argon2id 0.8.0.rc1-x86-linux-gnu

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,437 @@
1
+ /*
2
+ * Argon2 reference source code package - reference C implementations
3
+ *
4
+ * Copyright 2015
5
+ * Daniel Dinu, Dmitry Khovratovich, Jean-Philippe Aumasson, and Samuel Neves
6
+ *
7
+ * You may use this work under the terms of a Creative Commons CC0 1.0
8
+ * License/Waiver or the Apache Public License 2.0, at your option. The terms of
9
+ * these licenses can be found at:
10
+ *
11
+ * - CC0 1.0 Universal : http://creativecommons.org/publicdomain/zero/1.0
12
+ * - Apache 2.0 : http://www.apache.org/licenses/LICENSE-2.0
13
+ *
14
+ * You should have received a copy of both of these licenses along with this
15
+ * software. If not, they may be obtained at the above URLs.
16
+ */
17
+
18
+ #ifndef ARGON2_H
19
+ #define ARGON2_H
20
+
21
+ #include <stdint.h>
22
+ #include <stddef.h>
23
+ #include <limits.h>
24
+
25
+ #if defined(__cplusplus)
26
+ extern "C" {
27
+ #endif
28
+
29
+ /* Symbols visibility control */
30
+ #ifdef A2_VISCTL
31
+ #define ARGON2_PUBLIC __attribute__((visibility("default")))
32
+ #define ARGON2_LOCAL __attribute__ ((visibility ("hidden")))
33
+ #elif _MSC_VER
34
+ #define ARGON2_PUBLIC __declspec(dllexport)
35
+ #define ARGON2_LOCAL
36
+ #else
37
+ #define ARGON2_PUBLIC
38
+ #define ARGON2_LOCAL
39
+ #endif
40
+
41
+ /*
42
+ * Argon2 input parameter restrictions
43
+ */
44
+
45
+ /* Minimum and maximum number of lanes (degree of parallelism) */
46
+ #define ARGON2_MIN_LANES UINT32_C(1)
47
+ #define ARGON2_MAX_LANES UINT32_C(0xFFFFFF)
48
+
49
+ /* Minimum and maximum number of threads */
50
+ #define ARGON2_MIN_THREADS UINT32_C(1)
51
+ #define ARGON2_MAX_THREADS UINT32_C(0xFFFFFF)
52
+
53
+ /* Number of synchronization points between lanes per pass */
54
+ #define ARGON2_SYNC_POINTS UINT32_C(4)
55
+
56
+ /* Minimum and maximum digest size in bytes */
57
+ #define ARGON2_MIN_OUTLEN UINT32_C(4)
58
+ #define ARGON2_MAX_OUTLEN UINT32_C(0xFFFFFFFF)
59
+
60
+ /* Minimum and maximum number of memory blocks (each of BLOCK_SIZE bytes) */
61
+ #define ARGON2_MIN_MEMORY (2 * ARGON2_SYNC_POINTS) /* 2 blocks per slice */
62
+
63
+ #define ARGON2_MIN(a, b) ((a) < (b) ? (a) : (b))
64
+ /* Max memory size is addressing-space/2, topping at 2^32 blocks (4 TB) */
65
+ #define ARGON2_MAX_MEMORY_BITS \
66
+ ARGON2_MIN(UINT32_C(32), (sizeof(void *) * CHAR_BIT - 10 - 1))
67
+ #define ARGON2_MAX_MEMORY \
68
+ ARGON2_MIN(UINT32_C(0xFFFFFFFF), UINT64_C(1) << ARGON2_MAX_MEMORY_BITS)
69
+
70
+ /* Minimum and maximum number of passes */
71
+ #define ARGON2_MIN_TIME UINT32_C(1)
72
+ #define ARGON2_MAX_TIME UINT32_C(0xFFFFFFFF)
73
+
74
+ /* Minimum and maximum password length in bytes */
75
+ #define ARGON2_MIN_PWD_LENGTH UINT32_C(0)
76
+ #define ARGON2_MAX_PWD_LENGTH UINT32_C(0xFFFFFFFF)
77
+
78
+ /* Minimum and maximum associated data length in bytes */
79
+ #define ARGON2_MIN_AD_LENGTH UINT32_C(0)
80
+ #define ARGON2_MAX_AD_LENGTH UINT32_C(0xFFFFFFFF)
81
+
82
+ /* Minimum and maximum salt length in bytes */
