3a0c68edfd
The algorithm used is essentially PBKDF1 from RFC 2898 but using hmac_sha1 rather than SHA1 directly (suggested by smb@research.att.com). * The format of the encrypted password is: * $<tag>$<iterations>$<salt>$<digest> * * where: * <tag> is "sha1" * <iterations> is an unsigned int identifying how many rounds * have been applied to <digest>. The number * should vary slightly for each password to make * it harder to generate a dictionary of * pre-computed hashes. See crypt_sha1_iterations. * <salt> up to 64 bytes of random data, 8 bytes is * currently considered more than enough. * <digest> the hashed password. hmac.c implementes HMAC as defined in RFC 2104 and includes a unit test for both hmac_sha1 and hmac_sha1 using a selection of the Known Answer Tests from RFC 2202. It is worth noting that to be FIPS compliant the hmac key (password) should be 10-20 chars.
98 lines
2.9 KiB
Makefile
98 lines
2.9 KiB
Makefile
# $NetBSD: Makefile,v 1.36 2004/07/02 00:05:23 sjg Exp $
|
|
|
|
# RCSid:
|
|
# Id: Makefile,v 1.33 1998/11/11 11:53:53 sjg Exp
|
|
#
|
|
# @(#) Copyright (c) 1994 Simon J. Gerraty
|
|
#
|
|
# This file is provided in the hope that it will
|
|
# be of use. There is absolutely NO WARRANTY.
|
|
# Permission to copy, redistribute or otherwise
|
|
# use this file is hereby granted provided that
|
|
# the above copyright notice and this notice are
|
|
# left intact.
|
|
#
|
|
# Please send copies of changes and bug-fixes to:
|
|
# sjg@quick.com.au
|
|
#
|
|
|
|
USE_SHLIBDIR= yes
|
|
|
|
.include <bsd.own.mk>
|
|
.include <bsd.shlib.mk>
|
|
.include <bsd.sys.mk> # for HOST_SH
|
|
|
|
# XXX There's a bit of work to do before we can enable warnings.
|
|
WARNS=0
|
|
|
|
LIB= crypto
|
|
CPPFLAGS+= -Dlib${LIB} -I. -I${OPENSSLSRC}/crypto -I${OPENSSLSRC}
|
|
|
|
CRYPTODIST= ${NETBSDSRCDIR}/crypto/dist
|
|
|
|
.include "${NETBSDSRCDIR}/crypto/Makefile.openssl"
|
|
.PATH: ${OPENSSLSRC}
|
|
|
|
.include "srcs.inc"
|
|
|
|
# NetBSD's crypt(3) library, in lieu of the one included with OpenSSL,
|
|
# since NetBSD's also supports MD5, SHA1 and Blowfish passwords.
|
|
.PATH: ${NETBSDSRCDIR}/lib/libcrypt
|
|
SRCS+= crypt.c md5crypt.c bcrypt.c crypt-sha1.c util.c
|
|
|
|
# XXX
|
|
.if ${OBJECT_FMT} == "ELF"
|
|
AFLAGS+=-DELF
|
|
.else
|
|
AFLAGS+=-DOUT
|
|
.endif
|
|
|
|
OS_VERSION!= ${HOST_SH} ${NETBSDSRCDIR}/sys/conf/osrelease.sh
|
|
|
|
# XXX CFLAGS: While it would be nice to know which compiler flags
|
|
# XXX the library was built with, we don't want pathname information
|
|
# XXX for the host toolchain embedded in the image.
|
|
${SRCS}: buildinf.h
|
|
buildinf.h: Makefile
|
|
@echo "#ifndef MK1MF_BUILD" >buildinf.h
|
|
@echo "#define CFLAGS \"`${CC} -v 2>&1 | grep version`\"" >>buildinf.h
|
|
@echo "#define PLATFORM \"NetBSD-${MACHINE_ARCH}\"" >>buildinf.h
|
|
@echo "#define DATE \"NetBSD ${OS_VERSION}\"" >>buildinf.h
|
|
@echo "#endif" >>buildinf.h
|
|
|
|
CLEANFILES+= buildinf.h
|
|
|
|
# This list is built from the contents of the include/openssl
|
|
# directory in the OpenSSL source distribution.
|
|
INCS+= aes.h asn1.h asn1_mac.h asn1t.h bio.h blowfish.h bn.h \
|
|
buffer.h cast.h comp.h conf.h conf_api.h crypto.h des.h \
|
|
dh.h dsa.h dso.h e_os2.h ebcdic.h ec.h engine.h \
|
|
err.h evp.h hmac.h krb5_asn.h lhash.h md2.h md4.h md5.h \
|
|
obj_mac.h objects.h ocsp.h opensslconf.h opensslv.h ossl_typ.h \
|
|
pem.h pem2.h pkcs12.h pkcs7.h rand.h rc2.h rc4.h ripemd.h \
|
|
rsa.h safestack.h sha.h stack.h symhacks.h tmdiff.h txt_db.h \
|
|
ui.h ui_compat.h x509.h x509_vfy.h x509v3.h
|
|
# des_old.h
|
|
|
|
# IDEA - patented, but we install the header anyways
|
|
INCS+= idea.h
|
|
|
|
# RC5 - patented, but we install the header anyways
|
|
INCS+= rc5.h
|
|
|
|
# MDC2 - patented, but we install the header anyways
|
|
INCS+= mdc2.h
|
|
|
|
INCSDIR=/usr/include/openssl
|
|
|
|
# this rebuilds the `srcs.inc' and the .inc files it reads.
|
|
# note that the resulting `srcs.inc' file needs to be modified
|
|
# to deal with our MKCRYPTO_* configuration variables.
|
|
|
|
update_inc:
|
|
(cd ${.CURDIR}; find ${OPENSSLSRC}/crypto \
|
|
-name Makefile.ssl | \
|
|
perl ${OPENSSLSRC}/extsrcs.pl 2> srcs.inc )
|
|
|
|
.include <bsd.lib.mk>
|