diff options
Diffstat (limited to 'src/lib/libcrypto/hmac')
| -rw-r--r-- | src/lib/libcrypto/hmac/Makefile | 110 | ||||
| -rw-r--r-- | src/lib/libcrypto/hmac/Makefile.ssl | 101 | ||||
| -rw-r--r-- | src/lib/libcrypto/hmac/hm_ameth.c | 167 | ||||
| -rw-r--r-- | src/lib/libcrypto/hmac/hm_pmeth.c | 271 | ||||
| -rw-r--r-- | src/lib/libcrypto/hmac/hmac.c | 214 | ||||
| -rw-r--r-- | src/lib/libcrypto/hmac/hmac.h | 110 | ||||
| -rw-r--r-- | src/lib/libcrypto/hmac/hmactest.c | 175 |
7 files changed, 1047 insertions, 101 deletions
diff --git a/src/lib/libcrypto/hmac/Makefile b/src/lib/libcrypto/hmac/Makefile new file mode 100644 index 0000000000..0e91709f64 --- /dev/null +++ b/src/lib/libcrypto/hmac/Makefile | |||
| @@ -0,0 +1,110 @@ | |||
| 1 | # | ||
| 2 | # OpenSSL/crypto/md/Makefile | ||
| 3 | # | ||
| 4 | |||
| 5 | DIR= hmac | ||
| 6 | TOP= ../.. | ||
| 7 | CC= cc | ||
| 8 | INCLUDES= | ||
| 9 | CFLAG=-g | ||
| 10 | MAKEFILE= Makefile | ||
| 11 | AR= ar r | ||
| 12 | |||
| 13 | CFLAGS= $(INCLUDES) $(CFLAG) | ||
| 14 | |||
| 15 | GENERAL=Makefile | ||
| 16 | TEST=hmactest.c | ||
| 17 | APPS= | ||
| 18 | |||
| 19 | LIB=$(TOP)/libcrypto.a | ||
| 20 | LIBSRC=hmac.c hm_ameth.c hm_pmeth.c | ||
| 21 | LIBOBJ=hmac.o hm_ameth.o hm_pmeth.o | ||
| 22 | |||
| 23 | SRC= $(LIBSRC) | ||
| 24 | |||
| 25 | EXHEADER= hmac.h | ||
| 26 | HEADER= $(EXHEADER) | ||
| 27 | |||
| 28 | ALL= $(GENERAL) $(SRC) $(HEADER) | ||
| 29 | |||
| 30 | top: | ||
| 31 | (cd ../..; $(MAKE) DIRS=crypto SDIRS=$(DIR) sub_all) | ||
| 32 | |||
| 33 | all: lib | ||
| 34 | |||
| 35 | lib: $(LIBOBJ) | ||
| 36 | $(AR) $(LIB) $(LIBOBJ) | ||
| 37 | $(RANLIB) $(LIB) || echo Never mind. | ||
| 38 | @touch lib | ||
| 39 | |||
| 40 | files: | ||
| 41 | $(PERL) $(TOP)/util/files.pl Makefile >> $(TOP)/MINFO | ||
| 42 | |||
| 43 | links: | ||
| 44 | @$(PERL) $(TOP)/util/mklink.pl ../../include/openssl $(EXHEADER) | ||
| 45 | @$(PERL) $(TOP)/util/mklink.pl ../../test $(TEST) | ||
| 46 | @$(PERL) $(TOP)/util/mklink.pl ../../apps $(APPS) | ||
| 47 | |||
| 48 | install: | ||
| 49 | @[ -n "$(INSTALLTOP)" ] # should be set by top Makefile... | ||
| 50 | @headerlist="$(EXHEADER)"; for i in $$headerlist ; \ | ||
| 51 | do \ | ||
| 52 | (cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i; \ | ||
| 53 | chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i ); \ | ||
| 54 | done; | ||
| 55 | |||
| 56 | tags: | ||
| 57 | ctags $(SRC) | ||
| 58 | |||
| 59 | tests: | ||
| 60 | |||
| 61 | lint: | ||
| 62 | lint -DLINT $(INCLUDES) $(SRC)>fluff | ||
| 63 | |||
| 64 | depend: | ||
| 65 | @[ -n "$(MAKEDEPEND)" ] # should be set by upper Makefile... | ||
| 66 | $(MAKEDEPEND) -- $(CFLAG) $(INCLUDES) $(DEPFLAG) -- $(PROGS) $(LIBSRC) | ||
| 67 | |||
| 68 | dclean: | ||
| 69 | $(PERL) -pe 'if (/^# DO NOT DELETE THIS LINE/) {print; exit(0);}' $(MAKEFILE) >Makefile.new | ||
| 70 | mv -f Makefile.new $(MAKEFILE) | ||
| 71 | |||
| 72 | clean: | ||
| 73 | rm -f *.o *.obj lib tags core .pure .nfs* *.old *.bak fluff | ||
| 74 | |||
| 75 | # DO NOT DELETE THIS LINE -- make depend depends on it. | ||
| 76 | |||
| 77 | hm_ameth.o: ../../e_os.h ../../include/openssl/asn1.h | ||
| 78 | hm_ameth.o: ../../include/openssl/bio.h ../../include/openssl/buffer.h | ||
| 79 | hm_ameth.o: ../../include/openssl/crypto.h ../../include/openssl/e_os2.h | ||
| 80 | hm_ameth.o: ../../include/openssl/err.h ../../include/openssl/evp.h | ||
| 81 | hm_ameth.o: ../../include/openssl/lhash.h ../../include/openssl/obj_mac.h | ||
| 82 | hm_ameth.o: ../../include/openssl/objects.h ../../include/openssl/opensslconf.h | ||
| 83 | hm_ameth.o: ../../include/openssl/opensslv.h ../../include/openssl/ossl_typ.h | ||
| 84 | hm_ameth.o: ../../include/openssl/safestack.h ../../include/openssl/stack.h | ||
| 85 | hm_ameth.o: ../../include/openssl/symhacks.h ../asn1/asn1_locl.h ../cryptlib.h | ||
| 86 | hm_ameth.o: hm_ameth.c | ||
| 87 | hm_pmeth.o: ../../e_os.h ../../include/openssl/asn1.h | ||
| 88 | hm_pmeth.o: ../../include/openssl/bio.h ../../include/openssl/buffer.h | ||
| 89 | hm_pmeth.o: ../../include/openssl/conf.h ../../include/openssl/crypto.h | ||
| 90 | hm_pmeth.o: ../../include/openssl/e_os2.h ../../include/openssl/ec.h | ||
| 91 | hm_pmeth.o: ../../include/openssl/ecdh.h ../../include/openssl/ecdsa.h | ||
| 92 | hm_pmeth.o: ../../include/openssl/err.h ../../include/openssl/evp.h | ||
| 93 | hm_pmeth.o: ../../include/openssl/hmac.h ../../include/openssl/lhash.h | ||
| 94 | hm_pmeth.o: ../../include/openssl/obj_mac.h ../../include/openssl/objects.h | ||
| 95 | hm_pmeth.o: ../../include/openssl/opensslconf.h | ||
| 96 | hm_pmeth.o: ../../include/openssl/opensslv.h ../../include/openssl/ossl_typ.h | ||
| 97 | hm_pmeth.o: ../../include/openssl/pkcs7.h ../../include/openssl/safestack.h | ||
| 98 | hm_pmeth.o: ../../include/openssl/sha.h ../../include/openssl/stack.h | ||
| 99 | hm_pmeth.o: ../../include/openssl/symhacks.h ../../include/openssl/x509.h | ||
| 100 | hm_pmeth.o: ../../include/openssl/x509_vfy.h ../../include/openssl/x509v3.h | ||
| 101 | hm_pmeth.o: ../cryptlib.h ../evp/evp_locl.h hm_pmeth.c | ||
| 102 | hmac.o: ../../e_os.h ../../include/openssl/asn1.h ../../include/openssl/bio.h | ||
| 103 | hmac.o: ../../include/openssl/buffer.h ../../include/openssl/crypto.h | ||
| 104 | hmac.o: ../../include/openssl/e_os2.h ../../include/openssl/err.h | ||
| 105 | hmac.o: ../../include/openssl/evp.h ../../include/openssl/hmac.h | ||
| 106 | hmac.o: ../../include/openssl/lhash.h ../../include/openssl/obj_mac.h | ||
| 107 | hmac.o: ../../include/openssl/objects.h ../../include/openssl/opensslconf.h | ||
| 108 | hmac.o: ../../include/openssl/opensslv.h ../../include/openssl/ossl_typ.h | ||
| 109 | hmac.o: ../../include/openssl/safestack.h ../../include/openssl/stack.h | ||
| 110 | hmac.o: ../../include/openssl/symhacks.h ../cryptlib.h hmac.c | ||