83
+ #define ARGON2_MIN_SALT_LENGTH UINT32_C(8)
84
+ #define ARGON2_MAX_SALT_LENGTH UINT32_C(0xFFFFFFFF)
85
+
86
+ /* Minimum and maximum key length in bytes */
87
+ #define ARGON2_MIN_SECRET UINT32_C(0)
88
+ #define ARGON2_MAX_SECRET UINT32_C(0xFFFFFFFF)
89
+
90
+ /* Flags to determine which fields are securely wiped (default = no wipe). */
91
+ #define ARGON2_DEFAULT_FLAGS UINT32_C(0)
92
+ #define ARGON2_FLAG_CLEAR_PASSWORD (UINT32_C(1) << 0)
93
+ #define ARGON2_FLAG_CLEAR_SECRET (UINT32_C(1) << 1)
94
+
95
+ /* Global flag to determine if we are wiping internal memory buffers. This flag
96
+ * is defined in core.c and defaults to 1 (wipe internal memory). */
97
+ extern int FLAG_clear_internal_memory;
98
+
99
+ /* Error codes */
100
+ typedef enum Argon2_ErrorCodes {
101
+ ARGON2_OK = 0,
102
+
103
+ ARGON2_OUTPUT_PTR_NULL = -1,
104
+
105
+ ARGON2_OUTPUT_TOO_SHORT = -2,
106
+ ARGON2_OUTPUT_TOO_LONG = -3,
107
+
108
+ ARGON2_PWD_TOO_SHORT = -4,
109
+ ARGON2_PWD_TOO_LONG = -5,
110
+
111
+ ARGON2_SALT_TOO_SHORT = -6,
112
+ ARGON2_SALT_TOO_LONG = -7,
113
+
114
+ ARGON2_AD_TOO_SHORT = -8,
115
+ ARGON2_AD_TOO_LONG = -9,
116
+
117
+ ARGON2_SECRET_TOO_SHORT = -10,
118
+ ARGON2_SECRET_TOO_LONG = -11,
119
+
120
+ ARGON2_TIME_TOO_SMALL = -12,
121
+ ARGON2_TIME_TOO_LARGE = -13,
122
+
123
+ ARGON2_MEMORY_TOO_LITTLE = -14,
124
+ ARGON2_MEMORY_TOO_MUCH = -15,
125
+
126
+ ARGON2_LANES_TOO_FEW = -16,
127
+ ARGON2_LANES_TOO_MANY = -17,
128
+
129
+ ARGON2_PWD_PTR_MISMATCH = -18, /* NULL ptr with non-zero length */
130
+ ARGON2_SALT_PTR_MISMATCH = -19, /* NULL ptr with non-zero length */
131
+ ARGON2_SECRET_PTR_MISMATCH = -20, /* NULL ptr with non-zero length */
132
+ ARGON2_AD_PTR_MISMATCH = -21, /* NULL ptr with non-zero length */
133
+
134
+ ARGON2_MEMORY_ALLOCATION_ERROR = -22,
135
+
136
+ ARGON2_FREE_MEMORY_CBK_NULL = -23,
137
+ ARGON2_ALLOCATE_MEMORY_CBK_NULL = -24,
138
+
139
+ ARGON2_INCORRECT_PARAMETER = -25,
140
+ ARGON2_INCORRECT_TYPE = -26,
141
+
142
+ ARGON2_OUT_PTR_MISMATCH = -27,
143
+
144
+ ARGON2_THREADS_TOO_FEW = -28,
145
+ ARGON2_THREADS_TOO_MANY = -29,
146
+
147
+ ARGON2_MISSING_ARGS = -30,
148
+
149
+ ARGON2_ENCODING_FAIL = -31,
150
+
151
+ ARGON2_DECODING_FAIL = -32,
152
+
153
+ ARGON2_THREAD_FAIL = -33,
154
+
155
+ ARGON2_DECODING_LENGTH_FAIL = -34,
156
+
157
+ ARGON2_VERIFY_MISMATCH = -35
158
+ } argon2_error_codes;
159
+
160
+ /* Memory allocator types --- for external allocation */
161
+ typedef int (*allocate_fptr)(uint8_t **memory, size_t bytes_to_allocate);
162
+ typedef void (*deallocate_fptr)(uint8_t *memory, size_t bytes_to_allocate);
163
+
164
+ /* Argon2 external data structures */
165
+
166
+ /*
167
+ *****
168
+ * Context: structure to hold Argon2 inputs:
169
+ * output array and its length,
170
+ * password and its length,
171
+ * salt and its length,
172
+ * secret and its length,
173
+ * associated data and its length,
174
+ * number of passes, amount of used memory (in KBytes, can be rounded up a bit)
175
+ * number of parallel threads that will be run.
