README
T
BlowfishState
T
EntropyState
- ::newHmacSha256::new
- ::signHmacSha256::sign
- ::sign_stringHmacSha256::sign_string
- ::verifyHmacSha256::verify
- ::newSha256::new
- ::sumSha256::sum
- ::writeSha256::write
- ::write_stringSha256::write_string
V
aes256_gcm_decrypt
V
aes256_gcm_encrypt
V
aes256_gcm_encrypt_hex
V
argon2id
V
argon2id_hash
V
argon2id_params_interactive
V
argon2id_params_moderate
V
argon2id_params_sensitive
V
argon2id_verify
V
base32_decode
V
base32_encode
V
bcrypt_hash
V
bcrypt_verify
V
bytes_to_hex
V
chacha20_decrypt
V
chacha20_encrypt
V
chacha20_poly1305_decrypt
V
chacha20_poly1305_encrypt
V
constant_eq
V
constant_eq_bytes
V
constant_eq_string
V
constant_ge
V
constant_is_zero
V
constant_lt
V
constant_ne
V
constant_select
V
generate_aes_key_256
V
generate_chacha20_key
V
generate_nonce_96
V
generate_password
V
generate_salt
V
generate_totp_secret
V
generate_totp_secret_bytes
V
hash_password
V
hash_password_argon2id
V
hash_password_scrypt
V
hkdf_expand_hex
V
hkdf_extract_hex
V
hkdf_sha256
V
hkdf_sha256_hex
V
hmac_sha256
V
hmac_sha256_hex
V
hmac_verify
V
hotp
V
hotp_verify
V
password_needs_rehash
V
password_strength
V
password_strength_level
V
pbkdf2
V
pbkdf2_hex
V
pbkdf2_raw
V
pbkdf2_sha256
V
pbkdf2_verify
V
poly1305_mac
V
random_base64
V
random_bytes
V
random_choice
V
random_hex
V
random_int
V
random_int_range
V
random_u32
V
random_u64
V
random_uint_range
V
scrypt
V
scrypt_hex
V
scrypt_params_interactive
V
scrypt_params_paranoid
V
scrypt_params_sensitive
V
scrypt_simple
V
scrypt_verify
V
sha256
V
sha256_hex
V
sha384
V
sha384_hex
V
sha512
V
sha512_256
V
sha512_256_hex
V
sha512_hex
V
shuffle
V
str_to_utf8
V
totp
V
totp_now
V
totp_sha256
V
totp_sha512
V
totp_uri
V
totp_verify
V
verify_password
V
verify_password_argon2id
V
verify_password_scrypt

moonvault

MoonVault -- Pure MoonBit password hashing and cryptographic library

crypto

password

hash

security

bcrypt

scrypt

argon2

sha256

Download zip

Author

Q30399

Version

0.1.0

License

Apache-2.0

Repository

github.com/Q30399/moonvault

Last updated

2 months ago

Downloads

No dependencies

#MoonVault -- 暗码天鉴

Pure MoonBit password hashing and cryptographic library.

#功能特性

模块	标准	说明
SHA-256	FIPS 180-4	安全哈希算法
HMAC-SHA-256	RFC 2104	密钥哈希消息认证码
PBKDF2	RFC 2898	基于密码的密钥派生（HMAC-SHA-256）
bcrypt	—	基于 Blowfish 的密码哈希
scrypt	RFC 7914	内存硬密码哈希（Salsa20/8）
Argon2id	RFC 9106	内存硬密码哈希（Blake2b）
AES-256-GCM	FIPS 197 / SP 800-38D	对称加密认证
ChaCha20-Poly1305	RFC 8439	流密码 AEAD
SHA-512/384	FIPS 180-4	SHA-512 族哈希
HKDF	RFC 5869	密钥派生函数
TOTP/HOTP	RFC 6238 / RFC 4226	二因素认证
Constant-time	—	常量时间比较，防御时序侧信道攻击
Random	—	密码学安全随机数生成
Password	—	密码强度检测、自动生成、升级检测
Base32	RFC 4648	TOTP 密钥编解码

