Botan::Bcrypt_PBKDF_Family Class Reference

#include <bcrypt_pbkdf.h>

Inheritance diagram for Botan::Bcrypt_PBKDF_Family:

Public Member Functions
	Bcrypt_PBKDF_Family ()
std::unique_ptr< PasswordHash >	default_params () const override
std::unique_ptr< PasswordHash >	from_iterations (size_t iter) const override
std::unique_ptr< PasswordHash >	from_params (size_t i, size_t, size_t) const override
std::string	name () const override
std::unique_ptr< PasswordHash >	tune (size_t output_length, std::chrono::milliseconds msec, size_t max_memory, std::chrono::milliseconds tune_msec) const override

Static Public Member Functions
static std::unique_ptr< PasswordHashFamily >	create (std::string_view algo_spec, std::string_view provider="")
static std::unique_ptr< PasswordHashFamily >	create_or_throw (std::string_view algo_spec, std::string_view provider="")
static std::vector< std::string >	providers (std::string_view algo_spec)

Detailed Description

Definition at line 49 of file bcrypt_pbkdf.h.

Constructor & Destructor Documentation

Bcrypt_PBKDF_Family()

Botan::Bcrypt_PBKDF_Family::Bcrypt_PBKDF_Family ( )

inline

Definition at line 52 of file bcrypt_pbkdf.h.

{}

Member Function Documentation

create()

std::unique_ptr< PasswordHashFamily > Botan::PasswordHashFamily::create ( std::string_view  algo_spec, std::string_view  provider = ""  )

staticinherited

Create an instance based on a name If provider is empty then best available is chosen.

Parameters

algo_spec	algorithm name
provider	provider implementation to choose

Returns

a null pointer if the algo/provider combination cannot be found

Definition at line 50 of file pwdhash.cpp.

   {
   const SCAN_Name req(algo_spec);
 
#if defined(BOTAN_HAS_PBKDF2)
   if(req.algo_name() == "PBKDF2")
      {
      if(provider.empty() || provider == "base")
         {
         if(auto mac = MessageAuthenticationCode::create("HMAC(" + req.arg(0) + ")"))
            return std::make_unique<PBKDF2_Family>(std::move(mac));
 
         if(auto mac = MessageAuthenticationCode::create(req.arg(0)))
            return std::make_unique<PBKDF2_Family>(std::move(mac));
         }
 
      return nullptr;
      }
#endif
 
#if defined(BOTAN_HAS_SCRYPT)
   if(req.algo_name() == "Scrypt")
      {
      return std::make_unique<Scrypt_Family>();
      }
#endif
 
#if defined(BOTAN_HAS_ARGON2)
   if(req.algo_name() == "Argon2d")
      {
      return std::make_unique<Argon2_Family>(static_cast<uint8_t>(0));
      }
   else if(req.algo_name() == "Argon2i")
      {
      return std::make_unique<Argon2_Family>(static_cast<uint8_t>(1));
      }
   else if(req.algo_name() == "Argon2id")
      {
      return std::make_unique<Argon2_Family>(static_cast<uint8_t>(2));
      }
#endif
 
#if defined(BOTAN_HAS_PBKDF_BCRYPT)
   if(req.algo_name() == "Bcrypt-PBKDF")
      {
      return std::make_unique<Bcrypt_PBKDF_Family>();
      }
#endif
 
#if defined(BOTAN_HAS_PGP_S2K)
   if(req.algo_name() == "OpenPGP-S2K" && req.arg_count() == 1)
      {
      if(auto hash = HashFunction::create(req.arg(0)))
         {
         return std::make_unique<RFC4880_S2K_Family>(std::move(hash));
         }
      }
#endif
 
   BOTAN_UNUSED(req);
   BOTAN_UNUSED(provider);
 
   return nullptr;
   }

References Botan::SCAN_Name::algo_name(), Botan::SCAN_Name::arg(), Botan::SCAN_Name::arg_count(), BOTAN_UNUSED, Botan::HashFunction::create(), and Botan::MessageAuthenticationCode::create().

Referenced by botan_pwdhash(), botan_pwdhash_timed(), and Botan::PasswordHashFamily::create_or_throw().

create_or_throw()

std::unique_ptr< PasswordHashFamily > Botan::PasswordHashFamily::create_or_throw ( std::string_view  algo_spec, std::string_view  provider = ""  )

staticinherited

Create an instance based on a name, or throw if the algo/provider combination cannot be found. If provider is empty then best available is chosen.

Definition at line 118 of file pwdhash.cpp.

   {
   if(auto pbkdf = PasswordHashFamily::create(algo, provider))
      {
      return pbkdf;
      }
   throw Lookup_Error("PasswordHashFamily", algo, provider);
   }

References Botan::PasswordHashFamily::create().

