Only store leading 13 bits of password hash.

chrome/browser/ui/webui/signin/user_manager_screen_handler.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/webui/signin/user_manager_screen_handler.h"
 
 #include "base/bind.h"
 #include "base/prefs/pref_service.h"
 #include "base/strings/utf_string_conversions.h"
 #include "base/value_conversions.h"
@@ skipping 323 matching lines @@
   const ProfileInfoCache& info_cache =
       g_browser_process->profile_manager()->GetProfileInfoCache();
   size_t profile_index = info_cache.GetIndexOfProfileWithPath(profile_path);
 
   if (profile_index == std::string::npos) {
     NOTREACHED();
     return;
   }
 
   authenticating_profile_index_ = profile_index;
-  if (!chrome::ValidateLocalAuthCredentials(profile_index, password)) {
+  if (!LocalAuth::ValidateLocalAuthCredentials(profile_index, password)) {
     // Make a second attempt via an on-line authentication call.  This handles
     // profiles that are missing sign-in credentials and also cases where the
     // password has been changed externally.
     client_login_.reset(new GaiaAuthFetcher(
         this,
         GaiaConstants::kChromeSource,
         web_ui()->GetWebContents()->GetBrowserContext()->GetRequestContext()));
 
     client_login_->StartClientLogin(
         base::UTF16ToUTF8(email_address),
@@ skipping 91 matching lines @@
   std::string email;
   CHECK(args->GetString(0, &email));
   SetAuthType(email,
               ScreenlockBridge::LockHandler::FORCE_OFFLINE_PASSWORD,
               base::string16());
   HideUserPodCustomIcon(email);
 }
 
 void UserManagerScreenHandler::OnClientLoginSuccess(
     const ClientLoginResult& result) {
-  chrome::SetLocalAuthCredentials(authenticating_profile_index_,
-                                  password_attempt_);
+  LocalAuth::SetLocalAuthCredentials(authenticating_profile_index_,
+                                     password_attempt_);
   ReportAuthenticationResult(true, ProfileMetrics::AUTH_ONLINE);
 }
 
 void UserManagerScreenHandler::OnClientLoginFailure(
     const GoogleServiceAuthError& error) {
   const GoogleServiceAuthError::State state = error.state();
   // Some "error" results mean the password was correct but some other action
   // should be taken.  For our purposes, we only care that the password was
   // correct so count those as a success.
   bool success = (state == GoogleServiceAuthError::NONE ||
                   state == GoogleServiceAuthError::CAPTCHA_REQUIRED ||
                   state == GoogleServiceAuthError::TWO_FACTOR ||
                   state == GoogleServiceAuthError::ACCOUNT_DELETED ||
                   state == GoogleServiceAuthError::ACCOUNT_DISABLED ||
                   state == GoogleServiceAuthError::WEB_LOGIN_REQUIRED);
 
   // If the password was correct, the user must have changed it since the
   // profile was locked.  Save the password to streamline future unlocks.
   if (success) {
     DCHECK(!password_attempt_.empty());
-    chrome::SetLocalAuthCredentials(authenticating_profile_index_,
-                                    password_attempt_);
+    LocalAuth::SetLocalAuthCredentials(authenticating_profile_index_,
+                                       password_attempt_);
   }
 
   bool offline = (state == GoogleServiceAuthError::CONNECTION_FAILED ||
                   state == GoogleServiceAuthError::SERVICE_UNAVAILABLE ||
                   state == GoogleServiceAuthError::REQUEST_CANCELED);
   ProfileMetrics::ProfileAuth failure_metric =
       offline ? ProfileMetrics::AUTH_FAILED_OFFLINE :
                 ProfileMetrics::AUTH_FAILED;
   ReportAuthenticationResult(
       success, success ? ProfileMetrics::AUTH_ONLINE : failure_metric);
@@ skipping 268 matching lines @@
     Profile* profile, Profile::CreateStatus profile_create_status) {
   Browser* browser = chrome::FindAnyBrowser(profile, false, desktop_type_);
   if (browser && browser->window()) {
     OnBrowserWindowReady(browser);
   } else {
     registrar_.Add(this,
                    chrome::NOTIFICATION_BROWSER_WINDOW_READY,
                    content::NotificationService::AllSources());
   }
 }