blob: 5273086eb9ac93a2011d039c9b49ada4cc61d871 [file] [log] [blame]
Longpeng(Mike)12a4f212016-12-13 18:42:56 +08001/*
2 * QEMU Crypto hmac algorithms (based on libgcrypt)
3 *
4 * Copyright (c) 2016 HUAWEI TECHNOLOGIES CO., LTD.
5 *
6 * Authors:
7 * Longpeng(Mike) <longpeng2@huawei.com>
8 *
9 * This work is licensed under the terms of the GNU GPL, version 2 or
10 * (at your option) any later version. See the COPYING file in the
11 * top-level directory.
12 *
13 */
14
15#include "qemu/osdep.h"
16#include "qapi/error.h"
17#include "crypto/hmac.h"
Longpeng(Mike)14a5a2a2017-07-14 14:04:04 -040018#include "hmacpriv.h"
Longpeng(Mike)12a4f212016-12-13 18:42:56 +080019#include <gcrypt.h>
20
Markus Armbrusteref834aa2024-09-04 13:18:28 +020021static int qcrypto_hmac_alg_map[QCRYPTO_HASH_ALGO__MAX] = {
22 [QCRYPTO_HASH_ALGO_MD5] = GCRY_MAC_HMAC_MD5,
23 [QCRYPTO_HASH_ALGO_SHA1] = GCRY_MAC_HMAC_SHA1,
24 [QCRYPTO_HASH_ALGO_SHA224] = GCRY_MAC_HMAC_SHA224,
25 [QCRYPTO_HASH_ALGO_SHA256] = GCRY_MAC_HMAC_SHA256,
26 [QCRYPTO_HASH_ALGO_SHA384] = GCRY_MAC_HMAC_SHA384,
27 [QCRYPTO_HASH_ALGO_SHA512] = GCRY_MAC_HMAC_SHA512,
28 [QCRYPTO_HASH_ALGO_RIPEMD160] = GCRY_MAC_HMAC_RMD160,
liequan ched078da82024-10-30 08:51:46 +000029#ifdef CONFIG_CRYPTO_SM3
30 [QCRYPTO_HASH_ALGO_SM3] = GCRY_MAC_HMAC_SM3,
31#endif
Longpeng(Mike)5ce9cfe2016-12-13 18:42:57 +080032};
33
34typedef struct QCryptoHmacGcrypt QCryptoHmacGcrypt;
35struct QCryptoHmacGcrypt {
36 gcry_mac_hd_t handle;
37};
38
Markus Armbrusteref834aa2024-09-04 13:18:28 +020039bool qcrypto_hmac_supports(QCryptoHashAlgo alg)
Longpeng(Mike)12a4f212016-12-13 18:42:56 +080040{
Longpeng(Mike)5ce9cfe2016-12-13 18:42:57 +080041 if (alg < G_N_ELEMENTS(qcrypto_hmac_alg_map) &&
42 qcrypto_hmac_alg_map[alg] != GCRY_MAC_NONE) {
Daniel P. Berrangéa7e42752024-10-30 10:09:30 +000043 return gcry_mac_test_algo(qcrypto_hmac_alg_map[alg]) == 0;
Longpeng(Mike)5ce9cfe2016-12-13 18:42:57 +080044 }
45
Longpeng(Mike)12a4f212016-12-13 18:42:56 +080046 return false;
47}
48
Markus Armbrusteref834aa2024-09-04 13:18:28 +020049void *qcrypto_hmac_ctx_new(QCryptoHashAlgo alg,
Longpeng(Mike)14a5a2a2017-07-14 14:04:04 -040050 const uint8_t *key, size_t nkey,
51 Error **errp)
Longpeng(Mike)12a4f212016-12-13 18:42:56 +080052{
Longpeng(Mike)5ce9cfe2016-12-13 18:42:57 +080053 QCryptoHmacGcrypt *ctx;
54 gcry_error_t err;
55
56 if (!qcrypto_hmac_supports(alg)) {
57 error_setg(errp, "Unsupported hmac algorithm %s",
Markus Armbrusteref834aa2024-09-04 13:18:28 +020058 QCryptoHashAlgo_str(alg));
Longpeng(Mike)5ce9cfe2016-12-13 18:42:57 +080059 return NULL;
60 }
61
Longpeng(Mike)5ce9cfe2016-12-13 18:42:57 +080062 ctx = g_new0(QCryptoHmacGcrypt, 1);
63
64 err = gcry_mac_open(&ctx->handle, qcrypto_hmac_alg_map[alg],
