package digestif

  1. Overview
  2. Docs

Source file digestif.ml

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
type bigstring = (char, Bigarray.int8_unsigned_elt, Bigarray.c_layout) Bigarray.Array1.t

type 'a iter = ('a -> unit) -> unit
type 'a compare = 'a -> 'a -> int
type 'a equal = 'a -> 'a -> bool
type 'a pp = Format.formatter -> 'a -> unit

module Native = Rakia
module By = Digestif_by
module Bi = Digestif_bi
module Eq = Digestif_eq
module Hash = Digestif_hash
module Conv = Digestif_conv

module type S = sig

  val digest_size : int

  type ctx
  type kind
  type t = private string

  val empty: ctx
  val init: unit -> ctx
  val feed_bytes: ctx -> ?off:int -> ?len:int -> Bytes.t -> ctx
  val feed_string: ctx -> ?off:int -> ?len:int -> String.t -> ctx
  val feed_bigstring: ctx -> ?off:int -> ?len:int -> bigstring -> ctx
  val feedi_bytes: ctx -> Bytes.t iter -> ctx
  val feedi_string: ctx -> String.t iter -> ctx
  val feedi_bigstring: ctx -> bigstring iter -> ctx
  val get: ctx -> t
  val digest_bytes: ?off:int -> ?len:int -> Bytes.t -> t
  val digest_string: ?off:int -> ?len:int -> String.t -> t
  val digest_bigstring: ?off:int -> ?len:int -> bigstring -> t
  val digesti_bytes: Bytes.t iter -> t
  val digesti_string: String.t iter -> t
  val digesti_bigstring: bigstring iter -> t
  val digestv_bytes: Bytes.t list -> t
  val digestv_string: String.t list -> t
  val digestv_bigstring: bigstring list -> t
  val hmac_bytes: key:Bytes.t -> ?off:int -> ?len:int -> Bytes.t -> t
  val hmac_string: key:String.t -> ?off:int -> ?len:int -> String.t -> t
  val hmac_bigstring: key:bigstring -> ?off:int -> ?len:int -> bigstring -> t
  val hmaci_bytes: key:Bytes.t -> Bytes.t iter -> t
  val hmaci_string: key:String.t -> String.t iter -> t
  val hmaci_bigstring: key:bigstring -> bigstring iter -> t
  val hmacv_bytes: key:Bytes.t -> Bytes.t list -> t
  val hmacv_string: key:String.t -> String.t list -> t
  val hmacv_bigstring: key:bigstring -> bigstring list -> t
  val unsafe_compare: t compare
  val compare: t compare
  val eq: t equal
  val neq: t equal
  val pp: t pp
  val of_hex: string -> t
  val consistent_of_hex: string -> t
  val to_hex: t -> string
end

module type Foreign = sig
  open Native

  type kind

  module Bigstring:
  sig
    val init: ctx -> unit
    val update: ctx -> ba -> int -> int -> unit
    val finalize: ctx -> ba -> int -> unit
  end

  module Bytes:
  sig
    val init: ctx -> unit
    val update: ctx -> st -> int -> int -> unit
    val finalize: ctx -> st -> int -> unit
  end

  val ctx_size: unit -> int
end

module type Desc =
sig
  val block_size: int
  val digest_size: int
end

module Unsafe (F : Foreign) (D : Desc) = struct
  let block_size = D.block_size
  and digest_size = D.digest_size
  and ctx_size = F.ctx_size ()

  let init () =
    let t = By.create ctx_size in
    ( F.Bytes.init t; t )

  let empty = Bytes.create ctx_size
  let () = F.Bytes.init empty

  let unsafe_feed_bytes t ?off ?len buf =
    let off, len = match off, len with
      | Some off, Some len -> off, len
      | Some off, None -> off, By.length buf - off
      | None, Some len -> 0, len
      | None, None -> 0, By.length buf in
    F.Bytes.update t buf off len

