openssl/ssl/s3_cbc.c

74  * MAX_HASH_BLOCK_SIZE is the maximum hash block size that we'll support.
75  * Currently SHA-384/512 has a 128-byte block size and that's the largest
173     void (*md_transform) (void *ctx, const unsigned char *block);
210             (void (*)(void *ctx, const unsigned char *block))MD5_Transform;
220             (void (*)(void *ctx, const unsigned char *block))SHA1_Transform;
227             (void (*)(void *ctx, const unsigned char *block))SHA256_Transform;
234             (void (*)(void *ctx, const unsigned char *block))SHA256_Transform;
241             (void (*)(void *ctx, const unsigned char *block))SHA512_Transform;
250             (void (*)(void *ctx, const unsigned char *block))SHA512_Transform;
284      * block, we say that the final two blocks can vary based on the padding.
327      * c is the index of the 0x80 byte in the final hash block that contains
332      * index_a is the hash block number that contains the 0x80 terminating
337      * index_b is the hash block number that contains the 64-bit hash length,
342      * bits is the hash-length in bits. It includes the additional hash block
348      * least two because the header is larger than a single block.
358          * Compute the initial HMAC block. For SSLv3, the padding and secret
360          * single block.
392              * The SSLv3 header is larger than a single block. overhang is
393              * the number of bytes beyond a single block that the header
424      * We now process the final hash blocks. For each block, we construct it
426      * bytes and zero pad etc. For each block we selectively copy it, in
431         unsigned char block[MAX_HASH_BLOCK_SIZE];
445              * If this is the block containing the end of the application
451              * If this block contains the end of the application data
456              * If this is index_b (the final block), but not index_a (the end
458              * and we're having to add an extra block of zeros.
472             block[j] = b;
475         md_transform(md_state.c, block);
476         md_final_raw(md_state.c, block);
479             mac_out[j] |= block[j] & is_block_b;
489         /* We repurpose |hmac_pad| to contain the SSLv3 pad2 block. */