Struct Pbkdf2

pub struct Pbkdf2<H: HashFunction + Clone, const S: usize = 16> { /* private fields */ }

PBKDF2 implementation using any HMAC-based PRF

PBKDF2 can be used with any pseudorandom function, but this implementation uses HMAC with a configurable hash function.

Implementations

impl<H: HashFunction + Clone, const S: usize> Pbkdf2<H, S>

pub fn pbkdf2( password: &[u8], salt: &[u8], iterations: u32, key_length: usize, ) -> Result<Zeroizing<Vec<u8>>>

Internal PBKDF2 implementation with secure key handling

This implements the core PBKDF2 algorithm as defined in RFC 8018 Section 5.2 with enhanced security for key material handling.

Arguments

• password - The password to derive the key from
• salt - The salt value
• iterations - The number of iterations
• key_length - The length of the derived key in bytes

Returns

The derived key of length key_length bytes

pub fn pbkdf2_secure( password: &[u8], salt: &[u8], iterations: u32, key_length: usize, ) -> Result<Vec<u8>>

Secure PBKDF2 implementation that returns regular Vec

Trait Implementations

impl<H: Clone + HashFunction + Clone, const S: usize> Clone for Pbkdf2<H, S>

fn clone(&self) -> Pbkdf2<H, S>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<H: HashFunction + Clone, const S: usize> Drop for Pbkdf2<H, S>

fn drop(&mut self)

Executes the destructor for this type.

impl<H: HashFunction + Clone, const S: usize> KeyDerivationFunction for Pbkdf2<H, S>

where Salt<S>: Pbkdf2Compatible,

type Algorithm = Pbkdf2Algorithm<H>

The algorithm this KDF implements

type Salt = Salt<S>

Salt type with appropriate validation

fn new() -> Self

Creates a new instance of the KDF with default parameters

fn derive_key( &self, input: &[u8], salt: Option<&[u8]>, _info: Option<&[u8]>, length: usize, ) -> Result<Vec<u8>>

Derives a key using the KDF parameters

fn builder(&self) -> impl KdfOperation<'_, Self::Algorithm>

Creates a builder for fluent API usage - FIXED: Elided lifetime

fn generate_salt<R: RngCore + CryptoRng>(rng: &mut R) -> Self::Salt

Generate a random salt with appropriate size

fn security_level() -> SecurityLevel

Returns the security level of the KDF in bits

impl<H: HashFunction + Clone, const S: usize> ParamProvider for Pbkdf2<H, S>

type Params = Pbkdf2Params<S>

The parameter type associated with this algorithm

fn with_params(params: Self::Params) -> Self

Creates a new instance with the specified parameters

fn params(&self) -> &Self::Params

Returns the current parameters

fn set_params(&mut self, params: Self::Params)

Updates the parameters

impl<H: HashFunction + Clone, const S: usize> PasswordHashFunction for Pbkdf2<H, S>

where Salt<S>: Pbkdf2Compatible,

type Password = SecretBytes<32>

Password type with zeroizing

fn hash_password(&self, password: &Self::Password) -> Result<PasswordHash>

Hashes a password with the configured parameters

fn verify(&self, password: &Self::Password, hash: &PasswordHash) -> Result<bool>

Verifies a password against a hash

fn benchmark(&self) -> Duration

Benchmarks the current parameters on this system

fn recommended_params(target_duration: Duration) -> Self::Params

Recommends parameters based on a target duration

impl<H: HashFunction + Clone, const S: usize> Zeroize for Pbkdf2<H, S>

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.