3 files changed, 124 insertions, 0 deletions
diff --git a/src/lib/pbkdf/pbkdf1/info.txt b/src/lib/pbkdf/pbkdf1/info.txt
new file mode 100644
index 000000000..1ec626cac
--- /dev/null
+++ b/src/lib/pbkdf/pbkdf1/info.txt
@@ -0,0 +1,5 @@
+define PBKDF1 20131128
+
+<requires>
+hash
+</requires>
diff --git a/src/lib/pbkdf/pbkdf1/pbkdf1.cpp b/src/lib/pbkdf/pbkdf1/pbkdf1.cpp
new file mode 100644
index 000000000..9d1672529
--- /dev/null
+++ b/src/lib/pbkdf/pbkdf1/pbkdf1.cpp
@@ -0,0 +1,58 @@
+/*
+* PBKDF1
+* (C) 1999-2007 Jack Lloyd
+*
+* Distributed under the terms of the Botan license
+*/
+
+#include <botan/pbkdf1.h>
+#include <botan/exceptn.h>
+
+namespace Botan {
+
+/*
+* Return a PKCS#5 PBKDF1 derived key
+*/
+std::pair<size_t, OctetString>
+PKCS5_PBKDF1::key_derivation(size_t key_len,
+                             const std::string& passphrase,
+                             const byte salt[], size_t salt_len,
+                             size_t iterations,
+                             std::chrono::milliseconds msec) const
+   {
+   if(key_len > hash->output_length())
+      throw Invalid_Argument("PKCS5_PBKDF1: Requested output length too long");
+
+   hash->update(passphrase);
+   hash->update(salt, salt_len);
+   secure_vector<byte> key = hash->final();
+
+   const auto start = std::chrono::high_resolution_clock::now();
+   size_t iterations_performed = 1;
+
+   while(true)
+      {
+      if(iterations == 0)
+         {
+         if(iterations_performed % 10000 == 0)
+            {
+            auto time_taken = std::chrono::high_resolution_clock::now() - start;
+            auto msec_taken = std::chrono::duration_cast<std::chrono::milliseconds>(time_taken);
+            if(msec_taken > msec)
+               break;
+            }
+         }
+      else if(iterations_performed == iterations)
+         break;
+
+      hash->update(key);
+      hash->final(&key[0]);
+
+      ++iterations_performed;
+      }
+
+   return std::make_pair(iterations_performed,
+                         OctetString(&key[0], std::min(key_len, key.size())));
+   }
+
+}
diff --git a/src/lib/pbkdf/pbkdf1/pbkdf1.h b/src/lib/pbkdf/pbkdf1/pbkdf1.h
new file mode 100644
index 000000000..783b70ed9
--- /dev/null
+++ b/src/lib/pbkdf/pbkdf1/pbkdf1.h
@@ -0,0 +1,61 @@
+/*
+* PBKDF1
+* (C) 1999-2007 Jack Lloyd
+*
+* Distributed under the terms of the Botan license
+*/
+
+#ifndef BOTAN_PBKDF1_H__
+#define BOTAN_PBKDF1_H__
+
+#include <botan/pbkdf.h>
+#include <botan/hash.h>
+
+namespace Botan {
+
+/**
+* PKCS #5 v1 PBKDF, aka PBKDF1
+* Can only generate a key up to the size of the hash output.
+* Unless needed for backwards compatability, use PKCS5_PBKDF2
+*/
+class BOTAN_DLL PKCS5_PBKDF1 : public PBKDF
+   {
+   public:
+      /**
+      * Create a PKCS #5 instance using the specified hash function.
+      * @param hash_in pointer to a hash function object to use
+      */
+      PKCS5_PBKDF1(HashFunction* hash_in) : hash(hash_in) {}
+
+      /**
+      * Copy constructor
+      * @param other the object to copy
+      */
+      PKCS5_PBKDF1(const PKCS5_PBKDF1& other) :
+         PBKDF(), hash(other.hash->clone()) {}
+
+      ~PKCS5_PBKDF1() { delete hash; }
+
+      std::string name() const
+         {
+         return "PBKDF1(" + hash->name() + ")";
+         }
+
+      PBKDF* clone() const
+         {
+         return new PKCS5_PBKDF1(hash->clone());
+         }
+
+      std::pair<size_t, OctetString>
+         key_derivation(size_t output_len,
+                        const std::string& passphrase,
+                        const byte salt[], size_t salt_len,
+                        size_t iterations,
+                        std::chrono::milliseconds msec) const override;
+   private:
+      HashFunction* hash;
+   };
+
+}
+
+#endif