-/*
- * Copyright (c) 2011-2012,2014 Apple Inc. All Rights Reserved.
- *
- * @APPLE_LICENSE_HEADER_START@
- *
- * This file contains Original Code and/or Modifications of Original Code
- * as defined in and that are subject to the Apple Public Source License
- * Version 2.0 (the 'License'). You may not use this file except in
- * compliance with the License. Please obtain a copy of the License at
- * http://www.opensource.apple.com/apsl/ and read it before using this
- * file.
- *
- * The Original Code and all software distributed under the License are
- * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
- * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
- * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
- * Please see the License for the specific language governing rights and
- * limitations under the License.
- *
- * @APPLE_LICENSE_HEADER_END@
- */
-
-
-#include <stdio.h>
-#include <CoreFoundation/CoreFoundation.h>
-#include "SecMaskGenerationFunctionTransform.h"
-#include "SecCustomTransform.h"
-#include "SecDigestTransform.h"
-#include "misc.h"
-#include "Utilities.h"
-
-static const CFStringRef kMaskGenerationFunctionTransformName = CFSTR("com.apple.security.MGF1");
-static const CFStringRef kLengthName = CFSTR("Length");
-
-static SecTransformInstanceBlock MaskGenerationFunctionTransform(CFStringRef name,
- SecTransformRef newTransform,
- SecTransformImplementationRef ref)
-{
- __block CFMutableDataRef accumulator = CFDataCreateMutable(NULL, 0);
- __block int32_t outputLength = 0;
-
- SecTransformInstanceBlock instanceBlock = ^{
- SecTransformSetTransformAction(ref, kSecTransformActionFinalize, ^{
- CFRelease(accumulator);
-
- return (CFTypeRef)NULL;
- });
-
- // XXX: be a good citizen, put a validator in for the types.
-
- SecTransformSetAttributeAction(ref, kSecTransformActionAttributeNotification, kLengthName, ^CFTypeRef(SecTransformAttributeRef attribute, CFTypeRef value) {
- CFNumberGetValue((CFNumberRef)value, kCFNumberSInt32Type, &outputLength);
- if (outputLength <= 0) {
- SecTransformCustomSetAttribute(ref, kSecTransformAbortAttributeName, kSecTransformMetaAttributeValue, CreateSecTransformErrorRef(kSecTransformErrorInvalidLength, "MaskGenerationFunction Length must be one or more (not %@)", value));
- }
-
- return (CFTypeRef)NULL;
- });
-
- SecTransformSetAttributeAction(ref, kSecTransformActionAttributeNotification, kSecTransformInputAttributeName, ^CFTypeRef(SecTransformAttributeRef attribute, CFTypeRef value) {
- if (value) {
- CFDataRef d = value;
- CFDataAppendBytes(accumulator, CFDataGetBytePtr(d), CFDataGetLength(d));
- } else {
- int32_t i = 0, l = 0;
- (void)transforms_assume(outputLength > 0);
- CFStringRef digestType = SecTranformCustomGetAttribute(ref, kSecDigestTypeAttribute, kSecTransformMetaAttributeValue);
- SecTransformRef digest0 = transforms_assume(SecDigestTransformCreate(digestType, 0, NULL));
- int32_t digestLength = 0;
- {
- CFNumberRef digestLengthAsCFNumber = SecTransformGetAttribute(digest0, kSecDigestLengthAttribute);
- CFNumberGetValue(transforms_assume(digestLengthAsCFNumber), kCFNumberSInt32Type, &digestLength);
- }
- (void)transforms_assume(digestLength >= 0);
-
- UInt8 *buffer = malloc(outputLength + digestLength);
- if (!buffer) {
- SecTransformCustomSetAttribute(ref, kSecTransformAbortAttributeName, kSecTransformMetaAttributeValue, GetNoMemoryErrorAndRetain());
- return (CFErrorRef)NULL;
- }
-
- dispatch_group_t all_hashed = dispatch_group_create();
- dispatch_group_enter(all_hashed);
- for(; l < outputLength; l += digestLength, i++) {
- dispatch_group_enter(all_hashed);
- CFErrorRef err = NULL;
- SecTransformRef digest = NULL;
- if (l == 0) {
- digest = digest0;
- } else {
- digest = SecDigestTransformCreate(digestType, 0, &err);
- if (digest == NULL) {
- SecTransformCustomSetAttribute(ref, kSecTransformAbortAttributeName, kSecTransformMetaAttributeValue, err);
- return (CFErrorRef)NULL;
- }
- }
-
- // NOTE: we shuld be able to do this without the copy, make a transform that takes an
- // array and outputs each item in the array followed by a NULL ought to be quicker.
