Security/libsecurity_apple_csp/lib/MacContext.h

   1 /*
   2  * Copyright (c) 2000-2001,2011,2014 Apple Inc. All Rights Reserved.
   3  *
   4  * The contents of this file constitute Original Code as defined in and are
   5  * subject to the Apple Public Source License Version 1.2 (the 'License').
   6  * You may not use this file except in compliance with the License. Please obtain
   7  * a copy of the License at http://www.apple.com/publicsource and read it before
   8  * using this file.
   9  *
  10  * This Original Code and all software distributed under the License are
  11  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
  12  * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
  13  * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
  14  * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
  15  * specific language governing rights and limitations under the License.
  16  */
  17
  18 /*
  19  * MacContext.h - AppleCSPContext for HMAC{SHA1,MD5}
  20  */
  21
  22 #ifndef _MAC_CONTEXT_H_
  23 #define _MAC_CONTEXT_H_
  24
  25 #include <AppleCSPContext.h>
  26 #include <CommonCrypto/CommonHMAC.h>
  27
  28 /*
  29  * TLS Export Ciphers require HMAC calculation with a secret key
  30  * size of 0 bytes. We'd really like to enforce a minimum key size equal
  31  * the digest size, per RFC 2104, but TLS precludes that.
  32  */
  33 #define HMAC_MIN_KEY_SIZE               0
  34 #define HMAC_SHA_MIN_KEY_SIZE   HMAC_MIN_KEY_SIZE
  35 #define HMAC_MD5_MIN_KEY_SIZE   HMAC_MIN_KEY_SIZE
  36 #define HMAC_MAX_KEY_SIZE               2048
  37
  38 class MacContext : public AppleCSPContext  {
  39 public:
  40         MacContext(
  41                 AppleCSPSession &session,
  42                 CSSM_ALGORITHMS alg) :
  43                         AppleCSPContext(session),
  44                         mAlg(alg),
  45                         mDigestSize(0) { }
  46         ~MacContext();
  47
  48         /* called out from CSPFullPluginSession....
  49          * both generate and verify: */
  50         void init(const Context &context, bool isSigning);
  51         void update(const CssmData &data);
  52
  53         /* generate only */
  54         void final(CssmData &out);
  55
  56         /* verify only */
  57         void final(const CssmData &in);
  58
  59         size_t outputSize(bool final, size_t inSize);
  60
  61 private:
  62         CCHmacContext   hmacCtx;
  63         CSSM_ALGORITHMS mAlg;
  64         uint32                  mDigestSize;
  65 };
  66
  67 #ifdef  CRYPTKIT_CSP_ENABLE
  68 #include <security_cryptkit/HmacSha1Legacy.h>
  69
  70 /* This version is bug-for-bug compatible with a legacy implementation */
  71
  72 class MacLegacyContext : public AppleCSPContext  {
  73 public:
  74         MacLegacyContext(
  75                 AppleCSPSession &session,
  76                 CSSM_ALGORITHMS alg) :
  77                         AppleCSPContext(session), mHmac(NULL) { }
  78         ~MacLegacyContext();
  79
  80         /* called out from CSPFullPluginSession....
  81          * both generate and verify: */
  82         void init(const Context &context, bool isSigning);
  83         void update(const CssmData &data);
  84
  85         /* generate only */
  86         void final(CssmData &out);
  87
  88         /* verify only */
  89         void final(const CssmData &in);
  90
  91         size_t outputSize(bool final, size_t inSize);
  92
  93 private:
  94         hmacLegacyContextRef    mHmac;
  95 };
  96
  97 #endif  /* CRYPTKIT_CSP_ENABLE */
  98
  99 #endif  /* _MAC_CONTEXT_H_ */