kotlincrypto / macs Goto Github PK

Add implementations for:

• HmacMD5
• HmacSHA1
• HmacSHA256
• HmacSHA512

See KotlinCrypto/hash#27

Once hash version 0.2.1 is released, just need to do a version bump and release.

Add new module :library:kmac which has implementations for KMAC128, and KMAC256

KotlinCrypto/hash#6

Will also need to update testing module to properly exercise the update(input, offset, len) method.

update(input: ByteArray, offset: Int, len: Int) override is not implemented correctly as it passes the entire byte array to digest instead of the offset and len parameters.

core version 0.3.0-SNAPSHOT is available containing API breaking changes.

See:

• KotlinCrypto/core#48
• KotlinCrypto/hash#49

This issue will require a few things:

• Update import packages names for Digest, Mac and Xof
• Move classes to new package locations

Current implementation of Hmac.Engine is that the provided key ByteArray is sized to the digest.blockSize() by either hashing it once (if larger than), padding it with 0's (if smaller), or using the provided key. It then uses the prepared key to derive iKey and oKey.

After those are derived, the preparedKey should be blanked. As such, the provided key should always be copied so we are not modifying the provided ByteArray, so that the copy can be blanked before dereferencing.

val preparedKey = if (key.size > digest.blockSize()) {
    digest.digest(key).copyOf(digest.blockSize())
} else {
    key.copyOf(digest.blockSize())
}

// ... derive iKey and oKey

preparedKey.fill(0)

See KotlinCrypto/hash#20

Same issue.

0.1.0-beta02 adds support for composite builds.

Fix for Android API 21-23 requiring a Provider when instantiating a new Mac

For release 0.3.0, modules hmac-sha2-256 and hmac-sha2-512 will no longer be published. They were there for supporting backward compatibility with consumers of 0.1.X versions and will be going away as there has been ample time to heed the deprecation notice.

Currently, dependencies are expressed as api for core digest, and digest algos. The high level implementations of Hmac algos should not provide this dependency. If the consumer wishes to import the hashing algo, they can do so themselves. The only core libs that should be provided is mac and common (b/c needed).

• Combine SHA2 algorithms into single sha2 module
• Add new algorithms

Add new module :library:hmac:sha3 which has implementations for HmacSHA3-224, HmacSHA3-256, HmacSHA3-384, HmacSHA3-512, etc.

Update core and hash dependencies to 0.2.3

The hmac dependency is provided via high level implementations and should not be included in the BOM. It is more of a "internal" module.

As with other SHA3 derived functions, an alternate constructor is needed in order to express a non-default output macLength

See KotlinCrypto/hash#33

Kmac.Engine currently only uses Xof for CSHAKE as its hashing source. There is a lot of unnecessary overhead with this when used as a Mac. As such, Kmac.Engine should be split into 2, DigestEngine, and XofEngine.

Will also require updating core and hash to 0.2.7, as there was a fix for android from core