#快速开始

// bcrypt 哈希与验证
let hash = hash_password("my_secure_password")
let ok = verify_password("my_secure_password", hash)

// SHA-256
let digest = sha256_hex("hello world")
// => "b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9"

// HMAC
let mac = hmac_sha256_hex("my_key", "my_message")

// PBKDF2
let dk = pbkdf2_hex("password", "salt", 100000, 32)

// 生成随机密码
let pwd = generate_password(16)

// 密码强度检测
let score = password_strength("Str0ng!Passw0rd")   // => 80+
let level = password_strength_level("Str0ng!Passw0rd") // => "strong"

#API 参考

#SHA-256

pub fn sha256(data : Bytes) -> Bytes
pub fn sha256_hex(s : String) -> String
pub fn str_to_utf8(s : String) -> Bytes
pub fn bytes_to_hex(bytes : Bytes) -> String

#HMAC-SHA-256

pub fn HmacSha256::new(key : Bytes) -> HmacSha256
pub fn HmacSha256::sign(self : HmacSha256, message : Bytes) -> Bytes
pub fn HmacSha256::sign_string(self : HmacSha256, s : String) -> Bytes
pub fn HmacSha256::verify(self : HmacSha256, message : Bytes, mac : Bytes) -> Bool
pub fn hmac_sha256(key : Bytes, message : Bytes) -> Bytes
pub fn hmac_sha256_hex(key : String, message : String) -> String
pub fn hmac_verify(key : Bytes, message : Bytes, mac : Bytes) -> Bool

#PBKDF2 (HMAC-SHA-256)

pub fn pbkdf2(password : String, salt : String, iterations : Int, key_len : Int) -> Bytes
pub fn pbkdf2_raw(password : Bytes, salt : Bytes, iterations : Int, key_len : Int) -> Bytes
pub fn pbkdf2_hex(password : String, salt : String, iterations : Int, key_len : Int) -> String
pub fn pbkdf2_verify(password : String, salt : String, iterations : Int, key_len : Int, expected : Bytes) -> Bool

#bcrypt

pub fn bcrypt_hash(password : String, cost : Int, salt : String) -> String
pub fn bcrypt_verify(password : String, hash : String) -> Bool
pub fn generate_salt() -> String

cost 范围：4–31，推荐 ≥ 10。

#scrypt

pub fn scrypt(password : String, salt : String, n : Int, r : Int, p : Int, dk_len : Int) -> Bytes
pub fn scrypt_hex(password : String, salt : String, n : Int, r : Int, p : Int, dk_len : Int) -> String
pub fn scrypt_verify(password : String, salt : String, n : Int, r : Int, p : Int, dk_len : Int, expected : Bytes) -> Bool

// 推荐参数
pub fn scrypt_params_interactive() -> (Int, Int, Int)  // (16384, 8, 1)
pub fn scrypt_params_sensitive() -> (Int, Int, Int)     // (1048576, 8, 1)
pub fn scrypt_params_paranoid() -> (Int, Int, Int)      // (4194304, 8, 1)

#Argon2id

pub fn argon2id(password : String, salt : String, t_cost : Int, m_cost : Int, parallelism : Int, hash_len : Int) -> Bytes
pub fn argon2id_hash(password : String, salt : String, t_cost : Int, m_cost : Int, parallelism : Int) -> String
pub fn argon2id_verify(password : String, salt : String, t_cost : Int, m_cost : Int, parallelism : Int, hash_len : Int, expected : Bytes) -> Bool

// 推荐参数
pub fn argon2id_params_interactive() -> (Int, Int, Int)  // (2, 65536, 1)
pub fn argon2id_params_moderate() -> (Int, Int, Int)      // (3, 262144, 1)
pub fn argon2id_params_sensitive() -> (Int, Int, Int)     // (4, 1048576, 1)