diff --git a/src/lib/libcrypto/hmac/Makefile.ssl b/src/lib/libcrypto/hmac/Makefile.ssl deleted file mode 100644 index f1c07322c4..0000000000 --- a/src/lib/libcrypto/hmac/Makefile.ssl +++ /dev/null | |||
| @@ -1,101 +0,0 @@ | |||
| 1 | # | ||
| 2 | # SSLeay/crypto/md/Makefile | ||
| 3 | # | ||
| 4 | |||
| 5 | DIR= hmac | ||
| 6 | TOP= ../.. | ||
| 7 | CC= cc | ||
| 8 | INCLUDES= | ||
| 9 | CFLAG=-g | ||
| 10 | INSTALL_PREFIX= | ||
| 11 | OPENSSLDIR= /usr/local/ssl | ||
| 12 | INSTALLTOP=/usr/local/ssl | ||
| 13 | MAKE= make -f Makefile.ssl | ||
| 14 | MAKEDEPPROG= makedepend | ||
| 15 | MAKEDEPEND= $(TOP)/util/domd $(TOP) -MD $(MAKEDEPPROG) | ||
| 16 | MAKEFILE= Makefile.ssl | ||
| 17 | AR= ar r | ||
| 18 | |||
| 19 | CFLAGS= $(INCLUDES) $(CFLAG) | ||
| 20 | |||
| 21 | GENERAL=Makefile | ||
| 22 | TEST=hmactest.c | ||
| 23 | APPS= | ||
| 24 | |||
| 25 | LIB=$(TOP)/libcrypto.a | ||
| 26 | LIBSRC=hmac.c | ||
| 27 | LIBOBJ=hmac.o | ||
| 28 | |||
| 29 | SRC= $(LIBSRC) | ||
| 30 | |||
| 31 | EXHEADER= hmac.h | ||
| 32 | HEADER= $(EXHEADER) | ||
| 33 | |||
| 34 | ALL= $(GENERAL) $(SRC) $(HEADER) | ||
| 35 | |||
| 36 | top: | ||
| 37 | (cd ../..; $(MAKE) DIRS=crypto SDIRS=$(DIR) sub_all) | ||
| 38 | |||
| 39 | all: lib | ||
| 40 | |||
| 41 | lib: $(LIBOBJ) | ||
| 42 | $(AR) $(LIB) $(LIBOBJ) | ||
| 43 | $(RANLIB) $(LIB) || echo Never mind. | ||
| 44 | @touch lib | ||
| 45 | |||
| 46 | files: | ||
| 47 | $(PERL) $(TOP)/util/files.pl Makefile.ssl >> $(TOP)/MINFO | ||
| 48 | |||
| 49 | links: | ||
| 50 | @sh $(TOP)/util/point.sh Makefile.ssl Makefile | ||
| 51 | @$(PERL) $(TOP)/util/mklink.pl ../../include/openssl $(EXHEADER) | ||
| 52 | @$(PERL) $(TOP)/util/mklink.pl ../../test $(TEST) | ||
| 53 | @$(PERL) $(TOP)/util/mklink.pl ../../apps $(APPS) | ||
| 54 | |||
| 55 | install: | ||
| 56 | @for i in $(EXHEADER) ; \ | ||
| 57 | do \ | ||
| 58 | (cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i; \ | ||
| 59 | chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i ); \ | ||
| 60 | done; | ||
| 61 | |||
| 62 | tags: | ||
| 63 | ctags $(SRC) | ||
| 64 | |||
| 65 | tests: | ||
| 66 | |||
| 67 | lint: | ||
| 68 | lint -DLINT $(INCLUDES) $(SRC)>fluff | ||
| 69 | |||
| 70 | depend: | ||
| 71 | $(MAKEDEPEND) -- $(CFLAG) $(INCLUDES) $(DEPFLAG) -- $(PROGS) $(LIBSRC) | ||
| 72 | |||
| 73 | dclean: | ||
| 74 | $(PERL) -pe 'if (/^# DO NOT DELETE THIS LINE/) {print; exit(0);}' $(MAKEFILE) >Makefile.new | ||
| 75 | mv -f Makefile.new $(MAKEFILE) | ||
| 76 | |||
| 77 | clean: | ||
| 78 | rm -f *.o *.obj lib tags core .pure .nfs* *.old *.bak fluff | ||
| 79 | |||
| 80 | # DO NOT DELETE THIS LINE -- make depend depends on it. | ||
| 81 | |||
| 82 | hmac.o: ../../e_os.h ../../include/openssl/aes.h ../../include/openssl/asn1.h | ||
| 83 | hmac.o: ../../include/openssl/bio.h ../../include/openssl/blowfish.h | ||
| 84 | hmac.o: ../../include/openssl/bn.h ../../include/openssl/buffer.h | ||
| 85 | hmac.o: ../../include/openssl/cast.h ../../include/openssl/crypto.h | ||
| 86 | hmac.o: ../../include/openssl/des.h ../../include/openssl/des_old.h | ||
| 87 | hmac.o: ../../include/openssl/dh.h ../../include/openssl/dsa.h | ||
| 88 | hmac.o: ../../include/openssl/e_os2.h ../../include/openssl/err.h | ||
| 89 | hmac.o: ../../include/openssl/evp.h ../../include/openssl/hmac.h | ||
| 90 | hmac.o: ../../include/openssl/idea.h ../../include/openssl/lhash.h | ||
| 91 | hmac.o: ../../include/openssl/md2.h ../../include/openssl/md4.h | ||
| 92 | hmac.o: ../../include/openssl/md5.h ../../include/openssl/mdc2.h | ||
| 93 | hmac.o: ../../include/openssl/obj_mac.h ../../include/openssl/objects.h | ||
| 94 | hmac.o: ../../include/openssl/opensslconf.h ../../include/openssl/opensslv.h | ||
| 95 | hmac.o: ../../include/openssl/ossl_typ.h ../../include/openssl/rc2.h | ||
| 96 | hmac.o: ../../include/openssl/rc4.h ../../include/openssl/rc5.h | ||
| 97 | hmac.o: ../../include/openssl/ripemd.h ../../include/openssl/rsa.h | ||
| 98 | hmac.o: ../../include/openssl/safestack.h ../../include/openssl/sha.h | ||
| 99 | hmac.o: ../../include/openssl/stack.h ../../include/openssl/symhacks.h | ||
| 100 | hmac.o: ../../include/openssl/ui.h ../../include/openssl/ui_compat.h | ||
| 101 | hmac.o: ../cryptlib.h hmac.c | ||
diff --git a/src/lib/libcrypto/hmac/hm_ameth.c b/src/lib/libcrypto/hmac/hm_ameth.c new file mode 100644 index 0000000000..e03f24aeda --- /dev/null +++ b/src/lib/libcrypto/hmac/hm_ameth.c | |||
| @@ -0,0 +1,167 @@ | |||
| 1 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | ||
| 2 | * project 2007. | ||
| 3 | */ | ||
| 4 | /* ==================================================================== | ||
| 5 | * Copyright (c) 2007 The OpenSSL Project. All rights reserved. | ||
| 6 | * | ||
| 7 | * Redistribution and use in source and binary forms, with or without | ||
| 8 | * modification, are permitted provided that the following conditions | ||
| 9 | * are met: | ||
| 10 | * | ||
| 11 | * 1. Redistributions of source code must retain the above copyright | ||
| 12 | * notice, this list of conditions and the following disclaimer. | ||
| 13 | * | ||
| 14 | * 2. Redistributions in binary form must reproduce the above copyright | ||
| 15 | * notice, this list of conditions and the following disclaimer in | ||
| 16 | * the documentation and/or other materials provided with the | ||
| 17 | * distribution. | ||
| 18 | * | ||
| 19 | * 3. All advertising materials mentioning features or use of this | ||
| 20 | * software must display the following acknowledgment: | ||
| 21 | * "This product includes software developed by the OpenSSL Project | ||
| 22 | * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | ||
| 23 | * | ||
| 24 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
| 25 | * endorse or promote products derived from this software without | ||
| 26 | * prior written permission. For written permission, please contact | ||
| 27 | * licensing@OpenSSL.org. | ||
| 28 | * | ||
| 29 | * 5. Products derived from this software may not be called "OpenSSL" | ||