65 GCRY_MAC_FLAG_SECURE, NULL);
66 if (err != 0) {
67 error_setg(errp, "Cannot initialize hmac: %s",
68 gcry_strerror(err));
69 goto error;
70 }
71
72 err = gcry_mac_setkey(ctx->handle, (const void *)key, nkey);
73 if (err != 0) {
74 error_setg(errp, "Cannot set key: %s",
75 gcry_strerror(err));
Longpeng(Mike)822d15d2017-07-14 14:04:01 -040076 gcry_mac_close(ctx->handle);
Longpeng(Mike)5ce9cfe2016-12-13 18:42:57 +080077 goto error;
78 }
79
Longpeng(Mike)822d15d2017-07-14 14:04:01 -040080 return ctx;
Longpeng(Mike)5ce9cfe2016-12-13 18:42:57 +080081
82error:
83 g_free(ctx);
Longpeng(Mike)12a4f212016-12-13 18:42:56 +080084 return NULL;
85}
86
Longpeng(Mike)14a5a2a2017-07-14 14:04:04 -040087static void
88qcrypto_gcrypt_hmac_ctx_free(QCryptoHmac *hmac)
Longpeng(Mike)12a4f212016-12-13 18:42:56 +080089{
Longpeng(Mike)5ce9cfe2016-12-13 18:42:57 +080090 QCryptoHmacGcrypt *ctx;
91
Longpeng(Mike)5ce9cfe2016-12-13 18:42:57 +080092 ctx = hmac->opaque;
93 gcry_mac_close(ctx->handle);
94
95 g_free(ctx);
Longpeng(Mike)12a4f212016-12-13 18:42:56 +080096}
97
Longpeng(Mike)14a5a2a2017-07-14 14:04:04 -040098static int
99qcrypto_gcrypt_hmac_bytesv(QCryptoHmac *hmac,
100 const struct iovec *iov,
101 size_t niov,
102 uint8_t **result,
103 size_t *resultlen,
104 Error **errp)
Longpeng(Mike)12a4f212016-12-13 18:42:56 +0800105{
Longpeng(Mike)5ce9cfe2016-12-13 18:42:57 +0800106 QCryptoHmacGcrypt *ctx;
107 gcry_error_t err;
108 uint32_t ret;
109 int i;
110
111 ctx = hmac->opaque;
112
113 for (i = 0; i < niov; i++) {
114 gcry_mac_write(ctx->handle, iov[i].iov_base, iov[i].iov_len);
115 }
116
117 ret = gcry_mac_get_algo_maclen(qcrypto_hmac_alg_map[hmac->alg]);
118 if (ret <= 0) {
119 error_setg(errp, "Unable to get hmac length: %s",
120 gcry_strerror(ret));
121 return -1;
122 }
123
124 if (*resultlen == 0) {
125 *resultlen = ret;
126 *result = g_new0(uint8_t, *resultlen);
127 } else if (*resultlen != ret) {
128 error_setg(errp, "Result buffer size %zu is smaller than hmac %d",
129 *resultlen, ret);
130 return -1;
131 }
132
133 err = gcry_mac_read(ctx->handle, *result, resultlen);
134 if (err != 0) {
135 error_setg(errp, "Cannot get result: %s",
136 gcry_strerror(err));
137 return -1;
138 }
139
140 err = gcry_mac_reset(ctx->handle);
141 if (err != 0) {
142 error_setg(errp, "Cannot reset hmac context: %s",
143 gcry_strerror(err));
144 return -1;
145 }
146
147 return 0;
Longpeng(Mike)12a4f212016-12-13 18:42:56 +0800148}
Longpeng(Mike)822d15d2017-07-14 14:04:01 -0400149
Longpeng(Mike)14a5a2a2017-07-14 14:04:04 -0400150QCryptoHmacDriver qcrypto_hmac_lib_driver = {
151 .hmac_bytesv = qcrypto_gcrypt_hmac_bytesv,
152 .hmac_free = qcrypto_gcrypt_hmac_ctx_free,
153};