Data.Parameterized.Nonce.Unsafe

This module provides a simple generator of new indexes in the ST monad. It is predictable and not intended for cryptographic purposes.

NOTE: the TestEquality and OrdF instances for the Nonce type simply compare the generated nonce values and then assert to the compiler (via unsafeCoerce) that the types ascribed to the nonces are equal if their values are equal. This is only OK because of the discipline by which nonces should be used: they should only be generated from a NonceGenerator (i.e., should not be built directly), and nonces from different generators must never be compared! Arranging to compare Nonces from different origins would allow users to build unsafeCoerce via the testEquality function.

A somewhat safer API would be to brand the generated Nonces with the state type variable of the NonceGenerator whence they came, and to only provide NonceGenerators via a Rank-2 continuation-passing API, similar to runST. This would (via a meta-argument involving parametricity) help to prevent nonces of different origin from being compared. However, this would force us to push the ST type brand into a significant number of other structures and APIs.

Another alternative would be to use unsafePerformIO magic to make a global nonce generator, and make that the only way to generate nonces. It is not clear that this is actually an improvement from a type safety point of view, but an argument could be made.

For now, be careful using Nonces, and ensure that you do not mix Nonces from different NonceGenerators.

Documentation

data NonceGenerator s

A simple type that for getting fresh indices in the ST monad. The type parameter s is used for the ST monad parameter.

newNonceGenerator :: ST s (NonceGenerator s)

Create a new counter.

freshNonce :: NonceGenerator s -> ST s (Nonce tp)

Get a fresh index and increment the counter.

atLimit :: NonceGenerator s -> ST s Bool

Return true if counter has reached the limit, and can't be incremented without risk of error.

data Nonce (tp :: k)

An index generated by the counter.

Instances

TestEquality k (Nonce k)

Methods

testEquality :: f a -> f b -> Maybe ((Nonce k :~: a) b)

HashableF k (Nonce k)

Methods

hashWithSaltF :: Int -> f tp -> Int

hashF :: f tp -> Int

ShowF k (Nonce k)

Methods

withShow :: p f -> q tp -> (Show (f tp) -> a) -> a

showF :: f tp -> String

showsF :: f tp -> String -> String

OrdF k (Nonce k)

Methods

compareF :: ktp x -> ktp y -> OrderingF (Nonce k) x y

leqF :: ktp x -> ktp y -> Bool

ltF :: ktp x -> ktp y -> Bool

geqF :: ktp x -> ktp y -> Bool

gtF :: ktp x -> ktp y -> Bool

Eq (Nonce k tp)

Methods

(==) :: Nonce k tp -> Nonce k tp -> Bool

(/=) :: Nonce k tp -> Nonce k tp -> Bool

Ord (Nonce k tp)

Methods

compare :: Nonce k tp -> Nonce k tp -> Ordering

(<) :: Nonce k tp -> Nonce k tp -> Bool

(<=) :: Nonce k tp -> Nonce k tp -> Bool

(>) :: Nonce k tp -> Nonce k tp -> Bool

(>=) :: Nonce k tp -> Nonce k tp -> Bool

max :: Nonce k tp -> Nonce k tp -> Nonce k tp

min :: Nonce k tp -> Nonce k tp -> Nonce k tp

Show (Nonce k tp)

Methods

showsPrec :: Int -> Nonce k tp -> ShowS

show :: Nonce k tp -> String

showList :: [Nonce k tp] -> ShowS

Hashable (Nonce k tp)

Methods

hashWithSalt :: Int -> Nonce k tp -> Int

hash :: Nonce k tp -> Int

indexValue :: Nonce tp -> Word64