nimiq-hash 2.1.0

Common wrapper around hash implementations used in Nimiq
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

use argon2::Config;
pub use argon2::{Error as Argon2Error, Variant as Argon2Variant};

// Taken from https://github.com/nimiq/core-js/blob/c98d56b2dd967d9a9c9a97fe4c54bfaac743aa0c/src/main/generic/utils/crypto/CryptoWorkerImpl.js#L146
const MEMORY_COST_ARGON2D: u32 = 512;
// Taken from https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#argon2id, 2024-06-20.
const MEMORY_COST_ARGON2ID: u32 = 12288;

pub fn compute_argon2_kdf(
    password: &[u8],
    salt: &[u8],
    iterations: u32,
    derived_key_length: usize,
    variant: Argon2Variant,
) -> Result<Vec<u8>, Argon2Error> {
    let config = Config {
        time_cost: iterations,
        hash_length: derived_key_length as u32,
        mem_cost: match variant {
            Argon2Variant::Argon2d => MEMORY_COST_ARGON2D,
            Argon2Variant::Argon2i | Argon2Variant::Argon2id => MEMORY_COST_ARGON2ID,
        },
        variant,
        ..Default::default()
    };

    let mut hash = argon2::hash_raw(password, salt, &config)?;
    assert!(hash.len() >= derived_key_length);
    hash.resize(derived_key_length, 0);
    Ok(hash)
}