#Password 工具

// bcrypt 一键哈希/验证
pub fn hash_password(password : String) -> String
pub fn verify_password(password : String, hash : String) -> Bool

// scrypt 一键哈希/验证
pub fn hash_password_scrypt(password : String) -> String
pub fn verify_password_scrypt(password : String, hash : String) -> Bool

// Argon2id 一键哈希/验证
pub fn hash_password_argon2id(password : String) -> String
pub fn verify_password_argon2id(password : String, hash : String) -> Bool

// 工具函数
pub fn password_needs_rehash(hash : String) -> Bool           // 检测 $2a$ 需升级到 $2b$
pub fn generate_password(length : Int) -> String              // 生成随机密码
pub fn password_strength(password : String) -> Int            // 密码强度评分 (0–100)
pub fn password_strength_level(password : String) -> String   // "weak" | "fair" | "strong" | "very_strong"

#Random

pub fn random_bytes(len : Int) -> Bytes
pub fn random_u32() -> UInt
pub fn random_u64() -> UInt64
pub fn random_int() -> Int
pub fn random_uint_range(min : UInt, max : UInt) -> UInt
pub fn random_int_range(min : Int, max : Int) -> Int
pub fn[T] random_choice(items : Array[T]) -> T
pub fn[T] shuffle(arr : Array[T]) -> Array[T]
pub fn random_hex(len : Int) -> String
pub fn random_base64(len : Int) -> String

#Constant-time

pub fn constant_eq(a : Bytes, b : Bytes) -> Bool
pub fn constant_eq_string(a : String, b : String) -> Bool
pub fn constant_ne(a : Bytes, b : Bytes) -> Bool
pub fn constant_lt(a : Int, b : Int) -> Bool
pub fn constant_ge(a : Int, b : Int) -> Bool
pub fn constant_select(a : Int, b : Int, cond : Bool) -> Int
pub fn constant_is_zero(x : UInt) -> Bool

所有比较函数均为常量时间，防止时序侧信道攻击。

#测试

moon test

43 项测试全部通过。

#许可证

Apache-2.0

BlowfishState

source

type BlowfishState

EntropyState

source

type EntropyState

HmacSha256

source

type HmacSha256

HmacSha256::new

source

fn HmacSha256::new(key : Bytes) -> HmacSha256

HmacSha256::sign

source

fn HmacSha256::sign(self : HmacSha256, message : Bytes) -> Bytes

HmacSha256::sign_string

source

fn HmacSha256::sign_string(self : HmacSha256, s : String) -> Bytes

HmacSha256::verify

source

fn HmacSha256::verify(self : HmacSha256, message : Bytes, mac : Bytes) -> Bool

Sha256

source

type Sha256

Sha256::new

source

fn Sha256::new() -> Sha256

Sha256::sum

source

fn Sha256::sum(self : Sha256) -> Bytes

Sha256::write

source

fn Sha256::write(self : Sha256, data : Bytes) -> Sha256

Sha256::write_string

source

fn Sha256::write_string(self : Sha256, s : String) -> Sha256

aes256_gcm_decrypt

source

fn aes256_gcm_decrypt(key : Bytes, nonce : Bytes, ciphertext : Bytes, aad : Bytes, tag : Bytes) -> Bytes?

aes256_gcm_encrypt

source

fn aes256_gcm_encrypt(key : Bytes, nonce : Bytes, plaintext : Bytes, aad : Bytes) -> (Bytes, Bytes)

aes256_gcm_encrypt_hex

source

fn aes256_gcm_encrypt_hex(key : String, nonce : String, plaintext : String, aad : String) -> (String, String)

argon2id

source

fn argon2id(password : String, salt : String, t_cost : Int, m_cost : Int, parallelism : Int, hash_len : Int) -> Bytes

argon2id_hash

source

fn argon2id_hash(password : String, salt : String, t_cost : Int, m_cost : Int, parallelism : Int) -> String

argon2id_params_interactive

source

fn argon2id_params_interactive() -> (Int, Int, Int)

