roseeast/async-crypto

---

Async Crypto provides non-blocking Argon2id password hashing for Pawn gamemodes, plus practical crypto utilities such as secure random hex, SHA-256, HMAC-SHA256, and Base64. Expensive work runs on worker threads, then results are delivered back to Pawn from the main server thread through ProcessTick.

Overview

Features

Release Files

Prebuilt binaries are available in dist/.

Package layout:

plugins/
  async_crypto.so      # Linux packages
  async_crypto.dll     # Windows packages
pawno/include/
  async_crypto.inc
example.pwn
README.md
LICENSE

Compatibility

This plugin does not hook RakNet, patch memory, or depend on SA-MP internal addresses, so it is a good fit for open.mp legacy plugin loading.

Installation

1. Choose The Binary

2. Install The Pawn Include

Copy:

include/async_crypto.inc

to your compiler include directory, for example:

3. Load The Plugin

For SA-MP or legacy server.cfg:

plugins async_crypto

On some older Linux setups, include the extension:

plugins async_crypto.so

For open.mp config.json:

{
  "pawn": {
    "legacy_plugins": ["async_crypto"]
  }
}

Native API

Async Natives

Callback format:

public MyCallback(requestid, status, const result[])

Return behavior:

Sync Utility Natives

Status Codes

Argon2id Defaults

For most RP/account systems, the default Argon2id settings are a strong starting point. Increase mem_kib or iterations only after testing login/register latency on your server hardware.

Pawn Example

#include <async_crypto>

public OnGameModeInit()
{
    new request = Crypto_Argon2Hash("secret-password", "OnPasswordHashed");

    if (request < 0)
    {
        printf("Argon2 job rejected: %d", request);
    }

    return 1;
}

public OnPasswordHashed(requestid, status, const hash[])
{
    if (status != CRYPTO_STATUS_OK)
    {
        printf("Hash failed: request=%d status=%d message=%s", requestid, status, hash);
        return 1;
    }

    printf("Hash: %s", hash);
    Crypto_Argon2Verify("secret-password", hash, "OnPasswordVerified");
    return 1;
}

public OnPasswordVerified(requestid, status, const result[])
{
    if (status == CRYPTO_STATUS_OK && strval(result) == 1)
    {
        print("Password valid.");
    }
    else
    {
        printf("Password invalid or verification failed: request=%d status=%d result=%s", requestid, status, result);
    }

    return 1;
}

Build From Source

Linux

sudo apt install cmake g++ git
cmake -S . -B build -DCMAKE_BUILD_TYPE=Release
cmake --build build -j

Output:

build/async_crypto.so

Linux 32-bit

sudo apt install cmake g++ git g++-multilib
cmake -S . -B build-linux-i686 \
  -DCMAKE_BUILD_TYPE=Release \
  -DCMAKE_C_FLAGS=-m32 \
  -DCMAKE_CXX_FLAGS=-m32 \
  -DCMAKE_SHARED_LINKER_FLAGS=-m32
cmake --build build-linux-i686 -j

Windows Cross-Build With MinGW

Windows x86_64:

cmake -S . -B build-win-x86_64 \
  -DCMAKE_BUILD_TYPE=Release \
  -DCMAKE_SYSTEM_NAME=Windows \
  -DCMAKE_C_COMPILER=x86_64-w64-mingw32-gcc \
  -DCMAKE_CXX_COMPILER=x86_64-w64-mingw32-g++
cmake --build build-win-x86_64 -j

Windows i686:

cmake -S . -B build-win-i686 \
  -DCMAKE_BUILD_TYPE=Release \
  -DCMAKE_SYSTEM_NAME=Windows \
  -DCMAKE_C_COMPILER=i686-w64-mingw32-gcc \
  -DCMAKE_CXX_COMPILER=i686-w64-mingw32-g++
cmake --build build-win-i686 -j

Offline SDK Build

By default, CMake fetches maddinat0r/samp-plugin-sdk and P-H-C/phc-winner-argon2. If your build machine cannot access GitHub, provide a local SDK checkout:

cmake -S . -B build \
  -DCMAKE_BUILD_TYPE=Release \
  -DSAMP_PLUGIN_SDK_DIR=/path/to/samp-plugin-sdk
cmake --build build -j

Build Notes

Security Guidance

Password storage should keep the complete Argon2id PHC string, for example:

$argon2id$v=19$m=65536,t=3,p=1$...$...

The encoded string already contains the algorithm, version, memory cost, time cost, parallelism, salt, and hash.

Project Structure

Checksums

Use dist/SHA256SUMS.txt to verify release files:

cd dist
sha256sum -c SHA256SUMS.txt

Publishing a GitHub Release

Use GitHub Releases for public downloads. Releases are designed for versioned software packages, release notes, and binary assets.

Recommended Assets

Attach these files to each release:

License

Async Crypto is released under the MIT License. See LICENSE for details.