gmsm/pkcs/kdf_scrypt.go

package pkcs

//
// Reference https://datatracker.ietf.org/doc/html/rfc7914
//

import (
	"encoding/asn1"

	"golang.org/x/crypto/scrypt"
)

var (
	oidScrypt = asn1.ObjectIdentifier{1, 3, 6, 1, 4, 1, 11591, 4, 11}
)

func init() {
	RegisterKDF(oidScrypt, func() KDFParameters {
		return new(scryptParams)
	})
}

type scryptParams struct {
	Salt                     []byte
	CostParameter            int
	BlockSize                int
	ParallelizationParameter int
	KeyLen                   int `asn1:"optional"`
}

func (p scryptParams) DeriveKey(oidKDF asn1.ObjectIdentifier, password []byte, size int) (key []byte, err error) {
	return scrypt.Key(password, p.Salt, p.CostParameter, p.BlockSize,
		p.ParallelizationParameter, size)
}

func (p scryptParams) KeyLength() int {
	return p.KeyLen
}

// ScryptOpts contains options for the scrypt key derivation function.
type ScryptOpts struct {
	SaltSize                 int
	CostParameter            int
	BlockSize                int
	ParallelizationParameter int
}

// NewScryptOpts returns a new ScryptOpts with the specified parameters.
func NewScryptOpts(saltSize, costParameter, blockSize, parallelizationParameter int) ScryptOpts {
	return ScryptOpts{
		SaltSize:                 saltSize,
		CostParameter:            costParameter,
		BlockSize:                blockSize,
		ParallelizationParameter: parallelizationParameter,
	}
}

func (p ScryptOpts) DeriveKey(password, salt []byte, size int) (
	key []byte, params KDFParameters, err error) {

	key, err = scrypt.Key(password, salt, p.CostParameter, p.BlockSize,
		p.ParallelizationParameter, size)
	if err != nil {
		return nil, nil, err
	}
	params = scryptParams{
		BlockSize:                p.BlockSize,
		CostParameter:            p.CostParameter,
		ParallelizationParameter: p.ParallelizationParameter,
		Salt:                     salt,
		KeyLen:                   size,
	}
	return key, params, nil
}

func (p ScryptOpts) GetSaltSize() int {
	return p.SaltSize
}

func (p ScryptOpts) OID() asn1.ObjectIdentifier {
	return oidScrypt
}