hmac-drbg

Pure Haskell HMAC-DRBG (docs.ppad.tech/hmac-drbg).
git clone git://git.ppad.tech/hmac-drbg.git
Log | Files | Refs | README | LICENSE

commit 7557757c32cccb0d95416a21ac832df53cdfdb5d
parent c23408f69f64d41c3d5478801bb16c0603b4e43b
Author: Jared Tobin <jared@jtobin.io>
Date:   Sun, 28 Dec 2025 11:51:34 -0330

release: v0.1.3

Diffstat:
MCHANGELOG | 3+++
MREADME.md | 24++++++++++++------------
Mflake.lock | 44++++++++++++++++++++++----------------------
Mflake.nix | 19+++++++++++++------
Mppad-hmac-drbg.cabal | 4++--
5 files changed, 52 insertions(+), 42 deletions(-)

diff --git a/CHANGELOG b/CHANGELOG @@ -1,5 +1,8 @@ # Changelog +- 0.1.3 (2025-12-28) + * Adds an 'llvm' build flag and tests with GHC 9.10.3. + - 0.1.2 (2025-02-06) * Minor bytestring optimizations for shaving off microseconds in certain cases. diff --git a/README.md b/README.md @@ -76,28 +76,28 @@ Current benchmark figures on an M4 Silicon MacBook Air look like (use ``` benchmarking ppad-hmac-drbg/HMAC-SHA256/new - time 2.771 μs (2.767 μs .. 2.775 μs) + time 2.228 μs (2.226 μs .. 2.231 μs) 1.000 R² (1.000 R² .. 1.000 R²) - mean 2.768 μs (2.764 μs .. 2.772 μs) - std dev 12.21 ns (10.10 ns .. 14.90 ns) + mean 2.240 μs (2.236 μs .. 2.246 μs) + std dev 18.12 ns (13.79 ns .. 26.66 ns) benchmarking ppad-hmac-drbg/HMAC-SHA256/reseed - time 1.777 μs (1.776 μs .. 1.778 μs) + time 1.463 μs (1.461 μs .. 1.464 μs) 1.000 R² (1.000 R² .. 1.000 R²) - mean 1.777 μs (1.776 μs .. 1.778 μs) - std dev 2.260 ns (1.699 ns .. 3.099 ns) + mean 1.462 μs (1.461 μs .. 1.464 μs) + std dev 4.128 ns (2.494 ns .. 6.915 ns) benchmarking ppad-hmac-drbg/HMAC-SHA256/gen (32B) - time 2.756 μs (2.753 μs .. 2.759 μs) + time 2.239 μs (2.235 μs .. 2.245 μs) 1.000 R² (1.000 R² .. 1.000 R²) - mean 2.757 μs (2.754 μs .. 2.760 μs) - std dev 9.806 ns (6.361 ns .. 16.87 ns) + mean 2.241 μs (2.238 μs .. 2.247 μs) + std dev 16.14 ns (11.39 ns .. 23.78 ns) benchmarking ppad-hmac-drbg/HMAC-SHA256/gen (256B) - time 8.967 μs (8.959 μs .. 8.980 μs) + time 7.282 μs (7.277 μs .. 7.290 μs) 1.000 R² (1.000 R² .. 1.000 R²) - mean 8.970 μs (8.965 μs .. 8.985 μs) - std dev 26.04 ns (12.30 ns .. 52.00 ns) + mean 7.291 μs (7.286 μs .. 7.299 μs) + std dev 20.36 ns (15.09 ns .. 30.34 ns) ``` You should compile with the 'llvm' flag (and ensure that diff --git a/flake.lock b/flake.lock @@ -5,11 +5,11 @@ "systems": "systems" }, "locked": { - "lastModified": 1710146030, - "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=", + "lastModified": 1731533236, + "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=", "owner": "numtide", "repo": "flake-utils", - "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a", + "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b", "type": "github" }, "original": { @@ -20,11 +20,11 @@ }, "nixpkgs": { "locked": { - "lastModified": 1725910328, - "narHash": "sha256-n9pCtzGZ0httmTwMuEbi5E78UQ4ZbQMr1pzi5N0LAG8=", + "lastModified": 1766840161, + "narHash": "sha256-Ss/LHpJJsng8vz1Pe33RSGIWUOcqM1fjrehjUkdrWio=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "5775c2583f1801df7b790bf7f7d710a19bac66f4", + "rev": "3edc4a30ed3903fdf6f90c837f961fa6b49582d1", "type": "github" }, "original": { @@ -51,11 +51,11 @@ ] }, "locked": { - "lastModified": 1741625558, - "narHash": "sha256-ZBDXRD5fsVqA5bGrAlcnhiu67Eo50q0M9614nR3NBwY=", + "lastModified": 