# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1547384366 -3600
# Node ID d536796a305f148f17a162129a1bee806fb21d24
# Parent  dc9bb31cbffe439d2cf5929ecf889ffc7bf27fb7
util.hashes: Add PBKDF2-HMAC-SHA256

diff -r dc9bb31cbffe -r d536796a305f util-src/hashes.c
--- a/util-src/hashes.c	Sun Jan 13 13:57:18 2019 +0100
+++ b/util-src/hashes.c	Sun Jan 13 13:59:26 2019 +0100
@@ -116,6 +116,23 @@
 	return 1;
 }
 
+
+static int Lpbkdf2_sha256(lua_State *L) {
+	unsigned char out[SHA256_DIGEST_LENGTH];
+
+	size_t pass_len, salt_len;
+	const char *pass = luaL_checklstring(L, 1, &pass_len);
+	const unsigned char *salt = (unsigned char *)luaL_checklstring(L, 2, &salt_len);
+	const int iter = luaL_checkinteger(L, 3);
+
+	if(PKCS5_PBKDF2_HMAC(pass, pass_len, salt, salt_len, iter, EVP_sha256(), SHA256_DIGEST_LENGTH, out) == 0) {
+		return luaL_error(L, "PKCS5_PBKDF2_HMAC() failed");
+	}
+
+	lua_pushlstring(L, (char *)out, SHA_DIGEST_LENGTH);
+	return 1;
+}
+
 static const luaL_Reg Reg[] = {
 	{ "sha1",		Lsha1		},
 	{ "sha224",		Lsha224		},
@@ -129,6 +146,7 @@
 	{ "hmac_md5",		Lhmac_md5	},
 	{ "scram_Hi_sha1",	Lpbkdf2_sha1	}, /* COMPAT */
 	{ "pbkdf2_hmac_sha1",	Lpbkdf2_sha1	},
+	{ "pbkdf2_hmac_sha256",	Lpbkdf2_sha256	},
 	{ NULL,			NULL		}
 };