176
+ * All the parameters above affect the output hash value.
177
+ * Additionally, two function pointers can be provided to allocate and
178
+ * deallocate the memory (if NULL, memory will be allocated internally).
179
+ * Also, three flags indicate whether to erase password, secret as soon as they
180
+ * are pre-hashed (and thus not needed anymore), and the entire memory
181
+ *****
182
+ * Simplest situation: you have output array out[8], password is stored in
183
+ * pwd[32], salt is stored in salt[16], you do not have keys nor associated
184
+ * data. You need to spend 1 GB of RAM and you run 5 passes of Argon2d with
185
+ * 4 parallel lanes.
186
+ * You want to erase the password, but you're OK with last pass not being
187
+ * erased. You want to use the default memory allocator.
188
+ * Then you initialize:
189
+ Argon2_Context(out,8,pwd,32,salt,16,NULL,0,NULL,0,5,1<<20,4,4,NULL,NULL,true,false,false,false)
190
+ */
191
+ typedef struct Argon2_Context {
192
+ uint8_t *out; /* output array */
193
+ uint32_t outlen; /* digest length */
194
+
195
+ uint8_t *pwd; /* password array */
196
+ uint32_t pwdlen; /* password length */
197
+
198
+ uint8_t *salt; /* salt array */
199
+ uint32_t saltlen; /* salt length */
200
+
201
+ uint8_t *secret; /* key array */
202
+ uint32_t secretlen; /* key length */
203
+
204
+ uint8_t *ad; /* associated data array */
205
+ uint32_t adlen; /* associated data length */
206
+
207
+ uint32_t t_cost; /* number of passes */
208
+ uint32_t m_cost; /* amount of memory requested (KB) */
209
+ uint32_t lanes; /* number of lanes */
210
+ uint32_t threads; /* maximum number of threads */
211
+
212
+ uint32_t version; /* version number */
213
+
214
+ allocate_fptr allocate_cbk; /* pointer to memory allocator */
215
+ deallocate_fptr free_cbk; /* pointer to memory deallocator */
216
+
217
+ uint32_t flags; /* array of bool options */
218
+ } argon2_context;
219
+
220
+ /* Argon2 primitive type */
221
+ typedef enum Argon2_type {
222
+ Argon2_d = 0,
223
+ Argon2_i = 1,
224
+ Argon2_id = 2
225
+ } argon2_type;
226
+
227
+ /* Version of the algorithm */
228
+ typedef enum Argon2_version {
229
+ ARGON2_VERSION_10 = 0x10,
230
+ ARGON2_VERSION_13 = 0x13,
231
+ ARGON2_VERSION_NUMBER = ARGON2_VERSION_13
232
+ } argon2_version;
233
+
234
+ /*
235
+ * Function that gives the string representation of an argon2_type.
236
+ * @param type The argon2_type that we want the string for
237
+ * @param uppercase Whether the string should have the first letter uppercase
238
+ * @return NULL if invalid type, otherwise the string representation.
