argonautica 0.2.0

Idiomatic Argon2 password hashing for Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

use base64;

use output::HashRaw;

impl HashRaw {
    pub(crate) fn encode_rust(&self) -> String {
        let hash_encoded = base64::encode_config(self.raw_hash_bytes(), base64::STANDARD_NO_PAD);
        let salt_encoded = base64::encode_config(self.raw_salt_bytes(), base64::STANDARD_NO_PAD);
        format!(
            "${}$v={}$m={},t={},p={}${}${}",
            self.variant().as_str(),
            self.version().as_str(),
            self.memory_size(),
            self.iterations(),
            self.lanes(),
            salt_encoded,
            hash_encoded,
        )
    }
}

#[cfg(test)]
mod tests {
    use rand::rngs::StdRng;
    use rand::{RngCore, SeedableRng};

    use backend::encode_c;
    use hasher::Hasher;

    #[test]
    fn test_encode_against_c() {
        let mut rng: StdRng = SeedableRng::from_seed([0u8; 32]);
        let mut password = vec![0u8; 12];
        let mut secret_key = vec![0u8; 32];
        for _ in 0..100 {
            rng.fill_bytes(&mut password);
            rng.fill_bytes(&mut secret_key);
            for hash_len in &[8, 32, 128] {
                let mut hasher = Hasher::default();
                let hash_raw = hasher
                    .configure_hash_len(*hash_len)
                    .configure_iterations(1)
                    .configure_memory_size(32)
                    .configure_password_clearing(false)
                    .configure_secret_key_clearing(false)
                    .configure_threads(1)
                    .configure_lanes(1)
                    .with_secret_key(&secret_key[..])
                    .with_password(&password[..])
                    .hash_raw()
                    .unwrap();
                let hash1 = hash_raw.encode_rust();
                let hash2 = encode_c(&hash_raw).unwrap();
                assert_eq!(hash1, hash2);
            }
        }
    }
}