Function pbkdf2_hmac

crates/stdlib/src/hashlib.rs:832–880

(args: Pbkdf2HmacArgs, vm: &VirtualMachine)

    #[pyfunction]
    fn pbkdf2_hmac(args: Pbkdf2HmacArgs, vm: &VirtualMachine) -> PyResult<PyBytes> {
        let name = args.hash_name.as_str().to_lowercase();

        if args.iterations < 1 {
            return Err(vm.new_value_error("iteration value must be greater than 0."));
        }
        let rounds = u32::try_from(args.iterations)
            .map_err(|_| vm.new_overflow_error("iteration value is too great."))?;

        let dklen: usize = match args.dklen.into_option() {
            Some(obj) if vm.is_none(&obj) => {
                hash_digest_size(&name).ok_or_else(|| unsupported_hash(&name, vm))?
            }
            Some(obj) => {
                let len: i64 = obj.try_into_value(vm)?;
                if len < 1 {
                    return Err(vm.new_value_error("key length must be greater than 0."));
                }
                usize::try_from(len)
                    .map_err(|_| vm.new_overflow_error("key length is too great."))?
            }
            None => hash_digest_size(&name).ok_or_else(|| unsupported_hash(&name, vm))?,
        };

        let password_buf = args.password.borrow_buf();
        let salt_buf = args.salt.borrow_buf();
        let mut dk = vec![0u8; dklen];

        macro_rules! do_pbkdf2 {
            ($hash_ty:ty) => {{
                pbkdf2::pbkdf2_hmac::<$hash_ty>(&password_buf, &salt_buf, rounds, &mut dk);
                Ok(dk.into())
            }};
        }

        match name.as_str() {
            "md5" => do_pbkdf2!(Md5),
            "sha1" => do_pbkdf2!(Sha1),
            "sha224" => do_pbkdf2!(Sha224),
            "sha256" => do_pbkdf2!(Sha256),
            "sha384" => do_pbkdf2!(Sha384),
            "sha512" => do_pbkdf2!(Sha512),
            "sha3_224" => do_pbkdf2!(Sha3_224),
            "sha3_256" => do_pbkdf2!(Sha3_256),
            "sha3_384" => do_pbkdf2!(Sha3_384),
            "sha3_512" => do_pbkdf2!(Sha3_512),
            _ => Err(unsupported_hash(&name, vm)),
        }
    }

    pub trait ThreadSafeDynDigest: DynClone + DynDigest + Sync + Send {}
    impl<T> ThreadSafeDynDigest for T where T: DynClone + DynDigest + Sync + Send {}