239
+ */
240
+ ARGON2_PUBLIC const char *argon2_type2string(argon2_type type, int uppercase);
241
+
242
+ /*
243
+ * Function that performs memory-hard hashing with certain degree of parallelism
244
+ * @param context Pointer to the Argon2 internal structure
245
+ * @return Error code if smth is wrong, ARGON2_OK otherwise
246
+ */
247
+ ARGON2_PUBLIC int argon2_ctx(argon2_context *context, argon2_type type);
248
+
249
+ /**
250
+ * Hashes a password with Argon2i, producing an encoded hash
251
+ * @param t_cost Number of iterations
252
+ * @param m_cost Sets memory usage to m_cost kibibytes
253
+ * @param parallelism Number of threads and compute lanes
254
+ * @param pwd Pointer to password
255
+ * @param pwdlen Password size in bytes
256
+ * @param salt Pointer to salt
257
+ * @param saltlen Salt size in bytes
258
+ * @param hashlen Desired length of the hash in bytes
259
+ * @param encoded Buffer where to write the encoded hash
260
+ * @param encodedlen Size of the buffer (thus max size of the encoded hash)
261
+ * @pre Different parallelism levels will give different results
262
+ * @pre Returns ARGON2_OK if successful
263
+ */
264
+ ARGON2_PUBLIC int argon2i_hash_encoded(const uint32_t t_cost,
265
+ const uint32_t m_cost,
266
+ const uint32_t parallelism,
267
+ const void *pwd, const size_t pwdlen,
268
+ const void *salt, const size_t saltlen,
269
+ const size_t hashlen, char *encoded,
270
+ const size_t encodedlen);
271
+
272
+ /**
273
+ * Hashes a password with Argon2i, producing a raw hash at @hash
274
+ * @param t_cost Number of iterations
275
+ * @param m_cost Sets memory usage to m_cost kibibytes
276
+ * @param parallelism Number of threads and compute lanes
277
+ * @param pwd Pointer to password
278
+ * @param pwdlen Password size in bytes
279
+ * @param salt Pointer to salt
280
+ * @param saltlen Salt size in bytes
281
+ * @param hash Buffer where to write the raw hash - updated by the function
282
+ * @param hashlen Desired length of the hash in bytes
283
+ * @pre Different parallelism levels will give different results
284
+ * @pre Returns ARGON2_OK if successful
285
+ */
286
+ ARGON2_PUBLIC int argon2i_hash_raw(const uint32_t t_cost, const uint32_t m_cost,
287
+ const uint32_t parallelism, const void *pwd,
288
+ const size_t pwdlen, const void *salt,
289
+ const size_t saltlen, void *hash,
290
+ const size_t hashlen);
291
+
292
+ ARGON2_PUBLIC int argon2d_hash_encoded(const uint32_t t_cost,
293
+ const uint32_t m_cost,
294
+ const uint32_t parallelism,
295
+ const void *pwd, const size_t pwdlen,
296
+ const void *salt, const size_t saltlen,
297
+ const size_t hashlen, char *encoded,
298
+ const size_t encodedlen);
299
+
300
+ ARGON2_PUBLIC int argon2d_hash_raw(const uint32_t t_cost, const uint32_t m_cost,
301
+ const uint32_t parallelism, const void *pwd,
302
+ const size_t pwdlen, const void *salt,
303
+ const size_t saltlen, void *hash,
304
+ const size_t hashlen);
305
+
306
+ ARGON2_PUBLIC int argon2id_hash_encoded(const uint32_t t_cost,
307
+ const uint32_t m_cost,
308
+ const uint32_t parallelism,
309
+ const void *pwd, const size_t pwdlen,
310
+ const void *salt, const size_t saltlen,
311
+ const size_t hashlen, char *encoded,
312
+ const size_t encodedlen);
313
+
314
+ ARGON2_PUBLIC int argon2id_hash_raw(const uint32_t t_cost,
315
+ const uint32_t m_cost,
316
+ const uint32_t parallelism, const void *pwd,
317