| 30 | * nor may "OpenSSL" appear in their names without prior written | ||
| 31 | * permission of the OpenSSL Project. | ||
| 32 | * | ||
| 33 | * 6. Redistributions of any form whatsoever must retain the following | ||
| 34 | * acknowledgment: | ||
| 35 | * "This product includes software developed by the OpenSSL Project | ||
| 36 | * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | ||
| 37 | * | ||
| 38 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
| 39 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
| 40 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
| 41 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
| 42 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
| 43 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
| 44 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
| 45 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
| 46 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
| 47 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
| 48 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
| 49 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
| 50 | * ==================================================================== | ||
| 51 | * | ||
| 52 | * This product includes cryptographic software written by Eric Young | ||
| 53 | * (eay@cryptsoft.com). This product includes software written by Tim | ||
| 54 | * Hudson (tjh@cryptsoft.com). | ||
| 55 | * | ||
| 56 | */ | ||
| 57 | |||
| 58 | #include <stdio.h> | ||
| 59 | #include "cryptlib.h" | ||
| 60 | #include <openssl/evp.h> | ||
| 61 | #include "asn1_locl.h" | ||
| 62 | |||
| 63 | #define HMAC_TEST_PRIVATE_KEY_FORMAT | ||
| 64 | |||
| 65 | /* HMAC "ASN1" method. This is just here to indicate the | ||
| 66 | * maximum HMAC output length and to free up an HMAC | ||
| 67 | * key. | ||
| 68 | */ | ||
| 69 | |||
| 70 | static int hmac_size(const EVP_PKEY *pkey) | ||
| 71 | { | ||
| 72 | return EVP_MAX_MD_SIZE; | ||
| 73 | } | ||
| 74 | |||
| 75 | static void hmac_key_free(EVP_PKEY *pkey) | ||
| 76 | { | ||
| 77 | ASN1_OCTET_STRING *os = (ASN1_OCTET_STRING *)pkey->pkey.ptr; | ||
| 78 | if (os) | ||
| 79 | { | ||
| 80 | if (os->data) | ||
| 81 | OPENSSL_cleanse(os->data, os->length); | ||
| 82 | ASN1_OCTET_STRING_free(os); | ||
| 83 | } | ||
| 84 | } | ||
| 85 | |||
| 86 | |||
| 87 | static int hmac_pkey_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2) | ||
| 88 | { | ||
| 89 | switch (op) | ||
| 90 | { | ||
| 91 | case ASN1_PKEY_CTRL_DEFAULT_MD_NID: | ||
| 92 | *(int *)arg2 = NID_sha1; | ||
| 93 | return 1; | ||
| 94 | |||
| 95 | default: | ||
| 96 | return -2; | ||
| 97 | } | ||
| 98 | } | ||
| 99 | |||
| 100 | #ifdef HMAC_TEST_PRIVATE_KEY_FORMAT | ||
| 101 | /* A bogus private key format for test purposes. This is simply the | ||
| 102 | * HMAC key with "HMAC PRIVATE KEY" in the headers. When enabled the | ||
| 103 | * genpkey utility can be used to "generate" HMAC keys. | ||
| 104 | */ | ||
| 105 | |||
| 106 | static int old_hmac_decode(EVP_PKEY *pkey, | ||
| 107 | const unsigned char **pder, int derlen) | ||
| 108 | { | ||
| 109 | ASN1_OCTET_STRING *os; | ||
| 110 | os = ASN1_OCTET_STRING_new(); | ||
| 111 | if (!os || !ASN1_OCTET_STRING_set(os, *pder, derlen)) | ||
| 112 | return 0; | ||
| 113 | EVP_PKEY_assign(pkey, EVP_PKEY_HMAC, os); | ||
| 114 | return 1; | ||
| 115 | } | ||
| 116 | |||
| 117 | static int old_hmac_encode(const EVP_PKEY *pkey, unsigned char **pder) | ||
| 118 | { | ||
| 119 | int inc; | ||
| 120 | ASN1_OCTET_STRING *os = (ASN1_OCTET_STRING *)pkey->pkey.ptr; | ||
| 121 | if (pder) | ||
| 122 | { | ||
| 123 | if (!*pder) | ||
| 124 | { | ||
| 125 | *pder = OPENSSL_malloc(os->length); | ||
| 126 | inc = 0; | ||
| 127 | } | ||
| 128 | else inc = 1; | ||
| 129 | |||
| 130 | memcpy(*pder, os->data, os->length); | ||
| 131 | |||
| 132 | if (inc) | ||
| 133 | *pder += os->length; | ||
| 134 | } | ||
| 135 | |||
| 136 | return os->length; | ||
| 137 | } | ||
| 138 | |||
| 139 | #endif | ||
| 140 | |||
| 141 | const EVP_PKEY_ASN1_METHOD hmac_asn1_meth = | ||
| 142 | { | ||
| 143 | EVP_PKEY_HMAC, | ||
| 144 | EVP_PKEY_HMAC, | ||
| 145 | 0, | ||
| 146 | |||
| 147 | "HMAC", | ||
| 148 | "OpenSSL HMAC method", | ||
| 149 | |||
| 150 | 0,0,0,0, | ||
| 151 | |||
| 152 | 0,0,0, | ||
| 153 | |||
| 154 | hmac_size, | ||
| 155 | 0, | ||
| 156 | 0,0,0,0,0,0,0, | ||
| 157 | |||
| 158 | hmac_key_free, | ||
| 159 | hmac_pkey_ctrl, | ||
| 160 | #ifdef HMAC_TEST_PRIVATE_KEY_FORMAT | ||
| 161 | old_hmac_decode, | ||
| 162 | old_hmac_encode | ||
| 163 | #else | ||
| 164 | 0,0 | ||
| 165 | #endif | ||
| 166 | }; | ||
| 167 | |||
diff --git a/src/lib/libcrypto/hmac/hm_pmeth.c b/src/lib/libcrypto/hmac/hm_pmeth.c new file mode 100644 index 0000000000..0daa44511d --- /dev/null +++ b/src/lib/libcrypto/hmac/hm_pmeth.c | |||
| @@ -0,0 +1,271 @@ | |||
| 1 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | ||
| 2 | * project 2007. | ||
| 3 | */ | ||
| 4 | /* ==================================================================== | ||
| 5 | * Copyright (c) 2007 The OpenSSL Project. All rights reserved. | ||
| 6 | * | ||
| 7 | * Redistribution and use in source and binary forms, with or without | ||
| 8 | * modification, are permitted provided that the following conditions | ||
| 9 | * are met: | ||
| 10 | * | ||
| 11 | * 1. Redistributions of source code must retain the above copyright | ||
| 12 | * notice, this list of conditions and the following disclaimer. | ||
| 13 | * | ||
| 14 | * 2. Redistributions in binary form must reproduce the above copyright | ||
| 15 | * notice, this list of conditions and the following disclaimer in | ||
| 16 | * the documentation and/or other materials provided with the | ||
| 17 | * distribution. | ||
| 18 | * | ||
| 19 | * 3. All advertising materials mentioning features or use of this | ||
| 20 | * software must display the following acknowledgment: | ||
| 21 | * "This product includes software developed by the OpenSSL Project | ||
