cas-lib 0.2.87

A function wrapper layer for RustCrypto and Dalek-Cryptography. Intended to be used in FFI situations with a global heap deallactor at the top level project.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52






use scrypt::{
    password_hash::{rand_core::OsRng, PasswordHash, PasswordHasher, PasswordVerifier, SaltString},
    Scrypt, Params
};

use crate::error::{CasError, CasResult};

pub struct CASScrypt;

impl CASScrypt {
    /// Hashes a passwith using Scrypt with custom params.
    /// Parameters:
    /// - password_to_hash: The password to be hashed.
    /// - cpu_memory_cost: logâ‚‚ of the Scrypt parameter `N`, the work factor.
    /// - block_size: `r` parameter: resource usage.
    /// - parallelism: `p` parameter: parallelization.
    pub fn hash_password_customized(password_to_hash: String, cpu_memory_cost: u8, block_size: u32, parallelism: u32) -> CasResult<String> {
        let salt = SaltString::generate(&mut OsRng);
        let params = Params::new(cpu_memory_cost, block_size, parallelism, 32)
            .map_err(|_| CasError::InvalidParameters)?;
        Ok(Scrypt
            .hash_password_customized(password_to_hash.as_bytes(), None, None, params, &salt)
            .map_err(|_| CasError::PasswordHashingFailed)?
            .to_string())
    }

    /// Hashes a password using Scrypt.
    /// Returns the hashed password as a string.
    pub fn hash_password(password_to_hash: String) -> CasResult<String> {
        let salt = SaltString::generate(&mut OsRng);
        Ok(Scrypt
            .hash_password(password_to_hash.as_bytes(), &salt)
            .map_err(|_| CasError::PasswordHashingFailed)?
            .to_string())
    }

    /// Verifies a password against a hashed password using Scrypt.
    /// Returns `Ok(true)` if the password matches, `Ok(false)` if it does not, and
    /// an error if the stored hash could not be parsed.
    pub fn verify_password(hashed_password: String, password_to_verify: String) -> CasResult<bool> {
        let parsed_hash =
            PasswordHash::new(&hashed_password).map_err(|_| CasError::PasswordHashingFailed)?;
        Ok(Scrypt
            .verify_password(password_to_verify.as_bytes(), &parsed_hash)
            .is_ok())
    }
}