mirror of
https://git.proxmox.com/git/efi-boot-shim
synced 2025-11-04 14:59:04 +00:00
0f3dfc01e2
- Delete the old openssl files and use the script to copy the new files - Add "-DNO_SYSLOG" to CFLAGS and add crypto/include to the include path Signed-off-by: Gary Lin <glin@suse.com>
126 lines
2.7 KiB
C
126 lines
2.7 KiB
C
/*
|
|
* Copyright 2007-2016 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include "internal/cryptlib.h"
|
|
#include <openssl/evp.h>
|
|
#include "internal/asn1_int.h"
|
|
|
|
#define HMAC_TEST_PRIVATE_KEY_FORMAT
|
|
|
|
/*
|
|
* HMAC "ASN1" method. This is just here to indicate the maximum HMAC output
|
|
* length and to free up an HMAC key.
|
|
*/
|
|
|
|
static int hmac_size(const EVP_PKEY *pkey)
|
|
{
|
|
return EVP_MAX_MD_SIZE;
|
|
}
|
|
|
|
static void hmac_key_free(EVP_PKEY *pkey)
|
|
{
|
|
ASN1_OCTET_STRING *os = EVP_PKEY_get0(pkey);
|
|
if (os) {
|
|
if (os->data)
|
|
OPENSSL_cleanse(os->data, os->length);
|
|
ASN1_OCTET_STRING_free(os);
|
|
}
|
|
}
|
|
|
|
static int hmac_pkey_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
|
|
{
|
|
switch (op) {
|
|
case ASN1_PKEY_CTRL_DEFAULT_MD_NID:
|
|
*(int *)arg2 = NID_sha256;
|
|
return 1;
|
|
|
|
default:
|
|
return -2;
|
|
}
|
|
}
|
|
|
|
static int hmac_pkey_public_cmp(const EVP_PKEY *a, const EVP_PKEY *b)
|
|
{
|
|
return ASN1_OCTET_STRING_cmp(EVP_PKEY_get0(a), EVP_PKEY_get0(b));
|
|
}
|
|
|
|
#ifdef HMAC_TEST_PRIVATE_KEY_FORMAT
|
|
/*
|
|
* A bogus private key format for test purposes. This is simply the HMAC key
|
|
* with "HMAC PRIVATE KEY" in the headers. When enabled the genpkey utility
|
|
* can be used to "generate" HMAC keys.
|
|
*/
|
|
|
|
static int old_hmac_decode(EVP_PKEY *pkey,
|
|
const unsigned char **pder, int derlen)
|
|
{
|
|
ASN1_OCTET_STRING *os;
|
|
os = ASN1_OCTET_STRING_new();
|
|
if (os == NULL || !ASN1_OCTET_STRING_set(os, *pder, derlen))
|
|
goto err;
|
|
if (!EVP_PKEY_assign(pkey, EVP_PKEY_HMAC, os))
|
|
goto err;
|
|
return 1;
|
|
|
|
err:
|
|
ASN1_OCTET_STRING_free(os);
|
|
return 0;
|
|
}
|
|
|
|
static int old_hmac_encode(const EVP_PKEY *pkey, unsigned char **pder)
|
|
{
|
|
int inc;
|
|
ASN1_OCTET_STRING *os = EVP_PKEY_get0(pkey);
|
|
if (pder) {
|
|
if (!*pder) {
|
|
*pder = OPENSSL_malloc(os->length);
|
|
if (*pder == NULL)
|
|
return -1;
|
|
inc = 0;
|
|
} else
|
|
inc = 1;
|
|
|
|
memcpy(*pder, os->data, os->length);
|
|
|
|
if (inc)
|
|
*pder += os->length;
|
|
}
|
|
|
|
return os->length;
|
|
}
|
|
|
|
#endif
|
|
|
|
const EVP_PKEY_ASN1_METHOD hmac_asn1_meth = {
|
|
EVP_PKEY_HMAC,
|
|
EVP_PKEY_HMAC,
|
|
0,
|
|
|
|
"HMAC",
|
|
"OpenSSL HMAC method",
|
|
|
|
0, 0, hmac_pkey_public_cmp, 0,
|
|
|
|
0, 0, 0,
|
|
|
|
hmac_size,
|
|
0, 0,
|
|
0, 0, 0, 0, 0, 0, 0,
|
|
|
|
hmac_key_free,
|
|
hmac_pkey_ctrl,
|
|
#ifdef HMAC_TEST_PRIVATE_KEY_FORMAT
|
|
old_hmac_decode,
|
|
old_hmac_encode
|
|
#else
|
|
0, 0
|
|
#endif
|
|
};
|