| 22 | * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | ||
| 23 | * | ||
| 24 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
| 25 | * endorse or promote products derived from this software without | ||
| 26 | * prior written permission. For written permission, please contact | ||
| 27 | * licensing@OpenSSL.org. | ||
| 28 | * | ||
| 29 | * 5. Products derived from this software may not be called "OpenSSL" | ||
| 30 | * nor may "OpenSSL" appear in their names without prior written | ||
| 31 | * permission of the OpenSSL Project. | ||
| 32 | * | ||
| 33 | * 6. Redistributions of any form whatsoever must retain the following | ||
| 34 | * acknowledgment: | ||
| 35 | * "This product includes software developed by the OpenSSL Project | ||
| 36 | * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | ||
| 37 | * | ||
| 38 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
| 39 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
| 40 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
| 41 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
| 42 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
| 43 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
| 44 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
| 45 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
| 46 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
| 47 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
| 48 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
| 49 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
| 50 | * ==================================================================== | ||
| 51 | * | ||
| 52 | * This product includes cryptographic software written by Eric Young | ||
| 53 | * (eay@cryptsoft.com). This product includes software written by Tim | ||
| 54 | * Hudson (tjh@cryptsoft.com). | ||
| 55 | * | ||
| 56 | */ | ||
| 57 | |||
| 58 | #include <stdio.h> | ||
| 59 | #include "cryptlib.h" | ||
| 60 | #include <openssl/x509.h> | ||
| 61 | #include <openssl/x509v3.h> | ||
| 62 | #include <openssl/evp.h> | ||
| 63 | #include <openssl/hmac.h> | ||
| 64 | #include "evp_locl.h" | ||
| 65 | |||
| 66 | /* HMAC pkey context structure */ | ||
| 67 | |||
| 68 | typedef struct | ||
| 69 | { | ||
| 70 | const EVP_MD *md; /* MD for HMAC use */ | ||
| 71 | ASN1_OCTET_STRING ktmp; /* Temp storage for key */ | ||
| 72 | HMAC_CTX ctx; | ||
| 73 | } HMAC_PKEY_CTX; | ||
| 74 | |||
| 75 | static int pkey_hmac_init(EVP_PKEY_CTX *ctx) | ||
| 76 | { | ||
| 77 | HMAC_PKEY_CTX *hctx; | ||
| 78 | hctx = OPENSSL_malloc(sizeof(HMAC_PKEY_CTX)); | ||
| 79 | if (!hctx) | ||
| 80 | return 0; | ||
| 81 | hctx->md = NULL; | ||
| 82 | hctx->ktmp.data = NULL; | ||
| 83 | hctx->ktmp.length = 0; | ||
| 84 | hctx->ktmp.flags = 0; | ||
| 85 | hctx->ktmp.type = V_ASN1_OCTET_STRING; | ||
| 86 | HMAC_CTX_init(&hctx->ctx); | ||
| 87 | |||
| 88 | ctx->data = hctx; | ||
| 89 | ctx->keygen_info_count = 0; | ||
| 90 | |||
| 91 | return 1; | ||
| 92 | } | ||
| 93 | |||
| 94 | static int pkey_hmac_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src) | ||
| 95 | { | ||
| 96 | HMAC_PKEY_CTX *sctx, *dctx; | ||
| 97 | if (!pkey_hmac_init(dst)) | ||
| 98 | return 0; | ||
| 99 | sctx = src->data; | ||
| 100 | dctx = dst->data; | ||
| 101 | dctx->md = sctx->md; | ||
| 102 | HMAC_CTX_init(&dctx->ctx); | ||
| 103 | if (!HMAC_CTX_copy(&dctx->ctx, &sctx->ctx)) | ||
| 104 | return 0; | ||
| 105 | if (sctx->ktmp.data) | ||
| 106 | { | ||
| 107 | if (!ASN1_OCTET_STRING_set(&dctx->ktmp, | ||
| 108 | sctx->ktmp.data, sctx->ktmp.length)) | ||
| 109 | return 0; | ||
| 110 | } | ||
| 111 | return 1; | ||
| 112 | } | ||
| 113 | |||
| 114 | static void pkey_hmac_cleanup(EVP_PKEY_CTX *ctx) | ||
| 115 | { | ||
| 116 | HMAC_PKEY_CTX *hctx = ctx->data; | ||
| 117 | HMAC_CTX_cleanup(&hctx->ctx); | ||
| 118 | if (hctx->ktmp.data) | ||
| 119 | { | ||
| 120 | if (hctx->ktmp.length) | ||
| 121 | OPENSSL_cleanse(hctx->ktmp.data, hctx->ktmp.length); | ||
| 122 | OPENSSL_free(hctx->ktmp.data); | ||
| 123 | hctx->ktmp.data = NULL; | ||
| 124 | } | ||
| 125 | OPENSSL_free(hctx); | ||
| 126 | } | ||
| 127 | |||
| 128 | static int pkey_hmac_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey) | ||
| 129 | { | ||
| 130 | ASN1_OCTET_STRING *hkey = NULL; | ||
| 131 | HMAC_PKEY_CTX *hctx = ctx->data; | ||
| 132 | if (!hctx->ktmp.data) | ||
| 133 | return 0; | ||
| 134 | hkey = ASN1_OCTET_STRING_dup(&hctx->ktmp); | ||
| 135 | if (!hkey) | ||
| 136 | return 0; | ||
| 137 | EVP_PKEY_assign(pkey, EVP_PKEY_HMAC, hkey); | ||
| 138 | |||
| 139 | return 1; | ||
| 140 | } | ||
| 141 | |||
| 142 | static int int_update(EVP_MD_CTX *ctx,const void *data,size_t count) | ||
| 143 | { | ||
| 144 | HMAC_PKEY_CTX *hctx = ctx->pctx->data; | ||
| 145 | if (!HMAC_Update(&hctx->ctx, data, count)) | ||
| 146 | return 0; | ||
| 147 | return 1; | ||
| 148 | } | ||
| 149 | |||
| 150 | static int hmac_signctx_init(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx) | ||
| 151 | { | ||
| 152 | HMAC_PKEY_CTX *hctx = ctx->data; | ||
| 153 | HMAC_CTX_set_flags(&hctx->ctx, mctx->flags & ~EVP_MD_CTX_FLAG_NO_INIT); | ||
| 154 | EVP_MD_CTX_set_flags(mctx, EVP_MD_CTX_FLAG_NO_INIT); | ||
| 155 | mctx->update = int_update; | ||
| 156 | return 1; | ||
| 157 | } | ||
| 158 | |||
| 159 | static int hmac_signctx(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen, | ||
| 160 | EVP_MD_CTX *mctx) | ||
| 161 | { | ||
| 162 | unsigned int hlen; | ||
| 163 | HMAC_PKEY_CTX *hctx = ctx->data; | ||
| 164 | int l = EVP_MD_CTX_size(mctx); | ||
| 165 | |||
| 166 | if (l < 0) | ||
| 167 | return 0; | ||
| 168 | *siglen = l; | ||
| 169 | if (!sig) | ||
| 170 | return 1; | ||
| 171 | |||
| 172 | if (!HMAC_Final(&hctx->ctx, sig, &hlen)) | ||
| 173 | return 0; | ||
| 174 | *siglen = (size_t)hlen; | ||
| 175 | return 1; | ||
| 176 | } | ||
| 177 | |||
| 178 | static int pkey_hmac_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2) | ||