  let unsafe_feed_string t ?off ?len buf =
    unsafe_feed_bytes t ?off ?len (Bytes.unsafe_of_string buf)

  let unsafe_feed_bigstring t ?off ?len buf =
    let off, len = match off, len with
      | Some off, Some len -> off, len
      | Some off, None -> off, Bi.length buf - off
      | None, Some len -> 0, len
      | None, None -> 0, Bi.length buf in
    F.Bigstring.update t buf off len

  let unsafe_get t =
    let res = By.create digest_size in
    ( F.Bytes.finalize t res 0; res )
end

module Core (F : Foreign) (D : Desc) = struct
  type t = string
  type ctx = Native.ctx
  type kind = F.kind

  include Unsafe (F) (D)
  include Conv.Make (D)
  include Eq.Make (D)

  let eq = String.equal
  let neq a b = not (eq a b)
  let unsafe_compare = String.compare

  let get t =
    let t = Native.dup t in
    unsafe_get t |> By.unsafe_to_string

  let feed_bytes t ?off ?len buf =
    let t = Native.dup t in
    ( unsafe_feed_bytes t ?off ?len buf; t )

  let feed_string t ?off ?len buf =
    let t = Native.dup t in
    ( unsafe_feed_string t ?off ?len buf; t )

  let feed_bigstring t ?off ?len buf =
    let t = Native.dup t in
    ( unsafe_feed_bigstring t ?off ?len buf; t )

  let feedi_bytes t iter =
    let t = Native.dup t in
    let feed buf = unsafe_feed_bytes t buf in
    ( iter feed; t )

  let feedi_string t iter =
    let t = Native.dup t in
    let feed buf = unsafe_feed_string t buf in
    ( iter feed; t )

  let feedi_bigstring t iter =
    let t = Native.dup t in
    let feed buf = unsafe_feed_bigstring t buf in
    ( iter feed; t )

  let digest_bytes ?off ?len buf = feed_bytes empty ?off ?len buf |> get
  let digest_string ?off ?len buf = feed_string empty ?off ?len buf |> get
  let digest_bigstring ?off ?len buf = feed_bigstring empty ?off ?len buf |> get

  let digesti_bytes iter = feedi_bytes empty iter |> get
  let digesti_string iter = feedi_string empty iter |> get
  let digesti_bigstring iter = feedi_bigstring empty iter |> get

  let digestv_bytes lst = digesti_bytes (fun f -> List.iter f lst)
  let digestv_string lst = digesti_string (fun f -> List.iter f lst)
  let digestv_bigstring lst = digesti_bigstring (fun f -> List.iter f lst)
end

module Make (F : Foreign) (D : Desc) = struct
  include Core (F) (D)

  let bytes_opad = By.make block_size '\x5c'
  let bytes_ipad = By.make block_size '\x36'

  let rec norm_bytes key =
    match Pervasives.compare (String.length key) block_size with
    | 1  -> norm_bytes (digest_string key)
    | -1 -> By.rpad (By.unsafe_of_string key) block_size '\000'
    | _  -> By.of_string key

  let bigstring_opad = Bi.init block_size (fun _ -> '\x5c')
  let bigstring_ipad = Bi.init block_size (fun _ -> '\x36')

  let norm_bigstring key =
    let key = Bi.to_string key in
    let res0 = norm_bytes key in
    let res1 = Bi.create (By.length res0) in
    Bi.blit_from_bytes res0 0 res1 0 (By.length res0); res1

  let hmaci_bytes ~key iter =
    let key = norm_bytes (By.unsafe_to_string key) in
    let outer = Native.XOR.Bytes.xor key bytes_opad in
    let inner = Native.XOR.Bytes.xor key bytes_ipad in
    let res = digesti_bytes (fun f -> f inner; iter f) in
    digesti_bytes (fun f -> f outer; f (By.unsafe_of_string res))

