mirror of
https://github.com/XRPLF/rippled.git
synced 2025-11-04 11:15:56 +00:00
Per XLS-0095, we are taking steps to rename ripple(d) to xrpl(d). This change specifically removes all copyright notices referencing Ripple, XRPLF, and certain affiliated contributors upon mutual agreement, so the notice in the LICENSE.md file applies throughout. Copyright notices referencing external contributions remain as-is. Duplicate verbiage is also removed.
98 lines
2.1 KiB
C++
98 lines
2.1 KiB
C++
#ifndef XRPL_BASICS_HARDENED_HASH_H_INCLUDED
|
|
#define XRPL_BASICS_HARDENED_HASH_H_INCLUDED
|
|
|
|
#include <xrpl/beast/hash/hash_append.h>
|
|
#include <xrpl/beast/hash/xxhasher.h>
|
|
|
|
#include <cstdint>
|
|
#include <mutex>
|
|
#include <random>
|
|
#include <utility>
|
|
|
|
namespace ripple {
|
|
|
|
namespace detail {
|
|
|
|
using seed_pair = std::pair<std::uint64_t, std::uint64_t>;
|
|
|
|
template <bool = true>
|
|
seed_pair
|
|
make_seed_pair() noexcept
|
|
{
|
|
struct state_t
|
|
{
|
|
std::mutex mutex;
|
|
std::random_device rng;
|
|
std::mt19937_64 gen;
|
|
std::uniform_int_distribution<std::uint64_t> dist;
|
|
|
|
state_t() : gen(rng())
|
|
{
|
|
}
|
|
// state_t(state_t const&) = delete;
|
|
// state_t& operator=(state_t const&) = delete;
|
|
};
|
|
static state_t state;
|
|
std::lock_guard lock(state.mutex);
|
|
return {state.dist(state.gen), state.dist(state.gen)};
|
|
}
|
|
|
|
} // namespace detail
|
|
|
|
/**
|
|
* Seed functor once per construction
|
|
|
|
A std compatible hash adapter that resists adversarial inputs.
|
|
For this to work, T must implement in its own namespace:
|
|
|
|
@code
|
|
|
|
template <class Hasher>
|
|
void
|
|
hash_append (Hasher& h, T const& t) noexcept
|
|
{
|
|
// hash_append each base and member that should
|
|
// participate in forming the hash
|
|
using beast::hash_append;
|
|
hash_append (h, static_cast<T::base1 const&>(t));
|
|
hash_append (h, static_cast<T::base2 const&>(t));
|
|
// ...
|
|
hash_append (h, t.member1);
|
|
hash_append (h, t.member2);
|
|
// ...
|
|
}
|
|
|
|
@endcode
|
|
|
|
Do not use any version of Murmur or CityHash for the Hasher
|
|
template parameter (the hashing algorithm). For details
|
|
see https://131002.net/siphash/#at
|
|
*/
|
|
|
|
template <class HashAlgorithm = beast::xxhasher>
|
|
class hardened_hash
|
|
{
|
|
private:
|
|
detail::seed_pair m_seeds;
|
|
|
|
public:
|
|
using result_type = typename HashAlgorithm::result_type;
|
|
|
|
hardened_hash() : m_seeds(detail::make_seed_pair<>())
|
|
{
|
|
}
|
|
|
|
template <class T>
|
|
result_type
|
|
operator()(T const& t) const noexcept
|
|
{
|
|
HashAlgorithm h(m_seeds.first, m_seeds.second);
|
|
hash_append(h, t);
|
|
return static_cast<result_type>(h);
|
|
}
|
|
};
|
|
|
|
} // namespace ripple
|
|
|
|
#endif
|