/* * CDDL HEADER START * * The contents of this file are subject to the terms of the * Common Development and Distribution License, Version 1.0 only * (the "License"). You may not use this file except in compliance * with the License. * * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE * or http://www.opensolaris.org/os/licensing. * See the License for the specific language governing permissions * and limitations under the License. * * When distributing Covered Code, include this CDDL HEADER in each * file and include the License file at usr/src/OPENSOLARIS.LICENSE. * If applicable, add the following below this CDDL HEADER, with the * fields enclosed by brackets "[]" replaced with your own identifying * information: Portions Copyright [yyyy] [name of copyright owner] * * CDDL HEADER END */ /* * Copyright 2005 Sun Microsystems, Inc. All rights reserved. * Use is subject to license terms. */ #ifndef _SOFTMAC_H #define _SOFTMAC_H #ifdef __cplusplus extern "C" { #endif #include #include #include #include #include "softSession.h" #include "softObject.h" #define MD5_HASH_SIZE 16 /* MD5 digest length in bytes */ #define SHA1_HASH_SIZE 20 /* SHA_1 digest length in bytes */ #define MD5_HMAC_BLOCK_SIZE 64 /* MD5 block size */ #define MD5_HMAC_INTS_PER_BLOCK (MD5_HMAC_BLOCK_SIZE/sizeof (uint32_t)) #define SHA1_HMAC_BLOCK_SIZE 64 /* SHA1-HMAC block size */ #define SHA1_HMAC_INTS_PER_BLOCK (SHA1_HMAC_BLOCK_SIZE/sizeof (uint32_t)) #define SHA256_HMAC_INTS_PER_BLOCK \ (SHA256_HMAC_BLOCK_SIZE/sizeof (uint64_t)) #define SHA512_HMAC_INTS_PER_BLOCK \ (SHA512_HMAC_BLOCK_SIZE/sizeof (uint64_t)) #define MD5_SSL_PAD_SIZE 48 /* MD5 SSL pad length in bytes */ /* 48 (MD5 SSL pad length in bytes) + 16 (key length in bytes) = 64 */ #define MD5_SSL_PAD_AND_KEY_SIZE 64 #define SHA1_SSL_PAD_SIZE 40 /* SHA1 SSL pad length in bytes */ /* 40 (SHA1 SSL pad length in bytes) + 20 (key length in bytes) = 104 */ #define SHA1_SSL_PAD_AND_KEY_SIZE 60 /* * Context for MD5-HMAC and MD5-HMAC-GENERAL mechanisms. */ typedef struct md5_hc_ctx { MD5_CTX hc_icontext; /* inner MD5 context */ MD5_CTX hc_ocontext; /* outer MD5 context */ } md5_hc_ctx_t; /* * Context for SHA1-HMAC and SHA1-HMAC-GENERAL mechanisms. */ typedef struct sha1_hc_ctx { SHA1_CTX hc_icontext; /* inner SHA1 context */ SHA1_CTX hc_ocontext; /* outer SHA1 context */ } sha1_hc_ctx_t; typedef struct sha2_hc_ctx { SHA2_CTX hc_icontext; /* inner SHA2 context */ SHA2_CTX hc_ocontext; /* outer SHA2 context */ } sha2_hc_ctx_t; /* * Generic Context struct for HMAC. */ typedef struct soft_hmac_ctx { size_t hmac_len; /* digest len in bytes */ union { md5_hc_ctx_t md5_ctx; sha1_hc_ctx_t sha1_ctx; sha2_hc_ctx_t sha2_ctx; } hc_ctx_u; } soft_hmac_ctx_t; /* Generic MAC envelop macros. Substitute HASH with MD5, SHA1, & SHA2 mechs */ #define SOFT_MAC_INIT_CTX(HASH, mac_ctx, ipad, opad, len) \ /* Perform HASH on ipad */ \ HASH##Init(&((mac_ctx)->hc_icontext)); \ HASH##Update(&((mac_ctx)->hc_icontext), ipad, len); \ /* Perform HASH on opad */ \ HASH##Init(&((mac_ctx)->hc_ocontext)); \ HASH##Update(&((mac_ctx)->hc_ocontext), opad, len); #define SOFT_MAC_UPDATE(HASH, mac_ctx, pPart, PartLen) \ HASH##Update(&((mac_ctx)->hc_icontext), pPart, PartLen); #define SOFT_MAC_FINAL(HASH, mac_ctx, mac) \ HASH##Final((mac), &((mac_ctx)->hc_icontext)); \ HASH##Update(&((mac_ctx)->hc_ocontext), (mac), HASH##_HASH_SIZE);\ HASH##Final((mac), &((mac_ctx)->hc_ocontext)); #define SOFT_MAC_FINAL_2(HASH, mac_ctx, mac) \ SHA2Final((mac), &((mac_ctx)->hc_icontext)); \ SHA2Update(&((mac_ctx)->hc_ocontext), (mac), HASH##_DIGEST_LENGTH); \ SHA2Final((mac), &((mac_ctx)->hc_ocontext)); #define CKM_TO_SHA2(ckm_value) \ (ckm_value % 0x10) + (((ckm_value - 0x250) / 0x10) * 3) /* * Function Prototypes. */ CK_RV soft_hmac_sign_verify_init_common(soft_session_t *, CK_MECHANISM_PTR, soft_object_t *, boolean_t); CK_RV mac_init_ctx(soft_session_t *session_p, soft_object_t *, soft_hmac_ctx_t *, CK_MECHANISM_TYPE); CK_RV soft_hmac_sign_verify_common(soft_session_t *, CK_BYTE_PTR, CK_ULONG, CK_BYTE_PTR, CK_ULONG_PTR, boolean_t); CK_RV soft_hmac_sign_verify_update(soft_session_t *, CK_BYTE_PTR, CK_ULONG, boolean_t); void md5_hmac_ctx_init(md5_hc_ctx_t *, uint32_t *, uint32_t *); void sha1_hmac_ctx_init(sha1_hc_ctx_t *, uint32_t *, uint32_t *); void sha2_hmac_ctx_init(uint_t mech, sha2_hc_ctx_t *, uint64_t *, uint64_t *, uint_t, uint_t); #ifdef __cplusplus } #endif #endif /* _SOFTMAC_H */