f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy/*
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * Copyright (c) 2003, 2011, Oracle and/or its affiliates. All rights reserved.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy */
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy/*
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * lib/crypto/keyhash_provider/hmac_md5.c
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy *
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy(I don't know)
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * Copyright2001 by the Massachusetts Institute of Technology.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * All Rights Reserved.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy *
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * Export of this software from the United States of America may
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * require a specific license from the United States Government.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * It is the responsibility of any person or organization contemplating
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * export to obtain such a license before exporting.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy *
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * distribute this software and its documentation for any purpose and
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * without fee is hereby granted, provided that the above copyright
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * notice appear in all copies and that both that copyright notice and
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * this permission notice appear in supporting documentation, and that
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * the name of M.I.T. not be used in advertising or publicity pertaining
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * to distribution of the software without specific, written prior
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * permission. Furthermore if you modify this software you must label
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * your software as modified software and not distribute it in such a
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * fashion that it might be confused with the original M.I.T. software.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * M.I.T. makes no representations about the suitability of
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * this software for any purpose. It is provided "as is" without express
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy * or implied warranty.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy *
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy *
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy* Implementation of the Microsoft hmac-md5 checksum type.
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy* Implemented based on draft-brezak-win2k-krb-rc4-hmac-03
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy */
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy#include "k5-int.h"
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy#include "keyhash_provider.h"
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy#include "arcfour.h"
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy#include "hash_provider.h"
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedy
f38cb554a534c6df738be3f4d23327e69888e634John Wren Kennedystatic krb5_error_code
k5_hmac_md5_hash (krb5_context context,
const krb5_keyblock *key, krb5_keyusage usage,
const krb5_data *iv,
const krb5_data *input, krb5_data *output)
{
krb5_keyusage ms_usage;
krb5_error_code ret;
krb5_keyblock ks;
krb5_data ds, ks_constant, md5tmp;
krb5_data hash_input[2];
char digest[MD5_CKSUM_LENGTH];
char t[4];
CK_MECHANISM mechanism;
CK_RV rv;
CK_ULONG hashlen;
bzero(&ks, sizeof(krb5_keyblock));
/*
* Solaris Kerberos: The digest length is that of MD5_CKSUM_LENGTH not the key
* length, as keys can be of varying lengths but should not affect the digest
* length. The signing key is the digest and therefore is also the same
* length, MD5_CKSUM_LENGTH.
*/
ds.length = MD5_CKSUM_LENGTH;
ks.length = MD5_CKSUM_LENGTH;
ds.data = malloc(ds.length);
if (ds.data == NULL)
return ENOMEM;
ks.contents = (void *) ds.data;
ks_constant.data = "signaturekey";
ks_constant.length = strlen(ks_constant.data)+1; /* Including null*/
/* Solaris Kerberos */
ret = krb5_hmac(context, &krb5int_hash_md5, key, 1,
&ks_constant, &ds);
if (ret)
goto cleanup;
ms_usage = krb5int_arcfour_translate_usage (usage);
t[0] = (ms_usage) & 0xff;
t[1] = (ms_usage>>8) & 0xff;
t[2] = (ms_usage >>16) & 0xff;
t[3] = (ms_usage>>24) & 0XFF;
/* Solaris Kerberos */
mechanism.mechanism = CKM_MD5;
mechanism.pParameter = NULL_PTR;
mechanism.ulParameterLen = 0;
if ((rv = C_DigestInit(krb_ctx_hSession(context), &mechanism)) != CKR_OK) {
ret = PKCS_ERR;
goto cleanup;
}
if ((rv = C_DigestUpdate(krb_ctx_hSession(context),
(CK_BYTE_PTR)t, (CK_ULONG)sizeof(t))) != CKR_OK) {
ret = PKCS_ERR;
goto cleanup;
}
if ((rv = C_DigestUpdate(krb_ctx_hSession(context),
(CK_BYTE_PTR)input->data, (CK_ULONG)input->length)) != CKR_OK) {
ret = PKCS_ERR;
goto cleanup;
}
hashlen = MD5_CKSUM_LENGTH;
if ((rv = C_DigestFinal(krb_ctx_hSession(context),
(CK_BYTE_PTR)digest, (CK_ULONG_PTR)&hashlen)) != CKR_OK) {
ret = PKCS_ERR;
goto cleanup;
}
md5tmp.data = digest;
md5tmp.length = hashlen;
ret = krb5_hmac (context, &krb5int_hash_md5, &ks, 1, &md5tmp, output);
cleanup:
bzero(ks.contents, ks.length);
bzero(md5tmp.data, md5tmp.length);
FREE (ks.contents, ks.length);
return (ret);
}
const struct krb5_keyhash_provider krb5int_keyhash_hmac_md5 = {
16,
k5_hmac_md5_hash,
NULL /*checksum again*/
};