1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
/*
* (C) Copyright 2015 Jean-Christophe PLAGNIOL-VILLARD <plagnioj@jcrosoft.com>
*
* Under GPLv2 Only
*/
#include <common.h>
#include <malloc.h>
#include <errno.h>
#include <crypto/pbkdf2.h>
int pkcs5_pbkdf2_hmac(struct digest* d,
const unsigned char *pwd, size_t pwd_len,
const unsigned char *salt, size_t salt_len,
uint32_t iteration,
uint32_t key_len, unsigned char *key)
{
int i, j, k;
unsigned char cnt[4];
uint32_t pass_len;
unsigned char *tmpdgt;
uint32_t d_len;
int ret;
if (!d)
return -EINVAL;
d_len = digest_length(d);
tmpdgt = malloc(d_len);
if (!tmpdgt)
return -ENOMEM;
i = 1;
ret = digest_set_key(d, pwd, pwd_len);
if (ret)
goto err;
while (key_len) {
pass_len = min(key_len, d_len);
cnt[0] = (i >> 24) & 0xff;
cnt[1] = (i >> 16) & 0xff;
cnt[2] = (i >> 8) & 0xff;
cnt[3] = i & 0xff;
ret = digest_init(d);
if (ret)
goto err;
ret = digest_update(d, salt, salt_len);
if (ret)
goto err;
ret = digest_update(d, cnt, 4);
if (ret)
goto err;
ret = digest_final(d, tmpdgt);
if (ret)
goto err;
memcpy(key, tmpdgt, pass_len);
for (j = 1; j < iteration; j++) {
ret = digest_digest(d, tmpdgt, d_len, tmpdgt);
if (ret)
goto err;
for(k = 0; k < pass_len; k++)
key[k] ^= tmpdgt[k];
}
key_len -= pass_len;
key += pass_len;
i++;
}
ret = 0;
err:
free(tmpdgt);
return ret;;
}
int pkcs5_pbkdf2_hmac_sha1(const unsigned char *pwd, size_t pwd_len,
const unsigned char *salt, size_t salt_len,
uint32_t iter,
uint32_t key_len, unsigned char *key)
{
int ret;
struct digest* d = digest_alloc("hmac(sha1)");
ret = pkcs5_pbkdf2_hmac(d, pwd, pwd_len, salt, salt_len, iter,
key_len, key);
digest_free(d);
return ret;
}
|
