155714Skris/* p12_mutl.c */
2194206Ssimon/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
355714Skris * project 1999.
455714Skris */
555714Skris/* ====================================================================
655714Skris * Copyright (c) 1999 The OpenSSL Project.  All rights reserved.
755714Skris *
855714Skris * Redistribution and use in source and binary forms, with or without
955714Skris * modification, are permitted provided that the following conditions
1055714Skris * are met:
1155714Skris *
1255714Skris * 1. Redistributions of source code must retain the above copyright
1355714Skris *    notice, this list of conditions and the following disclaimer.
1455714Skris *
1555714Skris * 2. Redistributions in binary form must reproduce the above copyright
1655714Skris *    notice, this list of conditions and the following disclaimer in
1755714Skris *    the documentation and/or other materials provided with the
1855714Skris *    distribution.
1955714Skris *
2055714Skris * 3. All advertising materials mentioning features or use of this
2155714Skris *    software must display the following acknowledgment:
2255714Skris *    "This product includes software developed by the OpenSSL Project
2355714Skris *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
2455714Skris *
2555714Skris * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
2655714Skris *    endorse or promote products derived from this software without
2755714Skris *    prior written permission. For written permission, please contact
2855714Skris *    licensing@OpenSSL.org.
2955714Skris *
3055714Skris * 5. Products derived from this software may not be called "OpenSSL"
3155714Skris *    nor may "OpenSSL" appear in their names without prior written
3255714Skris *    permission of the OpenSSL Project.
3355714Skris *
3455714Skris * 6. Redistributions of any form whatsoever must retain the following
3555714Skris *    acknowledgment:
3655714Skris *    "This product includes software developed by the OpenSSL Project
3755714Skris *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
3855714Skris *
3955714Skris * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
4055714Skris * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
4155714Skris * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
4255714Skris * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
4355714Skris * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
4455714Skris * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
4555714Skris * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
4655714Skris * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
4755714Skris * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
4855714Skris * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
4955714Skris * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
5055714Skris * OF THE POSSIBILITY OF SUCH DAMAGE.
5155714Skris * ====================================================================
5255714Skris *
5355714Skris * This product includes cryptographic software written by Eric Young
5455714Skris * (eay@cryptsoft.com).  This product includes software written by Tim
5555714Skris * Hudson (tjh@cryptsoft.com).
5655714Skris *
5755714Skris */
5855714Skris
59109998Smarkm#ifndef OPENSSL_NO_HMAC
6055714Skris#include <stdio.h>
6155714Skris#include "cryptlib.h"
6255714Skris#include <openssl/hmac.h>
6355714Skris#include <openssl/rand.h>
6455714Skris#include <openssl/pkcs12.h>
6555714Skris
6655714Skris/* Generate a MAC */
67160814Ssimonint PKCS12_gen_mac(PKCS12 *p12, const char *pass, int passlen,
68160814Ssimon		   unsigned char *mac, unsigned int *maclen)
6955714Skris{
7055714Skris	const EVP_MD *md_type;
7155714Skris	HMAC_CTX hmac;
72162911Ssimon	unsigned char key[EVP_MAX_MD_SIZE], *salt;
7355714Skris	int saltlen, iter;
74238405Sjkim	int md_size;
75109998Smarkm
76160814Ssimon	if (!PKCS7_type_is_data(p12->authsafes))
77160814Ssimon		{
78160814Ssimon		PKCS12err(PKCS12_F_PKCS12_GEN_MAC,PKCS12_R_CONTENT_TYPE_NOT_DATA);
79160814Ssimon		return 0;
80160814Ssimon		}
81160814Ssimon
8255714Skris	salt = p12->mac->salt->data;
8355714Skris	saltlen = p12->mac->salt->length;
8455714Skris	if (!p12->mac->iter) iter = 1;
8555714Skris	else iter = ASN1_INTEGER_get (p12->mac->iter);
8655714Skris    	if(!(md_type =
8755714Skris		 EVP_get_digestbyobj (p12->mac->dinfo->algor->algorithm))) {
