mirror of
https://github.com/dnote/dnote
synced 2026-03-15 23:15:50 +01:00
41ada2298c* Implement publicity control for notes * Implement server side rendering for note sharing * Implement UI * Modularize * Remove autofocus * Fix test * Document
60 lines
1.8 KiB
Go
60 lines
1.8 KiB
Go
/* Copyright (C) 2019 Monomax Software Pty Ltd
|
|
*
|
|
* This file is part of Dnote.
|
|
*
|
|
* Dnote is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Dnote is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with Dnote. If not, see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
package crypt
|
|
|
|
import (
|
|
"crypto/rand"
|
|
"crypto/sha256"
|
|
|
|
"encoding/base64"
|
|
"github.com/pkg/errors"
|
|
"golang.org/x/crypto/pbkdf2"
|
|
)
|
|
|
|
// ServerKDFIteration is the iteration count for PBKDF on the server
|
|
var ServerKDFIteration = 100000
|
|
|
|
// getRandomBytes generates a cryptographically secure pseudorandom numbers of the
|
|
// given size in byte
|
|
func getRandomBytes(numBytes int) ([]byte, error) {
|
|
b := make([]byte, numBytes)
|
|
if _, err := rand.Read(b); err != nil {
|
|
return nil, errors.Wrap(err, "reading random bits")
|
|
}
|
|
|
|
return b, nil
|
|
}
|
|
|
|
// GetRandomStr generates a cryptographically secure pseudorandom numbers of the
|
|
// given size in byte
|
|
func GetRandomStr(numBytes int) (string, error) {
|
|
b, err := getRandomBytes(numBytes)
|
|
if err != nil {
|
|
return "", errors.Wrap(err, "generating random bits")
|
|
}
|
|
|
|
return base64.StdEncoding.EncodeToString(b), nil
|
|
}
|
|
|
|
// HashAuthKey hashes the authKey provided by a client
|
|
func HashAuthKey(authKey, salt string, iteration int) string {
|
|
keyHashBits := pbkdf2.Key([]byte(authKey), []byte(salt), iteration, 32, sha256.New)
|
|
|
|
return base64.StdEncoding.EncodeToString(keyHashBits)
|
|
}
|