mirror of
https://github.com/hanzoai/base.git
synced 2026-10-21 03:41:50 +00:00
zeekay
cc5f20c11a
- OrgDB DEK derivation: raw HMAC → crypto/hkdf.Key (RFC 5869, stdlib) - security.SHA3_256, SHA3_512 using crypto/sha3 (FIPS 202, stdlib) - No more x/crypto for key derivation or SHA3 Go 1.26 moved these from x/crypto to stdlib: crypto/hkdf, crypto/pbkdf2, crypto/sha3, crypto/mlkem
79 lines
2.1 KiB
Go
79 lines
2.1 KiB
Go
package security
|
|
|
|
import (
|
|
"crypto/hmac"
|
|
"crypto/md5"
|
|
"crypto/sha256"
|
|
"crypto/sha3"
|
|
"crypto/sha512"
|
|
"crypto/subtle"
|
|
"encoding/base64"
|
|
"fmt"
|
|
"strings"
|
|
)
|
|
|
|
// S256Challenge creates base64 encoded sha256 challenge string derived from code.
|
|
// The padding of the result base64 string is stripped per [RFC 7636].
|
|
//
|
|
// [RFC 7636]: https://datatracker.ietf.org/doc/html/rfc7636#section-4.2
|
|
func S256Challenge(code string) string {
|
|
h := sha256.New()
|
|
h.Write([]byte(code))
|
|
return strings.TrimRight(base64.URLEncoding.EncodeToString(h.Sum(nil)), "=")
|
|
}
|
|
|
|
// MD5 creates md5 hash from the provided plain text.
|
|
func MD5(text string) string {
|
|
h := md5.New()
|
|
h.Write([]byte(text))
|
|
return fmt.Sprintf("%x", h.Sum(nil))
|
|
}
|
|
|
|
// SHA256 creates sha256 hash as defined in FIPS 180-4 from the provided text.
|
|
func SHA256(text string) string {
|
|
h := sha256.New()
|
|
h.Write([]byte(text))
|
|
return fmt.Sprintf("%x", h.Sum(nil))
|
|
}
|
|
|
|
// SHA512 creates sha512 hash as defined in FIPS 180-4 from the provided text.
|
|
func SHA512(text string) string {
|
|
h := sha512.New()
|
|
h.Write([]byte(text))
|
|
return fmt.Sprintf("%x", h.Sum(nil))
|
|
}
|
|
|
|
// HS256 creates a HMAC hash with sha256 digest algorithm.
|
|
func HS256(text string, secret string) string {
|
|
h := hmac.New(sha256.New, []byte(secret))
|
|
h.Write([]byte(text))
|
|
return fmt.Sprintf("%x", h.Sum(nil))
|
|
}
|
|
|
|
// HS512 creates a HMAC hash with sha512 digest algorithm.
|
|
func HS512(text string, secret string) string {
|
|
h := hmac.New(sha512.New, []byte(secret))
|
|
h.Write([]byte(text))
|
|
return fmt.Sprintf("%x", h.Sum(nil))
|
|
}
|
|
|
|
// SHA3_256 creates SHA3-256 hash as defined in FIPS 202 from the provided text.
|
|
// Available in Go 1.26+ stdlib (crypto/sha3).
|
|
func SHA3_256(text string) string {
|
|
h := sha3.New256()
|
|
h.Write([]byte(text))
|
|
return fmt.Sprintf("%x", h.Sum(nil))
|
|
}
|
|
|
|
// SHA3_512 creates SHA3-512 hash as defined in FIPS 202 from the provided text.
|
|
func SHA3_512(text string) string {
|
|
h := sha3.New512()
|
|
h.Write([]byte(text))
|
|
return fmt.Sprintf("%x", h.Sum(nil))
|
|
}
|
|
|
|
// Equal compares two hash strings for equality without leaking timing information.
|
|
func Equal(hash1 string, hash2 string) bool {
|
|
return subtle.ConstantTimeCompare([]byte(hash1), []byte(hash2)) == 1
|
|
}
|