1221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
2e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * project 2007.
3e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu */
4e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu/* ====================================================================
5e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * Copyright (c) 2007 The OpenSSL Project.  All rights reserved.
6e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *
7e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * Redistribution and use in source and binary forms, with or without
8e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * modification, are permitted provided that the following conditions
9e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * are met:
10e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *
11e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * 1. Redistributions of source code must retain the above copyright
12e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    notice, this list of conditions and the following disclaimer.
13e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *
14e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * 2. Redistributions in binary form must reproduce the above copyright
15e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    notice, this list of conditions and the following disclaimer in
16e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    the documentation and/or other materials provided with the
17e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    distribution.
18e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *
19e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * 3. All advertising materials mentioning features or use of this
20e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    software must display the following acknowledgment:
21e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    "This product includes software developed by the OpenSSL Project
22e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
23e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *
24e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
25e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    endorse or promote products derived from this software without
26e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    prior written permission. For written permission, please contact
27e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    licensing@OpenSSL.org.
28e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *
29e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * 5. Products derived from this software may not be called "OpenSSL"
30e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    nor may "OpenSSL" appear in their names without prior written
31e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    permission of the OpenSSL Project.
32e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *
33e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * 6. Redistributions of any form whatsoever must retain the following
34e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    acknowledgment:
35e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    "This product includes software developed by the OpenSSL Project
36e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
37e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *
38e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
39e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
40e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
41e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
42e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
43e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
44e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
45e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
46e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
47e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
48e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
49e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * OF THE POSSIBILITY OF SUCH DAMAGE.
50e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * ====================================================================
51e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *
52e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * This product includes cryptographic software written by Eric Young
53e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * (eay@cryptsoft.com).  This product includes software written by Tim
54e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu * Hudson (tjh@cryptsoft.com).
55e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu *
56e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu */
57e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu
58e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu#include <stdio.h>
59e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu#include "cryptlib.h"
60221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom#include <openssl/evp.h>
61221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom#include "asn1_locl.h"
62221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
63221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom#define HMAC_TEST_PRIVATE_KEY_FORMAT
64e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu
65221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom/* HMAC "ASN1" method. This is just here to indicate the
66221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom * maximum HMAC output length and to free up an HMAC
67221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom * key.
68221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom */
69e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu
70221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstromstatic int hmac_size(const EVP_PKEY *pkey)
71221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	{
72221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	return EVP_MAX_MD_SIZE;
73221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	}
74e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu
75221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstromstatic void hmac_key_free(EVP_PKEY *pkey)
76e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu	{
77221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	ASN1_OCTET_STRING *os = (ASN1_OCTET_STRING *)pkey->pkey.ptr;
78221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	if (os)
79e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu		{
80221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		if (os->data)
81221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom			OPENSSL_cleanse(os->data, os->length);
82221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		ASN1_OCTET_STRING_free(os);
83e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu		}
84221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	}
85221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
86221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
87221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstromstatic int hmac_pkey_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
88221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	{
89221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	switch (op)
90e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu		{
91221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		case ASN1_PKEY_CTRL_DEFAULT_MD_NID:
92221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		*(int *)arg2 = NID_sha1;
93221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		return 1;
94221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
95221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		default:
96221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		return -2;
97e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu		}
98221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	}
99221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
100221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom#ifdef HMAC_TEST_PRIVATE_KEY_FORMAT
101221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom/* A bogus private key format for test purposes. This is simply the
102221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom * HMAC key with "HMAC PRIVATE KEY" in the headers. When enabled the
103221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom * genpkey utility can be used to "generate" HMAC keys.
104221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom */
105221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
106221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstromstatic int old_hmac_decode(EVP_PKEY *pkey,
107221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom					const unsigned char **pder, int derlen)
108221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	{
109221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	ASN1_OCTET_STRING *os;
110221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	os = ASN1_OCTET_STRING_new();
111221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	if (!os || !ASN1_OCTET_STRING_set(os, *pder, derlen))
112221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		return 0;
113221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	EVP_PKEY_assign(pkey, EVP_PKEY_HMAC, os);
114e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu	return 1;
115e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu	}
116e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu
117221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstromstatic int old_hmac_encode(const EVP_PKEY *pkey, unsigned char **pder)
118e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu	{
119221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	int inc;
120221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	ASN1_OCTET_STRING *os = (ASN1_OCTET_STRING *)pkey->pkey.ptr;
121221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	if (pder)
122221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		{
123221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		if (!*pder)
124221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom			{
125221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom			*pder = OPENSSL_malloc(os->length);
126221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom			inc = 0;
127221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom			}
128221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		else inc = 1;
129221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
130221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		memcpy(*pder, os->data, os->length);
131221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
132221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		if (inc)
133221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom			*pder += os->length;
134221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom		}
135221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
136221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	return os->length;
137e45f106cb6b47af1f21efe76e933bdea2f5dd1caNagendra Modadugu	}
138221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
139221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom#endif
140221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
141221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstromconst EVP_PKEY_ASN1_METHOD hmac_asn1_meth =
142221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	{
143221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	EVP_PKEY_HMAC,
144221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	EVP_PKEY_HMAC,
145221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	0,
146221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
147221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	"HMAC",
148221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	"OpenSSL HMAC method",
149221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
150221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	0,0,0,0,
151221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
152221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	0,0,0,
153221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
154221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	hmac_size,
155221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	0,
156392aa7cc7d2b122614c5393c3e357da07fd07af3Brian Carlstrom	0,0,0,0,0,0,0,
157221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
158221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	hmac_key_free,
159221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	hmac_pkey_ctrl,
160221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom#ifdef HMAC_TEST_PRIVATE_KEY_FORMAT
161221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	old_hmac_decode,
162221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	old_hmac_encode
163221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom#else
164221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	0,0
165221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom#endif
166221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom	};
167221304ee937bc0910948a8be1320cb8cc4eb6d36Brian Carlstrom
168