Botan::PKCS5_PBKDF2 Class Reference

#include <pbkdf2.h>

Inheritance diagram for Botan::PKCS5_PBKDF2:

Public Member Functions
PBKDF *	clone () const
template<typename Alloc>
OctetString	derive_key (size_t out_len, std::string_view passphrase, const std::vector< uint8_t, Alloc > &salt, size_t iterations) const
template<typename Alloc>
OctetString	derive_key (size_t out_len, std::string_view passphrase, const std::vector< uint8_t, Alloc > &salt, std::chrono::milliseconds msec, size_t &iterations) const
OctetString	derive_key (size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, size_t iterations) const
OctetString	derive_key (size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, std::chrono::milliseconds msec, size_t &iterations) const
std::string	name () const override
std::unique_ptr< PBKDF >	new_object () const override
size_t	pbkdf (uint8_t output_buf[], size_t output_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, size_t iterations, std::chrono::milliseconds msec) const override
secure_vector< uint8_t >	pbkdf_iterations (size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, size_t iterations) const
void	pbkdf_iterations (uint8_t out[], size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, size_t iterations) const
secure_vector< uint8_t >	pbkdf_timed (size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, std::chrono::milliseconds msec, size_t &iterations) const
void	pbkdf_timed (uint8_t out[], size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, std::chrono::milliseconds msec, size_t &iterations) const
	PKCS5_PBKDF2 (MessageAuthenticationCode *mac_fn)
	PKCS5_PBKDF2 (std::unique_ptr< MessageAuthenticationCode > mac_fn)

Static Public Member Functions
static std::unique_ptr< PBKDF >	create (std::string_view algo_spec, std::string_view provider="")
static std::unique_ptr< PBKDF >	create_or_throw (std::string_view algo_spec, std::string_view provider="")
static std::vector< std::string >	providers (std::string_view algo_spec)

Detailed Description

PKCS #5 PBKDF2 (old interface)

Definition at line 100 of file pbkdf2.h.

Constructor & Destructor Documentation

PKCS5_PBKDF2() [1/2]

Botan::PKCS5_PBKDF2::PKCS5_PBKDF2 ( MessageAuthenticationCode * mac_fn )

inlineexplicit

Create a PKCS #5 instance using the specified message auth code

Parameters

mac_fn

the MAC object to use as PRF

Definition at line 119 of file pbkdf2.h.

: m_mac(mac_fn) {}

References PKCS5_PBKDF2().

Referenced by PKCS5_PBKDF2(), and PKCS5_PBKDF2().

PKCS5_PBKDF2() [2/2]

Botan::PKCS5_PBKDF2::PKCS5_PBKDF2 ( std::unique_ptr< MessageAuthenticationCode > mac_fn )

inlineexplicit

Create a PKCS #5 instance using the specified message auth code

Parameters

mac_fn

the MAC object to use as PRF

Definition at line 126 of file pbkdf2.h.

: m_mac(std::move(mac_fn)) {}

References PKCS5_PBKDF2().

Member Function Documentation

clone()

PBKDF * Botan::PBKDF::clone ( ) const

inlineinherited

Returns

new instance of this same algorithm

Definition at line 65 of file pbkdf.h.

{ return this->new_object().release(); }

References new_object().

create()

std::unique_ptr< PBKDF > Botan::PBKDF::create ( std::string_view algo_spec, std::string_view provider = "" )

staticinherited

Create an instance based on a name If provider is empty then best available is chosen.

Parameters

algo_spec	algorithm name
provider	provider implementation to choose

Returns

a null pointer if the algo/provider combination cannot be found

Definition at line 24 of file pbkdf.cpp.

                                                                                    {
   const SCAN_Name req(algo_spec);
 
#if defined(BOTAN_HAS_PBKDF2)
   if(req.algo_name() == "PBKDF2") {
      if(provider.empty() || provider == "base") {
         if(auto mac = MessageAuthenticationCode::create("HMAC(" + req.arg(0) + ")")) {
            return std::make_unique<PKCS5_PBKDF2>(std::move(mac));
         }
 
         if(auto mac = MessageAuthenticationCode::create(req.arg(0))) {
            return std::make_unique<PKCS5_PBKDF2>(std::move(mac));
         }
      }
 
      return nullptr;
   }
#endif
 
#if defined(BOTAN_HAS_PGP_S2K)
   if(req.algo_name() == "OpenPGP-S2K" && req.arg_count() == 1) {
      if(auto hash = HashFunction::create(req.arg(0))) {
         return std::make_unique<OpenPGP_S2K>(std::move(hash));
      }
   }
#endif
 
   BOTAN_UNUSED(req, provider);
 
   return nullptr;
}

References Botan::SCAN_Name::algo_name(), Botan::SCAN_Name::arg(), Botan::SCAN_Name::arg_count(), BOTAN_UNUSED, Botan::HashFunction::create(), and Botan::MessageAuthenticationCode::create().