| 179 | { | ||
| 180 | HMAC_PKEY_CTX *hctx = ctx->data; | ||
| 181 | ASN1_OCTET_STRING *key; | ||
| 182 | switch (type) | ||
| 183 | { | ||
| 184 | |||
| 185 | case EVP_PKEY_CTRL_SET_MAC_KEY: | ||
| 186 | if ((!p2 && p1 > 0) || (p1 < -1)) | ||
| 187 | return 0; | ||
| 188 | if (!ASN1_OCTET_STRING_set(&hctx->ktmp, p2, p1)) | ||
| 189 | return 0; | ||
| 190 | break; | ||
| 191 | |||
| 192 | case EVP_PKEY_CTRL_MD: | ||
| 193 | hctx->md = p2; | ||
| 194 | break; | ||
| 195 | |||
| 196 | case EVP_PKEY_CTRL_DIGESTINIT: | ||
| 197 | key = (ASN1_OCTET_STRING *)ctx->pkey->pkey.ptr; | ||
| 198 | if (!HMAC_Init_ex(&hctx->ctx, key->data, key->length, hctx->md, | ||
| 199 | ctx->engine)) | ||
| 200 | return 0; | ||
| 201 | break; | ||
| 202 | |||
| 203 | default: | ||
| 204 | return -2; | ||
| 205 | |||
| 206 | } | ||
| 207 | return 1; | ||
| 208 | } | ||
| 209 | |||
| 210 | static int pkey_hmac_ctrl_str(EVP_PKEY_CTX *ctx, | ||
| 211 | const char *type, const char *value) | ||
| 212 | { | ||
| 213 | if (!value) | ||
| 214 | { | ||
| 215 | return 0; | ||
| 216 | } | ||
| 217 | if (!strcmp(type, "key")) | ||
| 218 | { | ||
| 219 | void *p = (void *)value; | ||
| 220 | return pkey_hmac_ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, | ||
| 221 | -1, p); | ||
| 222 | } | ||
| 223 | if (!strcmp(type, "hexkey")) | ||
| 224 | { | ||
| 225 | unsigned char *key; | ||
| 226 | int r; | ||
| 227 | long keylen; | ||
| 228 | key = string_to_hex(value, &keylen); | ||
| 229 | if (!key) | ||
| 230 | return 0; | ||
| 231 | r = pkey_hmac_ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, keylen, key); | ||
| 232 | OPENSSL_free(key); | ||
| 233 | return r; | ||
| 234 | } | ||
| 235 | return -2; | ||
| 236 | } | ||
| 237 | |||
| 238 | const EVP_PKEY_METHOD hmac_pkey_meth = | ||
| 239 | { | ||
| 240 | EVP_PKEY_HMAC, | ||
| 241 | 0, | ||
| 242 | pkey_hmac_init, | ||
| 243 | pkey_hmac_copy, | ||
| 244 | pkey_hmac_cleanup, | ||
| 245 | |||
| 246 | 0, 0, | ||
| 247 | |||
| 248 | 0, | ||
| 249 | pkey_hmac_keygen, | ||
| 250 | |||
| 251 | 0, 0, | ||
| 252 | |||
| 253 | 0, 0, | ||
| 254 | |||
| 255 | 0,0, | ||
| 256 | |||
| 257 | hmac_signctx_init, | ||
| 258 | hmac_signctx, | ||
| 259 | |||
| 260 | 0,0, | ||
| 261 | |||
| 262 | 0,0, | ||
| 263 | |||
| 264 | 0,0, | ||
| 265 | |||
| 266 | 0,0, | ||
| 267 | |||
| 268 | pkey_hmac_ctrl, | ||
| 269 | pkey_hmac_ctrl_str | ||
| 270 | |||
| 271 | }; | ||
diff --git a/src/lib/libcrypto/hmac/hmac.c b/src/lib/libcrypto/hmac/hmac.c new file mode 100644 index 0000000000..6c98fc43a3 --- /dev/null +++ b/src/lib/libcrypto/hmac/hmac.c | |||
| @@ -0,0 +1,214 @@ | |||
| 1 | /* crypto/hmac/hmac.c */ | ||
| 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | ||
| 3 | * All rights reserved. | ||
| 4 | * | ||
| 5 | * This package is an SSL implementation written | ||
| 6 | * by Eric Young (eay@cryptsoft.com). | ||
| 7 | * The implementation was written so as to conform with Netscapes SSL. | ||
| 8 | * | ||
| 9 | * This library is free for commercial and non-commercial use as long as | ||
| 10 | * the following conditions are aheared to. The following conditions | ||
| 11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
| 12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
| 13 | * included with this distribution is covered by the same copyright terms | ||
| 14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
| 15 | * | ||
| 16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
| 17 | * the code are not to be removed. | ||
| 18 | * If this package is used in a product, Eric Young should be given attribution | ||
| 19 | * as the author of the parts of the library used. | ||
| 20 | * This can be in the form of a textual message at program startup or | ||
| 21 | * in documentation (online or textual) provided with the package. | ||
| 22 | * | ||
| 23 | * Redistribution and use in source and binary forms, with or without | ||
| 24 | * modification, are permitted provided that the following conditions | ||
| 25 | * are met: | ||
| 26 | * 1. Redistributions of source code must retain the copyright | ||
| 27 | * notice, this list of conditions and the following disclaimer. | ||
| 28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
| 29 | * notice, this list of conditions and the following disclaimer in the | ||
| 30 | * documentation and/or other materials provided with the distribution. | ||
| 31 | * 3. All advertising materials mentioning features or use of this software | ||
| 32 | * must display the following acknowledgement: | ||
| 33 | * "This product includes cryptographic software written by | ||
| 34 | * Eric Young (eay@cryptsoft.com)" | ||
| 35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
| 36 | * being used are not cryptographic related :-). | ||
| 37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
| 38 | * the apps directory (application code) you must include an acknowledgement: | ||
| 39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
| 40 | * | ||
| 41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
| 42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
| 43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
| 44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
| 45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
| 46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
| 47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
| 48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
| 49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
| 50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
| 51 | * SUCH DAMAGE. | ||
| 52 | * | ||
| 53 | * The licence and distribution terms for any publically available version or | ||
| 54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
| 55 | * copied and put under another distribution licence | ||
| 56 | * [including the GNU Public Licence.] | ||
| 57 | */ | ||
| 58 | #include <stdio.h> | ||
