mirror of
https://github.com/warmcat/libwebsockets.git
synced 2025-03-30 00:00:16 +01:00
e76982a090
Rewrite HMAC stuff to use HMAC_ apis instead of EVP Bit trickly since modern OpenSSL has opaque HMAC_CTX and older OpenSSL does not have any apis to allocate and free it. Add another cmake check for the allocation api to decide what to do.
165 lines
3.6 KiB
C
165 lines
3.6 KiB
C
/*
|
|
* libwebsockets - generic hash and HMAC api hiding the backend
|
|
*
|
|
* Copyright (C) 2017 Andy Green <andy@warmcat.com>
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation:
|
|
* version 2.1 of the License.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with this library; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston,
|
|
* MA 02110-1301 USA
|
|
*
|
|
* lws_genhash provides a hash / hmac abstraction api in lws that works the
|
|
* same whether you are using openssl or mbedtls hash functions underneath.
|
|
*/
|
|
#include "libwebsockets.h"
|
|
#include <openssl/obj_mac.h>
|
|
/*
|
|
* Care: many openssl apis return 1 for success. These are translated to the
|
|
* lws convention of 0 for success.
|
|
*/
|
|
|
|
int
|
|
lws_genhash_init(struct lws_genhash_ctx *ctx, enum lws_genhash_types type)
|
|
{
|
|
ctx->type = type;
|
|
ctx->mdctx = EVP_MD_CTX_create();
|
|
if (!ctx->mdctx)
|
|
return 1;
|
|
|
|
switch (ctx->type) {
|
|
case LWS_GENHASH_TYPE_SHA1:
|
|
ctx->evp_type = EVP_sha1();
|
|
break;
|
|
case LWS_GENHASH_TYPE_SHA256:
|
|
ctx->evp_type = EVP_sha256();
|
|
break;
|
|
case LWS_GENHASH_TYPE_SHA384:
|
|
ctx->evp_type = EVP_sha384();
|
|
break;
|
|
case LWS_GENHASH_TYPE_SHA512:
|
|
ctx->evp_type = EVP_sha512();
|
|
break;
|
|
default:
|
|
return 1;
|
|
}
|
|
|
|
if (EVP_DigestInit_ex(ctx->mdctx, ctx->evp_type, NULL) != 1) {
|
|
EVP_MD_CTX_destroy(ctx->mdctx);
|
|
|
|
return 1;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
int
|
|
lws_genhash_update(struct lws_genhash_ctx *ctx, const void *in, size_t len)
|
|
{
|
|
if (!len)
|
|
return 0;
|
|
|
|
return EVP_DigestUpdate(ctx->mdctx, in, len) != 1;
|
|
}
|
|
|
|
int
|
|
lws_genhash_destroy(struct lws_genhash_ctx *ctx, void *result)
|
|
{
|
|
unsigned int len;
|
|
int ret = 0;
|
|
|
|
if (result)
|
|
ret = EVP_DigestFinal_ex(ctx->mdctx, result, &len) != 1;
|
|
|
|
(void)len;
|
|
|
|
EVP_MD_CTX_destroy(ctx->mdctx);
|
|
|
|
return ret;
|
|
}
|
|
|
|
|
|
int
|
|
lws_genhmac_init(struct lws_genhmac_ctx *ctx, enum lws_genhmac_types type,
|
|
const uint8_t *key, size_t key_len)
|
|
{
|
|
#if defined(LWS_HAVE_HMAC_CTX_new)
|
|
ctx->ctx = HMAC_CTX_new();
|
|
if (!ctx->ctx)
|
|
return -1;
|
|
#else
|
|
HMAC_CTX_init(&ctx->ctx);
|
|
#endif
|
|
|
|
switch (type) {
|
|
case LWS_GENHMAC_TYPE_SHA256:
|
|
ctx->evp_type = EVP_sha256();
|
|
break;
|
|
case LWS_GENHMAC_TYPE_SHA384:
|
|
ctx->evp_type = EVP_sha384();
|
|
break;
|
|
case LWS_GENHMAC_TYPE_SHA512:
|
|
ctx->evp_type = EVP_sha512();
|
|
break;
|
|
default:
|
|
lwsl_err("%s: unknown HMAC type %d\n", __func__, type);
|
|
goto bail;
|
|
}
|
|
|
|
#if defined(LWS_HAVE_HMAC_CTX_new)
|
|
if (HMAC_Init_ex(ctx->ctx, key, key_len, ctx->evp_type, NULL) != 1)
|
|
#else
|
|
if (HMAC_Init_ex(&ctx->ctx, key, key_len, ctx->evp_type, NULL) != 1)
|
|
#endif
|
|
goto bail;
|
|
|
|
return 0;
|
|
|
|
bail:
|
|
#if defined(LWS_HAVE_HMAC_CTX_new)
|
|
HMAC_CTX_free(ctx->ctx);
|
|
#endif
|
|
|
|
return -1;
|
|
}
|
|
|
|
int
|
|
lws_genhmac_update(struct lws_genhmac_ctx *ctx, const void *in, size_t len)
|
|
{
|
|
#if defined(LWS_HAVE_HMAC_CTX_new)
|
|
if (HMAC_Update(ctx->ctx, in, len) != 1)
|
|
#else
|
|
if (HMAC_Update(&ctx->ctx, in, len) != 1)
|
|
#endif
|
|
return -1;
|
|
|
|
return 0;
|
|
}
|
|
|
|
int
|
|
lws_genhmac_destroy(struct lws_genhmac_ctx *ctx, void *result)
|
|
{
|
|
unsigned int size = lws_genhmac_size(ctx->type);
|
|
#if defined(LWS_HAVE_HMAC_CTX_new)
|
|
int n = HMAC_Final(ctx->ctx, result, &size);
|
|
|
|
HMAC_CTX_free(ctx->ctx);
|
|
#else
|
|
int n = HMAC_Final(&ctx->ctx, result, &size);
|
|
#endif
|
|
|
|
if (n != 1)
|
|
return -1;
|
|
|
|
return 0;
|
|
}
|
|
|