Referenced by create_or_throw().

create_or_throw()

std::unique_ptr< PBKDF > Botan::PBKDF::create_or_throw ( std::string_view algo_spec, std::string_view provider = "" )

staticinherited

Create an instance based on a name, or throw if the algo/provider combination cannot be found. If provider is empty then best available is chosen.

Definition at line 57 of file pbkdf.cpp.

                                                                                        {
   if(auto pbkdf = PBKDF::create(algo, provider)) {
      return pbkdf;
   }
   throw Lookup_Error("PBKDF", algo, provider);
}

References create(), and pbkdf().

Referenced by Botan::get_pbkdf(), and Botan::get_s2k().

derive_key() [1/4]

template<typename Alloc>

OctetString Botan::PBKDF::derive_key ( size_t out_len, std::string_view passphrase, const std::vector< uint8_t, Alloc > & salt, size_t iterations ) const

inlineinherited

Derive a key from a passphrase

Parameters

out_len	the desired length of the key to produce
passphrase	the password to derive the key from
salt	a randomly chosen salt
iterations	the number of iterations to use (use 10K or more)

Definition at line 189 of file pbkdf.h.

                                                      {
         return OctetString(pbkdf_iterations(out_len, passphrase, salt.data(), salt.size(), iterations));
      }

References pbkdf_iterations().

derive_key() [2/4]

template<typename Alloc>

OctetString Botan::PBKDF::derive_key ( size_t out_len, std::string_view passphrase, const std::vector< uint8_t, Alloc > & salt, std::chrono::milliseconds msec, size_t & iterations ) const

inlineinherited

Derive a key from a passphrase using a certain amount of time

Parameters

out_len	the desired length of the key to produce
passphrase	the password to derive the key from
salt	a randomly chosen salt
msec	is how long to run the PBKDF
iterations	is set to the number of iterations used

Definition at line 223 of file pbkdf.h.

                                                       {
         return OctetString(pbkdf_timed(out_len, passphrase, salt.data(), salt.size(), msec, iterations));
      }

References pbkdf_timed().

derive_key() [3/4]

OctetString Botan::PBKDF::derive_key ( size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, size_t iterations ) const

inlineinherited

Derive a key from a passphrase

Parameters

out_len	the desired length of the key to produce
passphrase	the password to derive the key from
salt	a randomly chosen salt
salt_len	length of salt in bytes
iterations	the number of iterations to use (use 10K or more)

Definition at line 176 of file pbkdf.h.

                                                                                                                    {
         return OctetString(pbkdf_iterations(out_len, passphrase, salt, salt_len, iterations));
      }

References pbkdf_iterations().

Referenced by Botan::check_passhash9(), and Botan::generate_passhash9().

derive_key() [4/4]

OctetString Botan::PBKDF::derive_key ( size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, std::chrono::milliseconds msec, size_t & iterations ) const

inlineinherited

Derive a key from a passphrase

Parameters

out_len	the desired length of the key to produce
passphrase	the password to derive the key from
salt	a randomly chosen salt
salt_len	length of salt in bytes
msec	is how long to run the PBKDF
iterations	is set to the number of iterations used

Definition at line 205 of file pbkdf.h.

                                                       {
         return OctetString(pbkdf_timed(out_len, passphrase, salt, salt_len, msec, iterations));
      }

References pbkdf_timed().

name()

std::string Botan::PKCS5_PBKDF2::name ( ) const

overridevirtual

Returns

name of this PBKDF

Implements Botan::PBKDF.

Definition at line 151 of file pbkdf2.cpp.

                                   {
   return fmt("PBKDF2({})", m_mac->name());
}

References Botan::fmt().

new_object()

std::unique_ptr< PBKDF > Botan::PKCS5_PBKDF2::new_object ( ) const

overridevirtual

Returns

new instance of this same algorithm

Implements Botan::PBKDF.

Definition at line 155 of file pbkdf2.cpp.

                                                    {
   return std::make_unique<PKCS5_PBKDF2>(m_mac->new_object());
}

pbkdf()

size_t Botan::PKCS5_PBKDF2::pbkdf ( uint8_t out[], size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, size_t iterations, std::chrono::milliseconds msec ) const

overridevirtual

Derive a key from a passphrase for a number of iterations specified by either iterations or if iterations == 0 then running until msec time has elapsed.