+ const size_t pwdlen, const void *salt,
318
+ const size_t saltlen, void *hash,
319
+ const size_t hashlen);
320
+
321
+ /* generic function underlying the above ones */
322
+ ARGON2_PUBLIC int argon2_hash(const uint32_t t_cost, const uint32_t m_cost,
323
+ const uint32_t parallelism, const void *pwd,
324
+ const size_t pwdlen, const void *salt,
325
+ const size_t saltlen, void *hash,
326
+ const size_t hashlen, char *encoded,
327
+ const size_t encodedlen, argon2_type type,
328
+ const uint32_t version);
329
+
330
+ /**
331
+ * Verifies a password against an encoded string
332
+ * Encoded string is restricted as in validate_inputs()
333
+ * @param encoded String encoding parameters, salt, hash
334
+ * @param pwd Pointer to password
335
+ * @pre Returns ARGON2_OK if successful
336
+ */
337
+ ARGON2_PUBLIC int argon2i_verify(const char *encoded, const void *pwd,
338
+ const size_t pwdlen);
339
+
340
+ ARGON2_PUBLIC int argon2d_verify(const char *encoded, const void *pwd,
341
+ const size_t pwdlen);
342
+
343
+ ARGON2_PUBLIC int argon2id_verify(const char *encoded, const void *pwd,
344
+ const size_t pwdlen);
345
+
346
+ /* generic function underlying the above ones */
347
+ ARGON2_PUBLIC int argon2_verify(const char *encoded, const void *pwd,
348
+ const size_t pwdlen, argon2_type type);
349
+
350
+ /**
351
+ * Argon2d: Version of Argon2 that picks memory blocks depending
352
+ * on the password and salt. Only for side-channel-free
353
+ * environment!!
354
+ *****
355
+ * @param context Pointer to current Argon2 context
356
+ * @return Zero if successful, a non zero error code otherwise
357
+ */
358
+ ARGON2_PUBLIC int argon2d_ctx(argon2_context *context);
359
+
360
+ /**
361
+ * Argon2i: Version of Argon2 that picks memory blocks
362
+ * independent on the password and salt. Good for side-channels,
363
+ * but worse w.r.t. tradeoff attacks if only one pass is used.
364
+ *****
365
+ * @param context Pointer to current Argon2 context
366
+ * @return Zero if successful, a non zero error code otherwise
367
+ */
368
+ ARGON2_PUBLIC int argon2i_ctx(argon2_context *context);
369
+
370
+ /**
371
+ * Argon2id: Version of Argon2 where the first half-pass over memory is
372
+ * password-independent, the rest are password-dependent (on the password and
373
+ * salt). OK against side channels (they reduce to 1/2-pass Argon2i), and
374
+ * better with w.r.t. tradeoff attacks (similar to Argon2d).
375
+ *****
376
+ * @param context Pointer to current Argon2 context
377
+ * @return Zero if successful, a non zero error code otherwise
378
+ */
379
+ ARGON2_PUBLIC int argon2id_ctx(argon2_context *context);
380
+
381
+ /**
382
+ * Verify if a given password is correct for Argon2d hashing
383
+ * @param context Pointer to current Argon2 context
384
+ * @param hash The password hash to verify. The length of the hash is
385
+ * specified by the context outlen member
386
+ * @return Zero if successful, a non zero error code otherwise
387
+ */
388
+ ARGON2_PUBLIC int argon2d_verify_ctx(argon2_context *context, const char *hash);
389
+
390
+ /**
391
+ * Verify if a given password is correct for Argon2i hashing
392
+ * @param context Pointer to current Argon2 context
393
+ * @param hash The password hash to verify. The length of the hash is
394
+ * specified by the context outlen member
395
+ * @return Zero if successful, a non zero error code otherwise
396
+ */
397
