/src/sudo/lib/util/digest_openssl.c
Line | Count | Source |
1 | | /* |
2 | | * SPDX-License-Identifier: ISC |
3 | | * |
4 | | * Copyright (c) 2013-2021 Todd C. Miller <Todd.Miller@sudo.ws> |
5 | | * |
6 | | * Permission to use, copy, modify, and distribute this software for any |
7 | | * purpose with or without fee is hereby granted, provided that the above |
8 | | * copyright notice and this permission notice appear in all copies. |
9 | | * |
10 | | * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES |
11 | | * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF |
12 | | * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR |
13 | | * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES |
14 | | * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN |
15 | | * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF |
16 | | * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. |
17 | | */ |
18 | | |
19 | | #include <config.h> |
20 | | |
21 | | #include <stdlib.h> |
22 | | #include <errno.h> |
23 | | |
24 | | #if defined(HAVE_WOLFSSL) |
25 | | # include <wolfssl/options.h> |
26 | | #endif |
27 | | #include <openssl/evp.h> |
28 | | |
29 | | #include <sudo_compat.h> |
30 | | #include <sudo_debug.h> |
31 | | #include <sudo_digest.h> |
32 | | |
33 | | struct sudo_digest { |
34 | | EVP_MD_CTX *ctx; |
35 | | const EVP_MD *md; |
36 | | }; |
37 | | |
38 | | static const EVP_MD * |
39 | | sudo_digest_type_to_md(unsigned int digest_type) |
40 | 0 | { |
41 | 0 | const EVP_MD *md = NULL; |
42 | 0 | debug_decl(sudo_digest_type_to_md, SUDO_DEBUG_UTIL); |
43 | |
|
44 | 0 | switch (digest_type) { |
45 | 0 | case SUDO_DIGEST_SHA224: |
46 | 0 | md = EVP_sha224(); |
47 | 0 | break; |
48 | 0 | case SUDO_DIGEST_SHA256: |
49 | 0 | md = EVP_sha256(); |
50 | 0 | break; |
51 | 0 | case SUDO_DIGEST_SHA384: |
52 | 0 | md = EVP_sha384(); |
53 | 0 | break; |
54 | 0 | case SUDO_DIGEST_SHA512: |
55 | 0 | md = EVP_sha512(); |
56 | 0 | break; |
57 | 0 | default: |
58 | 0 | errno = EINVAL; |
59 | 0 | break; |
60 | 0 | } |
61 | 0 | debug_return_const_ptr(md); |
62 | 0 | } |
63 | | |
64 | | struct sudo_digest * |
65 | | sudo_digest_alloc_v1(unsigned int digest_type) |
66 | 0 | { |
67 | 0 | struct sudo_digest *dig; |
68 | 0 | EVP_MD_CTX *mdctx = NULL; |
69 | 0 | const EVP_MD *md; |
70 | 0 | debug_decl(sudo_digest_alloc, SUDO_DEBUG_UTIL); |
71 | |
|
72 | 0 | md = sudo_digest_type_to_md(digest_type); |
73 | 0 | if (md == NULL) |
74 | 0 | goto bad; |
75 | | |
76 | 0 | mdctx = EVP_MD_CTX_new(); |
77 | 0 | if (mdctx == NULL || !EVP_DigestInit_ex(mdctx, md, NULL)) |
78 | 0 | goto bad; |
79 | | |
80 | 0 | if ((dig = malloc(sizeof(*dig))) == NULL) |
81 | 0 | goto bad; |
82 | 0 | dig->md = md; |
83 | 0 | dig->ctx = mdctx; |
84 | |
|
85 | 0 | debug_return_ptr(dig); |
86 | 0 | bad: |
87 | 0 | EVP_MD_CTX_free(mdctx); |
88 | 0 | debug_return_ptr(NULL); |
89 | 0 | } |
90 | | |
91 | | void |
92 | | sudo_digest_free_v1(struct sudo_digest *dig) |
93 | 0 | { |
94 | 0 | debug_decl(sudo_digest_free, SUDO_DEBUG_UTIL); |
95 | |
|
96 | 0 | if (dig != NULL) { |
97 | 0 | EVP_MD_CTX_free(dig->ctx); |
98 | 0 | free(dig); |
99 | 0 | } |
100 | |
|
101 | 0 | debug_return; |
102 | 0 | } |
103 | | |
104 | | void |
105 | | sudo_digest_reset_v1(struct sudo_digest *dig) |
106 | 0 | { |
107 | 0 | debug_decl(sudo_digest_reset, SUDO_DEBUG_UTIL); |
108 | | |
109 | | /* These cannot fail. */ |
110 | 0 | EVP_MD_CTX_reset(dig->ctx); |
111 | 0 | EVP_DigestInit_ex(dig->ctx, dig->md, NULL); |
112 | |
|
113 | 0 | debug_return; |
114 | 0 | } |
115 | | |
116 | | size_t |
117 | | sudo_digest_getlen_v2(unsigned int digest_type) |
118 | 0 | { |
119 | 0 | const EVP_MD *md; |
120 | 0 | debug_decl(sudo_digest_getlen, SUDO_DEBUG_UTIL); |
121 | |
|
122 | 0 | md = sudo_digest_type_to_md(digest_type); |
123 | 0 | if (md == NULL) |
124 | 0 | debug_return_size_t(0); |
125 | | |
126 | 0 | debug_return_size_t((size_t)EVP_MD_size(md)); |
127 | 0 | } |
128 | | |
129 | | int |
130 | | sudo_digest_getlen_v1(unsigned int digest_type) |
131 | 0 | { |
132 | 0 | size_t len = sudo_digest_getlen_v2(digest_type); |
133 | 0 | return len ? (int)len : -1; |
134 | 0 | } |
135 | | |
136 | | void |
137 | | sudo_digest_update_v1(struct sudo_digest *dig, const void *data, size_t len) |
138 | 0 | { |
139 | 0 | debug_decl(sudo_digest_update, SUDO_DEBUG_UTIL); |
140 | |
|
141 | 0 | EVP_DigestUpdate(dig->ctx, data, len); |
142 | |
|
143 | 0 | debug_return; |
144 | 0 | } |
145 | | |
146 | | void |
147 | | sudo_digest_final_v1(struct sudo_digest *dig, unsigned char *md) |
148 | 0 | { |
149 | 0 | debug_decl(sudo_digest_final, SUDO_DEBUG_UTIL); |
150 | |
|
151 | 0 | EVP_DigestFinal_ex(dig->ctx, md, NULL); |
152 | |
|
153 | 0 | debug_return; |
154 | 0 | } |