aboutsummaryrefslogtreecommitdiff
path: root/libsylph/md5_hmac.c
blob: 77ae39e9a0da68abc77753152938093bb8de798e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
/*
 * LibSylph -- E-Mail client library
 * Copyright (C) 1999-2006 Hiroyuki Yamamoto
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 */

#ifdef HAVE_CONFIG_H
#  include "config.h"
#endif

#include <glib.h>
#include <string.h>

#include "md5.h"
#include "md5_hmac.h"

/*
** Function: md5_hmac_get
** taken from the file rfc2104.txt
** originally written by Martin Schaaf <mascha@ma-scha.de>
** rewritten by Hiroyuki Yamamoto <hiro-y@kcn.ne.jp>
*/
static SMD5*
md5_hmac_get(const guchar *text, gint text_len,
	     const guchar *key, gint key_len)
{
	SMD5 *md5;
	guchar k_ipad[64];    /* inner padding -
			       * key XORd with ipad
			       */
	guchar k_opad[64];    /* outer padding -
			       * key XORd with opad
			       */
	guchar digest[S_GNET_MD5_HASH_LENGTH];
	gint i;

	/* start out by storing key in pads */
	memset(k_ipad, 0, sizeof k_ipad);
	memset(k_opad, 0, sizeof k_opad);

	if (key_len > 64) {
		/* if key is longer than 64 bytes reset it to key=MD5(key) */
		SMD5 *tmd5;

		tmd5 = s_gnet_md5_new(key, key_len);
		memcpy(k_ipad, s_gnet_md5_get_digest(tmd5),
		       S_GNET_MD5_HASH_LENGTH);
		memcpy(k_opad, s_gnet_md5_get_digest(tmd5),
		       S_GNET_MD5_HASH_LENGTH);
		s_gnet_md5_delete(tmd5);
	} else {
		memcpy(k_ipad, key, key_len);
		memcpy(k_opad, key, key_len);
	}

	/*
	 * the HMAC_MD5 transform looks like:
	 *
	 * MD5(K XOR opad, MD5(K XOR ipad, text))
	 *
	 * where K is an n byte key
	 * ipad is the byte 0x36 repeated 64 times
	 * opad is the byte 0x5c repeated 64 times
	 * and text is the data being protected
	 */


	/* XOR key with ipad and opad values */
	for (i = 0; i < 64; i++) {
		k_ipad[i] ^= 0x36;
		k_opad[i] ^= 0x5c;
	}

	/*
	 * perform inner MD5
	 */
	md5 = s_gnet_md5_new_incremental();	/* init context for 1st
						 * pass */
	s_gnet_md5_update(md5, k_ipad, 64);	/* start with inner pad */
	s_gnet_md5_update(md5, text, text_len);	/* then text of datagram */
	s_gnet_md5_final(md5);			/* finish up 1st pass */
	memcpy(digest, s_gnet_md5_get_digest(md5), S_GNET_MD5_HASH_LENGTH);
	s_gnet_md5_delete(md5);

	/*
	 * perform outer MD5
	 */
	md5 = s_gnet_md5_new_incremental();	/* init context for 2nd
						 * pass */
	s_gnet_md5_update(md5, k_opad, 64);	/* start with outer pad */
	s_gnet_md5_update(md5, digest, 16);	/* then results of 1st
						 * hash */
	s_gnet_md5_final(md5);			/* finish up 2nd pass */

	return md5;
}

void
md5_hmac(guchar *digest,
	 const guchar *text, gint text_len,
	 const guchar *key, gint key_len)
{
	SMD5 *md5;

	md5 = md5_hmac_get(text, text_len, key, key_len);
	memcpy(digest, s_gnet_md5_get_digest(md5), S_GNET_MD5_HASH_LENGTH);
	s_gnet_md5_delete(md5);
}

void
md5_hex_hmac(gchar *hexdigest,
	     const guchar *text, gint text_len,
	     const guchar *key, gint key_len)
{
	SMD5 *md5;

	md5 = md5_hmac_get(text, text_len, key, key_len);
	s_gnet_md5_copy_string(md5, hexdigest);
	hexdigest[S_GNET_MD5_HASH_LENGTH * 2] = '\0';
	s_gnet_md5_delete(md5);
}