| 59 | #include <stdlib.h> | ||
| 60 | #include <string.h> | ||
| 61 | #include "cryptlib.h" | ||
| 62 | #include <openssl/hmac.h> | ||
| 63 | |||
| 64 | int HMAC_Init_ex(HMAC_CTX *ctx, const void *key, int len, | ||
| 65 | const EVP_MD *md, ENGINE *impl) | ||
| 66 | { | ||
| 67 | int i,j,reset=0; | ||
| 68 | unsigned char pad[HMAC_MAX_MD_CBLOCK]; | ||
| 69 | |||
| 70 | if (md != NULL) | ||
| 71 | { | ||
| 72 | reset=1; | ||
| 73 | ctx->md=md; | ||
| 74 | } | ||
| 75 | else | ||
| 76 | md=ctx->md; | ||
| 77 | |||
| 78 | if (key != NULL) | ||
| 79 | { | ||
| 80 | reset=1; | ||
| 81 | j=EVP_MD_block_size(md); | ||
| 82 | OPENSSL_assert(j <= (int)sizeof(ctx->key)); | ||
| 83 | if (j < len) | ||
| 84 | { | ||
| 85 | if (!EVP_DigestInit_ex(&ctx->md_ctx,md, impl)) | ||
| 86 | goto err; | ||
| 87 | if (!EVP_DigestUpdate(&ctx->md_ctx,key,len)) | ||
| 88 | goto err; | ||
| 89 | if (!EVP_DigestFinal_ex(&(ctx->md_ctx),ctx->key, | ||
| 90 | &ctx->key_length)) | ||
| 91 | goto err; | ||
| 92 | } | ||
| 93 | else | ||
| 94 | { | ||
| 95 | OPENSSL_assert(len>=0 && len<=(int)sizeof(ctx->key)); | ||
| 96 | memcpy(ctx->key,key,len); | ||
| 97 | ctx->key_length=len; | ||
| 98 | } | ||
| 99 | if(ctx->key_length != HMAC_MAX_MD_CBLOCK) | ||
| 100 | memset(&ctx->key[ctx->key_length], 0, | ||
| 101 | HMAC_MAX_MD_CBLOCK - ctx->key_length); | ||
| 102 | } | ||
| 103 | |||
| 104 | if (reset) | ||
| 105 | { | ||
| 106 | for (i=0; i<HMAC_MAX_MD_CBLOCK; i++) | ||
| 107 | pad[i]=0x36^ctx->key[i]; | ||
| 108 | if (!EVP_DigestInit_ex(&ctx->i_ctx,md, impl)) | ||
| 109 | goto err; | ||
| 110 | if (!EVP_DigestUpdate(&ctx->i_ctx,pad,EVP_MD_block_size(md))) | ||
| 111 | goto err; | ||
| 112 | |||
| 113 | for (i=0; i<HMAC_MAX_MD_CBLOCK; i++) | ||
| 114 | pad[i]=0x5c^ctx->key[i]; | ||
| 115 | if (!EVP_DigestInit_ex(&ctx->o_ctx,md, impl)) | ||
| 116 | goto err; | ||
| 117 | if (!EVP_DigestUpdate(&ctx->o_ctx,pad,EVP_MD_block_size(md))) | ||
| 118 | goto err; | ||
| 119 | } | ||
| 120 | if (!EVP_MD_CTX_copy_ex(&ctx->md_ctx,&ctx->i_ctx)) | ||
| 121 | goto err; | ||
| 122 | return 1; | ||
| 123 | err: | ||
| 124 | return 0; | ||
| 125 | } | ||
| 126 | |||
| 127 | int HMAC_Init(HMAC_CTX *ctx, const void *key, int len, const EVP_MD *md) | ||
| 128 | { | ||
| 129 | if(key && md) | ||
| 130 | HMAC_CTX_init(ctx); | ||
| 131 | return HMAC_Init_ex(ctx,key,len,md, NULL); | ||
| 132 | } | ||
| 133 | |||
| 134 | int HMAC_Update(HMAC_CTX *ctx, const unsigned char *data, size_t len) | ||
| 135 | { | ||
| 136 | return EVP_DigestUpdate(&ctx->md_ctx,data,len); | ||
| 137 | } | ||
| 138 | |||
| 139 | int HMAC_Final(HMAC_CTX *ctx, unsigned char *md, unsigned int *len) | ||
| 140 | { | ||
| 141 | unsigned int i; | ||
| 142 | unsigned char buf[EVP_MAX_MD_SIZE]; | ||
| 143 | |||
| 144 | if (!EVP_DigestFinal_ex(&ctx->md_ctx,buf,&i)) | ||
| 145 | goto err; | ||
| 146 | if (!EVP_MD_CTX_copy_ex(&ctx->md_ctx,&ctx->o_ctx)) | ||
| 147 | goto err; | ||
| 148 | if (!EVP_DigestUpdate(&ctx->md_ctx,buf,i)) | ||
| 149 | goto err; | ||
| 150 | if (!EVP_DigestFinal_ex(&ctx->md_ctx,md,len)) | ||
| 151 | goto err; | ||
| 152 | return 1; | ||
| 153 | err: | ||
| 154 | return 0; | ||
| 155 | } | ||
| 156 | |||
| 157 | void HMAC_CTX_init(HMAC_CTX *ctx) | ||
| 158 | { | ||
| 159 | EVP_MD_CTX_init(&ctx->i_ctx); | ||
| 160 | EVP_MD_CTX_init(&ctx->o_ctx); | ||
| 161 | EVP_MD_CTX_init(&ctx->md_ctx); | ||
| 162 | } | ||
| 163 | |||
| 164 | int HMAC_CTX_copy(HMAC_CTX *dctx, HMAC_CTX *sctx) | ||
| 165 | { | ||
| 166 | if (!EVP_MD_CTX_copy(&dctx->i_ctx, &sctx->i_ctx)) | ||
| 167 | goto err; | ||
| 168 | if (!EVP_MD_CTX_copy(&dctx->o_ctx, &sctx->o_ctx)) | ||
| 169 | goto err; | ||
| 170 | if (!EVP_MD_CTX_copy(&dctx->md_ctx, &sctx->md_ctx)) | ||
| 171 | goto err; | ||
| 172 | memcpy(dctx->key, sctx->key, HMAC_MAX_MD_CBLOCK); | ||
| 173 | dctx->key_length = sctx->key_length; | ||
| 174 | dctx->md = sctx->md; | ||
| 175 | return 1; | ||
| 176 | err: | ||
| 177 | return 0; | ||
| 178 | } | ||
| 179 | |||
| 180 | void HMAC_CTX_cleanup(HMAC_CTX *ctx) | ||
| 181 | { | ||
| 182 | EVP_MD_CTX_cleanup(&ctx->i_ctx); | ||
| 183 | EVP_MD_CTX_cleanup(&ctx->o_ctx); | ||
| 184 | EVP_MD_CTX_cleanup(&ctx->md_ctx); | ||
| 185 | memset(ctx,0,sizeof *ctx); | ||
| 186 | } | ||
| 187 | |||
| 188 | unsigned char *HMAC(const EVP_MD *evp_md, const void *key, int key_len, | ||
| 189 | const unsigned char *d, size_t n, unsigned char *md, | ||
| 190 | unsigned int *md_len) | ||
| 191 | { | ||
| 192 | HMAC_CTX c; | ||
| 193 | static unsigned char m[EVP_MAX_MD_SIZE]; | ||
| 194 | |||
| 195 | if (md == NULL) md=m; | ||
| 196 | HMAC_CTX_init(&c); | ||
| 197 | if (!HMAC_Init(&c,key,key_len,evp_md)) | ||
| 198 | goto err; | ||
| 199 | if (!HMAC_Update(&c,d,n)) | ||
| 200 | goto err; | ||
| 201 | if (!HMAC_Final(&c,md,md_len)) | ||
| 202 | goto err; | ||
| 203 | HMAC_CTX_cleanup(&c); | ||
| 204 | return md; | ||
| 205 | err: | ||
| 206 | return NULL; | ||
| 207 | } | ||
| 208 | |||
| 209 | void HMAC_CTX_set_flags(HMAC_CTX *ctx, unsigned long flags) | ||
| 210 | { | ||
| 211 | EVP_MD_CTX_set_flags(&ctx->i_ctx, flags); | ||
| 212 | EVP_MD_CTX_set_flags(&ctx->o_ctx, flags); | ||
| 213 | EVP_MD_CTX_set_flags(&ctx->md_ctx, flags); | ||
| 214 | } | ||
diff --git a/src/lib/libcrypto/hmac/hmac.h b/src/lib/libcrypto/hmac/hmac.h new file mode 100644 index 0000000000..1be0022190 --- /dev/null +++ b/src/lib/libcrypto/hmac/hmac.h | |||
| @@ -0,0 +1,110 @@ | |||
| 1 | /* crypto/hmac/hmac.h */ | ||
| 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | ||
| 3 | * All rights reserved. | ||
| 4 | * | ||
| 5 | * This package is an SSL implementation written | ||
| 6 | * by Eric Young (eay@cryptsoft.com). | ||
| 7 | * The implementation was written so as to conform with Netscapes SSL. | ||
| 8 | * | ||
| 9 | * This library is free for commercial and non-commercial use as long as | ||
| 10 | * the following conditions are aheared to. The following conditions | ||
