strongswan/src/libstrongswan/crypto/prf_plus.c

171 lines
3.5 KiB
C

/*
* Copyright (C) 2005-2006 Martin Willi
* Copyright (C) 2005 Jan Hutter
* HSR Hochschule fuer Technik Rapperswil
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation; either version 2 of the License, or (at your
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* for more details.
*/
#include <string.h>
#include "prf_plus.h"
typedef struct private_prf_plus_t private_prf_plus_t;
typedef bool (*apply_prf_t)(private_prf_plus_t *this);
/**
* Private data of an prf_plus_t object.
*
*/
struct private_prf_plus_t {
/**
* Public interface of prf_plus_t.
*/
prf_plus_t public;
/**
* PRF to use.
*/
prf_t *prf;
/**
* Initial seed.
*/
chunk_t seed;
/**
* Octet which will be appended to the seed if a counter is used.
*/
uint8_t counter;
/**
* Already given out bytes in current buffer.
*/
size_t used;
/**
* Buffer to store current PRF result.
*/
chunk_t buffer;
/**
* The prf application method depending on whether a counter is used.
*/
apply_prf_t apply_prf;
};
/**
* Apply the PRF using the running counter
*/
static bool apply_prf_counter(private_prf_plus_t *this)
{
if (!this->prf->get_bytes(this->prf, this->seed, NULL) ||
!this->prf->get_bytes(this->prf, chunk_from_thing(this->counter),
this->buffer.ptr))
{
return FALSE;
}
this->counter++;
if (!this->counter)
{ /* according to RFC 7296, section 2.13, prf+ is undefined once the
* counter wrapped, so let's fail for future calls */
this->apply_prf = (void*)return_false;
}
return TRUE;
}
/**
* Apply the PRF using the running counter
*/
static bool apply_prf(private_prf_plus_t *this)
{
return this->prf->get_bytes(this->prf, this->seed, this->buffer.ptr);
}
METHOD(prf_plus_t, get_bytes, bool,
private_prf_plus_t *this, size_t length, uint8_t *buffer)
{
size_t round, written = 0;
while (length > 0)
{
if (this->buffer.len == this->used)
{ /* buffer used, get next round */
if (!this->prf->get_bytes(this->prf, this->buffer, NULL))
{
return FALSE;
}
if (!this->apply_prf(this))
{
return FALSE;
}
this->used = 0;
}
round = min(length, this->buffer.len - this->used);
memcpy(buffer + written, this->buffer.ptr + this->used, round);
length -= round;
this->used += round;
written += round;
}
return TRUE;
}
METHOD(prf_plus_t, allocate_bytes, bool,
private_prf_plus_t *this, size_t length, chunk_t *chunk)
{
*chunk = chunk_alloc(length);
if (!get_bytes(this, length, chunk->ptr))
{
chunk_free(chunk);
return FALSE;
}
return TRUE;
}
METHOD(prf_plus_t, destroy, void,
private_prf_plus_t *this)
{
chunk_clear(&this->buffer);
chunk_clear(&this->seed);
free(this);
}
/*
* Description in header.
*/
prf_plus_t *prf_plus_create(prf_t *prf, bool counter, chunk_t seed)
{
private_prf_plus_t *this;
INIT(this,
.public = {
.get_bytes = _get_bytes,
.allocate_bytes = _allocate_bytes,
.destroy = _destroy,
},
.prf = prf,
.seed = chunk_clone(seed),
.buffer = chunk_alloc(prf->get_block_size(prf)),
.apply_prf = counter ? apply_prf_counter : apply_prf,
.counter = 0x01,
);
if (!this->apply_prf(this))
{
destroy(this);
return NULL;
}
return &this->public;
}