drbg

Documentation

Index

• Constants
• Variables
• type Base
  • func (base *Base) NeedReseed() bool
• type CTR
  • func NewCTR(cipherProvider func(key []byte) (cipher.Block, error), keyLen int, ...) (*CTR, error)
  • func NewGmCTR(securityLevel SecurityLevel, entropy, nonce, personalization []byte) (*CTR, error)
  • func NewNistCTR(cipherProvider func(key []byte) (cipher.Block, error), keyLen int, ...) (*CTR, error)
  • func (hd *CTR) Generate(b, additional []byte) error
  • func (hd *CTR) MaxBytesPerRequest() int
  • func (hd *CTR) Reseed(entropy, additional []byte) error
• type DRBG
• type Hash
  • func NewGmHash(securityLevel SecurityLevel, entropy, nonce, personalization []byte) (*Hash, error)
  • func NewHash(newHash func() hash.Hash, securityLevel SecurityLevel, gm bool, ...) (*Hash, error)
  • func NewNistHash(newHash func() hash.Hash, securityLevel SecurityLevel, ...) (*Hash, error)
  • func (hd *Hash) Generate(b, additional []byte) error
  • func (hd *Hash) MaxBytesPerRequest() int
  • func (hd *Hash) Reseed(entropy, additional []byte) error
• type Prng
  • func NewCtrPrng(cipherProvider func(key []byte) (cipher.Block, error), keyLen int, ...) (*Prng, error)
  • func NewGmCtrPrng(entropySource io.Reader, securityStrength int, securityLevel SecurityLevel, ...) (*Prng, error)
  • func NewGmHashPrng(entropySource io.Reader, securityStrength int, securityLevel SecurityLevel, ...) (*Prng, error)
  • func NewHashPrng(newHash func() hash.Hash, entropySource io.Reader, securityStrength int, ...) (*Prng, error)
  • func NewNistCtrPrng(cipherProvider func(key []byte) (cipher.Block, error), keyLen int, ...) (*Prng, error)
  • func NewNistHashPrng(newHash func() hash.Hash, entropySource io.Reader, securityStrength int, ...) (*Prng, error)
  • func (prng *Prng) Read(data []byte) (int, error)
• type SecurityLevel

Constants

const MaxBytes = 1 << 27

const MaxBytesPerGenerate = 1 << 11

const ReseedCounterIntervalLevelOne uint64 = 1 << 20

const ReseedCounterIntervalLevelTest uint64 = 8

const ReseedCounterIntervalLevelTwo uint64 = 1 << 10

const ReseedTimeIntervalLevelOne = time.Duration(600) * time.Second

const ReseedTimeIntervalLevelTest = time.Duration(6) * time.Second

const ReseedTimeIntervalLevelTwo = time.Duration(60) * time.Second

Variables

var ErrReseedRequired = errors.New("reseed required")

Types

type Base

type Base struct {
	// contains filtered or unexported fields
}

func (*Base) NeedReseed

func (base *Base) NeedReseed() bool

type CTR

type CTR struct {
	Base
	// contains filtered or unexported fields
}

func NewCTR

func NewCTR(cipherProvider func(key []byte) (cipher.Block, error), keyLen int, securityLevel SecurityLevel, gm bool, entropy, nonce, personalization []byte) (*CTR, error)

func NewGmCTR

func NewGmCTR(securityLevel SecurityLevel, entropy, nonce, personalization []byte) (*CTR, error)

func NewNistCTR

func NewNistCTR(cipherProvider func(key []byte) (cipher.Block, error), keyLen int, securityLevel SecurityLevel, entropy, nonce, personalization []byte) (*CTR, error)

func (*CTR) Generate

func (hd *CTR) Generate(b, additional []byte) error

func (*CTR) MaxBytesPerRequest

func (hd *CTR) MaxBytesPerRequest() int

func (*CTR) Reseed

func (hd *CTR) Reseed(entropy, additional []byte) error

type DRBG

type DRBG interface {
	NeedReseed() bool
	Reseed(entropy, additional []byte) error
	Generate(b, additional []byte) error
	MaxBytesPerRequest() int
}

type Hash

type Hash struct {
	Base
	// contains filtered or unexported fields
}

func NewGmHash

func NewGmHash(securityLevel SecurityLevel, entropy, nonce, personalization []byte) (*Hash, error)

func NewHash

func NewHash(newHash func() hash.Hash, securityLevel SecurityLevel, gm bool, entropy, nonce, personalization []byte) (*Hash, error)

func NewNistHash

func NewNistHash(newHash func() hash.Hash, securityLevel SecurityLevel, entropy, nonce, personalization []byte) (*Hash, error)

func (*Hash) Generate

func (hd *Hash) Generate(b, additional []byte) error

func (*Hash) MaxBytesPerRequest

func (hd *Hash) MaxBytesPerRequest() int

func (*Hash) Reseed

func (hd *Hash) Reseed(entropy, additional []byte) error

type Prng

type Prng struct {
	// contains filtered or unexported fields
}

func NewCtrPrng

func NewCtrPrng(cipherProvider func(key []byte) (cipher.Block, error), keyLen int, entropySource io.Reader, securityStrength int, gm bool, securityLevel SecurityLevel, personalization []byte) (*Prng, error)

func NewGmCtrPrng

func NewGmCtrPrng(entropySource io.Reader, securityStrength int, securityLevel SecurityLevel, personalization []byte) (*Prng, error)

func NewGmHashPrng

func NewGmHashPrng(entropySource io.Reader, securityStrength int, securityLevel SecurityLevel, personalization []byte) (*Prng, error)

func NewHashPrng

func NewHashPrng(newHash func() hash.Hash, entropySource io.Reader, securityStrength int, gm bool, securityLevel SecurityLevel, personalization []byte) (*Prng, error)

func NewNistCtrPrng

func NewNistCtrPrng(cipherProvider func(key []byte) (cipher.Block, error), keyLen int, entropySource io.Reader, securityStrength int, securityLevel SecurityLevel, personalization []byte) (*Prng, error)

func NewNistHashPrng

func NewNistHashPrng(newHash func() hash.Hash, entropySource io.Reader, securityStrength int, securityLevel SecurityLevel, personalization []byte) (*Prng, error)

func (*Prng) Read

func (prng *Prng) Read(data []byte) (int, error)

type SecurityLevel

type SecurityLevel byte

const (
	SecurityLevelOne  SecurityLevel = 0x01
	SecurityLevelTwo  SecurityLevel = 0x02
	SecurityLevelTest SecurityLevel = 0x99
)