+ ARGON2_PUBLIC int argon2i_verify_ctx(argon2_context *context, const char *hash);
398
+
399
+ /**
400
+ * Verify if a given password is correct for Argon2id hashing
401
+ * @param context Pointer to current Argon2 context
402
+ * @param hash The password hash to verify. The length of the hash is
403
+ * specified by the context outlen member
404
+ * @return Zero if successful, a non zero error code otherwise
405
+ */
406
+ ARGON2_PUBLIC int argon2id_verify_ctx(argon2_context *context,
407
+ const char *hash);
408
+
409
+ /* generic function underlying the above ones */
410
+ ARGON2_PUBLIC int argon2_verify_ctx(argon2_context *context, const char *hash,
411
+ argon2_type type);
412
+
413
+ /**
414
+ * Get the associated error message for given error code
415
+ * @return The error message associated with the given error code
416
+ */
417
+ ARGON2_PUBLIC const char *argon2_error_message(int error_code);
418
+
419
+ /**
420
+ * Returns the encoded hash length for the given input parameters
421
+ * @param t_cost Number of iterations
422
+ * @param m_cost Memory usage in kibibytes
423
+ * @param parallelism Number of threads; used to compute lanes
424
+ * @param saltlen Salt size in bytes
425
+ * @param hashlen Hash size in bytes
426
+ * @param type The argon2_type that we want the encoded length for
427
+ * @return The encoded hash length in bytes
428
+ */
429
+ ARGON2_PUBLIC size_t argon2_encodedlen(uint32_t t_cost, uint32_t m_cost,
430
+ uint32_t parallelism, uint32_t saltlen,
431
+ uint32_t hashlen, argon2_type type);
432
+
433
+ #if defined(__cplusplus)
434
+ }
435
+ #endif
436
+
437
+ #endif
@@ -0,0 +1,156 @@
1
+ /*
2
+ * Argon2 reference source code package - reference C implementations
3
+ *
4
+ * Copyright 2015
5
+ * Daniel Dinu, Dmitry Khovratovich, Jean-Philippe Aumasson, and Samuel Neves
6
+ *
7
+ * You may use this work under the terms of a Creative Commons CC0 1.0
8
+ * License/Waiver or the Apache Public License 2.0, at your option. The terms of
9
+ * these licenses can be found at:
10
+ *
11
+ * - CC0 1.0 Universal : http://creativecommons.org/publicdomain/zero/1.0
12
+ * - Apache 2.0 : http://www.apache.org/licenses/LICENSE-2.0
13
+ *
14
+ * You should have received a copy of both of these licenses along with this
15
+ * software. If not, they may be obtained at the above URLs.
16
+ */
17
+
18
+ #ifndef PORTABLE_BLAKE2_IMPL_H
19
+ #define PORTABLE_BLAKE2_IMPL_H
20
+
21
+ #include <stdint.h>
22
+ #include <string.h>
23
+
24
+ #if defined(_MSC_VER)
25
+ #define BLAKE2_INLINE __inline
26
+ #elif defined(__GNUC__) || defined(__clang__)
27
+ #define BLAKE2_INLINE __inline__
28
+ #else
29
+ #define BLAKE2_INLINE
30
+ #endif
31
+
32
+ /* Argon2 Team - Begin Code */
33
+ /*
34
+ Not an exhaustive list, but should cover the majority of modern platforms
35
+ Additionally, the code will always be correct---this is only a performance
36
+ tweak.
37
+ */
38
+ #if (defined(__BYTE_ORDER__) && \
39
+ (__BYTE_ORDER__ == __ORDER_LITTLE_ENDIAN__)) || \
40
+ defined(__LITTLE_ENDIAN__) || defined(__ARMEL__) || defined(__MIPSEL__) || \
41
+ defined(__AARCH64EL__) || defined(__amd64__) || defined(__i386__) || \
42
+ defined(_M_IX86) || defined(_M_X64) || defined(_M_AMD64) || \
43
+ defined(_M_ARM)
44
+ #define NATIVE_LITTLE_ENDIAN
45
+ #endif
46
+ /* Argon2 Team - End Code */
47
+
48
+ static BLAKE2_INLINE uint32_t load32(const void *src) {
49
+ #if defined(NATIVE_LITTLE_ENDIAN)
