# Copyright 2013 Donald Stufft and individual contributors # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. from __future__ import absolute_import, division, print_function import nacl.bindings import nacl.encoding BLAKE2B_BYTES = nacl.bindings.crypto_generichash_BYTES BLAKE2B_BYTES_MIN = nacl.bindings.crypto_generichash_BYTES_MIN BLAKE2B_BYTES_MAX = nacl.bindings.crypto_generichash_BYTES_MAX BLAKE2B_KEYBYTES = nacl.bindings.crypto_generichash_KEYBYTES BLAKE2B_KEYBYTES_MIN = nacl.bindings.crypto_generichash_KEYBYTES_MIN BLAKE2B_KEYBYTES_MAX = nacl.bindings.crypto_generichash_KEYBYTES_MAX BLAKE2B_SALTBYTES = nacl.bindings.crypto_generichash_SALTBYTES BLAKE2B_PERSONALBYTES = nacl.bindings.crypto_generichash_PERSONALBYTES SIPHASH_BYTES = nacl.bindings.crypto_shorthash_siphash24_BYTES SIPHASH_KEYBYTES = nacl.bindings.crypto_shorthash_siphash24_KEYBYTES SIPHASHX_BYTES = nacl.bindings.crypto_shorthash_siphashx24_BYTES SIPHASHX_KEYBYTES = nacl.bindings.crypto_shorthash_siphashx24_KEYBYTES _b2b_hash = nacl.bindings.crypto_generichash_blake2b_salt_personal _sip_hash = nacl.bindings.crypto_shorthash_siphash24 _sip_hashx = nacl.bindings.crypto_shorthash_siphashx24 def sha256(message, encoder=nacl.encoding.HexEncoder): return encoder.encode(nacl.bindings.crypto_hash_sha256(message)) def sha512(message, encoder=nacl.encoding.HexEncoder): return encoder.encode(nacl.bindings.crypto_hash_sha512(message)) def blake2b(data, digest_size=BLAKE2B_BYTES, key=b'', salt=b'', person=b'', encoder=nacl.encoding.HexEncoder): """ One-shot blake2b digest :param data: the digest input byte sequence :type data: bytes :param digest_size: the requested digest size; must be at most :py:data:`.BLAKE2B_BYTES_MAX`; the default digest size is :py:data:`.BLAKE2B_BYTES` :type digest_size: int :param key: the key to be set for keyed MAC/PRF usage; if set, the key must be at most :py:data:`.BLAKE2B_KEYBYTES_MAX` long :type key: bytes :param salt: an initialization salt at most :py:data:`.BLAKE2B_SALTBYTES` long; it will be zero-padded if needed :type salt: bytes :param person: a personalization string at most :py:data:`.BLAKE2B_PERSONALBYTES` long; it will be zero-padded if needed :type person: bytes :param encoder: the encoder to use on returned digest :type encoder: class :return: encoded bytes data :rtype: the return type of the choosen encoder """ digest = _b2b_hash(data, digest_size=digest_size, key=key, salt=salt, person=person) return encoder.encode(digest) generichash = blake2b def siphash24(message, key=b'', encoder=nacl.encoding.HexEncoder): """ Computes a keyed MAC of ``message`` using siphash-2-4 :param message: The message to hash. :type message: bytes :param key: the message authentication key for the siphash MAC construct :type key: bytes(:py:data:`.SIPHASH_KEYBYTES`) :param encoder: A class that is able to encode the hashed message. :return: The hashed message. :rtype: bytes(:py:data:`.SIPHASH_BYTES`) The :py:func:`.siphash24` construct is also exposed with the :py:func:`.shorthash` name for compatibility with libsodium names. """ digest = _sip_hash(message, key) return encoder.encode(digest) shorthash = siphash24 def siphashx24(message, key=b'', encoder=nacl.encoding.HexEncoder): """ Computes a keyed MAC of ``message`` using the 128 bit siphash-2-4 variant siphashx24 :param message: The message to hash. :type message: bytes :param key: the message authentication key for the siphash MAC construct :type key: bytes(:py:data:`.SIPHASHX_KEYBYTES`) :param encoder: A class that is able to encode the hashed message. :return: The hashed message. :rtype: bytes(:py:data:`.SIPHASHX_BYTES`) .. versionadded:: 1.2 """ digest = _sip_hashx(message, key) return encoder.encode(digest)