mirror of
https://github.com/python/cpython.git
synced 2025-08-28 12:45:07 +00:00
![]() A new extension module, `_hmac`, now exposes the HACL* HMAC (formally verified) implementation. The HACL* implementation is used as a fallback implementation when the OpenSSL implementation of HMAC is not available or disabled. For now, only named hash algorithms are recognized and SIMD support provided by HACL* for the BLAKE2 hash functions is not yet used. |
||
---|---|---|
.. | ||
include/krml | ||
internal | ||
Hacl_Hash_Blake2b.c | ||
Hacl_Hash_Blake2b.h | ||
Hacl_Hash_Blake2b_Simd256.c | ||
Hacl_Hash_Blake2b_Simd256.h | ||
Hacl_Hash_Blake2b_Simd256_universal2.c | ||
Hacl_Hash_Blake2s.c | ||
Hacl_Hash_Blake2s.h | ||
Hacl_Hash_Blake2s_Simd128.c | ||
Hacl_Hash_Blake2s_Simd128.h | ||
Hacl_Hash_Blake2s_Simd128_universal2.c | ||
Hacl_Hash_MD5.c | ||
Hacl_Hash_MD5.h | ||
Hacl_Hash_SHA1.c | ||
Hacl_Hash_SHA1.h | ||
Hacl_Hash_SHA2.c | ||
Hacl_Hash_SHA2.h | ||
Hacl_Hash_SHA3.c | ||
Hacl_Hash_SHA3.h | ||
Hacl_HMAC.c | ||
Hacl_HMAC.h | ||
Hacl_Streaming_HMAC.c | ||
Hacl_Streaming_HMAC.h | ||
Hacl_Streaming_Types.h | ||
Lib_Memzero0.c | ||
lib_memzero0.h | ||
libintvector-shim.h | ||
libintvector.h | ||
python_hacl_namespaces.h | ||
README.md | ||
refresh.sh |
Algorithm implementations used by the hashlib
module.
This code comes from the HACL* project.
HACL* is a cryptographic library that has been formally verified for memory safety, functional correctness, and secret independence.
Updating HACL*
Use the refresh.sh script in this directory to pull in a new upstream code version. The upstream git hash used for the most recent code pull is recorded in the script. Modify the script as needed to bring in more if changes are needed based on upstream code refactoring.
Never manually edit HACL* files. Always add transformation shell code to the
refresh.sh
script to perform any necessary edits. If there are serious code
changes needed, work with the upstream repository.
Local files
ACKS
- Jonathan Protzenko aka @msprotz on Github contributed our HACL* based builtin code.