/*

 * Copyright (C) 2017 Red Hat, Inc.

 *

 * Author: Nikos Mavrogiannopoulos

 *

 * This file is part of GNUTLS.

 *

 * The GNUTLS library is free software; you can redistribute it and/or

 * modify it under the terms of the GNU Lesser General Public License

 * as published by the Free Software Foundation; either version 2.1 of

 * the License, or (at your option) any later version.

 *

 * This library is distributed in the hope that it will be useful, but

 * WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU

 * Lesser General Public License for more details.

 *

 * You should have received a copy of the GNU Lesser General Public License

 * along with this program.  If not, see <https://www.gnu.org/licenses/>

 *

 */

#include <gnutls_int.h>

#include "int/tls1-prf.h"

#include <nettle/hmac.h>

#if ENABLE_GOST

# include "gost/hmac-gost.h"

#endif

/*-

 * _gnutls_prf_raw:

 * @mac: the MAC algorithm to use, set to %GNUTLS_MAC_MD5_SHA1 for the TLS1.0 mac

 * @master_size: length of the @master variable.

 * @master: the master secret used in PRF computation

 * @label_size: length of the @label variable.

 * @label: label used in PRF computation, typically a short string.

 * @seed_size: length of the @seed variable.

 * @seed: optional extra data to seed the PRF with.

 * @outsize: size of pre-allocated output buffer to hold the output.

 * @out: pre-allocated buffer to hold the generated data.

 *

 * Apply the TLS Pseudo-Random-Function (PRF) on the master secret

 * and the provided data.

 *

 * Returns: %GNUTLS_E_SUCCESS on success, or an error code.

 -*/

int

_gnutls_prf_raw(gnutls_mac_algorithm_t mac,

    size_t master_size, const void *master,

    size_t label_size, const char *label,

    size_t seed_size, const uint8_t * seed, size_t outsize,

    char *out)

{

  int ret;

  switch (mac) {

  case GNUTLS_MAC_MD5_SHA1:

    tls10_prf(master_size, (uint8_t *) master, label_size, label,

        seed_size, seed, outsize, (uint8_t *) out);

    return 0;

  case GNUTLS_MAC_SHA256:{

      struct hmac_sha256_ctx ctx;

      hmac_sha256_set_key(&ctx, master_size,

              (uint8_t *) master);

      ret = tls12_prf(&ctx, (nettle_hash_update_func *)

          hmac_sha256_update,

          (nettle_hash_digest_func *)

          hmac_sha256_digest, SHA256_DIGEST_SIZE,

          label_size, label, seed_size,

          seed, outsize, (uint8_t *) out);

      if (unlikely(ret != 1))

        return

            gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);

      break;

    }

  case GNUTLS_MAC_SHA384:{

      struct hmac_sha384_ctx ctx;

      hmac_sha384_set_key(&ctx, master_size, master);

      ret = tls12_prf(&ctx, (nettle_hash_update_func *)

          hmac_sha384_update,

          (nettle_hash_digest_func *)

          hmac_sha384_digest, SHA384_DIGEST_SIZE,

          label_size, label, seed_size,

          seed, outsize, (uint8_t *) out);

      if (unlikely(ret != 1))

        return

            gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);

      break;

    }

#if ENABLE_GOST

  case GNUTLS_MAC_STREEBOG_256:{

      struct hmac_streebog256_ctx ctx;

      hmac_streebog256_set_key(&ctx, master_size, master);

      ret = tls12_prf(&ctx, (nettle_hash_update_func *)

          hmac_streebog256_update,

          (nettle_hash_digest_func *)

          hmac_streebog256_digest,

          STREEBOG256_DIGEST_SIZE, label_size,

          label, seed_size, seed, outsize,

          (uint8_t *) out);

      if (unlikely(ret != 1))

        return

            gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);

      break;

    }

  case GNUTLS_MAC_STREEBOG_512:{

      struct hmac_streebog512_ctx ctx;

      hmac_streebog512_set_key(&ctx, master_size, master);

      ret = tls12_prf(&ctx, (nettle_hash_update_func *)

          hmac_streebog512_update,

          (nettle_hash_digest_func *)

          hmac_streebog512_digest,

          STREEBOG512_DIGEST_SIZE, label_size,

          label, seed_size, seed, outsize,

          (uint8_t *) out);

      if (unlikely(ret != 1))

        return

            gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);

      break;

    }

#endif

  default:

    gnutls_assert();

    _gnutls_debug_log("unhandled PRF %s\n",

          gnutls_mac_get_name(mac));

    return GNUTLS_E_INVALID_REQUEST;

  }

  return 0;

}