push sheeet

pkgs/development/ocaml-modules/mirage-crypto/default.nix

@@ -0,0 +1,52 @@
+{
+  lib,
+  fetchurl,
+  buildDunePackage,
+  ohex,
+  ounit2,
+  dune-configurator,
+  eqaf,
+  withFreestanding ? false,
+  ocaml-freestanding,
+}:
+
+buildDunePackage rec {
+  minimalOCamlVersion = "4.13";
+
+  pname = "mirage-crypto";
+  version = "2.0.2";
+
+  src = fetchurl {
+    url = "https://github.com/mirage/mirage-crypto/releases/download/v${version}/mirage-crypto-${version}.tbz";
+    hash = "sha256-c5qdOfNAJ/vJNVf4fFysQZClK92t/3LyEvqoA9YhWHQ=";
+  };
+
+  doCheck = true;
+  checkInputs = [
+    ohex
+    ounit2
+  ];
+
+  buildInputs = [ dune-configurator ];
+  propagatedBuildInputs = [
+    eqaf
+  ]
+  ++ lib.optionals withFreestanding [
+    ocaml-freestanding
+  ];
+
+  meta = {
+    homepage = "https://github.com/mirage/mirage-crypto";
+    description = "Simple symmetric cryptography for the modern age";
+    changelog = "https://raw.githubusercontent.com/mirage/mirage-crypto/refs/tags/v${version}/CHANGES.md";
+    license = with lib.licenses; [
+      isc # default license
+      bsd2 # mirage-crypto-rng-mirage
+      mit # mirage-crypto-ec
+    ];
+    maintainers = with lib.maintainers; [
+      sternenseemann
+      momeemt
+    ];
+  };
+}

pkgs/development/ocaml-modules/mirage-crypto/ec.nix

@@ -0,0 +1,53 @@
+{
+  lib,
+  buildDunePackage,
+  mirage-crypto,
+  dune-configurator,
+  pkg-config,
+  mirage-crypto-rng,
+  alcotest,
+  asn1-combinators,
+  ohex,
+  ounit2,
+  ppx_deriving_yojson,
+  ppx_deriving,
+  yojson,
+  withFreestanding ? false,
+  ocaml-freestanding,
+}:
+
+buildDunePackage {
+  pname = "mirage-crypto-ec";
+
+  inherit (mirage-crypto)
+    src
+    version
+    ;
+
+  nativeBuildInputs = [ pkg-config ];
+  buildInputs = [
+    dune-configurator
+  ];
+  propagatedBuildInputs = [
+    mirage-crypto
+    mirage-crypto-rng
+  ]
+  ++ lib.optionals withFreestanding [
+    ocaml-freestanding
+  ];
+
+  doCheck = true;
+  checkInputs = [
+    alcotest
+    asn1-combinators
+    ohex
+    ounit2
+    ppx_deriving_yojson
+    ppx_deriving
+    yojson
+  ];
+
+  meta = mirage-crypto.meta // {
+    description = "Elliptic Curve Cryptography with primitives taken from Fiat";
+  };
+}

pkgs/development/ocaml-modules/mirage-crypto/pk.nix

@@ -0,0 +1,34 @@
+{
+  buildDunePackage,
+  ohex,
+  ounit2,
+  randomconv,
+  mirage-crypto,
+  mirage-crypto-rng,
+  zarith,
+  gmp,
+}:
+
+buildDunePackage {
+  pname = "mirage-crypto-pk";
+
+  inherit (mirage-crypto) version src;
+
+  buildInputs = [ gmp ];
+  propagatedBuildInputs = [
+    mirage-crypto
+    mirage-crypto-rng
+    zarith
+  ];
+
+  doCheck = true;
+  checkInputs = [
+    ohex
+    ounit2
+    randomconv
+  ];
+
+  meta = mirage-crypto.meta // {
+    description = "Simple public-key cryptography for the modern age";
+  };
+}

pkgs/development/ocaml-modules/mirage-crypto/rng-miou-unix.nix

@@ -0,0 +1,39 @@
+{
+  buildDunePackage,
+  mirage-crypto-rng,
+  miou,
+  logs,
+  duration,
+  mtime,
+  digestif,
+  ohex,
+}:
+
+buildDunePackage {
+  pname = "mirage-crypto-rng-miou-unix";
+
+  inherit (mirage-crypto-rng) version src;
+
+  doCheck = true;
+  checkInputs = [
+
+  ];
+
+  propagatedBuildInputs = [
+    miou
+    logs
+    mirage-crypto-rng
+    duration
+    mtime
+    digestif
+    ohex
+  ];
+
+  meta = mirage-crypto-rng.meta // {
+    description = "Feed the entropy source in an miou.unix-friendly way";
+    longDescription = ''
+      Mirage-crypto-rng-miou-unix feeds the entropy source for Mirage_crypto_rng-based
+      random number generator implementations, in an miou.unix-friendly way.
+    '';
+  };
+}

pkgs/development/ocaml-modules/mirage-crypto/rng-mirage.nix

@@ -0,0 +1,42 @@
+{
+  buildDunePackage,
+  mirage-crypto-rng,
+  duration,
+  mirage-runtime,
+  mirage-mtime,
+  mirage-sleep,
+  mirage-unix,
+  mirage-time-unix,
+  mirage-clock-unix,
+  logs,
+  lwt,
+  ohex,
+}:
+
+buildDunePackage {
+  pname = "mirage-crypto-rng-mirage";
+
+  inherit (mirage-crypto-rng) version src;
+
+  doCheck = true;
+  checkInputs = [
+    mirage-unix
+    mirage-clock-unix
+    mirage-time-unix
+    ohex
+  ];
+
+  propagatedBuildInputs = [
+    duration
+    mirage-crypto-rng
+    mirage-runtime
+    mirage-mtime
+    mirage-sleep
+    logs
+    lwt
+  ];
+
+  meta = mirage-crypto-rng.meta // {
+    description = "Entropy collection for a cryptographically secure PRNG";
+  };
+}

pkgs/development/ocaml-modules/mirage-crypto/rng.nix

@@ -0,0 +1,38 @@
+{
+  buildDunePackage,
+  mirage-crypto,
+  ohex,
+  ounit2,
+  randomconv,
+  dune-configurator,
+  digestif,
+  duration,
+  logs,
+}:
+
+buildDunePackage {
+  pname = "mirage-crypto-rng";
+
+  minimalOCamlVersion = "4.14";
+
+  inherit (mirage-crypto) version src;
+
+  doCheck = true;
+  checkInputs = [
+    ohex
+    ounit2
+    randomconv
+  ];
+
+  buildInputs = [ dune-configurator ];
+  propagatedBuildInputs = [
+    digestif
+    mirage-crypto
+    duration
+    logs
+  ];
+
+  meta = mirage-crypto.meta // {
+    description = "Cryptographically secure PRNG";
+  };
+}