1 /* $OpenBSD: xform.c,v 1.16 2001/08/28 12:20:43 ben Exp $ */ 2 /*- 3 * The authors of this code are John Ioannidis (ji@tla.org), 4 * Angelos D. Keromytis (kermit@csd.uch.gr), 5 * Niels Provos (provos@physnet.uni-hamburg.de) and 6 * Damien Miller (djm@mindrot.org). 7 * 8 * This code was written by John Ioannidis for BSD/OS in Athens, Greece, 9 * in November 1995. 10 * 11 * Ported to OpenBSD and NetBSD, with additional transforms, in December 1996, 12 * by Angelos D. Keromytis. 13 * 14 * Additional transforms and features in 1997 and 1998 by Angelos D. Keromytis 15 * and Niels Provos. 16 * 17 * Additional features in 1999 by Angelos D. Keromytis. 18 * 19 * AES XTS implementation in 2008 by Damien Miller 20 * 21 * Copyright (C) 1995, 1996, 1997, 1998, 1999 by John Ioannidis, 22 * Angelos D. Keromytis and Niels Provos. 23 * 24 * Copyright (C) 2001, Angelos D. Keromytis. 25 * 26 * Copyright (C) 2008, Damien Miller 27 * Copyright (c) 2014 The FreeBSD Foundation 28 * All rights reserved. 29 * 30 * Portions of this software were developed by John-Mark Gurney 31 * under sponsorship of the FreeBSD Foundation and 32 * Rubicon Communications, LLC (Netgate). 33 * 34 * Permission to use, copy, and modify this software with or without fee 35 * is hereby granted, provided that this entire notice is included in 36 * all copies of any software which is or includes a copy or 37 * modification of this software. 38 * You may use this code under the GNU public license if you so wish. Please 39 * contribute changes back to the authors under this freer than GPL license 40 * so that we may further the use of strong encryption without limitations to 41 * all. 42 * 43 * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR 44 * IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY 45 * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE 46 * MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR 47 * PURPOSE. 48 */ 49 50 #include <sys/cdefs.h> 51 __FBSDID("$FreeBSD$"); 52 53 #include <sys/types.h> 54 #include <crypto/sha2/sha224.h> 55 #include <crypto/sha2/sha256.h> 56 #include <crypto/sha2/sha384.h> 57 #include <crypto/sha2/sha512.h> 58 #include <opencrypto/xform_auth.h> 59 60 static int SHA224Update_int(void *, const void *, u_int); 61 static int SHA256Update_int(void *, const void *, u_int); 62 static int SHA384Update_int(void *, const void *, u_int); 63 static int SHA512Update_int(void *, const void *, u_int); 64 65 /* Plain hashes */ 66 const struct auth_hash auth_hash_sha2_224 = { 67 .type = CRYPTO_SHA2_224, 68 .name = "SHA2-224", 69 .hashsize = SHA2_224_HASH_LEN, 70 .ctxsize = sizeof(SHA224_CTX), 71 .blocksize = SHA2_224_BLOCK_LEN, 72 .Init = (void (*)(void *)) SHA224_Init, 73 .Update = SHA224Update_int, 74 .Final = (void (*)(uint8_t *, void *)) SHA224_Final, 75 }; 76 77 const struct auth_hash auth_hash_sha2_256 = { 78 .type = CRYPTO_SHA2_256, 79 .name = "SHA2-256", 80 .keysize = SHA2_256_BLOCK_LEN, 81 .hashsize = SHA2_256_HASH_LEN, 82 .ctxsize = sizeof(SHA256_CTX), 83 .blocksize = SHA2_256_BLOCK_LEN, 84 .Init = (void (*)(void *)) SHA256_Init, 85 .Update = SHA256Update_int, 86 .Final = (void (*)(uint8_t *, void *)) SHA256_Final, 87 }; 88 89 const struct auth_hash auth_hash_sha2_384 = { 90 .type = CRYPTO_SHA2_384, 91 .name = "SHA2-384", 92 .keysize = SHA2_384_BLOCK_LEN, 93 .hashsize = SHA2_384_HASH_LEN, 94 .ctxsize = sizeof(SHA384_CTX), 95 .blocksize = SHA2_384_BLOCK_LEN, 96 .Init = (void (*)(void *)) SHA384_Init, 97 .Update = SHA384Update_int, 98 .Final = (void (*)(uint8_t *, void *)) SHA384_Final, 99 }; 100 101 const struct auth_hash auth_hash_sha2_512 = { 102 .type = CRYPTO_SHA2_512, 103 .name = "SHA2-512", 104 .keysize = SHA2_512_BLOCK_LEN, 105 .hashsize = SHA2_512_HASH_LEN, 106 .ctxsize = sizeof(SHA512_CTX), 107 .blocksize = SHA2_512_BLOCK_LEN, 108 .Init = (void (*)(void *)) SHA512_Init, 109 .Update = SHA512Update_int, 110 .Final = (void (*)(uint8_t *, void *)) SHA512_Final, 111 }; 112 113 /* Authentication instances */ 114 const struct auth_hash auth_hash_hmac_sha2_224 = { 115 .type = CRYPTO_SHA2_224_HMAC, 116 .name = "HMAC-SHA2-224", 117 .keysize = SHA2_224_BLOCK_LEN, 118 .hashsize = SHA2_224_HASH_LEN, 119 .ctxsize = sizeof(SHA224_CTX), 120 .blocksize = SHA2_224_BLOCK_LEN, 121 .Init = (void (*)(void *)) SHA224_Init, 122 .Update = SHA224Update_int, 123 .Final = (void (*)(uint8_t *, void *)) SHA224_Final, 124 }; 125 126 const struct auth_hash auth_hash_hmac_sha2_256 = { 127 .type = CRYPTO_SHA2_256_HMAC, 128 .name = "HMAC-SHA2-256", 129 .keysize = SHA2_256_BLOCK_LEN, 130 .hashsize = SHA2_256_HASH_LEN, 131 .ctxsize = sizeof(SHA256_CTX), 132 .blocksize = SHA2_256_BLOCK_LEN, 133 .Init = (void (*)(void *)) SHA256_Init, 134 .Update = SHA256Update_int, 135 .Final = (void (*)(uint8_t *, void *)) SHA256_Final, 136 }; 137 138 const struct auth_hash auth_hash_hmac_sha2_384 = { 139 .type = CRYPTO_SHA2_384_HMAC, 140 .name = "HMAC-SHA2-384", 141 .keysize = SHA2_384_BLOCK_LEN, 142 .hashsize = SHA2_384_HASH_LEN, 143 .ctxsize = sizeof(SHA384_CTX), 144 .blocksize = SHA2_384_BLOCK_LEN, 145 .Init = (void (*)(void *)) SHA384_Init, 146 .Update = SHA384Update_int, 147 .Final = (void (*)(uint8_t *, void *)) SHA384_Final, 148 }; 149 150 const struct auth_hash auth_hash_hmac_sha2_512 = { 151 .type = CRYPTO_SHA2_512_HMAC, 152 .name = "HMAC-SHA2-512", 153 .keysize = SHA2_512_BLOCK_LEN, 154 .hashsize = SHA2_512_HASH_LEN, 155 .ctxsize = sizeof(SHA512_CTX), 156 .blocksize = SHA2_512_BLOCK_LEN, 157 .Init = (void (*)(void *)) SHA512_Init, 158 .Update = SHA512Update_int, 159 .Final = (void (*)(uint8_t *, void *)) SHA512_Final, 160 }; 161 162 /* 163 * And now for auth. 164 */ 165 static int 166 SHA224Update_int(void *ctx, const void *buf, u_int len) 167 { 168 SHA224_Update(ctx, buf, len); 169 return 0; 170 } 171 172 static int 173 SHA256Update_int(void *ctx, const void *buf, u_int len) 174 { 175 SHA256_Update(ctx, buf, len); 176 return 0; 177 } 178 179 static int 180 SHA384Update_int(void *ctx, const void *buf, u_int len) 181 { 182 SHA384_Update(ctx, buf, len); 183 return 0; 184 } 185 186 static int 187 SHA512Update_int(void *ctx, const void *buf, u_int len) 188 { 189 SHA512_Update(ctx, buf, len); 190 return 0; 191 } 192