scrypt.d.ts 3.7 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182
  1. import type { BytesLike } from "../utils/index.js";
  2. /**
  3. * A callback during long-running operations to update any
  4. * UI or provide programatic access to the progress.
  5. *
  6. * The %%percent%% is a value between ``0`` and ``1``.
  7. *
  8. * @_docloc: api/crypto:Passwords
  9. */
  10. export type ProgressCallback = (percent: number) => void;
  11. /**
  12. * The [[link-wiki-scrypt]] uses a memory and cpu hard method of
  13. * derivation to increase the resource cost to brute-force a password
  14. * for a given key.
  15. *
  16. * This means this algorithm is intentionally slow, and can be tuned to
  17. * become slower. As computation and memory speed improve over time,
  18. * increasing the difficulty maintains the cost of an attacker.
  19. *
  20. * For example, if a target time of 5 seconds is used, a legitimate user
  21. * which knows their password requires only 5 seconds to unlock their
  22. * account. A 6 character password has 68 billion possibilities, which
  23. * would require an attacker to invest over 10,000 years of CPU time. This
  24. * is of course a crude example (as password generally aren't random),
  25. * but demonstrates to value of imposing large costs to decryption.
  26. *
  27. * For this reason, if building a UI which involved decrypting or
  28. * encrypting datsa using scrypt, it is recommended to use a
  29. * [[ProgressCallback]] (as event short periods can seem lik an eternity
  30. * if the UI freezes). Including the phrase //"decrypting"// in the UI
  31. * can also help, assuring the user their waiting is for a good reason.
  32. *
  33. * @_docloc: api/crypto:Passwords
  34. *
  35. * @example:
  36. * // The password must be converted to bytes, and it is generally
  37. * // best practices to ensure the string has been normalized. Many
  38. * // formats explicitly indicate the normalization form to use.
  39. * password = "hello"
  40. * passwordBytes = toUtf8Bytes(password, "NFKC")
  41. *
  42. * salt = id("some-salt")
  43. *
  44. * // Compute the scrypt
  45. * scrypt(passwordBytes, salt, 1024, 8, 1, 16)
  46. * //_result:
  47. */
  48. export declare function scrypt(_passwd: BytesLike, _salt: BytesLike, N: number, r: number, p: number, dkLen: number, progress?: ProgressCallback): Promise<string>;
  49. export declare namespace scrypt {
  50. var _: (passwd: Uint8Array, salt: Uint8Array, N: number, r: number, p: number, dkLen: number, onProgress?: ProgressCallback | undefined) => Promise<Uint8Array>;
  51. var lock: () => void;
  52. var register: (func: (passwd: Uint8Array, salt: Uint8Array, N: number, r: number, p: number, dkLen: number, progress?: ProgressCallback | undefined) => Promise<BytesLike>) => void;
  53. }
  54. /**
  55. * Provides a synchronous variant of [[scrypt]].
  56. *
  57. * This will completely lock up and freeze the UI in a browser and will
  58. * prevent any event loop from progressing. For this reason, it is
  59. * preferred to use the [async variant](scrypt).
  60. *
  61. * @_docloc: api/crypto:Passwords
  62. *
  63. * @example:
  64. * // The password must be converted to bytes, and it is generally
  65. * // best practices to ensure the string has been normalized. Many
  66. * // formats explicitly indicate the normalization form to use.
  67. * password = "hello"
  68. * passwordBytes = toUtf8Bytes(password, "NFKC")
  69. *
  70. * salt = id("some-salt")
  71. *
  72. * // Compute the scrypt
  73. * scryptSync(passwordBytes, salt, 1024, 8, 1, 16)
  74. * //_result:
  75. */
  76. export declare function scryptSync(_passwd: BytesLike, _salt: BytesLike, N: number, r: number, p: number, dkLen: number): string;
  77. export declare namespace scryptSync {
  78. var _: (passwd: Uint8Array, salt: Uint8Array, N: number, r: number, p: number, dkLen: number) => Uint8Array;
  79. var lock: () => void;
  80. var register: (func: (passwd: Uint8Array, salt: Uint8Array, N: number, r: number, p: number, dkLen: number) => BytesLike) => void;
  81. }
  82. //# sourceMappingURL=scrypt.d.ts.map