8855714Skris		PKCS12err(PKCS12_F_PKCS12_GEN_MAC,PKCS12_R_UNKNOWN_DIGEST_ALGORITHM);
8955714Skris		return 0;
9055714Skris	}
91238405Sjkim	md_size = EVP_MD_size(md_type);
92238405Sjkim	if (md_size < 0)
93238405Sjkim	    return 0;
9455714Skris	if(!PKCS12_key_gen (pass, passlen, salt, saltlen, PKCS12_MAC_ID, iter,
95238405Sjkim				 md_size, key, md_type)) {
9655714Skris		PKCS12err(PKCS12_F_PKCS12_GEN_MAC,PKCS12_R_KEY_GEN_ERROR);
9755714Skris		return 0;
9855714Skris	}
99109998Smarkm	HMAC_CTX_init(&hmac);
100238405Sjkim	if (!HMAC_Init_ex(&hmac, key, md_size, md_type, NULL)
101238405Sjkim    		|| !HMAC_Update(&hmac, p12->authsafes->d.data->data,
102238405Sjkim					 p12->authsafes->d.data->length)
103238405Sjkim    		|| !HMAC_Final(&hmac, mac, maclen))
104238405Sjkim		{
105238405Sjkim    		HMAC_CTX_cleanup(&hmac);
106238405Sjkim		return 0;
107238405Sjkim		}
108109998Smarkm    	HMAC_CTX_cleanup(&hmac);
10955714Skris	return 1;
11055714Skris}
11155714Skris
11255714Skris/* Verify the mac */
113160814Ssimonint PKCS12_verify_mac(PKCS12 *p12, const char *pass, int passlen)
11455714Skris{
11555714Skris	unsigned char mac[EVP_MAX_MD_SIZE];
11655714Skris	unsigned int maclen;
11755714Skris	if(p12->mac == NULL) {
118160814Ssimon		PKCS12err(PKCS12_F_PKCS12_VERIFY_MAC,PKCS12_R_MAC_ABSENT);
11955714Skris		return 0;
12055714Skris	}
12155714Skris	if (!PKCS12_gen_mac (p12, pass, passlen, mac, &maclen)) {
122160814Ssimon		PKCS12err(PKCS12_F_PKCS12_VERIFY_MAC,PKCS12_R_MAC_GENERATION_ERROR);
12355714Skris		return 0;
12455714Skris	}
12555714Skris	if ((maclen != (unsigned int)p12->mac->dinfo->digest->length)
12668651Skris	|| memcmp (mac, p12->mac->dinfo->digest->data, maclen)) return 0;
12755714Skris	return 1;
12855714Skris}
12955714Skris
13055714Skris/* Set a mac */
13155714Skris
132160814Ssimonint PKCS12_set_mac(PKCS12 *p12, const char *pass, int passlen,
133109998Smarkm	     unsigned char *salt, int saltlen, int iter, const EVP_MD *md_type)
13455714Skris{
13555714Skris	unsigned char mac[EVP_MAX_MD_SIZE];
13655714Skris	unsigned int maclen;
13755714Skris
13855714Skris	if (!md_type) md_type = EVP_sha1();
13955714Skris	if (PKCS12_setup_mac (p12, iter, salt, saltlen, md_type) ==
14055714Skris				 	PKCS12_ERROR) {
14155714Skris		PKCS12err(PKCS12_F_PKCS12_SET_MAC,PKCS12_R_MAC_SETUP_ERROR);
14255714Skris		return 0;
14355714Skris	}
14455714Skris	if (!PKCS12_gen_mac (p12, pass, passlen, mac, &maclen)) {
14555714Skris		PKCS12err(PKCS12_F_PKCS12_SET_MAC,PKCS12_R_MAC_GENERATION_ERROR);
14655714Skris		return 0;
14755714Skris	}
14859191Skris	if (!(M_ASN1_OCTET_STRING_set (p12->mac->dinfo->digest, mac, maclen))) {
14955714Skris		PKCS12err(PKCS12_F_PKCS12_SET_MAC,PKCS12_R_MAC_STRING_SET_ERROR);
15055714Skris						return 0;
15155714Skris	}
15255714Skris	return 1;
15355714Skris}
15455714Skris
15555714Skris/* Set up a mac structure */
156160814Ssimonint PKCS12_setup_mac(PKCS12 *p12, int iter, unsigned char *salt, int saltlen,
157109998Smarkm	     const EVP_MD *md_type)
15855714Skris{
15959191Skris	if (!(p12->mac = PKCS12_MAC_DATA_new())) return PKCS12_ERROR;
16055714Skris	if (iter > 1) {
16159191Skris		if(!(p12->mac->iter = M_ASN1_INTEGER_new())) {
16255714Skris			PKCS12err(PKCS12_F_PKCS12_SETUP_MAC, ERR_R_MALLOC_FAILURE);
16355714Skris			return 0;
16455714Skris		}
165160814Ssimon		if (!ASN1_INTEGER_set(p12->mac->iter, iter)) {
166160814Ssimon			PKCS12err(PKCS12_F_PKCS12_SETUP_MAC, ERR_R_MALLOC_FAILURE);
167160814Ssimon			return 0;
168160814Ssimon		}
16955714Skris	}
17055714Skris	if (!saltlen) saltlen = PKCS12_SALT_LEN;
17155714Skris	p12->mac->salt->length = saltlen;
17268651Skris	if (!(p12->mac->salt->data = OPENSSL_malloc (saltlen))) {
17355714Skris		PKCS12err(PKCS12_F_PKCS12_SETUP_MAC, ERR_R_MALLOC_FAILURE);
17455714Skris		return 0;
17555714Skris	}
17659191Skris	if (!salt) {
17759191Skris		if (RAND_pseudo_bytes (p12->mac->salt->data, saltlen) < 0)
17859191Skris			return 0;
17959191Skris	}
18055714Skris	else memcpy (p12->mac->salt->data, salt, saltlen);
18155714Skris	p12->mac->dinfo->algor->algorithm = OBJ_nid2obj(EVP_MD_type(md_type));
18255714Skris	if (!(p12->mac->dinfo->algor->parameter = ASN1_TYPE_new())) {
18355714Skris		PKCS12err(PKCS12_F_PKCS12_SETUP_MAC, ERR_R_MALLOC_FAILURE);
18455714Skris		return 0;
18555714Skris	}
18655714Skris	p12->mac->dinfo->algor->parameter->type = V_ASN1_NULL;
18755714Skris
18855714Skris	return 1;
18955714Skris}
19055714Skris#endif
191