Struct HashAlg 

pub struct HashAlg {
    pub is_sha512: bool,
    pub digest_len: usize,
    pub derive_block_len: usize,
    pub hash_block_len: usize,
}

DPAPI hash-algorithm parameters. Re-exported from forensicnomicon, the fleet knowledge crate that owns the impacket ALGORITHMS_DATA block-size facts; this crate owns only the parsing + crypto that consume them.

Two distinct block sizes are in play and must not be conflated:

• derive_block_len is the table’s salt/block field used by deriveKey (impacket index [4]): 64 for SHA1 and CALG_HMAC (0x8009), 128 for CALG_SHA_512 (0x800e).
• hash_block_len is the underlying hash module’s block size used by the integrity check (SHA1.block_size=64, SHA512.block_size=128). Parameters of a DPAPI hash algorithm, mirroring impacket’s ALGORITHMS_DATA.

Two distinct block sizes are in play and must not be conflated:

• derive_block_len is the salt/block field used by deriveKey (impacket index [4]): 64 for SHA-1 and CALG_HMAC, 128 for CALG_SHA_512.
• hash_block_len is the underlying hash module’s block size used by the integrity check (SHA-1 = 64, SHA-512 = 128).

For CALG_HMAC (0x8009) these differ (64 vs 128), so both are tracked.

Fields

is_sha512: bool

SHA-512 hash module if true, SHA-1 if false.

digest_len: usize

Output digest length in bytes (20 for SHA-1, 64 for SHA-512).

derive_block_len: usize

deriveKey salt/block field (impacket ALGORITHMS_DATA[..][4]).

hash_block_len: usize

Underlying hash module block size (used by the integrity HMAC).

Trait Implementations

impl Clone for HashAlgInfo

fn clone(&self) -> HashAlgInfo

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for HashAlgInfo

impl Debug for HashAlgInfo

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for HashAlgInfo

impl PartialEq for HashAlgInfo

fn eq(&self, other: &HashAlgInfo) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for HashAlgInfo