';
+
 	// Save the key, hashed.
 	wp_update_post(
 		array(
 			'ID'            => $request_id,
 			'post_status'   => 'request-pending',
-			'post_password' => wp_hash( $key, 'auth', 'sha1' ),
+			'post_password' => wp_hash( $key, 'auth', $algo ),
 		)
 	);
 
@@ -4940,14 +4945,16 @@ function wp_validate_user_request_key( $request_id, $key ) {
 	$expiration_duration = (int) apply_filters( 'user_request_key_expiration', DAY_IN_SECONDS );
 	$expiration_time     = $key_request_time + $expiration_duration;
 
+	$algo = function_exists( 'hash' ) ? 'sha256' : 'sha1';
+
 	if ( str_starts_with( $saved_key, '$P$B' ) ) {
 		// Back-compat for old phpass hashes.
 		require_once ABSPATH . WPINC . '/class-phpass.php';
 
 		if ( ! ( new PasswordHash( 8, true ) )->CheckPassword( $key, $saved_key ) ) {
 			return new WP_Error( 'invalid_key', __( 'The confirmation key is invalid for this personal data request.' ) );
 		}
-	} elseif ( ! hash_equals( $saved_key, wp_hash( $key, 'auth', 'sha1' ) ) ) {
+	} elseif ( ! hash_equals( $saved_key, wp_hash( $key, 'auth', $algo ) ) ) {
 		return new WP_Error( 'invalid_key', __( 'The confirmation key is invalid for this personal data request.' ) );
 	}