entropy-auth 2026.7.31

Authentication and authorization for Entropy Softworks server and API projects
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

//! Cryptographic primitives for authentication operations.
//!
//! All implementations are self-contained with zero external dependencies,
//! built from their respective specifications (FIPS 180-4, RFC 2104).
//! Every algorithm is validated against published test vectors from NIST
//! CAVP, IETF RFCs, or equivalent authoritative sources.
//!
//! Password hashing uses Argon2id via the [`argon2`] crate (see the
//! [`crate::local::password`] module). The primitives here (SHA, HMAC, CSPRNG)
//! support token generation, request signing, and other non-password
//! cryptographic operations.
//!
//! # Security
//!
//! These implementations prioritize correctness and auditability over
//! performance. They are suitable for authentication workloads (token
//! generation, HMAC verification) but are not optimized for bulk data
//! processing.

pub mod constant_time;
mod hmac;
mod random;
mod sha1;
mod sha2;
pub mod zeroize;

pub mod secret_box;

pub use self::hmac::{HmacSha1, HmacSha256, HmacSha512};
pub use self::random::{RandomError, fill_random, random_token_base64url, random_token_hex};
pub use self::sha1::Sha1;
pub use self::sha2::{Sha256, Sha512};

pub use self::secret_box::{SecretBox, SecretBoxError};