Parameters

out	buffer to store the derived key, must be of out_len bytes
out_len	the desired length of the key to produce
passphrase	the password to derive the key from
salt	a randomly chosen salt
salt_len	length of salt in bytes
iterations	the number of iterations to use (use 10K or more)
msec	if iterations is zero, then instead the PBKDF is run until msec milliseconds has passed.

Returns

the number of iterations performed

Implements Botan::PBKDF.

Definition at line 133 of file pbkdf2.cpp.

                                                             {
   if(iterations == 0) {
      iterations = tune_pbkdf2(*m_mac, key_len, msec);
   }
 
   PBKDF2 pbkdf2(*m_mac, iterations);
 
   pbkdf2.derive_key(key, key_len, password.data(), password.size(), salt, salt_len);
 
   return iterations;
}

References Botan::pbkdf2().

pbkdf_iterations() [1/2]

secure_vector< uint8_t > Botan::PBKDF::pbkdf_iterations ( size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, size_t iterations ) const

inherited

Derive a key from a passphrase for a number of iterations.

Parameters

out_len	the desired length of the key to produce
passphrase	the password to derive the key from
salt	a randomly chosen salt
salt_len	length of salt in bytes
iterations	the number of iterations to use (use 10K or more)

Returns

the derived key

Definition at line 93 of file pbkdf.cpp.

                                                                                                              {
   secure_vector<uint8_t> out(out_len);
   pbkdf_iterations(out.data(), out_len, passphrase, salt, salt_len, iterations);
   return out;
}

References pbkdf_iterations().

pbkdf_iterations() [2/2]

void Botan::PBKDF::pbkdf_iterations ( uint8_t out[], size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, size_t iterations ) const

inherited

Derive a key from a passphrase for a number of iterations.

Parameters

out	buffer to store the derived key, must be of out_len bytes
out_len	the desired length of the key to produce
passphrase	the password to derive the key from
salt	a randomly chosen salt
salt_len	length of salt in bytes
iterations	the number of iterations to use (use 10K or more)

Definition at line 78 of file pbkdf.cpp.

                                                      {
   if(iterations == 0) {
      throw Invalid_Argument(name() + ": Invalid iteration count");
   }
 
   const size_t iterations_run =
      pbkdf(out, out_len, passphrase, salt, salt_len, iterations, std::chrono::milliseconds(0));
   BOTAN_ASSERT_EQUAL(iterations, iterations_run, "Expected PBKDF iterations");
}

References BOTAN_ASSERT_EQUAL, name(), and pbkdf().

Referenced by derive_key(), derive_key(), pbkdf(), and pbkdf_iterations().

pbkdf_timed() [1/2]

secure_vector< uint8_t > Botan::PBKDF::pbkdf_timed ( size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, std::chrono::milliseconds msec, size_t & iterations ) const

inherited

Derive a key from a passphrase, running until msec time has elapsed.

Parameters

out_len	the desired length of the key to produce
passphrase	the password to derive the key from
salt	a randomly chosen salt
salt_len	length of salt in bytes
msec	if iterations is zero, then instead the PBKDF is run until msec milliseconds has passed.
iterations	set to the number iterations executed

Returns

the derived key

Definition at line 100 of file pbkdf.cpp.

                                                                    {
   secure_vector<uint8_t> out(out_len);
   pbkdf_timed(out.data(), out_len, passphrase, salt, salt_len, msec, iterations);
   return out;
}

References pbkdf_timed().

pbkdf_timed() [2/2]

void Botan::PBKDF::pbkdf_timed ( uint8_t out[], size_t out_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, std::chrono::milliseconds msec, size_t & iterations ) const

inherited

Derive a key from a passphrase, running until msec time has elapsed.

Parameters

out	buffer to store the derived key, must be of out_len bytes
out_len	the desired length of the key to produce
passphrase	the password to derive the key from
salt	a randomly chosen salt
salt_len	length of salt in bytes
msec	if iterations is zero, then instead the PBKDF is run until msec milliseconds has passed.
iterations	set to the number iterations executed

Definition at line 68 of file pbkdf.cpp.

                                                  {
   iterations = pbkdf(out, out_len, passphrase, salt, salt_len, 0, msec);
}

References pbkdf().

Referenced by derive_key(), derive_key(), pbkdf(), and pbkdf_timed().

providers()

std::vector< std::string > Botan::PBKDF::providers ( std::string_view algo_spec )

staticinherited

Returns

list of available providers for this algorithm, empty if not available

Definition at line 64 of file pbkdf.cpp.

                                                              {
   return probe_providers_of<PBKDF>(algo_spec);
}

References Botan::probe_providers_of().

---

The documentation for this class was generated from the following files:

• src/lib/pbkdf/pbkdf2/pbkdf2.h
• src/lib/pbkdf/pbkdf2/pbkdf2.cpp