Files
2026-08-07 17:38:18 +09:00

261 lines
5.9 KiB
C

/*
* Copyright (C) 1998 Nikos Mavroyanopoulos
* Copyright (C) 1999,2000 Sascha Schumman, Nikos Mavroyanopoulos
* Copyright (C) 2002 Nikos Mavroyanopoulos
*
* This library is free software; you can redistribute it and/or modify it
* under the terms of the GNU Library General Public License as published
* by the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Library General Public License for more details.
*
* You should have received a copy of the GNU Library General Public
* License along with this library; if not, write to the
* Free Software Foundation, Inc., 59 Temple Place - Suite 330,
* Boston, MA 02111-1307, USA.
*/
#include "libdefs.h"
#include "keygen.h"
#include <mhash.h>
#define MAX_DIGEST_SIZE 40
/* Key generation using OpenPGP Simple S2K algorithm */
mutils_error _mhash_gen_key_s2k_simple(hashid algorithm,
void *keyword, mutils_word32 key_size,
mutils_word8 *password, mutils_word32 plen)
{
mutils_word8* key;
mutils_word8 digest[MAX_DIGEST_SIZE];
char null = '\0';
mutils_word32 i,j, times, total;
MHASH td;
mutils_word32 block_size = mhash_get_block_size(algorithm);
/* This should never happen, so naturally it is bound to. */
if (block_size == 0)
{
errno = EINVAL;
return(-MUTILS_INVALID_SIZE);
}
times = key_size / block_size;
if (key_size % block_size != 0)
{
times++;
}
total = times * block_size;
key = mutils_malloc(total);
if (key == NULL)
{
return(-MUTILS_SYSTEM_RESOURCE_ERROR); /* or what? */
}
mutils_bzero(key, total);
for (i = 0; i < times; i++) {
td = mhash_init(algorithm);
if (td == MHASH_FAILED) {
mutils_free(key);
return(-MUTILS_INVALID_FUNCTION);
}
for (j = 0; j < i; j++)
{
mhash(td, &null, 1);
}
mhash(td, password, plen);
mhash_deinit(td, digest);
mutils_memcpy(&key[i * block_size], digest, block_size);
}
mutils_memcpy(keyword, key, key_size);
mutils_bzero(key, key_size);
mutils_free(key);
return(MUTILS_OK);
}
/* Key generation using OpenPGP Salted S2K algorithm */
mutils_error _mhash_gen_key_s2k_salted(hashid algorithm,
void *keyword, mutils_word32 key_size,
mutils_word8 *salt, mutils_word32 salt_size,
mutils_word8 *password, mutils_word32 plen)
{
mutils_word8 *key;
mutils_word8 digest[MAX_DIGEST_SIZE];
char null='\0';
mutils_word32 i;
mutils_word32 j;
mutils_word32 times;
MHASH td;
mutils_word32 block_size = mhash_get_block_size(algorithm);
mutils_word32 total;
if (salt == NULL)
{
return(-MUTILS_INVALID_INPUT_BUFFER);
}
if (salt_size < 8)
{
return(-MUTILS_INVALID_SIZE); /* This algorithm will use EXACTLY
* 8 bytes salt.
*/
}
times = key_size / block_size;
if (key_size % block_size != 0)
times++;
total = times * block_size;
key = mutils_malloc(total);
#if defined(MHASH_ROBUST)
if (key == NULL)
return(-MUTILS_SYSTEM_RESOURCE_ERROR); /* or what? */
#endif
for (i = 0; i < times; i++) {
td = mhash_init(algorithm);
if (td == MHASH_FAILED) {
mutils_free(key);
return(-MUTILS_INVALID_FUNCTION);
}
for (j = 0; j < i; j++)
mhash(td, &null, 1);
mhash(td, salt, 8);
mhash(td, password, plen);
mhash_deinit(td, digest);
mutils_memcpy( &key[i*block_size], digest, block_size);
}
mutils_memcpy(keyword, key, key_size);
mutils_bzero(key, key_size);
mutils_free(key);
return(MUTILS_OK);
}
#define EXPBIAS 6
/* Key generation using OpenPGP Iterated and Salted S2K algorithm */
mutils_error _mhash_gen_key_s2k_isalted(hashid algorithm, mutils_word64 _count,
void *keyword, mutils_word32 key_size,
mutils_word8 *salt, mutils_word32 salt_size,
mutils_word8 *password, mutils_word32 plen)
{
mutils_word8 *key;
mutils_word8 digest[MAX_DIGEST_SIZE];
mutils_word8 null='\0';
mutils_word32 i;
mutils_word32 j;
mutils_word32 z;
mutils_word32 times;
MHASH td;
mutils_word32 block_size = mhash_get_block_size(algorithm);
mutils_word8 *saltpass;
mutils_word32 saltpass_size;
mutils_word32 bcount, rest;
mutils_word32 count = _count;
mutils_word32 total;
if (salt == NULL)
return(-MUTILS_INVALID_INPUT_BUFFER);
if (salt_size < 8)
return(-MUTILS_INVALID_SIZE); /* This algorithm will use EXACTLY
* 8 bytes salt.
*/
if ((saltpass = mutils_malloc(8 + plen)) == NULL)
return(-MUTILS_SYSTEM_RESOURCE_ERROR); /* hmm */
mutils_memcpy( saltpass, salt, 8);
mutils_memcpy( &saltpass[8], password, plen);
saltpass_size = plen+8;
times = key_size/block_size;
if (key_size % block_size != 0)
times++;
total = times * block_size;
key = mutils_malloc(total);
if (key == NULL) {
mutils_bzero(saltpass, saltpass_size);
mutils_free(saltpass);
return(-MUTILS_SYSTEM_RESOURCE_ERROR);
}
mutils_bzero(key, total);
/* Calculate the iterations
*/
bcount /*bytes */ =
((mutils_word32)16 + (count & 15)) << ((count >> 4) + EXPBIAS);
count /* iterations */ =
(bcount / saltpass_size);
rest = bcount % saltpass_size;
if (bcount < saltpass_size)
{
count++;
rest = 0;
}
for (i = 0; i < times; i++)
{
td = mhash_init(algorithm);
if (td == MHASH_FAILED)
{
mutils_bzero( key, key_size);
mutils_bzero( saltpass, saltpass_size);
mutils_free(key);
mutils_free(saltpass);
return(-MUTILS_INVALID_FUNCTION);
}
for (j = 0; j < i; j++)
mhash(td, &null, 1);
for (z = 0; z < count; z++)
{
mhash(td, saltpass, saltpass_size);
}
mhash(td, saltpass, rest);
mhash_deinit(td, digest);
mutils_memcpy( &key[i*block_size], digest, block_size);
}
mutils_memcpy(keyword, key, key_size);
mutils_bzero(key, key_size);
mutils_bzero(saltpass, saltpass_size);
mutils_free(key);
mutils_free(saltpass);
return(MUTILS_OK);
}