#include <pbkdf2.h>

Inheritance diagram for Botan::PKCS5_PBKDF2:

Public Member Functions
void	clear ()
PBKDF *	clone () const
OctetString	derive_key (size_t output_len, const std::string &passphrase, const byte salt[], size_t salt_len, size_t iterations) const
std::string	name () const
	PKCS5_PBKDF2 (MessageAuthenticationCode *mac_fn)
	~PKCS5_PBKDF2 ()

Detailed Description

PKCS #5 PBKDF2

Definition at line 19 of file pbkdf2.h.

Constructor & Destructor Documentation

◆ PKCS5_PBKDF2()

Botan::PKCS5_PBKDF2::PKCS5_PBKDF2 ( MessageAuthenticationCode * mac_fn )

inline

Create a PKCS #5 instance using the specified message auth code

Parameters

mac_fn the MAC to use

Definition at line 41 of file pbkdf2.h.

41: mac(mac_fn) {}

Referenced by clone(), and Botan::Core_Engine::find_pbkdf().

◆ ~PKCS5_PBKDF2()

Botan::PKCS5_PBKDF2::~PKCS5_PBKDF2 ( )

inline

Destructor

Definition at line 46 of file pbkdf2.h.

46{ delete mac; }

Member Function Documentation

◆ clear()

void Botan::PBKDF::clear ( )

inlinevirtualinherited

Zeroize internal state

Implements Botan::Algorithm.

Definition at line 30 of file pbkdf.h.

30{}

◆ clone()

PBKDF * Botan::PKCS5_PBKDF2::clone ( ) const

inlinevirtual

Returns: new instance of this same algorithm

Implements Botan::PBKDF.

Definition at line 27 of file pbkdf2.h.

         {
         return new PKCS5_PBKDF2(mac->clone());
         }

References PKCS5_PBKDF2().

◆ derive_key()

OctetString Botan::PKCS5_PBKDF2::derive_key	(	size_t	output_len,
		const std::string &	passphrase,
		const byte	salt[],
		size_t	salt_len,
		size_t	iterations ) const

virtual

Derive a key from a passphrase

Parameters

output_len	the desired length of the key to produce
passphrase	the password to derive the key from
salt	a randomly chosen salt
salt_len	length of salt in bytes
iterations	the number of iterations to use (use 10K or more)

Implements Botan::PBKDF.

Definition at line 17 of file pbkdf2.cpp.

   {
   if(iterations == 0)
      throw Invalid_Argument("PKCS#5 PBKDF2: Invalid iteration count");
 
   try
      {
      mac->set_key(reinterpret_cast<const byte*>(passphrase.data()),
                   passphrase.length());
      }
   catch(Invalid_Key_Length)
      {
      throw Exception(name() + " cannot accept passphrases of length " +
                      to_string(passphrase.length()));
      }
 
   SecureVector<byte> key(key_len);
 
   byte* T = &key[0];
 
   SecureVector<byte> U(mac->output_length());
 
   u32bit counter = 1;
   while(key_len)
      {
      size_t T_size = std::min<size_t>(mac->output_length(), key_len);
 
      mac->update(salt, salt_size);
      mac->update_be(counter);
      mac->final(&U[0]);
 
      xor_buf(T, U, T_size);
 
      for(size_t j = 1; j != iterations; ++j)
         {
         mac->update(U);
         mac->final(&U[0]);
         xor_buf(T, U, T_size);
         }
 
      key_len -= T_size;
      T += T_size;
      ++counter;
      }
 
   return key;
   }

References name(), Botan::to_string(), and Botan::xor_buf().

Referenced by Botan::check_passhash9(), Botan::CryptoBox::decrypt(), Botan::CryptoBox::encrypt(), and Botan::generate_passhash9().

◆ name()

std::string Botan::PKCS5_PBKDF2::name ( ) const