50
+ uint32_t w;
51
+ memcpy(&w, src, sizeof w);
52
+ return w;
53
+ #else
54
+ const uint8_t *p = (const uint8_t *)src;
55
+ uint32_t w = *p++;
56
+ w |= (uint32_t)(*p++) << 8;
57
+ w |= (uint32_t)(*p++) << 16;
58
+ w |= (uint32_t)(*p++) << 24;
59
+ return w;
60
+ #endif
61
+ }
62
+
63
+ static BLAKE2_INLINE uint64_t load64(const void *src) {
64
+ #if defined(NATIVE_LITTLE_ENDIAN)
65
+ uint64_t w;
66
+ memcpy(&w, src, sizeof w);
67
+ return w;
68
+ #else
69
+ const uint8_t *p = (const uint8_t *)src;
70
+ uint64_t w = *p++;
71
+ w |= (uint64_t)(*p++) << 8;
72
+ w |= (uint64_t)(*p++) << 16;
73
+ w |= (uint64_t)(*p++) << 24;
74
+ w |= (uint64_t)(*p++) << 32;
75
+ w |= (uint64_t)(*p++) << 40;
76
+ w |= (uint64_t)(*p++) << 48;
77
+ w |= (uint64_t)(*p++) << 56;
78
+ return w;
79
+ #endif
80
+ }
81
+
82
+ static BLAKE2_INLINE void store32(void *dst, uint32_t w) {
83
+ #if defined(NATIVE_LITTLE_ENDIAN)
84
+ memcpy(dst, &w, sizeof w);
85
+ #else
86
+ uint8_t *p = (uint8_t *)dst;
87
+ *p++ = (uint8_t)w;
88
+ w >>= 8;
89
+ *p++ = (uint8_t)w;
90
+ w >>= 8;
91
+ *p++ = (uint8_t)w;
92
+ w >>= 8;
93
+ *p++ = (uint8_t)w;
94
+ #endif
95
+ }
96
+
97
+ static BLAKE2_INLINE void store64(void *dst, uint64_t w) {
98
+ #if defined(NATIVE_LITTLE_ENDIAN)
99
+ memcpy(dst, &w, sizeof w);
100
+ #else
101
+ uint8_t *p = (uint8_t *)dst;
102
+ *p++ = (uint8_t)w;
103
+ w >>= 8;
104
+ *p++ = (uint8_t)w;
105
+ w >>= 8;
106
+ *p++ = (uint8_t)w;
107
+ w >>= 8;
108
+ *p++ = (uint8_t)w;
109
+ w >>= 8;
110
+ *p++ = (uint8_t)w;
111
+ w >>= 8;
112
+ *p++ = (uint8_t)w;
113
+ w >>= 8;
114
+ *p++ = (uint8_t)w;
115
+ w >>= 8;
116
+ *p++ = (uint8_t)w;
117
+ #endif
118
+ }
119
+
120
+ static BLAKE2_INLINE uint64_t load48(const void *src) {
121
+ const uint8_t *p = (const uint8_t *)src;
122
+ uint64_t w = *p++;
123
+ w |= (uint64_t)(*p++) << 8;
124
+ w |= (uint64_t)(*p++) << 16;
125
+ w |= (uint64_t)(*p++) << 24;
126
+ w |= (uint64_t)(*p++) << 32;
127
+ w |= (uint64_t)(*p++) << 40;
128
+ return w;
129
+ }
130
+
131
+ static BLAKE2_INLINE void store48(void *dst, uint64_t w) {
132
+ uint8_t *p = (uint8_t *)dst;
133
+ *p++ = (uint8_t)w;
134
+ w >>= 8;
135
+ *p++ = (uint8_t)w;
136
+ w >>= 8;
137
+ *p++ = (uint8_t)w;
138
+ w >>= 8;
139
+ *p++ = (uint8_t)w;
140
+ w >>= 8;
141
+ *p++ = (uint8_t)w;
142
+ w >>= 8;
143
+ *p++ = (uint8_t)w;
144
+ }
145
+
146
+ static BLAKE2_INLINE uint32_t rotr32(const uint32_t w, const unsigned c) {
147
+ return (w >> c) | (w << (32 - c));
148
+ }
149
+
150
+ static BLAKE2_INLINE uint64_t rotr64(const uint64_t w, const unsigned c) {
151
+ return (w >> c) | (w << (64 - c));
152
+ }
153
+
154
+ void clear_internal_memory(void *v, size_t n);
155
+
156
+ #endif
@@ -0,0 +1,89 @@
1
+ /*
2
+ * Argon2 reference source code package - reference C implementations
3
+ *
4
+ * Copyright 2015
5
+ * Daniel Dinu, Dmitry Khovratovich, Jean-Philippe Aumasson, and Samuel Neves
6
+ *
7
+ * You may use this work under the terms of a Creative Commons CC0 1.0
8
+ * License/Waiver or the Apache Public License 2.0, at your option. The terms of
9
+ * these licenses can be found at:
10
+ *
11
+ * - CC0 1.0 Universal : http://creativecommons.org/publicdomain/zero/1.0
12
+ * - Apache 2.0 : http://www.apache.org/licenses/LICENSE-2.0
13
+ *
14
+ * You should have received a copy of both of these licenses along with this
15
+ * software. If not, they may be obtained at the above URLs.