  let hmaci_string ~key iter =
    let key = norm_bytes key in
    (* XXX(dinosaure): safe, [rpad] and [digest] have a read-only access. *)
    let outer = Native.XOR.Bytes.xor key bytes_opad in
    let inner = Native.XOR.Bytes.xor key bytes_ipad in
    let ctx = feed_bytes empty inner in
    let res = feedi_string ctx iter |> get in
    let ctx = feed_bytes empty outer in
    feed_string ctx (res :> string) |> get

  let hmaci_bigstring ~key iter =
    let key = norm_bigstring key in
    let outer = Native.XOR.Bigstring.xor key bigstring_opad in
    let inner = Native.XOR.Bigstring.xor key bigstring_ipad in
    let res = digesti_bigstring (fun f -> f inner; iter f) in
    let ctx = feed_bigstring empty outer in
    feed_string ctx (res :> string) |> get

  let hmac_bytes ~key ?off ?len buf =
    let buf = match off, len with
      | Some off, Some len -> By.sub buf off len
      | Some off, None -> By.sub buf off (By.length buf - off)
      | None, Some len -> By.sub buf 0 len
      | None, None -> buf in
    hmaci_bytes ~key (fun f -> f buf)

  let hmac_string ~key ?off ?len buf =
    let buf = match off, len with
      | Some off, Some len -> String.sub buf off len
      | Some off, None -> String.sub buf off (String.length buf - off)
      | None, Some len -> String.sub buf 0 len
      | None, None -> buf in
    hmaci_string ~key (fun f -> f buf)

  let hmac_bigstring ~key ?off ?len buf =
    let buf = match off, len with
      | Some off, Some len -> Bi.sub buf off len
      | Some off, None -> Bi.sub buf off (Bi.length buf - off)
      | None, Some len -> Bi.sub buf 0 len
      | None, None -> buf in
    hmaci_bigstring ~key (fun f -> f buf)

  let hmacv_bytes ~key bufs = hmaci_bytes ~key (fun f -> List.iter f bufs)
  let hmacv_string ~key bufs = hmaci_string ~key (fun f -> List.iter f bufs)
  let hmacv_bigstring ~key bufs = hmaci_bigstring ~key (fun f -> List.iter f bufs)
end

(* XXX(dinosaure): this interface provide a new function to set digest size and
   key. See #20. *)
module type Foreign_BLAKE2 = sig
  open Native

  type kind

  module Bigstring :
  sig
    val init: ctx -> unit
    val update: ctx -> ba -> int -> int -> unit
    val finalize: ctx -> ba -> int -> unit
    val with_outlen_and_key: ctx -> int -> ba -> int -> int -> unit
  end

  module Bytes :
  sig
    val init: ctx -> unit
    val update: ctx -> st -> int -> int -> unit
    val finalize: ctx -> st -> int -> unit
    val with_outlen_and_key: ctx -> int -> st -> int -> int -> unit
  end

  val ctx_size: unit -> int
  val key_size: unit -> int
  val digest_size: ctx -> int
end

module Core_BLAKE2 (F : Foreign_BLAKE2) (D : Desc) = Core (F) (D)

module Make_BLAKE2 (F : Foreign_BLAKE2) (D : Desc) = struct
  include Core_BLAKE2 (F) (D)

  let key_size = F.key_size ()

  let hmaci_bytes ~key iter : t =
    if By.length key > key_size
    then invalid_arg "BLAKE2{S,B}.hmaci_bytes: invalid key";

    let ctx = By.create ctx_size in
    F.Bytes.with_outlen_and_key ctx digest_size key 0 (By.length key);
    feedi_bytes ctx iter |> get

  let hmaci_string ~key iter =
    if String.length key > key_size
    then invalid_arg "BLAKE2{S,B}.hmaci_string: invalid key";

    let ctx = By.create ctx_size in
    F.Bytes.with_outlen_and_key ctx digest_size (By.unsafe_of_string key) 0 (String.length key);
    feedi_string ctx iter |> get

