hmac-drbg

Pure Haskell HMAC-DRBG CSPRNG per NIST-SP 800-90A.
git clone git://git.ppad.tech/hmac-drbg.git
Log | Files | Refs | LICENSE

commit 36c1a780cf1b7a3fd305c224298d3bf0a2afc6e6
Author: Jared Tobin <jared@jtobin.io>
Date:   Mon, 23 Sep 2024 12:16:19 +0400

lib: initial commit

Diffstat:
ACHANGELOG | 0
ALICENSE | 20++++++++++++++++++++
Aflake.lock | 88+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Aflake.nix | 63+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Alib/Crypto/DRBG/HMAC.hs | 3+++
Appad-hmac-drbg.cabal | 32++++++++++++++++++++++++++++++++
6 files changed, 206 insertions(+), 0 deletions(-)

diff --git a/CHANGELOG b/CHANGELOG diff --git a/LICENSE b/LICENSE @@ -0,0 +1,20 @@ +Copyright (c) 2024 Jared Tobin + +Permission is hereby granted, free of charge, to any person obtaining +a copy of this software and associated documentation files (the +"Software"), to deal in the Software without restriction, including +without limitation the rights to use, copy, modify, merge, publish, +distribute, sublicense, and/or sell copies of the Software, and to +permit persons to whom the Software is furnished to do so, subject to +the following conditions: + +The above copyright notice and this permission notice shall be included +in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. +IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY +CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, +TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE +SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. diff --git a/flake.lock b/flake.lock @@ -0,0 +1,88 @@ +{ + "nodes": { + "flake-utils": { + "inputs": { + "systems": "systems" + }, + "locked": { + "lastModified": 1710146030, + "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=", + "owner": "numtide", + "repo": "flake-utils", + "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a", + "type": "github" + }, + "original": { + "owner": "numtide", + "repo": "flake-utils", + "type": "github" + } + }, + "nixpkgs": { + "locked": { + "lastModified": 1725910328, + "narHash": "sha256-n9pCtzGZ0httmTwMuEbi5E78UQ4ZbQMr1pzi5N0LAG8=", + "owner": "NixOS", + "repo": "nixpkgs", + "rev": "5775c2583f1801df7b790bf7f7d710a19bac66f4", + "type": "github" + }, + "original": { + "owner": "NixOS", + "ref": "nixpkgs-unstable", + "repo": "nixpkgs", + "type": "github" + } + }, + "ppad-sha256": { + "inputs": { + "flake-utils": "flake-utils", + "nixpkgs": "nixpkgs" + }, + "locked": { + "lastModified": 1726493969, + "narHash": "sha256-toJ5A5+0/xijqVELjXfE3AdWV24B672R16JWq+gKLFk=", + "ref": "master", + "rev": "e92f4e13d6afa962109e76d35c6fcb38045e28ed", + "revCount": 69, + "type": "git", + "url": "git://git.ppad.tech/sha256.git" + }, + "original": { + "ref": "master", + "type": "git", + "url": "git://git.ppad.tech/sha256.git" + } + }, + "root": { + "inputs": { + "flake-utils": [ + "ppad-sha256", + "flake-utils" + ], + "nixpkgs": [ + "ppad-sha256", + "nixpkgs" + ], + "ppad-sha256": "ppad-sha256" + } + }, + "systems": { + "locked": { + "lastModified": 1681028828, + "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=", + "owner": "nix-systems", + "repo": "default", + "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e", + "type": "github" + }, + "original": { + "owner": "nix-systems", + "repo": "default", + "type": "github" + } + } + }, + "root": "root", + "version": 7 +} diff --git a/flake.nix b/flake.nix @@ -0,0 +1,63 @@ +{ + description = "Pure Haskell HMAC-DRBG"; + + inputs = { + ppad-sha256 = { + type = "git"; + url = "git://git.ppad.tech/sha256.git"; + ref = "master"; + }; + flake-utils.follows = "ppad-sha256/flake-utils"; + nixpkgs.follows = "ppad-sha256/nixpkgs"; + }; + + outputs = { self, nixpkgs, flake-utils, ppad-sha256 }: + flake-utils.lib.eachDefaultSystem (system: + let + lib = "ppad-hmac-drbg"; + + pkgs = import nixpkgs { inherit system; }; + hlib = pkgs.haskell.lib; + + sha256 = ppad-sha256.packages.${system}.default; + + hpkgs = pkgs.haskell.packages.ghc981.extend (new: old: { + ppad-sha256 = ppad-sha256.packages.${system}.default; + ${lib} = new.callCabal2nix lib ./. { + ppad-sha256 = new.ppad-sha256; + }; + }); + + cc = pkgs.stdenv.cc; + ghc = hpkgs.ghc; + cabal = hpkgs.cabal-install; + in + { + packages.default = hpkgs.${lib}; + + devShells.default = hpkgs.shellFor { + packages = p: [ + (hlib.doBenchmark p.${lib}) + ]; + + buildInputs = [ + cabal + cc + ]; + + inputsFrom = builtins.attrValues self.packages.${system}; + + doBenchmark = true; + + shellHook = '' + PS1="[${lib}] \w$ " + echo "entering ${system} shell, using" + echo "cc: $(${cc}/bin/cc --version)" + echo "ghc: $(${ghc}/bin/ghc --version)" + echo "cabal: $(${cabal}/bin/cabal --version)" + ''; + }; + } + ); +} + diff --git a/lib/Crypto/DRBG/HMAC.hs b/lib/Crypto/DRBG/HMAC.hs @@ -0,0 +1,3 @@ + +module Crypto.DRBG.HMAC where + diff --git a/ppad-hmac-drbg.cabal b/ppad-hmac-drbg.cabal @@ -0,0 +1,32 @@ +cabal-version: 3.0 +name: ppad-hmac-drbg +version: 0.1.0 +synopsis: HMAC-based deterministic random bit generator +license: MIT +license-file: LICENSE +author: Jared Tobin +maintainer: jared@ppad.tech +category: Cryptography +build-type: Simple +tested-with: GHC == { 9.8.1 } +extra-doc-files: CHANGELOG +description: + A pure implementation of the HMAC-DRBG CSPRNG, as specified by NIST-SP + 800-90A. + +source-repository head + type: git + location: git.ppad.tech/hmac-drbg.git + +library + default-language: Haskell2010 + hs-source-dirs: lib + ghc-options: + -Wall + exposed-modules: + Crypto.DRBG.HMAC + build-depends: + base >= 4.9 && < 5 + , bytestring >= 0.9 && < 0.13 + , ppad-sha256 >= 0.1.0 && < 0.2.0 +