| 11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
| 12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
| 13 | * included with this distribution is covered by the same copyright terms | ||
| 14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
| 15 | * | ||
| 16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
| 17 | * the code are not to be removed. | ||
| 18 | * If this package is used in a product, Eric Young should be given attribution | ||
| 19 | * as the author of the parts of the library used. | ||
| 20 | * This can be in the form of a textual message at program startup or | ||
| 21 | * in documentation (online or textual) provided with the package. | ||
| 22 | * | ||
| 23 | * Redistribution and use in source and binary forms, with or without | ||
| 24 | * modification, are permitted provided that the following conditions | ||
| 25 | * are met: | ||
| 26 | * 1. Redistributions of source code must retain the copyright | ||
| 27 | * notice, this list of conditions and the following disclaimer. | ||
| 28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
| 29 | * notice, this list of conditions and the following disclaimer in the | ||
| 30 | * documentation and/or other materials provided with the distribution. | ||
| 31 | * 3. All advertising materials mentioning features or use of this software | ||
| 32 | * must display the following acknowledgement: | ||
| 33 | * "This product includes cryptographic software written by | ||
| 34 | * Eric Young (eay@cryptsoft.com)" | ||
| 35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
| 36 | * being used are not cryptographic related :-). | ||
| 37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
| 38 | * the apps directory (application code) you must include an acknowledgement: | ||
| 39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
| 40 | * | ||
| 41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
| 42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
| 43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
| 44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
| 45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
| 46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
| 47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
| 48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
| 49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
| 50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
| 51 | * SUCH DAMAGE. | ||
| 52 | * | ||
| 53 | * The licence and distribution terms for any publically available version or | ||
| 54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
| 55 | * copied and put under another distribution licence | ||
| 56 | * [including the GNU Public Licence.] | ||
| 57 | */ | ||
| 58 | #ifndef HEADER_HMAC_H | ||
| 59 | #define HEADER_HMAC_H | ||
| 60 | |||
| 61 | #include <openssl/opensslconf.h> | ||
| 62 | |||
| 63 | #ifdef OPENSSL_NO_HMAC | ||
| 64 | #error HMAC is disabled. | ||
| 65 | #endif | ||
| 66 | |||
| 67 | #include <openssl/evp.h> | ||
| 68 | |||
| 69 | #define HMAC_MAX_MD_CBLOCK 128 /* largest known is SHA512 */ | ||
| 70 | |||
| 71 | #ifdef __cplusplus | ||
| 72 | extern "C" { | ||
| 73 | #endif | ||
| 74 | |||
| 75 | typedef struct hmac_ctx_st | ||
| 76 | { | ||
| 77 | const EVP_MD *md; | ||
| 78 | EVP_MD_CTX md_ctx; | ||
| 79 | EVP_MD_CTX i_ctx; | ||
| 80 | EVP_MD_CTX o_ctx; | ||
| 81 | unsigned int key_length; | ||
| 82 | unsigned char key[HMAC_MAX_MD_CBLOCK]; | ||
| 83 | } HMAC_CTX; | ||
| 84 | |||
| 85 | #define HMAC_size(e) (EVP_MD_size((e)->md)) | ||
| 86 | |||
| 87 | |||
| 88 | void HMAC_CTX_init(HMAC_CTX *ctx); | ||
| 89 | void HMAC_CTX_cleanup(HMAC_CTX *ctx); | ||
| 90 | |||
| 91 | #define HMAC_cleanup(ctx) HMAC_CTX_cleanup(ctx) /* deprecated */ | ||
| 92 | |||
| 93 | int HMAC_Init(HMAC_CTX *ctx, const void *key, int len, | ||
| 94 | const EVP_MD *md); /* deprecated */ | ||
| 95 | int HMAC_Init_ex(HMAC_CTX *ctx, const void *key, int len, | ||
| 96 | const EVP_MD *md, ENGINE *impl); | ||
| 97 | int HMAC_Update(HMAC_CTX *ctx, const unsigned char *data, size_t len); | ||
| 98 | int HMAC_Final(HMAC_CTX *ctx, unsigned char *md, unsigned int *len); | ||
| 99 | unsigned char *HMAC(const EVP_MD *evp_md, const void *key, int key_len, | ||
| 100 | const unsigned char *d, size_t n, unsigned char *md, | ||
| 101 | unsigned int *md_len); | ||
| 102 | int HMAC_CTX_copy(HMAC_CTX *dctx, HMAC_CTX *sctx); | ||
| 103 | |||
| 104 | void HMAC_CTX_set_flags(HMAC_CTX *ctx, unsigned long flags); | ||
| 105 | |||
| 106 | #ifdef __cplusplus | ||
| 107 | } | ||
| 108 | #endif | ||
| 109 | |||
| 110 | #endif | ||
diff --git a/src/lib/libcrypto/hmac/hmactest.c b/src/lib/libcrypto/hmac/hmactest.c new file mode 100644 index 0000000000..1b906b81af --- /dev/null +++ b/src/lib/libcrypto/hmac/hmactest.c | |||
| @@ -0,0 +1,175 @@ | |||
| 1 | /* crypto/hmac/hmactest.c */ | ||
| 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | ||
| 3 | * All rights reserved. | ||
| 4 | * | ||
| 5 | * This package is an SSL implementation written | ||
| 6 | * by Eric Young (eay@cryptsoft.com). | ||
| 7 | * The implementation was written so as to conform with Netscapes SSL. | ||
| 8 | * | ||
| 9 | * This library is free for commercial and non-commercial use as long as | ||
| 10 | * the following conditions are aheared to. The following conditions | ||
| 11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
| 12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
| 13 | * included with this distribution is covered by the same copyright terms | ||
| 14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
| 15 | * | ||
| 16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
| 17 | * the code are not to be removed. | ||
| 18 | * If this package is used in a product, Eric Young should be given attribution | ||
| 19 | * as the author of the parts of the library used. | ||
| 20 | * This can be in the form of a textual message at program startup or | ||
