260 lines
7.6 KiB
C
260 lines
7.6 KiB
C
/*
|
|
* Copyright (C) 2012 Martin Storsjo
|
|
*
|
|
* This file is part of FFmpeg.
|
|
*
|
|
* FFmpeg is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* FFmpeg is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with FFmpeg; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*/
|
|
|
|
#include <string.h>
|
|
|
|
#include "attributes.h"
|
|
#include "hmac.h"
|
|
#include "md5.h"
|
|
#include "sha.h"
|
|
#include "sha512.h"
|
|
#include "mem.h"
|
|
|
|
#define MAX_HASHLEN 64
|
|
#define MAX_BLOCKLEN 128
|
|
|
|
struct AVHMAC {
|
|
void *hash;
|
|
int blocklen, hashlen;
|
|
void (*final)(void*, uint8_t*);
|
|
void (*update)(void*, const uint8_t*, int len);
|
|
void (*init)(void*);
|
|
uint8_t key[MAX_BLOCKLEN];
|
|
int keylen;
|
|
};
|
|
|
|
#define DEFINE_SHA(bits) \
|
|
static av_cold void sha ## bits ##_init(void *ctx) \
|
|
{ \
|
|
av_sha_init(ctx, bits); \
|
|
}
|
|
|
|
#define DEFINE_SHA512(bits) \
|
|
static av_cold void sha ## bits ##_init(void *ctx) \
|
|
{ \
|
|
av_sha512_init(ctx, bits); \
|
|
}
|
|
|
|
DEFINE_SHA(160)
|
|
DEFINE_SHA(224)
|
|
DEFINE_SHA(256)
|
|
DEFINE_SHA512(384)
|
|
DEFINE_SHA512(512)
|
|
|
|
AVHMAC *av_hmac_alloc(enum AVHMACType type)
|
|
{
|
|
AVHMAC *c = av_mallocz(sizeof(*c));
|
|
if (!c)
|
|
return NULL;
|
|
switch (type) {
|
|
case AV_HMAC_MD5:
|
|
c->blocklen = 64;
|
|
c->hashlen = 16;
|
|
c->init = (void*)av_md5_init;
|
|
c->update = (void*)av_md5_update;
|
|
c->final = (void*)av_md5_final;
|
|
c->hash = av_md5_alloc();
|
|
break;
|
|
case AV_HMAC_SHA1:
|
|
c->blocklen = 64;
|
|
c->hashlen = 20;
|
|
c->init = sha160_init;
|
|
c->update = (void*)av_sha_update;
|
|
c->final = (void*)av_sha_final;
|
|
c->hash = av_sha_alloc();
|
|
break;
|
|
case AV_HMAC_SHA224:
|
|
c->blocklen = 64;
|
|
c->hashlen = 28;
|
|
c->init = sha224_init;
|
|
c->update = (void*)av_sha_update;
|
|
c->final = (void*)av_sha_final;
|
|
c->hash = av_sha_alloc();
|
|
break;
|
|
case AV_HMAC_SHA256:
|
|
c->blocklen = 64;
|
|
c->hashlen = 32;
|
|
c->init = sha256_init;
|
|
c->update = (void*)av_sha_update;
|
|
c->final = (void*)av_sha_final;
|
|
c->hash = av_sha_alloc();
|
|
break;
|
|
case AV_HMAC_SHA384:
|
|
c->blocklen = 128;
|
|
c->hashlen = 48;
|
|
c->init = sha384_init;
|
|
c->update = (void*)av_sha512_update;
|
|
c->final = (void*)av_sha512_final;
|
|
c->hash = av_sha512_alloc();
|
|
break;
|
|
case AV_HMAC_SHA512:
|
|
c->blocklen = 128;
|
|
c->hashlen = 64;
|
|
c->init = sha512_init;
|
|
c->update = (void*)av_sha512_update;
|
|
c->final = (void*)av_sha512_final;
|
|
c->hash = av_sha512_alloc();
|
|
break;
|
|
default:
|
|
av_free(c);
|
|
return NULL;
|
|
}
|
|
if (!c->hash) {
|
|
av_free(c);
|
|
return NULL;
|
|
}
|
|
return c;
|
|
}
|
|
|
|
void av_hmac_free(AVHMAC *c)
|
|
{
|
|
if (!c)
|
|
return;
|
|
av_freep(&c->hash);
|
|
av_free(c);
|
|
}
|
|
|
|
void av_hmac_init(AVHMAC *c, const uint8_t *key, unsigned int keylen)
|
|
{
|
|
int i;
|
|
uint8_t block[MAX_BLOCKLEN];
|
|
if (keylen > c->blocklen) {
|
|
c->init(c->hash);
|
|
c->update(c->hash, key, keylen);
|
|
c->final(c->hash, c->key);
|
|
c->keylen = c->hashlen;
|
|
} else {
|
|
memcpy(c->key, key, keylen);
|
|
c->keylen = keylen;
|
|
}
|
|
c->init(c->hash);
|
|
for (i = 0; i < c->keylen; i++)
|
|
block[i] = c->key[i] ^ 0x36;
|
|
for (i = c->keylen; i < c->blocklen; i++)
|
|
block[i] = 0x36;
|
|
c->update(c->hash, block, c->blocklen);
|
|
}
|
|
|
|
void av_hmac_update(AVHMAC *c, const uint8_t *data, unsigned int len)
|
|
{
|
|
c->update(c->hash, data, len);
|
|
}
|
|
|
|
int av_hmac_final(AVHMAC *c, uint8_t *out, unsigned int outlen)
|
|
{
|
|
uint8_t block[MAX_BLOCKLEN];
|
|
int i;
|
|
if (outlen < c->hashlen)
|
|
return AVERROR(EINVAL);
|
|
c->final(c->hash, out);
|
|
c->init(c->hash);
|
|
for (i = 0; i < c->keylen; i++)
|
|
block[i] = c->key[i] ^ 0x5C;
|
|
for (i = c->keylen; i < c->blocklen; i++)
|
|
block[i] = 0x5C;
|
|
c->update(c->hash, block, c->blocklen);
|
|
c->update(c->hash, out, c->hashlen);
|
|
c->final(c->hash, out);
|
|
return c->hashlen;
|
|
}
|
|
|
|
int av_hmac_calc(AVHMAC *c, const uint8_t *data, unsigned int len,
|
|
const uint8_t *key, unsigned int keylen,
|
|
uint8_t *out, unsigned int outlen)
|
|
{
|
|
av_hmac_init(c, key, keylen);
|
|
av_hmac_update(c, data, len);
|
|
return av_hmac_final(c, out, outlen);
|
|
}
|
|
|
|
#ifdef TEST
|
|
#include <stdio.h>
|
|
|
|
static void test(AVHMAC *hmac, const uint8_t *key, int keylen,
|
|
const uint8_t *data, int datalen)
|
|
{
|
|
uint8_t buf[MAX_HASHLEN];
|
|
int out, i;
|
|
// Some of the test vectors are strings, where sizeof() includes the
|
|
// trailing null byte - remove that.
|
|
if (!key[keylen - 1])
|
|
keylen--;
|
|
if (!data[datalen - 1])
|
|
datalen--;
|
|
out = av_hmac_calc(hmac, data, datalen, key, keylen, buf, sizeof(buf));
|
|
for (i = 0; i < out; i++)
|
|
printf("%02x", buf[i]);
|
|
printf("\n");
|
|
}
|
|
|
|
int main(void)
|
|
{
|
|
uint8_t key1[20], key3[131], data3[50];
|
|
enum AVHMACType i = AV_HMAC_SHA224;
|
|
static const uint8_t key2[] = "Jefe";
|
|
static const uint8_t data1[] = "Hi There";
|
|
static const uint8_t data2[] = "what do ya want for nothing?";
|
|
static const uint8_t data4[] = "Test Using Larger Than Block-Size Key - Hash Key First";
|
|
static const uint8_t data5[] = "Test Using Larger Than Block-Size Key and Larger Than One Block-Size Data";
|
|
static const uint8_t data6[] = "This is a test using a larger than block-size key and a larger "
|
|
"than block-size data. The key needs to be hashed before being used"
|
|
" by the HMAC algorithm.";
|
|
AVHMAC *hmac = av_hmac_alloc(AV_HMAC_MD5);
|
|
if (!hmac)
|
|
return 1;
|
|
memset(key1, 0x0b, sizeof(key1));
|
|
memset(key3, 0xaa, sizeof(key3));
|
|
memset(data3, 0xdd, sizeof(data3));
|
|
// RFC 2202 test vectors
|
|
test(hmac, key1, 16, data1, sizeof(data1));
|
|
test(hmac, key2, sizeof(key2), data2, sizeof(data2));
|
|
test(hmac, key3, 16, data3, sizeof(data3));
|
|
test(hmac, key3, 80, data4, sizeof(data4));
|
|
test(hmac, key3, 80, data5, sizeof(data5));
|
|
av_hmac_free(hmac);
|
|
|
|
/* SHA-1 */
|
|
hmac = av_hmac_alloc(AV_HMAC_SHA1);
|
|
if (!hmac)
|
|
return 1;
|
|
// RFC 2202 test vectors
|
|
test(hmac, key1, sizeof(key1), data1, sizeof(data1));
|
|
test(hmac, key2, sizeof(key2), data2, sizeof(data2));
|
|
test(hmac, key3, 20, data3, sizeof(data3));
|
|
test(hmac, key3, 80, data4, sizeof(data4));
|
|
test(hmac, key3, 80, data5, sizeof(data5));
|
|
av_hmac_free(hmac);
|
|
|
|
/* SHA-2 */
|
|
while (i <= AV_HMAC_SHA512) {
|
|
hmac = av_hmac_alloc(i);
|
|
// RFC 4231 test vectors
|
|
test(hmac, key1, sizeof(key1), data1, sizeof(data1));
|
|
test(hmac, key2, sizeof(key2), data2, sizeof(data2));
|
|
test(hmac, key3, 20, data3, sizeof(data3));
|
|
test(hmac, key3, sizeof(key3), data4, sizeof(data4));
|
|
test(hmac, key3, sizeof(key3), data6, sizeof(data6));
|
|
av_hmac_free(hmac);
|
|
i++;
|
|
}
|
|
return 0;
|
|
}
|
|
#endif /* TEST */
|