  let hmaci_bigstring ~key iter =
    if Bi.length key > key_size
    then invalid_arg "BLAKE2{S,B}.hmaci_bigstring: invalid key";

    let ctx = By.create ctx_size in
    F.Bigstring.with_outlen_and_key ctx digest_size key 0 (Bi.length key);
    feedi_bigstring ctx iter |> get

  let hmac_bytes ~key ?off ?len buf : t =
    let buf = match off, len with
      | Some off, Some len -> By.sub buf off len
      | Some off, None -> By.sub buf off (By.length buf - off)
      | None, Some len -> By.sub buf 0 len
      | None, None -> buf in
    hmaci_bytes ~key (fun f -> f buf)

  let hmac_string ~key ?off ?len buf =
    let buf = match off, len with
      | Some off, Some len -> String.sub buf off len
      | Some off, None -> String.sub buf off (String.length buf - off)
      | None, Some len -> String.sub buf 0 len
      | None, None -> buf in
    hmaci_string ~key (fun f -> f buf)

  let hmac_bigstring ~key ?off ?len buf =
    let buf = match off, len with
      | Some off, Some len -> Bi.sub buf off len
      | Some off, None -> Bi.sub buf off (Bi.length buf - off)
      | None, Some len -> Bi.sub buf 0 len
      | None, None -> buf in
    hmaci_bigstring ~key (fun f -> f buf)

  let hmacv_bytes ~key bufs = hmaci_bytes ~key (fun f -> List.iter f bufs)
  let hmacv_string ~key bufs = hmaci_string ~key (fun f -> List.iter f bufs)
  let hmacv_bigstring ~key bufs = hmaci_bigstring ~key (fun f -> List.iter f bufs)
end

module MD5 : S with type kind = [ `MD5 ] = Make (Native.MD5) (struct let (digest_size, block_size) = (16, 64) end)
module SHA1 : S with type kind = [ `SHA1 ] = Make (Native.SHA1) (struct let (digest_size, block_size) = (20, 64) end)
module SHA224 : S with type kind = [ `SHA224 ] = Make (Native.SHA224) (struct let (digest_size, block_size) = (28, 64) end)
module SHA256 : S with type kind = [ `SHA256 ] = Make (Native.SHA256) (struct let (digest_size, block_size) = (32, 64) end)
module SHA384 : S with type kind = [ `SHA384 ] = Make (Native.SHA384) (struct let (digest_size, block_size) = (48, 128) end)
module SHA512 : S with type kind = [ `SHA512 ] = Make (Native.SHA512) (struct let (digest_size, block_size) = (64, 128) end)
module BLAKE2B : S with type kind = [ `BLAKE2B ] = Make_BLAKE2(Native.BLAKE2B) (struct let (digest_size, block_size) = (64, 128) end)
module BLAKE2S : S with type kind = [ `BLAKE2S ] = Make_BLAKE2(Native.BLAKE2S) (struct let (digest_size, block_size) = (32, 64) end)
module RMD160 : S with type kind = [ `RMD160 ] = Make (Native.RMD160) (struct let (digest_size, block_size) = (20, 64) end)

module Make_BLAKE2B (D : sig val digest_size : int end) : S with type kind = [ `BLAKE2B ] =
struct
  include Make_BLAKE2(Native.BLAKE2B)(struct let (digest_size, block_size) = (D.digest_size, 128) end)
end

module Make_BLAKE2S (D : sig val digest_size : int end) : S with type kind = [ `BLAKE2S ] =
struct
  include Make_BLAKE2(Native.BLAKE2S)(struct let (digest_size, block_size) = (D.digest_size, 64) end)
end

include Hash

type blake2b = (module S with type kind = [ `BLAKE2B ])
type blake2s = (module S with type kind = [ `BLAKE2S ])

