Implemented creating and saving random salt

ui/BankingiOSApp/BankingiOSApp/Security/AuthenticationService.swift

@@ -12,6 +12,8 @@ class AuthenticationService {
     
     static private let UserLoginPasswordKeychainAccountName = "UserLoginPassword"
     
+    static private let UserLoginPasswordSaltKeychainAccountName = "UserLoginPasswordSalt"
+
     private let biometricAuthenticationService = BiometricAuthenticationService()
     
     private let persistence: IBankingPersistence
@@ -97,12 +99,14 @@ class AuthenticationService {
     
     func authenticateUserWithPassword(_ enteredPassword: String, _ authenticationResult: @escaping (Bool, String?) -> Void) {
         if let storedHash = readLoginPasswordHash() {
-            if let hashOfEnteredPassword = hashLoginPassword(enteredPassword) {
-                if storedHash == hashOfEnteredPassword {
-                    let decryptDatabaseResult = openDatabase(false, enteredPassword)
-                    authenticationResult(decryptDatabaseResult, nil)
+            if let salt = readLoginPasswordSalt() {
+                if let hashOfEnteredPassword = hashLoginPassword(enteredPassword, salt) {
+                    if storedHash == hashOfEnteredPassword {
+                        let decryptDatabaseResult = openDatabase(false, enteredPassword)
+                        authenticationResult(decryptDatabaseResult, nil)
                         
-                    return
+                        return
+                    }
                 }
             }
         }
@@ -297,12 +301,16 @@ class AuthenticationService {
     @discardableResult
     private func setLoginPassword(_ newPassword: String) -> Bool {
         do {
-            if let passwordHash = hashLoginPassword(newPassword) {
-                let passwordItem = createUserLoginPasswordKeychainItem()
+            let salt = Array(generateRandomPassword(8).utf8)
             
-                try passwordItem.savePassword(passwordHash)
+            if let passwordHash = hashLoginPassword(newPassword, salt) {
+                if saveLoginPasswordSalt(salt) {
+                    let passwordItem = createUserLoginPasswordKeychainItem()
                     
-                return true
+                    try passwordItem.savePassword(passwordHash)
+                    
+                    return true
+                }
             }
         } catch {
             NSLog("Could not save login password: \(error)")
@@ -343,6 +351,57 @@ class AuthenticationService {
     }
     
     
+    @discardableResult
+    private func saveLoginPasswordSalt(_ salt: Array<UInt8>) -> Bool {
+        do {
+            let saltItem = createUserLoginPasswordSaltKeychainItem()
+            
+            if let saltBase64Encoded = salt.toBase64() {
+                try saltItem.savePassword(saltBase64Encoded)
+                
+                return true
+            }
+        } catch {
+            NSLog("Could not save login password salt: \(error)")
+        }
+        
+        return false
+    }
+    
+    private func readLoginPasswordSalt() -> Array<UInt8>? {
+        do {
+            let saltItem = createUserLoginPasswordSaltKeychainItem()
+            
+            let saltBase64Encoded = try saltItem.readPassword()
+            
+            return Array<UInt8>(base64: saltBase64Encoded)
+        } catch {
+            NSLog("Could not read login password salt: \(error)")
+        }
+        
+        return nil
+    }
+    
+    @discardableResult
+    private func deleteLoginPasswordSalt() -> Bool {
+        do {
+            let saltItem = createUserLoginPasswordSaltKeychainItem()
+            
+            try saltItem.deleteItem()
+            
+            return true
+        } catch {
+            NSLog("Could not delete login password salt: \(error)")
+        }
+        
+        return false
+    }
+    
+    private func createUserLoginPasswordSaltKeychainItem() -> KeychainPasswordItem {
+        return KeychainPasswordItem(Self.UserLoginPasswordSaltKeychainAccountName)
+    }
+    
+    
     private func deleteAllKeyChainItems() {
         deleteAuthenticationTypeKeychainItem()
         
@@ -360,11 +419,9 @@ class AuthenticationService {
     }
     
     
-    private func hashLoginPassword(_ loginPassword: String) -> String? {
+    private func hashLoginPassword(_ loginPassword: String, _ salt: Array<UInt8>) -> String? {
         do {
             let password = Array(loginPassword.utf8)
-            //let salt = Array(generateRandomPassword(8).utf8)
-            let salt = Array("aaaaaaaa".utf8)
         
             let bytes = try Scrypt(password: password, salt: salt, dkLen: 64, N: 256, r: 8, p: 1).calculate()