1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
#include "shs.h"
krb5_error_code
krb5_sha_sum_func
PROTOTYPE((krb5_const krb5_pointer in,
krb5_const size_t in_length,
krb5_const krb5_pointer seed,
krb5_const size_t seed_length,
krb5_checksum FAR *outcksum));
krb5_error_code
krb5_sha_verify_func
PROTOTYPE((krb5_const krb5_checksum FAR *cksum,
krb5_const krb5_pointer in,
krb5_const size_t in_length,
krb5_const krb5_pointer seed,
krb5_const size_t seed_length));
krb5_error_code
krb5_sha_sum_func(in, in_length, seed, seed_length, outcksum)
krb5_const krb5_pointer in;
krb5_const size_t in_length;
krb5_const krb5_pointer seed;
krb5_const size_t seed_length;
krb5_checksum FAR *outcksum;
{
krb5_octet *input = (krb5_octet *)in;
SHS_INFO working;
if (outcksum->length < SHS_DIGESTSIZE)
return KRB5_BAD_MSIZE;
shsInit(&working);
shsUpdate(&working, input, in_length);
shsFinal(&working);
outcksum->checksum_type = CKSUMTYPE_NIST_SHA;
outcksum->length = SHS_DIGESTSIZE;
memcpy((char *)outcksum->contents,
(char *)&working.digest[0],
outcksum->length);
memset((char *)&working, 0, sizeof(working));
return 0;
}
krb5_error_code
krb5_sha_verify_func(cksum, in, in_length, seed, seed_length)
krb5_const krb5_checksum FAR *cksum;
krb5_const krb5_pointer in;
krb5_const size_t in_length;
krb5_const krb5_pointer seed;
krb5_const size_t seed_length;
{
krb5_octet *input = (krb5_octet *)in;
SHS_INFO working;
krb5_error_code retval;
if (cksum->checksum_type != CKSUMTYPE_NIST_SHA)
return KRB5KRB_AP_ERR_INAPP_CKSUM;
if (cksum->length != SHS_DIGESTSIZE)
return KRB5KRB_AP_ERR_BAD_INTEGRITY;
shsInit(&working);
shsUpdate(&working, input, in_length);
shsFinal(&working);
retval = 0;
if (memcmp((char *) cksum->contents,
(char *) &working.digest[0],
cksum->length))
retval = KRB5KRB_AP_ERR_BAD_INTEGRITY;
memset((char *) &working, 0, sizeof(working));
return retval;
}
krb5_checksum_entry nist_sha_cksumtable_entry = {
0,
krb5_sha_sum_func,
krb5_sha_verify_func,
SHS_DIGESTSIZE,
1, /* is collision proof */
0, /* doesn't use key */
};
|