16
+ */
17
+
18
+ #ifndef PORTABLE_BLAKE2_H
19
+ #define PORTABLE_BLAKE2_H
20
+
21
+ #include <argon2.h>
22
+
23
+ #if defined(__cplusplus)
24
+ extern "C" {
25
+ #endif
26
+
27
+ enum blake2b_constant {
28
+ BLAKE2B_BLOCKBYTES = 128,
29
+ BLAKE2B_OUTBYTES = 64,
30
+ BLAKE2B_KEYBYTES = 64,
31
+ BLAKE2B_SALTBYTES = 16,
32
+ BLAKE2B_PERSONALBYTES = 16
33
+ };
34
+
35
+ #pragma pack(push, 1)
36
+ typedef struct __blake2b_param {
37
+ uint8_t digest_length; /* 1 */
38
+ uint8_t key_length; /* 2 */
39
+ uint8_t fanout; /* 3 */
40
+ uint8_t depth; /* 4 */
41
+ uint32_t leaf_length; /* 8 */
42
+ uint64_t node_offset; /* 16 */
43
+ uint8_t node_depth; /* 17 */
44
+ uint8_t inner_length; /* 18 */
45
+ uint8_t reserved[14]; /* 32 */
46
+ uint8_t salt[BLAKE2B_SALTBYTES]; /* 48 */
47
+ uint8_t personal[BLAKE2B_PERSONALBYTES]; /* 64 */
48
+ } blake2b_param;
49
+ #pragma pack(pop)
50
+
51
+ typedef struct __blake2b_state {
52
+ uint64_t h[8];
53
+ uint64_t t[2];
54
+ uint64_t f[2];
55
+ uint8_t buf[BLAKE2B_BLOCKBYTES];
56
+ unsigned buflen;
57
+ unsigned outlen;
58
+ uint8_t last_node;
59
+ } blake2b_state;
60
+
61
+ /* Ensure param structs have not been wrongly padded */
62
+ /* Poor man's static_assert */
63
+ enum {
64
+ blake2_size_check_0 = 1 / !!(CHAR_BIT == 8),
65
+ blake2_size_check_2 =
66
+ 1 / !!(sizeof(blake2b_param) == sizeof(uint64_t) * CHAR_BIT)
67
+ };
68
+
69
+ /* Streaming API */
70
+ ARGON2_LOCAL int blake2b_init(blake2b_state *S, size_t outlen);
71
+ ARGON2_LOCAL int blake2b_init_key(blake2b_state *S, size_t outlen, const void *key,
72
+ size_t keylen);
73
+ ARGON2_LOCAL int blake2b_init_param(blake2b_state *S, const blake2b_param *P);
74
+ ARGON2_LOCAL int blake2b_update(blake2b_state *S, const void *in, size_t inlen);
75
+ ARGON2_LOCAL int blake2b_final(blake2b_state *S, void *out, size_t outlen);
76
+
77
+ /* Simple API */
78
+ ARGON2_LOCAL int blake2b(void *out, size_t outlen, const void *in, size_t inlen,
79
+ const void *key, size_t keylen);
80
+
81
+ /* Argon2 Team - Begin Code */
82
+ ARGON2_LOCAL int blake2b_long(void *out, size_t outlen, const void *in, size_t inlen);
83
+ /* Argon2 Team - End Code */
84
+
85
+ #if defined(__cplusplus)
86
+ }
87
+ #endif
88
+
89
+ #endif