18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * FIPS 186-2 PRF for libcrypto 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2004-2005, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include <openssl/sha.h> 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "crypto.h" 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void sha1_transform(u8 *state, const u8 data[64]) 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SHA_CTX context; 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&context, 0, sizeof(context)); 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(&context.h0, state, 5 * 4); 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt SHA1_Transform(&context, data); 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(state, &context.h0, 5 * 4); 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint fips186_2_prf(const u8 *seed, size_t seed_len, u8 *x, size_t xlen) 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 xkey[64]; 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u32 t[5], _t[5]; 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int i, j, m, k; 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *xpos = x; 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u32 carry; 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3461d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt if (seed_len < sizeof(xkey)) 3561d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt os_memset(xkey + seed_len, 0, sizeof(xkey) - seed_len); 3661d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt else 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt seed_len = sizeof(xkey); 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* FIPS 186-2 + change notice 1 */ 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(xkey, seed, seed_len); 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt t[0] = 0x67452301; 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt t[1] = 0xEFCDAB89; 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt t[2] = 0x98BADCFE; 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt t[3] = 0x10325476; 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt t[4] = 0xC3D2E1F0; 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt m = xlen / 40; 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (j = 0; j < m; j++) { 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* XSEED_j = 0 */ 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < 2; i++) { 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* XVAL = (XKEY + XSEED_j) mod 2^b */ 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* w_i = G(t, XVAL) */ 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(_t, t, 20); 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sha1_transform((u8 *) _t, xkey); 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _t[0] = host_to_be32(_t[0]); 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _t[1] = host_to_be32(_t[1]); 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _t[2] = host_to_be32(_t[2]); 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _t[3] = host_to_be32(_t[3]); 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _t[4] = host_to_be32(_t[4]); 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(xpos, _t, 20); 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* XKEY = (1 + XKEY + w_i) mod 2^b */ 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt carry = 1; 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (k = 19; k >= 0; k--) { 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt carry += xkey[k] + xpos[k]; 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt xkey[k] = carry & 0xff; 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt carry >>= 8; 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt xpos += 20; 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* x_j = w_0|w_1 */ 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 79