let module_of : type k. k hash -> (module S with type kind = k) = fun hash ->
  let b2b : (int, blake2b) Hashtbl.t = Hashtbl.create 13 in
  let b2s : (int, blake2s) Hashtbl.t = Hashtbl.create 13 in
  match hash with
  | MD5     -> (module MD5)
  | SHA1    -> (module SHA1)
  | RMD160  -> (module RMD160)
  | SHA224  -> (module SHA224)
  | SHA256  -> (module SHA256)
  | SHA384  -> (module SHA384)
  | SHA512  -> (module SHA512)
  | BLAKE2B digest_size -> begin
      match Hashtbl.find b2b digest_size with
      | exception Not_found ->
        let m : (module S with type kind = [ `BLAKE2B ]) =
          (module Make_BLAKE2B(struct let digest_size = digest_size end)
             : S with type kind = [ `BLAKE2B ]) in
        Hashtbl.replace b2b digest_size m ; m
      | m -> m
    end
  | BLAKE2S digest_size -> begin
      match Hashtbl.find b2s digest_size with
      | exception Not_found ->
        let m =
          (module Make_BLAKE2S(struct let digest_size = digest_size end)
             : S with type kind = [ `BLAKE2S ]) in
        Hashtbl.replace b2s digest_size m ; m
      | m -> m
    end

type 'kind t = string

let digesti_bytes
  : type k. k hash -> Bytes.t iter -> k t
  = fun hash iter ->
    let module H = (val (module_of hash)) in
    ((H.digesti_bytes iter :> string) : H.kind t)

let digesti_string
  : type k. k hash -> String.t iter -> k t
  = fun hash iter ->
    let module H = (val (module_of hash)) in
    ((H.digesti_string iter :> string) : H.kind t)

let digesti_bigstring
  : type k. k hash -> bigstring iter -> k t
  = fun hash iter ->
    let module H = (val (module_of hash)) in
    ((H.digesti_bigstring iter :> string) : H.kind t)

let hmaci_bytes
  : type k. k hash -> key:Bytes.t -> Bytes.t iter -> k t
  = fun hash ~key iter ->
    let module H = (val (module_of hash)) in
    ((H.hmaci_bytes ~key iter :> string) : H.kind t)

let hmaci_string
  : type k. k hash -> key:String.t -> String.t iter -> k t
  = fun hash ~key iter ->
    let module H = (val (module_of hash)) in
    ((H.hmaci_string ~key iter :> string) : H.kind t)

let hmaci_bigstring
  : type k. k hash -> key:bigstring -> bigstring iter -> k t
  = fun hash ~key iter ->
    let module H = (val (module_of hash)) in
    ((H.hmaci_bigstring ~key iter :> string) : H.kind t)

(* XXX(dinosaure): unsafe part to avoid overhead. *)

let unsafe_compare
  : type k. k hash -> k t -> k t -> int
  = fun hash a b ->
    let module H = (val (module_of hash)) in
    let unsafe : 'k t -> H.t = Obj.magic in
    H.unsafe_compare (unsafe a) (unsafe b)

let eq
  : type k. k hash -> k t equal
  = fun hash a b ->
    let module H = (val (module_of hash)) in
    let unsafe : 'k t -> H.t = Obj.magic in
    H.eq (unsafe a) (unsafe b)

let neq
  : type k. k hash -> k t equal
  = fun hash a b ->
    let module H = (val (module_of hash)) in
    let unsafe : 'k t -> H.t = Obj.magic in
    H.neq (unsafe a) (unsafe b)

let pp
  : type k. k hash -> k t pp
  = fun hash ppf t  ->
    let module H = (val (module_of hash)) in
    let unsafe : 'k t -> H.t = Obj.magic in
    H.pp ppf (unsafe t)

let of_hex
  : type k. k hash -> string -> k t
  = fun hash hex ->
    let module H = (val (module_of hash)) in
    (H.of_hex hex :> string)

let to_hex
  : type k. k hash -> k t -> string
  = fun hash t ->
    let module H = (val (module_of hash)) in
    let unsafe : 'k t -> H.t = Obj.magic in
    (H.to_hex (unsafe t))
OCaml

Innovation. Community. Security.