1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
package crypto
import (
"crypto"
"crypto/sha1" //nolint: gosec
"crypto/sha256"
"crypto/sha512"
"hash"
"github.com/pkg/errors"
"golang.org/x/crypto/pbkdf2"
)
var hashFuncs map[crypto.Hash]func() hash.Hash
func init() {
hashFuncs = make(map[crypto.Hash]func() hash.Hash)
hashFuncs[crypto.SHA1] = sha1.New
hashFuncs[crypto.SHA224] = sha256.New224
hashFuncs[crypto.SHA256] = sha256.New
hashFuncs[crypto.SHA384] = sha512.New384
hashFuncs[crypto.SHA512] = sha512.New
hashFuncs[crypto.SHA512_224] = sha512.New512_224
hashFuncs[crypto.SHA512_256] = sha512.New512_256
}
// StrToHash - find a hash given a certain string
func StrToHash(hash string) (crypto.Hash, error) {
switch hash {
case "SHA1", "SHA-1":
return crypto.SHA1, nil
case "SHA224", "SHA-224":
return crypto.SHA224, nil
case "SHA256", "SHA-256":
return crypto.SHA256, nil
case "SHA384", "SHA-384":
return crypto.SHA384, nil
case "SHA512", "SHA-512":
return crypto.SHA512, nil
case "SHA512_224", "SHA512/224", "SHA-512_224", "SHA-512/224":
return crypto.SHA512_224, nil
case "SHA512_256", "SHA512/256", "SHA-512_256", "SHA-512/256":
return crypto.SHA512_256, nil
}
return 0, errors.Errorf("no such hash %s", hash)
}
// PBKDF2 - Run the Password-Based Key Derivation Function #2 as defined in
// RFC 8018 (PKCS #5 v2.1)
func PBKDF2(password, salt []byte, iter, keylen int, hashFunc crypto.Hash) ([]byte, error) {
h, ok := hashFuncs[hashFunc]
if !ok {
return nil, errors.Errorf("hashFunc not supported: %v", hashFunc)
}
return pbkdf2.Key(password, salt, iter, keylen, h), nil
}
|