argon2id_params_moderate

source

fn argon2id_params_moderate() -> (Int, Int, Int)

argon2id_params_sensitive

source

fn argon2id_params_sensitive() -> (Int, Int, Int)

argon2id_verify

source

fn argon2id_verify(password : String, salt : String, t_cost : Int, m_cost : Int, parallelism : Int, hash_len : Int, expected : Bytes) -> Bool

base32_decode

source

fn base32_decode(encoded : String) -> Bytes

base32_encode

source

fn base32_encode(data : Bytes) -> String

bcrypt_hash

source

fn bcrypt_hash(password : String, cost : Int, salt : String) -> String

bcrypt_verify

source

fn bcrypt_verify(password : String, hash : String) -> Bool

bytes_to_hex

source

fn bytes_to_hex(b : Bytes) -> String

chacha20_decrypt

source

fn chacha20_decrypt(key : Bytes, nonce : Bytes, ciphertext : Bytes) -> Bytes

chacha20_encrypt

source

fn chacha20_encrypt(key : Bytes, nonce : Bytes, plaintext : Bytes) -> Bytes

chacha20_poly1305_decrypt

source

fn chacha20_poly1305_decrypt(key : Bytes, nonce : Bytes, ciphertext : Bytes, aad : Bytes, tag : Bytes) -> Bytes?

chacha20_poly1305_encrypt

source

fn chacha20_poly1305_encrypt(key : Bytes, nonce : Bytes, plaintext : Bytes, aad : Bytes) -> (Bytes, Bytes)

constant_eq

source

fn constant_eq(a : Bytes, b : Bytes) -> Bool

constant_eq_bytes

source

fn constant_eq_bytes(a : Array[Byte], b : Array[Byte], len : Int) -> Bool

constant_eq_string

source

fn constant_eq_string(a : String, b : String) -> Bool

constant_ge

source

fn constant_ge(a : Int, b : Int) -> Bool

constant_is_zero

source

fn constant_is_zero(x : UInt) -> Bool

constant_lt

source

fn constant_lt(a : Int, b : Int) -> Bool

constant_ne

source

fn constant_ne(a : Bytes, b : Bytes) -> Bool

constant_select

source

fn constant_select(a : Int, b : Int, cond : Bool) -> Int

generate_aes_key_256

source

fn generate_aes_key_256() -> Bytes

generate_chacha20_key

source

fn generate_chacha20_key() -> Bytes

generate_nonce_96

source

fn generate_nonce_96() -> Bytes

generate_password

source

fn generate_password(length : Int) -> String

generate_salt

source

fn generate_salt() -> String

generate_totp_secret

source

fn generate_totp_secret() -> String

generate_totp_secret_bytes

source

fn generate_totp_secret_bytes() -> Bytes

hash_password

source

fn hash_password(password : String) -> String

hash_password_argon2id

source

fn hash_password_argon2id(password : String) -> String

hash_password_scrypt

source

fn hash_password_scrypt(password : String) -> String

hkdf_expand_hex

source

fn hkdf_expand_hex(prk_hex : String, info : String, length : Int) -> String

hkdf_extract_hex

source

fn hkdf_extract_hex(key_material : String, salt : String) -> String

hkdf_sha256

source

fn hkdf_sha256(ikm : Bytes, salt : Bytes, info : Bytes, length : Int) -> Bytes

hkdf_sha256_hex

source

fn hkdf_sha256_hex(ikm : String, salt : String, info : String, length : Int) -> String

hmac_sha256

source

fn hmac_sha256(key : Bytes, message : Bytes) -> Bytes

hmac_sha256_hex

source

fn hmac_sha256_hex(key : String, message : String) -> String

hmac_verify

source

fn hmac_verify(key : Bytes, message : Bytes, mac : Bytes) -> Bool

hotp

source

fn hotp(secret : Bytes, counter : UInt64, digits : Int) -> String

hotp_verify

source

fn hotp_verify(secret : Bytes, counter : UInt64, digits : Int, code : String) -> Bool

