1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
//! `crypto_generichash` equivalent (`docs/dstu-crypto-project.md` "Mapping onto the libsodium API",
//! `docs/TASKS.md` T-105, roadmap Step 3 item 2 - `docs/DECISIONS.md` D-66) - a bare re-export of
//! [`crate::hazmat::kupyna`]'s one-shot and streaming API under this crate's top-level `crypto_*`
//! namespace, for naming parity with `crypto_sign`/`crypto_secretbox`/`crypto_pwhash` rather than
//! a new wrapper.
//!
//! Unlike those three modules, there is nothing here for a wrapper to add: `hazmat::kupyna`'s
//! `digest()`/`Hasher` API already has no knob to hide (no algorithm choice beyond the output
//! size, no nonce, no length cap) and libsodium's own `crypto_generichash` value-adds over a bare
//! hash function - a caller-chosen variable output length, and an optional key for keyed hashing -
//! have no DSTU equivalent to re-derive: Kupyna has no variable-length-output mode, and DSTU
//! 7564:2014's own keyed construction is [`crate::hazmat::kupyna_kmac`], a distinct primitive
//! surfaced separately as [`crate::crypto_auth`], not a parameter of this one. See D-66's fuller
//! reasoning for why this module is a re-export rather than a table entry (discoverability under
//! this crate's `crypto_*` namespace) and why it is a re-export rather than a wrapper with new
//! logic (nothing left to wrap).
//!
//! # Example
//!
//! A hash gives a fixed-size fingerprint of a message - useful for checking a file wasn't
//! corrupted or changed, but (unlike [`crate::crypto_auth`]) it needs no secret key, so anyone can
//! compute or forge one; it is not proof of origin. One-shot for a whole in-memory message
//! ([`Kupyna256::digest`]), or incremental via [`Kupyna256Hasher`] for a large/streamed one (e.g.
//! `uacrypt hash`'s own chunked file reading) - both produce the same digest for the same bytes.
//!
//! ```rust
//! use dstu_core::crypto_generichash::{Kupyna256, Kupyna256Hasher};
//!
//! let whole = Kupyna256::digest(b"hello world");
//!
//! let mut hasher = Kupyna256Hasher::new();
//! hasher.update(b"hello ");
//! hasher.update(b"world");
//! let streamed = hasher.finalize();
//!
//! assert_eq!(whole, streamed);
//! ```
pub use crate;