9#include <botan/pbkdf2.h>
11#include <botan/exceptn.h>
12#include <botan/mem_ops.h>
13#include <botan/internal/fmt.h>
14#include <botan/internal/mem_utils.h>
15#include <botan/internal/time_utils.h>
31 std::chrono::milliseconds msec,
32 std::chrono::milliseconds tune_time = std::chrono::milliseconds(10)) {
33 if(output_length == 0) {
37 const size_t prf_sz = prf.output_length();
41 const size_t trial_iterations = 2000;
45 prf.set_key(
nullptr, 0);
47 const uint64_t duration_nsec =
measure_cost(tune_time, [&]() {
48 uint8_t out[12] = {0};
49 uint8_t salt[12] = {0};
50 pbkdf2(prf, out,
sizeof(out), salt,
sizeof(salt), trial_iterations);
53 const uint64_t desired_nsec =
static_cast<uint64_t
>(msec.count()) * 1000000;
55 if(duration_nsec > desired_nsec) {
56 return trial_iterations;
59 const size_t blocks_needed = (output_length + prf_sz - 1) / prf_sz;
61 const size_t multiplier =
static_cast<size_t>(desired_nsec / duration_nsec / blocks_needed);
64 return trial_iterations;
66 return trial_iterations * multiplier;
75 std::string_view password,
79 std::chrono::milliseconds msec) {
81 iterations = tune_pbkdf2(prf, out_len, msec);
86 pbkdf2.derive_key(out, out_len, password.data(), password.size(), salt, salt_len);
112 uint32_t counter = 1;
114 const size_t prf_output = std::min<size_t>(prf_sz, out_len);
116 prf.
update(salt, salt_len);
120 xor_buf(out, U.data(), prf_output);
122 for(
size_t i = 1; i != iterations; ++i) {
125 xor_buf(out, U.data(), prf_output);
128 out_len -= prf_output;
136 std::string_view password,
137 const uint8_t salt[],
140 std::chrono::milliseconds msec)
const {
141 if(iterations == 0) {
142 iterations = tune_pbkdf2(*m_mac, key_len, msec);
147 pbkdf2.derive_key(key, key_len, password.data(), password.size(), salt, salt_len);
153 return fmt(
"PBKDF2({})", m_mac->name());
157 return std::make_unique<PKCS5_PBKDF2>(m_mac->new_object());
163 m_prf(prf.new_object()), m_iterations(tune_pbkdf2(*m_prf, olen, msec)) {}
166 return fmt(
"PBKDF2({},{})", m_prf->name(), m_iterations);
171 const char* password,
172 const size_t password_len,
173 const uint8_t salt[],
174 size_t salt_len)
const {
175 pbkdf2_set_key(*m_prf, password, password_len);
176 pbkdf2(*m_prf, out, out_len, salt, salt_len, m_iterations);
180 return fmt(
"PBKDF2({})", m_prf->name());
184 std::chrono::milliseconds msec,
186 std::chrono::milliseconds tune_time)
const {
187 auto iterations = tune_pbkdf2(*m_prf, output_len, msec, tune_time);
188 return std::make_unique<PBKDF2>(*m_prf, iterations);
192 return std::make_unique<PBKDF2>(*m_prf, 150000);
196 return std::make_unique<PBKDF2>(*m_prf, iter);
200 return std::make_unique<PBKDF2>(*m_prf, iter);
#define BOTAN_ASSERT_NOMSG(expr)
void update(const uint8_t in[], size_t length)
virtual size_t output_length() const =0
void update_be(uint16_t val)
void final(uint8_t out[])
std::string name() const override
std::unique_ptr< PasswordHash > default_params() const override
std::unique_ptr< PasswordHash > from_iterations(size_t iter) const override
std::unique_ptr< PasswordHash > tune(size_t output_len, std::chrono::milliseconds msec, size_t max_memory, std::chrono::milliseconds tune_msec) const override
std::unique_ptr< PasswordHash > from_params(size_t iter, size_t, size_t) const override
PBKDF2(const MessageAuthenticationCode &prf, size_t iter)
void derive_key(uint8_t out[], size_t out_len, const char *password, size_t password_len, const uint8_t salt[], size_t salt_len) const override
std::string to_string() const override
size_t pbkdf(uint8_t output_buf[], size_t output_len, std::string_view passphrase, const uint8_t salt[], size_t salt_len, size_t iterations, std::chrono::milliseconds msec) const override
std::string name() const override
std::unique_ptr< PBKDF > new_object() const override
std::span< const uint8_t > as_span_of_bytes(const char *s, size_t len)
std::string fmt(std::string_view format, const T &... args)
constexpr void xor_buf(ranges::contiguous_output_range< uint8_t > auto &&out, ranges::contiguous_range< uint8_t > auto &&in)
std::vector< T, secure_allocator< T > > secure_vector
uint64_t measure_cost(std::chrono::milliseconds trial_msec, F func)
size_t pbkdf2(MessageAuthenticationCode &prf, uint8_t out[], size_t out_len, std::string_view password, const uint8_t salt[], size_t salt_len, size_t iterations, std::chrono::milliseconds msec)
constexpr void clear_mem(T *ptr, size_t n)