| 21 | * in documentation (online or textual) provided with the package. | ||
| 22 | * | ||
| 23 | * Redistribution and use in source and binary forms, with or without | ||
| 24 | * modification, are permitted provided that the following conditions | ||
| 25 | * are met: | ||
| 26 | * 1. Redistributions of source code must retain the copyright | ||
| 27 | * notice, this list of conditions and the following disclaimer. | ||
| 28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
| 29 | * notice, this list of conditions and the following disclaimer in the | ||
| 30 | * documentation and/or other materials provided with the distribution. | ||
| 31 | * 3. All advertising materials mentioning features or use of this software | ||
| 32 | * must display the following acknowledgement: | ||
| 33 | * "This product includes cryptographic software written by | ||
| 34 | * Eric Young (eay@cryptsoft.com)" | ||
| 35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
| 36 | * being used are not cryptographic related :-). | ||
| 37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
| 38 | * the apps directory (application code) you must include an acknowledgement: | ||
| 39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
| 40 | * | ||
| 41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
| 42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
| 43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
| 44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
| 45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
| 46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
| 47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
| 48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
| 49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
| 50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
| 51 | * SUCH DAMAGE. | ||
| 52 | * | ||
| 53 | * The licence and distribution terms for any publically available version or | ||
| 54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
| 55 | * copied and put under another distribution licence | ||
| 56 | * [including the GNU Public Licence.] | ||
| 57 | */ | ||
| 58 | |||
| 59 | #include <stdio.h> | ||
| 60 | #include <string.h> | ||
| 61 | #include <stdlib.h> | ||
| 62 | |||
| 63 | #include "../e_os.h" | ||
| 64 | |||
| 65 | #ifdef OPENSSL_NO_HMAC | ||
| 66 | int main(int argc, char *argv[]) | ||
| 67 | { | ||
| 68 | printf("No HMAC support\n"); | ||
| 69 | return(0); | ||
| 70 | } | ||
| 71 | #else | ||
| 72 | #include <openssl/hmac.h> | ||
| 73 | #ifndef OPENSSL_NO_MD5 | ||
| 74 | #include <openssl/md5.h> | ||
| 75 | #endif | ||
| 76 | |||
| 77 | #ifdef CHARSET_EBCDIC | ||
| 78 | #include <openssl/ebcdic.h> | ||
| 79 | #endif | ||
| 80 | |||
| 81 | #ifndef OPENSSL_NO_MD5 | ||
| 82 | static struct test_st | ||
| 83 | { | ||
| 84 | unsigned char key[16]; | ||
| 85 | int key_len; | ||
| 86 | unsigned char data[64]; | ||
| 87 | int data_len; | ||
| 88 | unsigned char *digest; | ||
| 89 | } test[4]={ | ||
| 90 | { "", | ||
| 91 | 0, | ||
| 92 | "More text test vectors to stuff up EBCDIC machines :-)", | ||
| 93 | 54, | ||
| 94 | (unsigned char *)"e9139d1e6ee064ef8cf514fc7dc83e86", | ||
| 95 | },{ {0x0b,0x0b,0x0b,0x0b,0x0b,0x0b,0x0b,0x0b, | ||
| 96 | 0x0b,0x0b,0x0b,0x0b,0x0b,0x0b,0x0b,0x0b,}, | ||
| 97 | 16, | ||
| 98 | "Hi There", | ||
| 99 | 8, | ||
| 100 | (unsigned char *)"9294727a3638bb1c13f48ef8158bfc9d", | ||
| 101 | },{ "Jefe", | ||
| 102 | 4, | ||
| 103 | "what do ya want for nothing?", | ||
| 104 | 28, | ||
| 105 | (unsigned char *)"750c783e6ab0b503eaa86e310a5db738", | ||
| 106 | },{ | ||
| 107 | {0xaa,0xaa,0xaa,0xaa,0xaa,0xaa,0xaa,0xaa, | ||
| 108 | 0xaa,0xaa,0xaa,0xaa,0xaa,0xaa,0xaa,0xaa,}, | ||
| 109 | 16, | ||
| 110 | {0xdd,0xdd,0xdd,0xdd,0xdd,0xdd,0xdd,0xdd, | ||
| 111 | 0xdd,0xdd,0xdd,0xdd,0xdd,0xdd,0xdd,0xdd, | ||
| 112 | 0xdd,0xdd,0xdd,0xdd,0xdd,0xdd,0xdd,0xdd, | ||
| 113 | 0xdd,0xdd,0xdd,0xdd,0xdd,0xdd,0xdd,0xdd, | ||
| 114 | 0xdd,0xdd,0xdd,0xdd,0xdd,0xdd,0xdd,0xdd, | ||
| 115 | 0xdd,0xdd,0xdd,0xdd,0xdd,0xdd,0xdd,0xdd, | ||
| 116 | 0xdd,0xdd}, | ||
| 117 | 50, | ||
| 118 | (unsigned char *)"56be34521d144c88dbb8c733f0e8b3f6", | ||
| 119 | }, | ||
| 120 | }; | ||
| 121 | #endif | ||
| 122 | |||
| 123 | static char *pt(unsigned char *md); | ||
| 124 | int main(int argc, char *argv[]) | ||
| 125 | { | ||
| 126 | #ifndef OPENSSL_NO_MD5 | ||
| 127 | int i; | ||
| 128 | char *p; | ||
| 129 | #endif | ||
| 130 | int err=0; | ||
| 131 | |||
| 132 | #ifdef OPENSSL_NO_MD5 | ||
| 133 | printf("test skipped: MD5 disabled\n"); | ||
| 134 | #else | ||
| 135 | |||
| 136 | #ifdef CHARSET_EBCDIC | ||
| 137 | ebcdic2ascii(test[0].data, test[0].data, test[0].data_len); | ||
| 138 | ebcdic2ascii(test[1].data, test[1].data, test[1].data_len); | ||
| 139 | ebcdic2ascii(test[2].key, test[2].key, test[2].key_len); | ||
| 140 | ebcdic2ascii(test[2].data, test[2].data, test[2].data_len); | ||
| 141 | #endif | ||
| 142 | |||
| 143 | for (i=0; i<4; i++) | ||
| 144 | { | ||
| 145 | p=pt(HMAC(EVP_md5(), | ||
| 146 | test[i].key, test[i].key_len, | ||
| 147 | test[i].data, test[i].data_len, | ||
| 148 | NULL,NULL)); | ||
| 149 | |||
| 150 | if (strcmp(p,(char *)test[i].digest) != 0) | ||
| 151 | { | ||
| 152 | printf("error calculating HMAC on %d entry'\n",i); | ||
| 153 | printf("got %s instead of %s\n",p,test[i].digest); | ||
| 154 | err++; | ||
| 155 | } | ||
| 156 | else | ||
| 157 | printf("test %d ok\n",i); | ||
| 158 | } | ||
| 159 | #endif /* OPENSSL_NO_MD5 */ | ||
| 160 | EXIT(err); | ||
| 161 | return(0); | ||
| 162 | } | ||
| 163 | |||
| 164 | #ifndef OPENSSL_NO_MD5 | ||
| 165 | static char *pt(unsigned char *md) | ||
| 166 | { | ||
| 167 | int i; | ||
| 168 | static char buf[80]; | ||
| 169 | |||
| 170 | for (i=0; i<MD5_DIGEST_LENGTH; i++) | ||
| 171 | sprintf(&(buf[i*2]),"%02x",md[i]); | ||
| 172 | return(buf); | ||
| 173 | } | ||
| 174 | #endif | ||
| 175 | #endif | ||
