81 lines
1.9 KiB
C
81 lines
1.9 KiB
C
/*
|
|
* iterated_hash.c -- nsec3 hash calculation.
|
|
*
|
|
* Copyright (c) 2001-2006, NLnet Labs. All rights reserved.
|
|
*
|
|
* See LICENSE for the license.
|
|
*
|
|
* With thanks to Ben Laurie.
|
|
*/
|
|
#include "config.h"
|
|
#ifdef NSEC3
|
|
#if defined(HAVE_SHA1_INIT) && !defined(DEPRECATED_SHA1_INIT)
|
|
#include <openssl/sha.h>
|
|
#else
|
|
#include <openssl/evp.h>
|
|
#endif
|
|
#include <stdio.h>
|
|
#include <assert.h>
|
|
|
|
#include "iterated_hash.h"
|
|
#include "util.h"
|
|
|
|
int
|
|
iterated_hash(unsigned char out[SHA_DIGEST_LENGTH],
|
|
const unsigned char *salt, int saltlength,
|
|
const unsigned char *in, int inlength, int iterations)
|
|
{
|
|
#if defined(NSEC3) && defined(HAVE_SSL)
|
|
#if defined(HAVE_SHA1_INIT) && !defined(DEPRECATED_SHA1_INIT)
|
|
SHA_CTX ctx;
|
|
#else
|
|
EVP_MD_CTX* ctx;
|
|
#endif
|
|
int n;
|
|
#if defined(HAVE_SHA1_INIT) && !defined(DEPRECATED_SHA1_INIT)
|
|
#else
|
|
ctx = EVP_MD_CTX_create();
|
|
if(!ctx) {
|
|
log_msg(LOG_ERR, "out of memory in iterated_hash");
|
|
return 0;
|
|
}
|
|
#endif
|
|
assert(in && inlength > 0 && iterations >= 0);
|
|
for(n=0 ; n <= iterations ; ++n)
|
|
{
|
|
#if defined(HAVE_SHA1_INIT) && !defined(DEPRECATED_SHA1_INIT)
|
|
SHA1_Init(&ctx);
|
|
SHA1_Update(&ctx, in, inlength);
|
|
if(saltlength > 0)
|
|
SHA1_Update(&ctx, salt, saltlength);
|
|
SHA1_Final(out, &ctx);
|
|
#else
|
|
if(!EVP_DigestInit(ctx, EVP_sha1()))
|
|
log_msg(LOG_ERR, "iterated_hash could not EVP_DigestInit");
|
|
|
|
if(!EVP_DigestUpdate(ctx, in, inlength))
|
|
log_msg(LOG_ERR, "iterated_hash could not EVP_DigestUpdate");
|
|
if(saltlength > 0) {
|
|
if(!EVP_DigestUpdate(ctx, salt, saltlength))
|
|
log_msg(LOG_ERR, "iterated_hash could not EVP_DigestUpdate salt");
|
|
}
|
|
if(!EVP_DigestFinal_ex(ctx, out, NULL))
|
|
log_msg(LOG_ERR, "iterated_hash could not EVP_DigestFinal_ex");
|
|
#endif
|
|
in=out;
|
|
inlength=SHA_DIGEST_LENGTH;
|
|
}
|
|
#if defined(HAVE_SHA1_INIT) && !defined(DEPRECATED_SHA1_INIT)
|
|
#else
|
|
EVP_MD_CTX_destroy(ctx);
|
|
#endif
|
|
return SHA_DIGEST_LENGTH;
|
|
#else
|
|
(void)out; (void)salt; (void)saltlength;
|
|
(void)in; (void)inlength; (void)iterations;
|
|
return 0;
|
|
#endif
|
|
}
|
|
|
|
#endif /* NSEC3 */
|