[apple/security.git] / libsecurity_apple_csp / lib / MacContext.h

/*
 * Copyright (c) 2000-2001 Apple Computer, Inc. All Rights Reserved.
 * 
 * The contents of this file constitute Original Code as defined in and are
 * subject to the Apple Public Source License Version 1.2 (the 'License').
 * You may not use this file except in compliance with the License. Please obtain
 * a copy of the License at http://www.apple.com/publicsource and read it before
 * using this file.
 * 
 * This Original Code and all software distributed under the License are
 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
 * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
 * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
 * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
 * specific language governing rights and limitations under the License.
 */

/*
 * MacContext.h - AppleCSPContext for HMAC{SHA1,MD5}
 */

#ifndef	_MAC_CONTEXT_H_
#define _MAC_CONTEXT_H_

#include <AppleCSPContext.h>
#include <CommonCrypto/CommonHMAC.h>

/* 
 * TLS Export Ciphers require HMAC calculation with a secret key
 * size of 0 bytes. We'd really like to enforce a minimum key size equal 
 * the digest size, per RFC 2104, but TLS precludes that.
 */
#define HMAC_MIN_KEY_SIZE		0
#define HMAC_SHA_MIN_KEY_SIZE	HMAC_MIN_KEY_SIZE
#define HMAC_MD5_MIN_KEY_SIZE	HMAC_MIN_KEY_SIZE
#define HMAC_MAX_KEY_SIZE		2048

class MacContext : public AppleCSPContext  {
public:
	MacContext(
		AppleCSPSession &session,
		CSSM_ALGORITHMS alg) : 
			AppleCSPContext(session), 
			mAlg(alg),
			mDigestSize(0) { }
	~MacContext();
	
	/* called out from CSPFullPluginSession....
	 * both generate and verify: */
	void init(const Context &context, bool isSigning);
	void update(const CssmData &data);
	
	/* generate only */
	void final(CssmData &out);	
	
	/* verify only */
	void final(const CssmData &in);	

	size_t outputSize(bool final, size_t inSize);

private:
	CCHmacContext	hmacCtx;
	CSSM_ALGORITHMS	mAlg;
	uint32			mDigestSize;
};

#ifdef	CRYPTKIT_CSP_ENABLE
#include <security_cryptkit/HmacSha1Legacy.h>

/* This version is bug-for-bug compatible with a legacy implementation */

class MacLegacyContext : public AppleCSPContext  {
public:
	MacLegacyContext(
		AppleCSPSession &session,
		CSSM_ALGORITHMS alg) : 
			AppleCSPContext(session), mHmac(NULL) { }
	~MacLegacyContext();
	
	/* called out from CSPFullPluginSession....
	 * both generate and verify: */
	void init(const Context &context, bool isSigning);
	void update(const CssmData &data);
	
	/* generate only */
	void final(CssmData &out);	
	
	/* verify only */
	void final(const CssmData &in);	

	size_t outputSize(bool final, size_t inSize);

private:
	hmacLegacyContextRef	mHmac;
};

#endif	/* CRYPTKIT_CSP_ENABLE */

#endif	/* _MAC_CONTEXT_H_ */
Commit	Line	Data
b1ab9ed8 A	1	/*
	2	* Copyright (c) 2000-2001 Apple Computer, Inc. All Rights Reserved.
	3	*
	4	* The contents of this file constitute Original Code as defined in and are
	5	* subject to the Apple Public Source License Version 1.2 (the 'License').
	6	* You may not use this file except in compliance with the License. Please obtain
	7	* a copy of the License at http://www.apple.com/publicsource and read it before
	8	* using this file.
	9	*
	10	* This Original Code and all software distributed under the License are
	11	* distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
	12	* OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
	13	* LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
	14	* PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
	15	* specific language governing rights and limitations under the License.
	16	*/
	17
	18	/*
	19	* MacContext.h - AppleCSPContext for HMAC{SHA1,MD5}
	20	*/
	21
	22	#ifndef _MAC_CONTEXT_H_
	23	#define _MAC_CONTEXT_H_
	24
	25	#include <AppleCSPContext.h>
	26	#include <CommonCrypto/CommonHMAC.h>
	27
	28	/*
	29	* TLS Export Ciphers require HMAC calculation with a secret key
	30	* size of 0 bytes. We'd really like to enforce a minimum key size equal
	31	* the digest size, per RFC 2104, but TLS precludes that.
	32	*/
	33	#define HMAC_MIN_KEY_SIZE 0
	34	#define HMAC_SHA_MIN_KEY_SIZE HMAC_MIN_KEY_SIZE
	35	#define HMAC_MD5_MIN_KEY_SIZE HMAC_MIN_KEY_SIZE
	36	#define HMAC_MAX_KEY_SIZE 2048
	37
	38	class MacContext : public AppleCSPContext {
	39	public:
	40	MacContext(
	41	AppleCSPSession &session,
	42	CSSM_ALGORITHMS alg) :
	43	AppleCSPContext(session),
	44	mAlg(alg),
	45	mDigestSize(0) { }
	46	~MacContext();
	47
	48	/* called out from CSPFullPluginSession....
	49	* both generate and verify: */
	50	void init(const Context &context, bool isSigning);
	51	void update(const CssmData &data);
	52
	53	/* generate only */
	54	void final(CssmData &out);
	55
	56	/* verify only */
	57	void final(const CssmData &in);
	58
	59	size_t outputSize(bool final, size_t inSize);
	60
	61	private:
	62	CCHmacContext hmacCtx;
	63	CSSM_ALGORITHMS mAlg;
	64	uint32 mDigestSize;
65	};
66
67	#ifdef CRYPTKIT_CSP_ENABLE
68	#include <security_cryptkit/HmacSha1Legacy.h>
69
70	/* This version is bug-for-bug compatible with a legacy implementation */
71
72	class MacLegacyContext : public AppleCSPContext {
73	public:
74	MacLegacyContext(
75	AppleCSPSession &session,
76	CSSM_ALGORITHMS alg) :
77	AppleCSPContext(session), mHmac(NULL) { }
78	~MacLegacyContext();
79
80	/* called out from CSPFullPluginSession....
81	* both generate and verify: */
82	void init(const Context &context, bool isSigning);
83	void update(const CssmData &data);
84
85	/* generate only */
86	void final(CssmData &out);
87
88	/* verify only */
89	void final(const CssmData &in);
90
91	size_t outputSize(bool final, size_t inSize);
92
93	private:
94	hmacLegacyContextRef mHmac;
95	};
96
97	#endif /* CRYPTKIT_CSP_ENABLE */
98
99	#endif /* _MAC_CONTEXT_H_ */