Botan 3.0.0-alpha0
Crypto and TLS for C&
Public Member Functions | Static Public Member Functions | List of all members
Botan::Bcrypt_PBKDF_Family Class Referencefinal

#include <bcrypt_pbkdf.h>

Inheritance diagram for Botan::Bcrypt_PBKDF_Family:
Botan::PasswordHashFamily

Public Member Functions

 Bcrypt_PBKDF_Family ()
 
std::unique_ptr< PasswordHashdefault_params () const override
 
std::unique_ptr< PasswordHashfrom_iterations (size_t iter) const override
 
std::unique_ptr< PasswordHashfrom_params (size_t i, size_t, size_t) const override
 
std::string name () const override
 
std::unique_ptr< PasswordHashtune (size_t output_length, std::chrono::milliseconds msec, size_t max_memory) const override
 

Static Public Member Functions

static std::unique_ptr< PasswordHashFamilycreate (const std::string &algo_spec, const std::string &provider="")
 
static std::unique_ptr< PasswordHashFamilycreate_or_throw (const std::string &algo_spec, const std::string &provider="")
 
static std::vector< std::string > providers (const std::string &algo_spec)
 

Detailed Description

Definition at line 48 of file bcrypt_pbkdf.h.

Constructor & Destructor Documentation

◆ Bcrypt_PBKDF_Family()

Botan::Bcrypt_PBKDF_Family::Bcrypt_PBKDF_Family ( )
inline

Definition at line 51 of file bcrypt_pbkdf.h.

51{}

Member Function Documentation

◆ create()

std::unique_ptr< PasswordHashFamily > Botan::PasswordHashFamily::create ( const std::string &  algo_spec,
const std::string &  provider = "" 
)
staticinherited

Create an instance based on a name If provider is empty then best available is chosen.

Parameters
algo_specalgorithm name
providerprovider implementation to choose
Returns
a null pointer if the algo/provider combination cannot be found

Definition at line 49 of file pwdhash.cpp.

51 {
52 const SCAN_Name req(algo_spec);
53
54#if defined(BOTAN_HAS_PBKDF2)
55 if(req.algo_name() == "PBKDF2")
56 {
57 if(provider.empty() || provider == "base")
58 {
59 if(auto mac = MessageAuthenticationCode::create("HMAC(" + req.arg(0) + ")"))
60 return std::make_unique<PBKDF2_Family>(mac.release());
61
62 if(auto mac = MessageAuthenticationCode::create(req.arg(0)))
63 return std::make_unique<PBKDF2_Family>(mac.release());
64 }
65
66 return nullptr;
67 }
68#endif
69
70#if defined(BOTAN_HAS_SCRYPT)
71 if(req.algo_name() == "Scrypt")
72 {
73 return std::make_unique<Scrypt_Family>();
74 }
75#endif
76
77#if defined(BOTAN_HAS_ARGON2)
78 if(req.algo_name() == "Argon2d")
79 {
80 return std::make_unique<Argon2_Family>(static_cast<uint8_t>(0));
81 }
82 else if(req.algo_name() == "Argon2i")
83 {
84 return std::make_unique<Argon2_Family>(static_cast<uint8_t>(1));
85 }
86 else if(req.algo_name() == "Argon2id")
87 {
88 return std::make_unique<Argon2_Family>(static_cast<uint8_t>(2));
89 }
90#endif
91
92#if defined(BOTAN_HAS_PBKDF_BCRYPT)
93 if(req.algo_name() == "Bcrypt-PBKDF")
94 {
95 return std::make_unique<Bcrypt_PBKDF_Family>();
96 }
97#endif
98
99#if defined(BOTAN_HAS_PGP_S2K)
100 if(req.algo_name() == "OpenPGP-S2K" && req.arg_count() == 1)
101 {
102 if(auto hash = HashFunction::create(req.arg(0)))
103 {
104 return std::make_unique<RFC4880_S2K_Family>(hash.release());
105 }
106 }
107#endif
108
109 BOTAN_UNUSED(req);
110 BOTAN_UNUSED(provider);
111
112 return nullptr;
113 }
#define BOTAN_UNUSED(...)
Definition: assert.h:141
static std::unique_ptr< HashFunction > create(const std::string &algo_spec, const std::string &provider="")
Definition: hash.cpp:98
static std::unique_ptr< MessageAuthenticationCode > create(const std::string &algo_spec, const std::string &provider="")
Definition: mac.cpp:46
MechanismType hash

References Botan::SCAN_Name::algo_name(), Botan::SCAN_Name::arg(), Botan::SCAN_Name::arg_count(), BOTAN_UNUSED, Botan::HashFunction::create(), Botan::MessageAuthenticationCode::create(), and hash.

Referenced by botan_pwdhash(), botan_pwdhash_timed(), and Botan::PasswordHashFamily::create_or_throw().

◆ create_or_throw()

std::unique_ptr< PasswordHashFamily > Botan::PasswordHashFamily::create_or_throw ( const std::string &  algo_spec,
const std::string &  provider = "" 
)
staticinherited

Create an instance based on a name, or throw if the algo/provider combination cannot be found. If provider is empty then best available is chosen.

Definition at line 117 of file pwdhash.cpp.

