Struct rand::Hc128Rng

pub struct Hc128Rng { /* fields omitted */ }

A cryptographically secure random number generator that uses the HC-128 algorithm.

HC-128 is a stream cipher designed by Hongjun Wu [1], that we use as an RNG. It is selected as one of the "stream ciphers suitable for widespread adoption" by eSTREAM [2].

HC-128 is an array based RNG. In this it is similar to RC-4 and ISAAC before it, but those have never been proven cryptographically secure (or have even been significantly compromised, as in the case of RC-4 [5]).

Because HC-128 works with simple indexing into a large array and with a few operations that parallelize well, it has very good performance. The size of the array it needs, 4kb, can however be a disadvantage.

This implementation is not based on the version of HC-128 submitted to the eSTREAM contest, but on a later version by the author with a few small improvements from December 15, 2009 [3].

HC-128 has no known weaknesses that are easier to exploit than doing a brute-force search of 2¹²⁸. A very comprehensive analysis of the current state of known attacks / weaknesses of HC-128 is given in [4].

The average cycle length is expected to be 2^1024*32-1 = 2³²⁷⁶⁷. We support seeding with a 256-bit array, which matches the 128-bit key concatenated with a 128-bit IV from the stream cipher.

References

[1]: Hongjun Wu (2008). "The Stream Cipher HC-128". The eSTREAM Finalists, LNCS 4986, pp. 39--47, Springer-Verlag.

[2]: eSTREAM: the ECRYPT Stream Cipher Project

[3]: Hongjun Wu, Stream Ciphers HC-128 and HC-256

[4]: Shashwat Raizada (January 2015),"Some Results On Analysis And Implementation Of HC-128 Stream Cipher".

[5]: Internet Engineering Task Force (Februari 2015), "Prohibiting RC4 Cipher Suites".

Trait Implementations

impl Clone for Hc128Rng

fn clone(&self) -> Hc128Rng

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Hc128Rng

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.

impl Rng for Hc128Rng

fn next_u32(&mut self) -> u32

Return the next random u32.

fn next_u64(&mut self) -> u64

Return the next random u64.

fn fill_bytes(&mut self, dest: &mut [u8])

Fill dest with random data.

fn next_f32(&mut self) -> f32

Return the next random f32 selected from the half-open interval [0, 1).

fn next_f64(&mut self) -> f64

Return the next random f64 selected from the half-open interval [0, 1).

fn try_fill_bytes(&mut self, dest: &mut [u8]) -> Result<(), Error>

Fill dest entirely with random data.

impl SeedableRng for Hc128Rng

type Seed = [u8; 32]

Seed type, which is restricted to types mutably-dereferencable as u8 arrays (we recommend [u8; N] for some N).

fn from_seed(seed: Self::Seed) -> Self

Create an HC-128 random number generator with a seed. The seed has to be 256 bits in length, matching the 128 bit key followed by 128 bit iv when HC-128 where to be used as a stream cipher.

fn from_rng<R: Rng>(rng: R) -> Result<Self, Error>

Create a new PRNG seeded from another Rng.