178 lines
3.3 KiB
C
178 lines
3.3 KiB
C
/*
|
|
* Copyright (C) 2008 Tobias Brunner
|
|
* Hochschule fuer Technik Rapperswil
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* for more details.
|
|
*/
|
|
|
|
#include "openssl_hasher.h"
|
|
|
|
#include <openssl/evp.h>
|
|
|
|
typedef struct private_openssl_hasher_t private_openssl_hasher_t;
|
|
|
|
/**
|
|
* Private data of openssl_hasher_t
|
|
*/
|
|
struct private_openssl_hasher_t {
|
|
|
|
/**
|
|
* Public part of this class.
|
|
*/
|
|
openssl_hasher_t public;
|
|
|
|
/**
|
|
* the hasher to use
|
|
*/
|
|
const EVP_MD *hasher;
|
|
|
|
/**
|
|
* the current digest context
|
|
*/
|
|
EVP_MD_CTX *ctx;
|
|
};
|
|
|
|
/**
|
|
* Mapping from the algorithms defined in IKEv2 to
|
|
* OpenSSL algorithm names
|
|
*/
|
|
typedef struct {
|
|
/**
|
|
* Identifier specified in IKEv2
|
|
*/
|
|
int ikev2_id;
|
|
|
|
/**
|
|
* Name of the algorithm, as used in OpenSSL
|
|
*/
|
|
char *name;
|
|
} openssl_algorithm_t;
|
|
|
|
#define END_OF_LIST -1
|
|
|
|
/**
|
|
* Algorithms for integrity
|
|
*/
|
|
static openssl_algorithm_t integrity_algs[] = {
|
|
{HASH_MD2, "md2"},
|
|
{HASH_MD5, "md5"},
|
|
{HASH_SHA1, "sha1"},
|
|
{HASH_SHA224, "sha224"},
|
|
{HASH_SHA256, "sha256"},
|
|
{HASH_SHA384, "sha384"},
|
|
{HASH_SHA512, "sha512"},
|
|
{HASH_MD4, "md4"},
|
|
{END_OF_LIST, NULL},
|
|
};
|
|
|
|
/**
|
|
* Look up an OpenSSL algorithm name
|
|
*/
|
|
static char* lookup_algorithm(openssl_algorithm_t *openssl_algo,
|
|
u_int16_t ikev2_algo)
|
|
{
|
|
while (openssl_algo->ikev2_id != END_OF_LIST)
|
|
{
|
|
if (ikev2_algo == openssl_algo->ikev2_id)
|
|
{
|
|
return openssl_algo->name;
|
|
}
|
|
openssl_algo++;
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
METHOD(hasher_t, get_hash_size, size_t,
|
|
private_openssl_hasher_t *this)
|
|
{
|
|
return this->hasher->md_size;
|
|
}
|
|
|
|
METHOD(hasher_t, reset, void,
|
|
private_openssl_hasher_t *this)
|
|
{
|
|
EVP_DigestInit_ex(this->ctx, this->hasher, NULL);
|
|
}
|
|
|
|
METHOD(hasher_t, get_hash, void,
|
|
private_openssl_hasher_t *this, chunk_t chunk, u_int8_t *hash)
|
|
{
|
|
EVP_DigestUpdate(this->ctx, chunk.ptr, chunk.len);
|
|
if (hash)
|
|
{
|
|
EVP_DigestFinal_ex(this->ctx, hash, NULL);
|
|
reset(this);
|
|
}
|
|
}
|
|
|
|
METHOD(hasher_t, allocate_hash, void,
|
|
private_openssl_hasher_t *this, chunk_t chunk, chunk_t *hash)
|
|
{
|
|
if (hash)
|
|
{
|
|
*hash = chunk_alloc(get_hash_size(this));
|
|
get_hash(this, chunk, hash->ptr);
|
|
}
|
|
else
|
|
{
|
|
get_hash(this, chunk, NULL);
|
|
}
|
|
}
|
|
|
|
METHOD(hasher_t, destroy, void,
|
|
private_openssl_hasher_t *this)
|
|
{
|
|
EVP_MD_CTX_destroy(this->ctx);
|
|
free(this);
|
|
}
|
|
|
|
/*
|
|
* Described in header
|
|
*/
|
|
openssl_hasher_t *openssl_hasher_create(hash_algorithm_t algo)
|
|
{
|
|
private_openssl_hasher_t *this;
|
|
|
|
char* name = lookup_algorithm(integrity_algs, algo);
|
|
if (!name)
|
|
{
|
|
/* algo unavailable */
|
|
return NULL;
|
|
}
|
|
|
|
INIT(this,
|
|
.public = {
|
|
.hasher = {
|
|
.get_hash = _get_hash,
|
|
.allocate_hash = _allocate_hash,
|
|
.get_hash_size = _get_hash_size,
|
|
.reset = _reset,
|
|
.destroy = _destroy,
|
|
},
|
|
},
|
|
);
|
|
|
|
this->hasher = EVP_get_digestbyname(name);
|
|
if (!this->hasher)
|
|
{
|
|
/* OpenSSL does not support the requested algo */
|
|
free(this);
|
|
return NULL;
|
|
}
|
|
|
|
this->ctx = EVP_MD_CTX_create();
|
|
|
|
/* initialization */
|
|
reset(this);
|
|
|
|
return &this->public;
|
|
}
|