zipher 0.3.0

Cryptography utilities and implementations including Argon2, bcrypt, post-quantum algorithms and JWT support
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105

use argon2::password_hash::{Error as PwhError, PasswordHash, SaltString};
use argon2::{Algorithm, Argon2, Params, Version};
use argon2::{PasswordHasher, PasswordVerifier};
use kenzu::Builder;
use rand::Rng;
use std::{error::Error as StdError, fmt};

#[derive(Debug)]
pub enum ArgonError {
    Argon2(argon2::Error),
    PasswordHash(PwhError),
    Other(String),
}

impl fmt::Display for ArgonError {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        match self {
            ArgonError::Argon2(e) => write!(f, "argon2 error: {}", e),
            ArgonError::PasswordHash(e) => write!(f, "password-hash error: {}", e),
            ArgonError::Other(s) => write!(f, "other: {}", s),
        }
    }
}

impl StdError for ArgonError {
    fn source(&self) -> Option<&(dyn StdError + 'static)> {
        match self {
            ArgonError::Argon2(_) => None,
            ArgonError::PasswordHash(_) => None,
            _ => None,
        }
    }
}

impl From<argon2::Error> for ArgonError {
    fn from(e: argon2::Error) -> Self {
        ArgonError::Argon2(e)
    }
}
impl From<PwhError> for ArgonError {
    fn from(e: PwhError) -> Self {
        ArgonError::PasswordHash(e)
    }
}
impl From<String> for ArgonError {
    fn from(s: String) -> Self {
        ArgonError::Other(s)
    }
}
impl From<&str> for ArgonError {
    fn from(s: &str) -> Self {
        ArgonError::Other(s.to_string())
    }
}

#[derive(Debug, Builder)]
pub struct Argon {
    #[opt(default = rand::rng().random::<[u8; 32]>().to_vec())]
    pub salt: Vec<u8>,
    #[opt(default = hex::encode(rand::rng().random::<[u8; 32]>()))]
    pub secret: String,
    #[opt(default = Algorithm::Argon2id)]
    pub algorithm: Algorithm,
    #[opt(default = Version::V0x13)]
    pub version: Version,
    #[opt(default = Params::new(
        64_000,
        4,
        4,
        32.into()
    ).expect("Params error"))]
    pub params: Params,
    pub password: String,
    pub hash: String,
}

impl Argon {
    pub fn encrypt(&mut self) -> Result<String, ArgonError> {
        let ctx = Argon2::new_with_secret(
            self.secret.as_bytes(),
            self.algorithm,
            self.version,
            self.params.clone(),
        )?;

        let base_64 = SaltString::encode_b64(&self.salt)?;
        let password_hash = ctx.hash_password(self.password.as_bytes(), base_64.as_salt())?;
        let hash = password_hash.serialize().to_string();
        self.hash = hash.clone();
        Ok(hash)
    }

    pub fn verify(&self) -> Result<(), ArgonError> {
        let ctx = Argon2::new_with_secret(
            self.secret.as_bytes(),
            self.algorithm,
            self.version,
            self.params.clone(),
        )?;

        let password_hash = PasswordHash::new(&self.hash)?;
        ctx.verify_password(self.password.as_bytes(), &password_hash)?;
        Ok(())
    }
}