1/*
2 * Copyright (c) 2000-2001,2011,2014 Apple Inc. All Rights Reserved.
3 *
4 * The contents of this file constitute Original Code as defined in and are
5 * subject to the Apple Public Source License Version 1.2 (the 'License').
6 * You may not use this file except in compliance with the License. Please obtain
7 * a copy of the License at http://www.apple.com/publicsource and read it before
8 * using this file.
9 *
10 * This Original Code and all software distributed under the License are
11 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
12 * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
13 * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
14 * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
15 * specific language governing rights and limitations under the License.
16 */
17
18/*
19 * MacContext.h - AppleCSPContext for HMAC{SHA1,MD5}
20 */
21
22#ifndef	_MAC_CONTEXT_H_
23#define _MAC_CONTEXT_H_
24
25#include <AppleCSPContext.h>
26#include <CommonCrypto/CommonHMAC.h>
27
28/*
29 * TLS Export Ciphers require HMAC calculation with a secret key
30 * size of 0 bytes. We'd really like to enforce a minimum key size equal
31 * the digest size, per RFC 2104, but TLS precludes that.
32 */
33#define HMAC_MIN_KEY_SIZE		0
34#define HMAC_SHA_MIN_KEY_SIZE	HMAC_MIN_KEY_SIZE
35#define HMAC_MD5_MIN_KEY_SIZE	HMAC_MIN_KEY_SIZE
36#define HMAC_MAX_KEY_SIZE		2048
37
38class MacContext : public AppleCSPContext  {
39public:
40	MacContext(
41		AppleCSPSession &session,
42		CSSM_ALGORITHMS alg) :
43			AppleCSPContext(session),
44			mAlg(alg),
45			mDigestSize(0) { }
46	~MacContext();
47
48	/* called out from CSPFullPluginSession....
49	 * both generate and verify: */
50	void init(const Context &context, bool isSigning);
51	void update(const CssmData &data);
52
53	/* generate only */
54	void final(CssmData &out);
55
56	/* verify only */
57	void final(const CssmData &in);
58
59	size_t outputSize(bool final, size_t inSize);
60
61private:
62	CCHmacContext	hmacCtx;
63	CSSM_ALGORITHMS	mAlg;
64	uint32			mDigestSize;
65};
66
67#ifdef	CRYPTKIT_CSP_ENABLE
68#include <security_cryptkit/HmacSha1Legacy.h>
69
70/* This version is bug-for-bug compatible with a legacy implementation */
71
72class MacLegacyContext : public AppleCSPContext  {
73public:
74	MacLegacyContext(
75		AppleCSPSession &session,
76		CSSM_ALGORITHMS alg) :
77			AppleCSPContext(session), mHmac(NULL) { }
78	~MacLegacyContext();
79
80	/* called out from CSPFullPluginSession....
81	 * both generate and verify: */
82	void init(const Context &context, bool isSigning);
83	void update(const CssmData &data);
84
85	/* generate only */
86	void final(CssmData &out);
87
88	/* verify only */
89	void final(const CssmData &in);
90
91	size_t outputSize(bool final, size_t inSize);
92
93private:
94	hmacLegacyContextRef	mHmac;
95};
96
97#endif	/* CRYPTKIT_CSP_ENABLE */
98
99#endif	/* _MAC_CONTEXT_H_ */
100