| Index: mozilla/security/nss/lib/freebl/alghmac.c
|
| ===================================================================
|
| --- mozilla/security/nss/lib/freebl/alghmac.c (revision 191424)
|
| +++ mozilla/security/nss/lib/freebl/alghmac.c (working copy)
|
| @@ -1,165 +0,0 @@
|
| -/* This Source Code Form is subject to the terms of the Mozilla Public
|
| - * License, v. 2.0. If a copy of the MPL was not distributed with this
|
| - * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
| -
|
| -#ifdef FREEBL_NO_DEPEND
|
| -#include "stubs.h"
|
| -#endif
|
| -
|
| -#include "secport.h"
|
| -#include "hasht.h"
|
| -#include "blapit.h"
|
| -#include "alghmac.h"
|
| -#include "secerr.h"
|
| -
|
| -#define HMAC_PAD_SIZE HASH_BLOCK_LENGTH_MAX
|
| -
|
| -struct HMACContextStr {
|
| - void *hash;
|
| - const SECHashObject *hashobj;
|
| - PRBool wasAllocated;
|
| - unsigned char ipad[HMAC_PAD_SIZE];
|
| - unsigned char opad[HMAC_PAD_SIZE];
|
| -};
|
| -
|
| -void
|
| -HMAC_Destroy(HMACContext *cx, PRBool freeit)
|
| -{
|
| - if (cx == NULL)
|
| - return;
|
| -
|
| - PORT_Assert(!freeit == !cx->wasAllocated);
|
| - if (cx->hash != NULL) {
|
| - cx->hashobj->destroy(cx->hash, PR_TRUE);
|
| - PORT_Memset(cx, 0, sizeof *cx);
|
| - }
|
| - if (freeit)
|
| - PORT_Free(cx);
|
| -}
|
| -
|
| -SECStatus
|
| -HMAC_Init( HMACContext * cx, const SECHashObject *hash_obj,
|
| - const unsigned char *secret, unsigned int secret_len, PRBool isFIPS)
|
| -{
|
| - unsigned int i;
|
| - unsigned char hashed_secret[HASH_LENGTH_MAX];
|
| -
|
| - /* required by FIPS 198 Section 3 */
|
| - if (isFIPS && secret_len < hash_obj->length/2) {
|
| - PORT_SetError(SEC_ERROR_INVALID_ARGS);
|
| - return SECFailure;
|
| - }
|
| - if (cx == NULL) {
|
| - PORT_SetError(SEC_ERROR_INVALID_ARGS);
|
| - return SECFailure;
|
| - }
|
| - cx->wasAllocated = PR_FALSE;
|
| - cx->hashobj = hash_obj;
|
| - cx->hash = cx->hashobj->create();
|
| - if (cx->hash == NULL)
|
| - goto loser;
|
| -
|
| - if (secret_len > cx->hashobj->blocklength) {
|
| - cx->hashobj->begin( cx->hash);
|
| - cx->hashobj->update(cx->hash, secret, secret_len);
|
| - PORT_Assert(cx->hashobj->length <= sizeof hashed_secret);
|
| - cx->hashobj->end( cx->hash, hashed_secret, &secret_len,
|
| - sizeof hashed_secret);
|
| - if (secret_len != cx->hashobj->length) {
|
| - PORT_SetError(SEC_ERROR_LIBRARY_FAILURE);
|
| - goto loser;
|
| - }
|
| - secret = (const unsigned char *)&hashed_secret[0];
|
| - }
|
| -
|
| - PORT_Memset(cx->ipad, 0x36, cx->hashobj->blocklength);
|
| - PORT_Memset(cx->opad, 0x5c, cx->hashobj->blocklength);
|
| -
|
| - /* fold secret into padding */
|
| - for (i = 0; i < secret_len; i++) {
|
| - cx->ipad[i] ^= secret[i];
|
| - cx->opad[i] ^= secret[i];
|
| - }
|
| - PORT_Memset(hashed_secret, 0, sizeof hashed_secret);
|
| - return SECSuccess;
|
| -
|
| -loser:
|
| - PORT_Memset(hashed_secret, 0, sizeof hashed_secret);
|
| - if (cx->hash != NULL)
|
| - cx->hashobj->destroy(cx->hash, PR_TRUE);
|
| - return SECFailure;
|
| -}
|
| -
|
| -HMACContext *
|
| -HMAC_Create(const SECHashObject *hash_obj, const unsigned char *secret,
|
| - unsigned int secret_len, PRBool isFIPS)
|
| -{
|
| - SECStatus rv;
|
| - HMACContext * cx = PORT_ZNew(HMACContext);
|
| - if (cx == NULL)
|
| - return NULL;
|
| - rv = HMAC_Init(cx, hash_obj, secret, secret_len, isFIPS);
|
| - cx->wasAllocated = PR_TRUE;
|
| - if (rv != SECSuccess) {
|
| - PORT_Free(cx); /* contains no secret info */
|
| - cx = NULL;
|
| - }
|
| - return cx;
|
| -}
|
| -
|
| -void
|
| -HMAC_Begin(HMACContext *cx)
|
| -{
|
| - /* start inner hash */
|
| - cx->hashobj->begin(cx->hash);
|
| - cx->hashobj->update(cx->hash, cx->ipad, cx->hashobj->blocklength);
|
| -}
|
| -
|
| -void
|
| -HMAC_Update(HMACContext *cx, const unsigned char *data, unsigned int data_len)
|
| -{
|
| - cx->hashobj->update(cx->hash, data, data_len);
|
| -}
|
| -
|
| -SECStatus
|
| -HMAC_Finish(HMACContext *cx, unsigned char *result, unsigned int *result_len,
|
| - unsigned int max_result_len)
|
| -{
|
| - if (max_result_len < cx->hashobj->length) {
|
| - PORT_SetError(SEC_ERROR_INVALID_ARGS);
|
| - return SECFailure;
|
| - }
|
| -
|
| - cx->hashobj->end(cx->hash, result, result_len, max_result_len);
|
| - if (*result_len != cx->hashobj->length)
|
| - return SECFailure;
|
| -
|
| - cx->hashobj->begin(cx->hash);
|
| - cx->hashobj->update(cx->hash, cx->opad, cx->hashobj->blocklength);
|
| - cx->hashobj->update(cx->hash, result, *result_len);
|
| - cx->hashobj->end(cx->hash, result, result_len, max_result_len);
|
| - return SECSuccess;
|
| -}
|
| -
|
| -HMACContext *
|
| -HMAC_Clone(HMACContext *cx)
|
| -{
|
| - HMACContext *newcx;
|
| -
|
| - newcx = (HMACContext*)PORT_ZAlloc(sizeof(HMACContext));
|
| - if (newcx == NULL)
|
| - goto loser;
|
| -
|
| - newcx->wasAllocated = PR_TRUE;
|
| - newcx->hashobj = cx->hashobj;
|
| - newcx->hash = cx->hashobj->clone(cx->hash);
|
| - if (newcx->hash == NULL)
|
| - goto loser;
|
| - PORT_Memcpy(newcx->ipad, cx->ipad, cx->hashobj->blocklength);
|
| - PORT_Memcpy(newcx->opad, cx->opad, cx->hashobj->blocklength);
|
| - return newcx;
|
| -
|
| -loser:
|
| - HMAC_Destroy(newcx, PR_TRUE);
|
| - return NULL;
|
| -}
|
|
|