119 {
120 if(auto pbkdf = PasswordHashFamily::create(algo, provider))
121 {
122 return pbkdf;
123 }
124 throw Lookup_Error("PasswordHashFamily", algo, provider);
125 }
static std::unique_ptr< PasswordHashFamily > create(const std::string &algo_spec, const std::string &provider="")
Definition: pwdhash.cpp:49

References Botan::PasswordHashFamily::create().

Referenced by Botan::argon2_check_pwhash(), Botan::argon2_generate_pwhash(), Botan::CryptoBox::decrypt_bin(), and Botan::CryptoBox::encrypt().

◆ default_params()

std::unique_ptr< PasswordHash > Botan::Bcrypt_PBKDF_Family::default_params ( ) const
overridevirtual

Return some default parameter set for this PBKDF that should be good enough for most users. The value returned may change over time as processing power and attacks improve.

Implements Botan::PasswordHashFamily.

Definition at line 69 of file bcrypt_pbkdf.cpp.

70 {
71 return this->from_iterations(32); // About 100 ms on fast machine
72 }
std::unique_ptr< PasswordHash > from_iterations(size_t iter) const override

References from_iterations().

Referenced by tune().

◆ from_iterations()

std::unique_ptr< PasswordHash > Botan::Bcrypt_PBKDF_Family::from_iterations ( size_t  iterations) const
overridevirtual

Return a parameter chosen based on a rough approximation with the specified iteration count. The exact value this returns for a particular algorithm may change from over time. Think of it as an alternative to tune, where time is expressed in terms of PBKDF2 iterations rather than milliseconds.

Implements Botan::PasswordHashFamily.

Definition at line 74 of file bcrypt_pbkdf.cpp.

75 {
76 return std::make_unique<Bcrypt_PBKDF>(iter);
77 }

Referenced by default_params(), from_params(), and tune().

◆ from_params()

std::unique_ptr< PasswordHash > Botan::Bcrypt_PBKDF_Family::from_params ( size_t  i1,
size_t  i2,
size_t  i3 
) const
overridevirtual

Create a password hash using some scheme specific format. Parameters are as follows:

  • For PBKDF2, PGP-S2K, and Bcrypt-PBKDF, i1 is iterations
  • Scrypt uses N, r, p for i{1-3}
  • Argon2 family uses memory (in KB), iterations, and parallelism for i{1-3}

All unneeded parameters should be set to 0 or left blank.

Implements Botan::PasswordHashFamily.

Definition at line 79 of file bcrypt_pbkdf.cpp.

80 {
81 return this->from_iterations(iter);
82 }

References from_iterations().

◆ name()

std::string Botan::Bcrypt_PBKDF_Family::name ( ) const
overridevirtual
Returns
name of this PasswordHash

Implements Botan::PasswordHashFamily.

Definition at line 26 of file bcrypt_pbkdf.cpp.

27 {
28 return "Bcrypt-PBKDF";
29 }

◆ providers()

std::vector< std::string > Botan::PasswordHashFamily::providers ( const std::string &  algo_spec)
staticinherited
Returns
list of available providers for this algorithm, empty if not available

Definition at line 127 of file pwdhash.cpp.

128 {
129 return probe_providers_of<PasswordHashFamily>(algo_spec);
130 }

◆ tune()

std::unique_ptr< PasswordHash > Botan::Bcrypt_PBKDF_Family::tune ( size_t  output_length,
std::chrono::milliseconds  msec,
size_t  max_memory_usage_mb 
) const
overridevirtual

Return a new parameter set tuned for this machine

Parameters
output_lengthhow long the output length will be
msecthe desired execution time in milliseconds
max_memory_usage_mbsome password hash functions can use a tunable amount of memory, in this case max_memory_usage limits the amount of RAM the returned parameters will require, in mebibytes (2**20 bytes). It may require some small amount above the request. Set to zero to place no limit at all.

Implements Botan::PasswordHashFamily.

Definition at line 31 of file bcrypt_pbkdf.cpp.

34 {
35 Timer timer("Bcrypt_PBKDF");
36 const auto tune_time = BOTAN_PBKDF_TUNING_TIME;
37
38 const size_t blocks = (output_length + 32 - 1) / 32;
39
40 if(blocks == 0)
41 return default_params();
42
43 const size_t starting_iter = 2;
44
45 auto pwhash = this->from_iterations(starting_iter);
46
47 timer.run_until_elapsed(tune_time, [&]() {
48 uint8_t output[32] = { 0 };
49 pwhash->derive_key(output, sizeof(output),
50 "test", 4,
51 nullptr, 0);
52 });
53
54 if(timer.events() < blocks || timer.value() == 0)
55 return default_params();
56
57 const uint64_t measured_time = timer.value() / (timer.events() / blocks);
58
59 const uint64_t target_nsec = msec.count() * static_cast<uint64_t>(1000000);
60
61 const uint64_t desired_increase = target_nsec / measured_time;
62
63 if(desired_increase == 0)
64 return this->from_iterations(starting_iter);
65
66 return this->from_iterations(static_cast<size_t>(desired_increase * starting_iter));
67 }
std::unique_ptr< PasswordHash > default_params() const override
#define BOTAN_PBKDF_TUNING_TIME
Definition: build.h:447

References BOTAN_PBKDF_TUNING_TIME, default_params(), Botan::Timer::events(), from_iterations(), Botan::Timer::run_until_elapsed(), and Botan::Timer::value().


The documentation for this class was generated from the following files: