tinc/src/gcrypt/digest.c

/*
    digest.c -- Digest handling
    Copyright (C) 2007 Guus Sliepen <guus@tinc-vpn.org>

    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 2 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License along
    with this program; if not, write to the Free Software Foundation, Inc.,
    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
*/

#include "system.h"

#include "digest.h"
#include "logger.h"

static struct {
	const char *name;
	int algo;
	int nid;
} digesttable[] = {
	{"none", GCRY_MD_NONE, 0},
	{"sha1", GCRY_MD_SHA1, 64},
	{"sha256", GCRY_MD_SHA256, 672},
	{"sha384", GCRY_MD_SHA384, 673},
	{"sha512", GCRY_MD_SHA512, 674},
};

static bool nametodigest(const char *name, int *algo) {
	int i;

	for(i = 0; i < sizeof digesttable / sizeof *digesttable; i++) {
		if(digesttable[i].name && !strcasecmp(name, digesttable[i].name)) {
			*algo = digesttable[i].algo;
			return true;
		}
	}

	return false;
}

static bool nidtodigest(int nid, int *algo) {
	int i;

	for(i = 0; i < sizeof digesttable / sizeof *digesttable; i++) {
		if(nid == digesttable[i].nid) {
			*algo = digesttable[i].algo;
			return true;
		}
	}

	return false;
}

static bool digesttonid(int algo, int *nid) {
	int i;

	for(i = 0; i < sizeof digesttable / sizeof *digesttable; i++) {
		if(algo == digesttable[i].algo) {
			*nid = digesttable[i].nid;
			return true;
		}
	}

	return false;
}

static bool digest_open(digest_t *digest, int algo, int maclength) {
	if(!digesttonid(algo, &digest->nid)) {
		logger(DEBUG_ALWAYS, LOG_DEBUG, "Digest %d has no corresponding nid!", algo);
		return false;
	}

	unsigned int len = gcry_md_get_algo_dlen(algo);

	if(maclength > len || maclength < 0)
		digest->maclength = len;
	else
		digest->maclength = maclength;
	
	digest->algo = algo;
	digest->hmac = NULL;

	return true;
}

bool digest_open_by_name(digest_t *digest, const char *name, int maclength) {
	int algo;

	if(!nametodigest(name, &algo)) {
		logger(DEBUG_ALWAYS, LOG_DEBUG, "Unknown digest name '%s'!", name);
		return false;
	}

	return digest_open(digest, algo, maclength);
}

bool digest_open_by_nid(digest_t *digest, int nid, int maclength) {
	int algo;

	if(!nidtodigest(nid, &algo)) {
		logger(DEBUG_ALWAYS, LOG_DEBUG, "Unknown digest ID %d!", nid);
		return false;
	}

	return digest_open(digest, algo, maclength);
}

bool digest_open_sha1(digest_t *digest, int maclength) {
	return digest_open(digest, GCRY_MD_SHA1, maclength);
}

void digest_close(digest_t *digest) {
	if(digest->hmac)
		gcry_md_close(digest->hmac);
	digest->hmac = NULL;
}

bool digest_set_key(digest_t *digest, const void *key, size_t len) {
	if(!digest->hmac)
		gcry_md_open(&digest->hmac, digest->algo, GCRY_MD_FLAG_HMAC);
	if(!digest->hmac)
		return false;

	return !gcry_md_setkey(digest->hmac, key, len);
}

bool digest_create(digest_t *digest, const void *indata, size_t inlen, void *outdata) {
	unsigned int len = gcry_md_get_algo_dlen(digest->algo);

	if(digest->hmac) {
		char *tmpdata;
		gcry_md_reset(digest->hmac);
		gcry_md_write(digest->hmac, indata, inlen);
		tmpdata = gcry_md_read(digest->hmac, digest->algo);
		if(!tmpdata)
			return false;
		memcpy(outdata, tmpdata, digest->maclength);
	} else {
		char tmpdata[len];
		gcry_md_hash_buffer(digest->algo, tmpdata, indata, inlen);
		memcpy(outdata, tmpdata, digest->maclength);
	}

	return true;
}

bool digest_verify(digest_t *digest, const void *indata, size_t inlen, const void *cmpdata) {
	unsigned int len = digest->maclength;
	char outdata[len];

	return digest_create(digest, indata, inlen, outdata) && !memcmp(cmpdata, outdata, len);
}

int digest_get_nid(const digest_t *digest) {
	return digest->nid;
}

size_t digest_length(const digest_t *digest) {
	return digest->maclength;
}

bool digest_active(const digest_t *digest) {
	return digest->algo != GCRY_MD_NONE;
}