salted sha

ssha.sh

#!/usr/bin/env bash

# Warning: SHA1 is considered cryptographically broken.
# Do not use it for very sensitive stuff.
# It’s “good enough” for not-so-sensitive stuff.

die () {
    echo >&2 "$@"
    echo "Usage: ssha.sh username password"
    exit 1
}

[ "$#" -eq 2 ] || die "2 arguments required, $# provided."

USERNAME="$1"
PASSWORD="$2"
SALT="$(openssl rand -base64 3)"
SHA1=$(printf "$PASSWORD$SALT" | openssl dgst -binary -sha1 | sed 's#$#'"$SALT"'#' | base64)

printf "$USERNAME:{SSHA}$SHA1"