1/* 2 * Copyright (c) 2000-2001,2011,2014 Apple Inc. All Rights Reserved. 3 * 4 * The contents of this file constitute Original Code as defined in and are 5 * subject to the Apple Public Source License Version 1.2 (the 'License'). 6 * You may not use this file except in compliance with the License. Please obtain 7 * a copy of the License at http://www.apple.com/publicsource and read it before 8 * using this file. 9 * 10 * This Original Code and all software distributed under the License are 11 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS 12 * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT 13 * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR 14 * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the 15 * specific language governing rights and limitations under the License. 16 */ 17 18/* 19 * MacContext.h - AppleCSPContext for HMAC{SHA1,MD5} 20 */ 21 22#ifndef _MAC_CONTEXT_H_ 23#define _MAC_CONTEXT_H_ 24 25#include <AppleCSPContext.h> 26#include <CommonCrypto/CommonHMAC.h> 27 28/* 29 * TLS Export Ciphers require HMAC calculation with a secret key 30 * size of 0 bytes. We'd really like to enforce a minimum key size equal 31 * the digest size, per RFC 2104, but TLS precludes that. 32 */ 33#define HMAC_MIN_KEY_SIZE 0 34#define HMAC_SHA_MIN_KEY_SIZE HMAC_MIN_KEY_SIZE 35#define HMAC_MD5_MIN_KEY_SIZE HMAC_MIN_KEY_SIZE 36#define HMAC_MAX_KEY_SIZE 2048 37 38class MacContext : public AppleCSPContext { 39public: 40 MacContext( 41 AppleCSPSession &session, 42 CSSM_ALGORITHMS alg) : 43 AppleCSPContext(session), 44 mAlg(alg), 45 mDigestSize(0) { } 46 ~MacContext(); 47 48 /* called out from CSPFullPluginSession.... 49 * both generate and verify: */ 50 void init(const Context &context, bool isSigning); 51 void update(const CssmData &data); 52 53 /* generate only */ 54 void final(CssmData &out); 55 56 /* verify only */ 57 void final(const CssmData &in); 58 59 size_t outputSize(bool final, size_t inSize); 60 61private: 62 CCHmacContext hmacCtx; 63 CSSM_ALGORITHMS mAlg; 64 uint32 mDigestSize; 65}; 66 67#ifdef CRYPTKIT_CSP_ENABLE 68#include <security_cryptkit/HmacSha1Legacy.h> 69 70/* This version is bug-for-bug compatible with a legacy implementation */ 71 72class MacLegacyContext : public AppleCSPContext { 73public: 74 MacLegacyContext( 75 AppleCSPSession &session, 76 CSSM_ALGORITHMS alg) : 77 AppleCSPContext(session), mHmac(NULL) { } 78 ~MacLegacyContext(); 79 80 /* called out from CSPFullPluginSession.... 81 * both generate and verify: */ 82 void init(const Context &context, bool isSigning); 83 void update(const CssmData &data); 84 85 /* generate only */ 86 void final(CssmData &out); 87 88 /* verify only */ 89 void final(const CssmData &in); 90 91 size_t outputSize(bool final, size_t inSize); 92 93private: 94 hmacLegacyContextRef mHmac; 95}; 96 97#endif /* CRYPTKIT_CSP_ENABLE */ 98 99#endif /* _MAC_CONTEXT_H_ */ 100