1766934151, + "narHash": "sha256-BUFpuLfrGXE2xi3Wa9TYCEhhRhFp175Ghxnr0JRbG2I=", "ref": "master", - "rev": "fb63457f2e894eda28250dfe65d0fcd1d195ac2f", - "revCount": 24, + "rev": "58dfb7922401a60d5de76825fcd5f6ecbcd7afe0", + "revCount": 26, "type": "git", "url": "git://git.ppad.tech/base16.git" }, @@ -71,11 +71,11 @@ "nixpkgs": "nixpkgs" }, "locked": { - "lastModified": 1737297101, - "narHash": "sha256-EnXnq+JLflbWt+DvaGGnY2gfAqsGNOm5vPgHh3hkfwQ=", + "lastModified": 1766932084, + "narHash": "sha256-GvVsbTfW+B7IQ9K/QP2xcXJAm1lhBin1jYZWNjOzT+o=", "ref": "master", - "rev": "f29823875250bc99b3891f7373535ccde9a29a44", - "revCount": 1, + "rev": "353e61763b959b960a55321a85423501e3e9ed7a", + "revCount": 2, "type": "git", "url": "git://git.ppad.tech/nixpkgs.git" }, @@ -105,11 +105,11 @@ ] }, "locked": { - "lastModified": 1766435555, - "narHash": "sha256-ysN0iRuBLSQrgWU3rCFUyq0NvRpug6DTBRZSlWbmI1A=", + "lastModified": 1766934663, + "narHash": "sha256-QFHvRxg/AN9/FHF9EyVui1os0sTxpawzsmxcHqcdhoc=", "ref": "master", - "rev": "a4c17689cd66e1ef35c667914765cb24c9a4b305", - "revCount": 96, + "rev": "0d9a7a2f83fc95bf3ac1d335d1c0237d397e44bc", + "revCount": 98, "type": "git", "url": "git://git.ppad.tech/sha256.git" }, @@ -139,11 +139,11 @@ ] }, "locked": { - "lastModified": 1750736173, - "narHash": "sha256-7AGv9HktdslIaVDO8IQUMrcBewmFngHlwqEUaYsI6kw=", + "lastModified": 1766934908, + "narHash": "sha256-39ElMaWIjMW0BbHqINaHDjzpL8PsWNyvZn14QAKgPOo=", "ref": "master", - "rev": "ba7757cf61132cf3c3d79960f51ddaf4801f7aec", - "revCount": 30, + "rev": "4bb34de9a798e1954e09ec3b6d8d8b8db645e5d7", + "revCount": 32, "type": "git", "url": "git://git.ppad.tech/sha512.git" }, diff --git a/flake.nix b/flake.nix @@ -40,10 +40,19 @@ pkgs = import nixpkgs { inherit system; }; hlib = pkgs.haskell.lib; - llvm = pkgs.llvmPackages_15.llvm; + llvm = pkgs.llvmPackages_19.llvm; base16 = ppad-base16.packages.${system}.default; + base16-llvm = + hlib.addBuildTools + (hlib.enableCabalFlag base16 "llvm") + [ llvm ]; + sha512 = ppad-sha512.packages.${system}.default; + sha512-llvm = + hlib.addBuildTools + (hlib.enableCabalFlag sha512 "llvm") + [ llvm ]; sha256 = ppad-sha256.packages.${system}.default; sha256-llvm = @@ -51,10 +60,10 @@ (hlib.enableCabalFlag sha256 "llvm") [ llvm ]; - hpkgs = pkgs.haskell.packages.ghc981.extend (new: old: { - ppad-base16 = base16; + hpkgs = pkgs.haskell.packages.ghc910.extend (new: old: { + ppad-base16 = base16-llvm; ppad-sha256 = sha256-llvm; - ppad-sha512 = sha512; + ppad-sha512 = sha512-llvm; ${lib} = new.callCabal2nix lib ./. { ppad-base16 = new.ppad-base16; ppad-sha256 = new.ppad-sha256; @@ -80,8 +89,6 @@ llvm ]; - inputsFrom = builtins.attrValues self.packages.${system}; - doBenchmark = true; shellHook = '' diff --git a/ppad-hmac-drbg.cabal b/ppad-hmac-drbg.cabal @@ -1,6 +1,6 @@ cabal-version: 3.0 name: ppad-hmac-drbg -version: 0.1.2 +version: 0.1.3 synopsis: HMAC-based deterministic random bit generator license: MIT license-file: LICENSE @@ -8,7 +8,7 @@ author: Jared Tobin maintainer: jared@ppad.tech category: Cryptography build-type: Simple -tested-with: GHC == { 9.8.1 } +tested-with: GHC == 9.10.3 extra-doc-files: CHANGELOG description: A pure implementation of the HMAC-DRBG CSPRNG, as specified by NIST-SP