rand_chacha/
lib.rs

1// Copyright 2018 Developers of the Rand project.
2//
3// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
4// https://www.apache.org/licenses/LICENSE-2.0> or the MIT license
5// <LICENSE-MIT or https://opensource.org/licenses/MIT>, at your
6// option. This file may not be copied, modified, or distributed
7// except according to those terms.
8
9//! The ChaCha random number generators.
10//!
11//! These are native Rust implementations of RNGs derived from the
12//! [ChaCha stream ciphers] by D J Bernstein.
13//!
14//! ## Generators
15//!
16//! This crate provides 8-, 12- and 20-round variants of generators via a "core"
17//! implementation (of [`BlockRngCore`]), each with an associated "RNG" type
18//! (implementing [`RngCore`]).
19//!
20//! These generators are all deterministic and portable (see [Reproducibility]
21//! in the book), with testing against reference vectors.
22//!
23//! ## Cryptographic (secure) usage
24//!
25//! Where secure unpredictable generators are required, it is suggested to use
26//! [`ChaCha12Rng`] or [`ChaCha20Rng`] and to seed via
27//! [`SeedableRng::from_os_rng`].
28//!
29//! See also the [Security] chapter in the rand book. The crate is provided
30//! "as is", without any form of guarantee, and without a security audit.
31//!
32//! ## Seeding (construction)
33//!
34//! Generators implement the [`SeedableRng`] trait. Any method may be used,
35//! but note that `seed_from_u64` is not suitable for usage where security is
36//! important. Some suggestions:
37//!
38//! 1.  With a fresh seed, **direct from the OS** (implies a syscall):
39//!     ```
40//!     # use {rand_core::SeedableRng, rand_chacha::ChaCha12Rng};
41//!     let rng = ChaCha12Rng::from_os_rng();
42//!     # let _: ChaCha12Rng = rng;
43//!     ```
44//! 2.  **From a master generator.** This could be [`rand::rng`]
45//!     (effectively a fresh seed without the need for a syscall on each usage)
46//!     or a deterministic generator such as [`ChaCha20Rng`].
47//!     Beware that should a weak master generator be used, correlations may be
48//!     detectable between the outputs of its child generators.
49//!     ```ignore
50//!     let rng = ChaCha12Rng::from_rng(&mut rand::rng());
51//!     ```
52//!
53//! See also [Seeding RNGs] in the book.
54//!
55//! ## Generation
56//!
57//! Generators implement [`RngCore`], whose methods may be used directly to
58//! generate unbounded integer or byte values.
59//! ```
60//! use rand_core::{SeedableRng, RngCore};
61//! use rand_chacha::ChaCha12Rng;
62//!
63//! let mut rng = ChaCha12Rng::from_seed(Default::default());
64//! let x = rng.next_u64();
65//! assert_eq!(x, 0x53f955076a9af49b);
66//! ```
67//!
68//! It is often more convenient to use the [`rand::Rng`] trait, which provides
69//! further functionality. See also the [Random Values] chapter in the book.
70//!
71//! [ChaCha stream ciphers]: https://cr.yp.to/chacha.html
72//! [Reproducibility]: https://rust-random.github.io/book/crate-reprod.html
73//! [Seeding RNGs]: https://rust-random.github.io/book/guide-seeding.html
74//! [Security]: https://rust-random.github.io/book/guide-rngs.html#security
75//! [Random Values]: https://rust-random.github.io/book/guide-values.html
76//! [`BlockRngCore`]: rand_core::block::BlockRngCore
77//! [`RngCore`]: rand_core::RngCore
78//! [`SeedableRng`]: rand_core::SeedableRng
79//! [`SeedableRng::from_os_rng`]: rand_core::SeedableRng::from_os_rng
80//! [`rand::rng`]: https://docs.rs/rand/latest/rand/fn.rng.html
81//! [`rand::Rng`]: https://docs.rs/rand/latest/rand/trait.Rng.html
82
83#![doc(
84    html_logo_url = "https://www.rust-lang.org/logos/rust-logo-128x128-blk.png",
85    html_favicon_url = "https://www.rust-lang.org/favicon.ico",
86    html_root_url = "https://rust-random.github.io/rand/"
87)]
88#![forbid(unsafe_code)]
89#![deny(missing_docs)]
90#![deny(missing_debug_implementations)]
91#![doc(test(attr(allow(unused_variables), deny(warnings))))]
92#![cfg_attr(not(feature = "std"), no_std)]
93
94pub use rand_core;
95
96mod chacha;
97mod guts;
98
99pub use crate::chacha::{
100    ChaCha12Core, ChaCha12Rng, ChaCha20Core, ChaCha20Rng, ChaCha8Core, ChaCha8Rng,
101};
102
103/// ChaCha with 20 rounds
104pub type ChaChaRng = ChaCha20Rng;
105/// ChaCha with 20 rounds, low-level interface
106pub type ChaChaCore = ChaCha20Core;