password_needs_rehash

source

fn password_needs_rehash(hash : String) -> Bool

password_strength

source

fn password_strength(password : String) -> Int

password_strength_level

source

fn password_strength_level(password : String) -> String

pbkdf2

source

fn pbkdf2(password : String, salt : String, iterations : Int, key_len : Int) -> Bytes

pbkdf2_hex

source

fn pbkdf2_hex(password : String, salt : String, iterations : Int, key_len : Int) -> String

pbkdf2_raw

source

fn pbkdf2_raw(password : Bytes, salt : Bytes, iterations : Int, key_len : Int) -> Bytes

pbkdf2_sha256

source

fn pbkdf2_sha256(password : String, salt : String, iterations : Int, key_len : Int) -> Bytes

pbkdf2_verify

source

fn pbkdf2_verify(password : String, salt : String, iterations : Int, key_len : Int, expected : Bytes) -> Bool

poly1305_mac

source

fn poly1305_mac(key : Bytes, message : Bytes) -> Bytes

random_base64

source

fn random_base64(len : Int) -> String

random_bytes

source

fn random_bytes(len : Int) -> Bytes

random_choice

source

fn[T] random_choice(items : Array[T]) -> T

random_hex

source

fn random_hex(len : Int) -> String

random_int

source

fn random_int() -> Int

random_int_range

source

fn random_int_range(min : Int, max : Int) -> Int

random_u32

source

fn random_u32() -> UInt

random_u64

source

fn random_u64() -> UInt64

random_uint_range

source

fn random_uint_range(min : UInt, max : UInt) -> UInt

scrypt

source

fn scrypt(password : String, salt : String, n : Int, r : Int, p : Int, dk_len : Int) -> Bytes

scrypt_hex

source

fn scrypt_hex(password : String, salt : String, n : Int, r : Int, p : Int, dk_len : Int) -> String

scrypt_params_interactive

source

fn scrypt_params_interactive() -> (Int, Int, Int)

scrypt_params_paranoid

source

fn scrypt_params_paranoid() -> (Int, Int, Int)

scrypt_params_sensitive

source

fn scrypt_params_sensitive() -> (Int, Int, Int)

scrypt_simple

source

fn scrypt_simple(password : String, salt : String, n : Int, r : Int, p : Int, dk_len : Int) -> Bytes

scrypt_verify

source

fn scrypt_verify(password : String, salt : String, n : Int, r : Int, p : Int, dk_len : Int, expected : Bytes) -> Bool

sha256

source

fn sha256(data : Bytes) -> Bytes

sha256_hex

source

fn sha256_hex(s : String) -> String

sha384

source

fn sha384(data : Bytes) -> Bytes

sha384_hex

source

fn sha384_hex(s : String) -> String

sha512

source

fn sha512(data : Bytes) -> Bytes

sha512_256

source

fn sha512_256(data : Bytes) -> Bytes

sha512_256_hex

source

fn sha512_256_hex(s : String) -> String

sha512_hex

source

fn sha512_hex(s : String) -> String

shuffle

source

fn[T] shuffle(arr : Array[T]) -> Array[T]

str_to_utf8

source

fn str_to_utf8(s : String) -> Bytes

totp

source

fn totp(secret : Bytes, time : UInt64, period : Int, digits : Int) -> String

totp_now

source

fn totp_now(secret : Bytes) -> String

totp_sha256

source

fn totp_sha256(secret : Bytes, time : UInt64, period : Int, digits : Int) -> String

totp_sha512

source

fn totp_sha512(secret : Bytes, time : UInt64, period : Int, digits : Int) -> String

totp_uri

source

fn totp_uri(secret : String, account : String, issuer : String) -> String

totp_verify

source

fn totp_verify(secret : Bytes, code : String) -> Bool

verify_password

source

fn verify_password(password : String, hash : String) -> Bool

verify_password_argon2id

source

fn verify_password_argon2id(password : String, hash : String) -> Bool

verify_password_scrypt

source

fn verify_password_scrypt(password : String, hash : String) -> Bool

Source Files

Install

Download zip

MoonVault -- Pure MoonBit password hashing and cryptographic library

cryptopasswordhashsecuritybcryptscryptargon2sha256

Q30399

Apache-2.0

github.com/Q30399/moonvault

Updated 2 months ago

36 downloads

Site source Report issue Modules Skills CLI Build queue Statistics

moonvault

#MoonVault -- 暗码天鉴

#功能特性

#快速开始

#API 参考

#SHA-256

#HMAC-SHA-256

#PBKDF2 (HMAC-SHA-256)

