Add BCrypt and Argon2 password handling to crypto module

[randilt]

Purpose

This PR introduces implementation for BCrypt and Argon2id password hashing in Ballerina Crypto Module. It provides functions for securely hashing passwords, verifying them, and generating salts with customizable parameters. The support for both BCrypt and Argon2id allows for flexible and secure password management with different algorithms and configurable options like work factor (for BCrypt) and iterations, memory, and parallelism (for Argon2id).
Resolves: #2744

Fixes: ballerina-platform/ballerina-library#2441
Fixes: ballerina-platform/ballerina-library#2744

Examples

// Hashing a password with BCrypt
string password = "mySecurePassword123";
string|crypto:Error hash = crypto:hashPassword(password);

// Verifying a BCrypt hashed password
string password = "mySecurePassword123";
string hashedPassword = "$2a$12$LQV3c1yqBWVHxkd0LHAkCOYz6TtxMQJqhN8/LewYpwBAM7RHF.H9m";
boolean|crypto:Error matches = crypto:verifyPassword(password, hashedPassword);

// Generating a BCrypt salt
string|crypto:Error salt = crypto:generateSalt(14);

// Hashing a password with Argon2id
string password = "mySecurePassword123";
string|crypto:Error hashArgon2 = crypto:hashPasswordArgon2(password);

// Verifying an Argon2id hashed password
string password = "mySecurePassword123";
string hashedPasswordArgon2 = "$argon2id$v=19$m=65536,t=3,p=4$c29tZXNhbHQ$hash";
boolean|crypto:Error matchesArgon2 = crypto:verifyPasswordArgon2(password, hashedPasswordArgon2);

// Generating an Argon2id salt
string|crypto:Error saltArgon2 = crypto:generateSaltArgon2(4, 131072, 8);

Checklist

• Linked to an issue
• Updated the changelog
• Added tests
• Updated the spec
• Checked native-image compatibility

[daneshk]

@randilt Thank you for your contribution.

@MohamedSabthar @DimuthuMadushan Please review the new APIs.

[Marcono1234]

Sorry for this "drive-by" review. Hopefully these comments are useful, but I am not a project member so feel free to consider these comments at most as suggestions. I don't want to disrupt this review process.

[randilt]

@ThisaruGuruge @daneshk Please review the newly added changes.

Added security fixes and improvements suggested by @Marcono1234

Thanks for the suggestions! @Marcono1234

[daneshk]

@randilt One final request. Could you please add a proposal for this new API in the docs/proposals directory and link the issue? The example proposal can be found here

[randilt]

@randilt One final request. Could you please add a proposal for this new API in the docs/proposals directory and link the issue? The example proposal can be found here

@daneshk I have added the proposal here please check

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[daneshk]

LGTM

[ThisaruGuruge]

LGTM

[daneshk]

@randilt, thank you very much for your contribution. It will be included in our next release.

[randilt]

@randilt, thank you very much for your contribution. It will be included in our next release.

I'm glad to contribute! Thank you all for your suggestions and support. I learned a lot during this PR. 😊