- CFMutableDataRef accumulatorPlusCounter = CFDataCreateMutableCopy(NULL, CFDataGetLength(accumulator) + sizeof(uint32_t), accumulator);
- int32_t bigendian_i = htonl(i);
- CFDataAppendBytes(accumulatorPlusCounter, (UInt8*)&bigendian_i, sizeof(bigendian_i));
- SecTransformSetAttribute(digest, kSecTransformInputAttributeName, accumulatorPlusCounter, &err);
- CFRelease(accumulatorPlusCounter);
-
- UInt8 *buf = buffer + l;
- SecTransformExecuteAsync(digest, dispatch_get_global_queue(DISPATCH_QUEUE_PRIORITY_DEFAULT, 0), ^(CFTypeRef message, CFErrorRef error, Boolean isFinal) {
- if (message) {
- CFIndex messageLen = CFDataGetLength(message);
- CFDataGetBytes(message, CFRangeMake(0, messageLen), buf);
- }
- if (error) {
- SecTransformCustomSetAttribute(ref, kSecTransformAbortAttributeName, kSecTransformMetaAttributeValue, error);
- }
- if (isFinal) {
- dispatch_group_leave(all_hashed);
- }
- });
- CFRelease(digest);
- }
-
- dispatch_group_leave(all_hashed);
- dispatch_group_wait(all_hashed, DISPATCH_TIME_FOREVER);
- CFDataRef out = CFDataCreateWithBytesNoCopy(NULL, buffer, outputLength, kCFAllocatorMalloc);
- SecTransformCustomSetAttribute(ref, kSecTransformOutputAttributeName, kSecTransformMetaAttributeValue, out);
- CFRelease(out);
- SecTransformCustomSetAttribute(ref, kSecTransformOutputAttributeName, kSecTransformMetaAttributeValue, NULL);
- }
- return (CFErrorRef)NULL;
- });
-
- return (CFErrorRef)NULL;
- };
-
- return Block_copy(instanceBlock);
-}
-
-SecTransformRef SecCreateMaskGenerationFunctionTransform(CFStringRef hashType, int length, CFErrorRef *error)
-{
- static dispatch_once_t once;
- __block Boolean ok = TRUE;
-
- if (length <= 0) {
- if (error) {
- *error = CreateSecTransformErrorRef(kSecTransformErrorInvalidLength, "MaskGenerationFunction Length must be one or more (not %d)", length);
- }
- return NULL;
- }
-
- dispatch_once(&once, ^(void) {
- ok = SecTransformRegister(kMaskGenerationFunctionTransformName, MaskGenerationFunctionTransform, error);
- });
-
- if (!ok) {
- return NULL;
- }
-
- SecTransformRef ret = SecTransformCreate(kMaskGenerationFunctionTransformName, error);
- if (!ret) {
- return NULL;
- }
-
- if (!SecTransformSetAttribute(ret, kSecDigestTypeAttribute, hashType ? hashType : kSecDigestSHA1, error)) {
- CFRelease(ret);
- return NULL;
- }
-
- CFNumberRef len = CFNumberCreate(NULL, kCFNumberIntType, &length);
- ok = SecTransformSetAttribute(ret, kLengthName, len, error);
- CFRelease(len);
- if (!ok) {
- CFRelease(ret);
- return NULL;
- }
-
- return ret;
-}
projects / apple / security.git / blobdiff