#bcrypt

#scrypt

#Argon2id

#Password 工具

#Random

#Constant-time

#测试

#许可证

#BlowfishState

#EntropyState

#HmacSha256

#HmacSha256::new

#HmacSha256::sign

#HmacSha256::sign_string

#HmacSha256::verify

#Sha256

#Sha256::new

#Sha256::sum

#Sha256::write

#Sha256::write_string

#aes256_gcm_decrypt

#aes256_gcm_encrypt

#aes256_gcm_encrypt_hex

#argon2id

#argon2id_hash

#argon2id_params_interactive

#argon2id_params_moderate

#argon2id_params_sensitive

#argon2id_verify

#base32_decode

#base32_encode

#bcrypt_hash

#bcrypt_verify

#bytes_to_hex

#chacha20_decrypt

#chacha20_encrypt

#chacha20_poly1305_decrypt

#chacha20_poly1305_encrypt

#constant_eq

#constant_eq_bytes

#constant_eq_string

#constant_ge

#constant_is_zero

#constant_lt

#constant_ne

#constant_select

#generate_aes_key_256

#generate_chacha20_key

#generate_nonce_96

#generate_password

#generate_salt

#generate_totp_secret

#generate_totp_secret_bytes

#hash_password

#hash_password_argon2id

#hash_password_scrypt

#hkdf_expand_hex

#hkdf_extract_hex

#hkdf_sha256

#hkdf_sha256_hex

#hmac_sha256

#hmac_sha256_hex

#hmac_verify

#hotp

#hotp_verify

#password_needs_rehash

#password_strength

#password_strength_level

#pbkdf2

#pbkdf2_hex

#pbkdf2_raw

#pbkdf2_sha256

BlowfishState

EntropyState

HmacSha256

HmacSha256::new

HmacSha256::sign

HmacSha256::sign_string

HmacSha256::verify

Sha256

Sha256::new

Sha256::sum

Sha256::write

Sha256::write_string

aes256_gcm_decrypt

aes256_gcm_encrypt

aes256_gcm_encrypt_hex

argon2id

argon2id_hash

argon2id_params_interactive

argon2id_params_moderate

argon2id_params_sensitive

argon2id_verify

base32_decode

base32_encode

bcrypt_hash

bcrypt_verify

bytes_to_hex

chacha20_decrypt

chacha20_encrypt

chacha20_poly1305_decrypt

chacha20_poly1305_encrypt

constant_eq

constant_eq_bytes

constant_eq_string

constant_ge

constant_is_zero

constant_lt

constant_ne

constant_select

generate_aes_key_256

generate_chacha20_key

generate_nonce_96

generate_password

generate_salt

generate_totp_secret

generate_totp_secret_bytes

hash_password

hash_password_argon2id

hash_password_scrypt

hkdf_expand_hex

hkdf_extract_hex

hkdf_sha256

hkdf_sha256_hex

hmac_sha256

hmac_sha256_hex

hmac_verify

hotp

hotp_verify

password_needs_rehash

password_strength

password_strength_level

pbkdf2

pbkdf2_hex

pbkdf2_raw

pbkdf2_sha256

pbkdf2_verify

poly1305_mac

random_base64

random_bytes

random_choice

random_hex

random_int

random_int_range

random_u32

random_u64

random_uint_range

scrypt

scrypt_hex

scrypt_params_interactive

scrypt_params_paranoid

scrypt_params_sensitive