seal_crypto_wrapper::algorithms::kdf::passwd

Enum KdfPasswordAlgorithm

pub enum KdfPasswordAlgorithm {
    Argon2(Option<Argon2Params>),
    Pbkdf2 {
        hash: HashAlgorithm,
        c: Option<u32>,
    },
}

Expand description

Password-based Key Derivation Function algorithm enumeration.

基于密码的密钥派生函数算法枚举。

§Algorithm Selection | 算法选择

Choose based on your security and compatibility requirements:

根据您的安全性和兼容性要求选择：

Argon2: Recommended for new applications (better security)
PBKDF2: Use for legacy compatibility or resource constraints
Argon2: 推荐用于新应用（更好的安全性）
PBKDF2: 用于遗留兼容性或资源约束

Variants§

§

Argon2(Option<Argon2Params>)

Argon2 memory-hard password hashing function.

Argon2 内存困难密码哈希函数。

§Properties | 属性

Type: Memory-hard function
Standard: RFC 9106
Resistance: GPU, FPGA, ASIC attacks
Parameters: Memory, time, parallelism costs

§Variants | 变体

Some(params): Custom parameters for specific requirements
None: Default parameters suitable for most applications
Some(params): 特定要求的自定义参数
None: 适用于大多数应用的默认参数

§

Pbkdf2

PBKDF2 time-hard password-based key derivation function.

PBKDF2 时间困难的基于密码的密钥派生函数。

§Properties | 属性

Type: Time-hard function
Standard: RFC 2898, PKCS #5
Resistance: Basic brute-force attacks
Parameters: Hash function, iteration count

§Configuration | 配置

hash: Underlying hash function (SHA-256/384/512)
c: Iteration count (Some(count) for custom, None for default)
hash: 底层哈希函数（SHA-256/384/512）
c: 迭代次数（Some(count) 自定义，None 默认）

Fields

§hash: HashAlgorithm

§c: Option<u32>

Implementations§

Source §

impl KdfPasswordAlgorithm

Source

pub fn into_wrapper(self) -> KdfPasswordWrapper

Converts the algorithm enum into a concrete wrapper implementation.

将算法枚举转换为具体的包装器实现。

§Purpose | 目的

This method creates a wrapper that implements the password-based KDF algorithm trait, enabling actual cryptographic operations like key derivation from passwords with appropriate computational cost to resist brute-force attacks.

此方法创建一个实现基于密码的 KDF 算法 trait 的包装器，启用实际的密码操作，如从密码派生密钥，并具有适当的计算成本以抵抗暴力攻击。

§Returns | 返回值

A KdfPasswordWrapper that can perform:

Password-based key derivation
Salt-based key separation
Configurable computational cost
Secure password verification

可以执行以下操作的 KdfPasswordWrapper：

基于密码的密钥派生
基于盐的密钥分离
可配置的计算成本
安全密码验证

§Examples | 示例

use seal_crypto_wrapper::algorithms::kdf::passwd::KdfPasswordAlgorithm;
use seal_crypto_wrapper::prelude::SecretBox;

// Argon2 for new applications (recommended)
let argon2_alg = KdfPasswordAlgorithm::build().argon2_default();
let argon2_kdf = argon2_alg.into_wrapper();

let password = SecretBox::new(Box::from(b"my-secret-password".as_slice()));
let salt = b"random_salt_16_bytes";
let derived_key = argon2_kdf.derive(&password, salt, 32)?;

// PBKDF2 for compatibility
let pbkdf2_alg = KdfPasswordAlgorithm::build().pbkdf2_sha256_with_params(100000);
let pbkdf2_kdf = pbkdf2_alg.into_wrapper();

let key2 = pbkdf2_kdf.derive(&password, salt, 32)?;