diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/modules/extra/m_argon2.cpp | 214 |
1 files changed, 214 insertions, 0 deletions
diff --git a/src/modules/extra/m_argon2.cpp b/src/modules/extra/m_argon2.cpp new file mode 100644 index 000000000..8a4b2f38c --- /dev/null +++ b/src/modules/extra/m_argon2.cpp @@ -0,0 +1,214 @@ +/* + * InspIRCd -- Internet Relay Chat Daemon + * + * Copyright (C) 2020 Daniel Vassdal <shutter@canternet.org> + * + * This file is part of InspIRCd. InspIRCd is free software: you can + * redistribute it and/or modify it under the terms of the GNU General Public + * License as published by the Free Software Foundation, version 2. + * + * This program is distributed in the hope that it will be useful, but WITHOUT + * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS + * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more + * details. + * + * You should have received a copy of the GNU General Public License + * along with this program. If not, see <http://www.gnu.org/licenses/>. + */ + +/// $CompilerFlags: find_compiler_flags("libargon2" "") + +/// $LinkerFlags: find_linker_flags("libargon2" "-llibargon2") + +/// $PackageInfo: require_system("arch") argon2 pkgconf +/// $PackageInfo: require_system("darwin") argon2 pkg-config +/// $PackageInfo: require_system("debian" "9.0") libargon2-0 pkg-config +/// $PackageInfo: require_system("ubuntu" "18.04") libargon2-0-dev pkg-config + + +#include "inspircd.h" +#include "modules/hash.h" + +#ifdef __GNUC__ +# pragma GCC diagnostic push +#endif + +// Fix warnings about the use of `long long` on C++03 +#if defined __clang__ +# pragma clang diagnostic ignored "-Wc++11-long-long" +#elif defined __GNUC__ +# pragma GCC diagnostic ignored "-Wlong-long" +#endif + +#include <argon2.h> + +class ProviderConfig +{ + private: + static Argon2_version SanitizeArgon2Version(unsigned long version) + { + // Note, 10 is 0x10, and 13 is 0x13. Refering to it as + // dec 10 or 13 in the config file, for the name to + // match better. + switch (version) + { + case 10: + return ARGON2_VERSION_10; + case 13: + return ARGON2_VERSION_13; + } + + ServerInstance->Logs->Log("MODULE", LOG_DEFAULT, "Unknown Argon2 version (%lu) specified; assuming 13", + version); + return ARGON2_VERSION_13; + } + + public: + uint32_t iterations; + uint32_t lanes; + uint32_t memory; + uint32_t outlen; + uint32_t saltlen; + uint32_t threads; + Argon2_version version; + + ProviderConfig() + { + // Nothing interesting happens here. + } + + ProviderConfig(const std::string& tagname, ProviderConfig* def) + { + ConfigTag* tag = ServerInstance->Config->ConfValue(tagname); + + uint32_t def_iterations = def ? def->iterations : 3; + this->iterations = tag->getUInt("iterations", def_iterations, 1); + + uint32_t def_lanes = def ? def->lanes : 1; + this->lanes = tag->getUInt("lanes", def_lanes, ARGON2_MIN_LANES, ARGON2_MAX_LANES); + + uint32_t def_memory = def ? def->memory : 131072; // 128 MiB + this->memory = tag->getUInt("memory", def_memory, ARGON2_MIN_MEMORY, ARGON2_MAX_MEMORY); + + uint32_t def_outlen = def ? def->outlen : 32; + this->outlen = tag->getUInt("length", def_outlen, ARGON2_MIN_OUTLEN, ARGON2_MAX_OUTLEN); + + uint32_t def_saltlen = def ? def->saltlen : 16; + this->saltlen = tag->getUInt("saltlength", def_saltlen, ARGON2_MIN_SALT_LENGTH, ARGON2_MAX_SALT_LENGTH); + + uint32_t def_threads = def ? def->threads : 1; + this->threads = tag->getUInt("threads", def_threads, ARGON2_MIN_THREADS, ARGON2_MAX_THREADS); + + uint32_t def_version = def ? def->version : 13; + this->version = SanitizeArgon2Version(tag->getUInt("version", def_version)); + } +}; + +class HashArgon2 : public HashProvider +{ + private: + const Argon2_type argon2Type; + + public: + ProviderConfig config; + + bool Compare(const std::string& input, const std::string& hash) CXX11_OVERRIDE + { + int result = argon2_verify( + hash.c_str(), + input.c_str(), + input.length(), + argon2Type); + + return result == ARGON2_OK; + } + + std::string GenerateRaw(const std::string& data) CXX11_OVERRIDE + { + const std::string salt = ServerInstance->GenRandomStr(config.saltlen, false); + + size_t encodedLen = argon2_encodedlen( + config.iterations, + config.memory, + config.lanes, + config.saltlen, + config.outlen, + argon2Type); + + std::vector<char> raw_data(config.outlen); + std::vector<char> encoded_data(encodedLen + 1); + + int argonResult = argon2_hash( + config.iterations, + config.memory, + config.threads, + data.c_str(), + data.length(), + salt.c_str(), + salt.length(), + &raw_data[0], + raw_data.size(), + &encoded_data[0], + encoded_data.size(), + argon2Type, + config.version); + + if (argonResult != ARGON2_OK) + throw ModuleException("Argon2 hashing failed!: " + std::string(argon2_error_message(argonResult))); + + // This isn't the raw version, but we don't have + // the facilities to juggle around the extra state required + // to do anything useful with them if we don't encode them. + // So we pretend this is the raw version, and instead make + // ToPrintable return its input. + return std::string(&encoded_data[0], encoded_data.size()); + } + + std::string ToPrintable(const std::string& raw) CXX11_OVERRIDE + { + return raw; + } + + HashArgon2(Module* parent, const std::string& hashName, Argon2_type type) + : HashProvider(parent, hashName) + , argon2Type(type) + + { + } +}; + +class ModuleArgon2 : public Module +{ + private: + HashArgon2 argon2i; + HashArgon2 argon2d; + HashArgon2 argon2id; + + public: + ModuleArgon2() + : argon2i(this, "argon2i", Argon2_i) + , argon2d(this, "argon2d", Argon2_d) + , argon2id(this, "argon2id", Argon2_id) + { + } + + Version GetVersion() CXX11_OVERRIDE + { + return Version("Allows other modules to generate Argon2 hashes.", VF_VENDOR); + } + + void ReadConfig(ConfigStatus& status) CXX11_OVERRIDE + { + ProviderConfig defaultConfig("argon2", NULL); + argon2i.config = ProviderConfig("argon2i", &defaultConfig); + argon2d.config = ProviderConfig("argon2d", &defaultConfig); + argon2id.config = ProviderConfig("argon2id", &defaultConfig); + } +}; + +MODULE_INIT(ModuleArgon2) + +// This needs to be down here because of warnings from macros. +#ifdef __GNUC__ +# pragma GCC diagnostic pop +#endif |