Referenced by Botan::argon2_check_pwhash(), Botan::argon2_generate_pwhash(), Botan::CryptoBox::decrypt_bin(), and Botan::CryptoBox::encrypt().

default_params()

std::unique_ptr< PasswordHash > Botan::Bcrypt_PBKDF_Family::default_params ( ) const

overridevirtual

Return some default parameter set for this PBKDF that should be good enough for most users. The value returned may change over time as processing power and attacks improve.

Implements Botan::PasswordHashFamily.

Definition at line 70 of file bcrypt_pbkdf.cpp.

   {
   return this->from_iterations(32); // About 100 ms on fast machine
   }

References from_iterations().

Referenced by tune().

from_iterations()

std::unique_ptr< PasswordHash > Botan::Bcrypt_PBKDF_Family::from_iterations ( size_t  iterations ) const

overridevirtual

Return a parameter chosen based on a rough approximation with the specified iteration count. The exact value this returns for a particular algorithm may change from over time. Think of it as an alternative to tune, where time is expressed in terms of PBKDF2 iterations rather than milliseconds.

Implements Botan::PasswordHashFamily.

Definition at line 75 of file bcrypt_pbkdf.cpp.

   {
   return std::make_unique<Bcrypt_PBKDF>(iter);
   }

Referenced by default_params(), from_params(), and tune().

from_params()

std::unique_ptr< PasswordHash > Botan::Bcrypt_PBKDF_Family::from_params ( size_t  i1, size_t  i2, size_t  i3  ) const

overridevirtual

Create a password hash using some scheme specific format. Parameters are as follows:

• For PBKDF2, PGP-S2K, and Bcrypt-PBKDF, i1 is iterations
• Scrypt uses N, r, p for i{1-3}
• Argon2 family uses memory (in KB), iterations, and parallelism for i{1-3}

All unneeded parameters should be set to 0 or left blank.

Implements Botan::PasswordHashFamily.

Definition at line 80 of file bcrypt_pbkdf.cpp.

   {
   return this->from_iterations(iter);
   }

References from_iterations().

name()

std::string Botan::Bcrypt_PBKDF_Family::name ( ) const

overridevirtual

Returns

name of this PasswordHash

Implements Botan::PasswordHashFamily.

Definition at line 27 of file bcrypt_pbkdf.cpp.

   {
   return "Bcrypt-PBKDF";
   }

providers()

std::vector< std::string > Botan::PasswordHashFamily::providers ( std::string_view  algo_spec )

staticinherited

Returns

list of available providers for this algorithm, empty if not available

Definition at line 128 of file pwdhash.cpp.

   {
   return probe_providers_of<PasswordHashFamily>(algo_spec);
   }

tune()

std::unique_ptr< PasswordHash > Botan::Bcrypt_PBKDF_Family::tune ( size_t  output_length, std::chrono::milliseconds  msec, size_t  max_memory_usage_mb, std::chrono::milliseconds  tuning_msec  ) const

overridevirtual

Return a new parameter set tuned for this machine

Parameters

output_length	how long the output length will be
msec	the desired execution time in milliseconds
max_memory_usage_mb	some password hash functions can use a tunable amount of memory, in this case max_memory_usage limits the amount of RAM the returned parameters will require, in mebibytes (2**20 bytes). It may require some small amount above the request. Set to zero to place no limit at all.
tuning_msec	how long to run the tuning loop

Implements Botan::PasswordHashFamily.

Definition at line 32 of file bcrypt_pbkdf.cpp.

   {
   Timer timer("Bcrypt_PBKDF");
 
   const size_t blocks = (output_length + 32 - 1) / 32;
 
   if(blocks == 0)
      return default_params();
 
   const size_t starting_iter = 2;
 
   auto pwhash = this->from_iterations(starting_iter);
 
   timer.run_until_elapsed(tune_time, [&]() {
      uint8_t output[32] = { 0 };
      pwhash->derive_key(output, sizeof(output),
                         "test", 4,
                         nullptr, 0);
      });
 
   if(timer.events() < blocks || timer.value() == 0)
      return default_params();
 
   const uint64_t measured_time = timer.value() / (timer.events() / blocks);
 
   const uint64_t target_nsec = msec.count() * static_cast<uint64_t>(1000000);
 
   const uint64_t desired_increase = target_nsec / measured_time;
 
   if(desired_increase == 0)
      return this->from_iterations(starting_iter);
 
   return this->from_iterations(static_cast<size_t>(desired_increase * starting_iter));
   }

References default_params(), Botan::Timer::events(), from_iterations(), Botan::Timer::run_until_elapsed(), and Botan::Timer::value().

---

The documentation for this class was generated from the following files:

• src/lib/pbkdf/bcrypt_pbkdf/bcrypt_pbkdf.h
• src/lib/pbkdf/bcrypt_pbkdf/bcrypt_pbkdf.cpp