1d83a80eeSchristos /*
2d83a80eeSchristos * iterated_hash.c -- nsec3 hash calculation.
3d83a80eeSchristos *
4d83a80eeSchristos * Copyright (c) 2001-2006, NLnet Labs. All rights reserved.
5d83a80eeSchristos *
6d83a80eeSchristos * See LICENSE for the license.
7d83a80eeSchristos *
8d83a80eeSchristos * With thanks to Ben Laurie.
9d83a80eeSchristos */
10d83a80eeSchristos #include "config.h"
11d83a80eeSchristos #ifdef NSEC3
12*ee758998Schristos #if defined(HAVE_SHA1_INIT) && !defined(DEPRECATED_SHA1_INIT)
13d83a80eeSchristos #include <openssl/sha.h>
14*ee758998Schristos #else
15*ee758998Schristos #include <openssl/evp.h>
16*ee758998Schristos #endif
17d83a80eeSchristos #include <stdio.h>
18d83a80eeSchristos #include <assert.h>
19d83a80eeSchristos
20d83a80eeSchristos #include "iterated_hash.h"
21*ee758998Schristos #include "util.h"
22d83a80eeSchristos
23d83a80eeSchristos int
iterated_hash(unsigned char out[SHA_DIGEST_LENGTH],const unsigned char * salt,int saltlength,const unsigned char * in,int inlength,int iterations)24d83a80eeSchristos iterated_hash(unsigned char out[SHA_DIGEST_LENGTH],
25d83a80eeSchristos const unsigned char *salt, int saltlength,
26d83a80eeSchristos const unsigned char *in, int inlength, int iterations)
27d83a80eeSchristos {
28d83a80eeSchristos #if defined(NSEC3) && defined(HAVE_SSL)
29*ee758998Schristos #if defined(HAVE_SHA1_INIT) && !defined(DEPRECATED_SHA1_INIT)
30d83a80eeSchristos SHA_CTX ctx;
31*ee758998Schristos #else
32*ee758998Schristos EVP_MD_CTX* ctx;
33*ee758998Schristos #endif
34d83a80eeSchristos int n;
35*ee758998Schristos #if defined(HAVE_SHA1_INIT) && !defined(DEPRECATED_SHA1_INIT)
36*ee758998Schristos #else
37*ee758998Schristos ctx = EVP_MD_CTX_create();
38*ee758998Schristos if(!ctx) {
39*ee758998Schristos log_msg(LOG_ERR, "out of memory in iterated_hash");
40*ee758998Schristos return 0;
41*ee758998Schristos }
42*ee758998Schristos #endif
43d83a80eeSchristos assert(in && inlength > 0 && iterations >= 0);
44d83a80eeSchristos for(n=0 ; n <= iterations ; ++n)
45d83a80eeSchristos {
46*ee758998Schristos #if defined(HAVE_SHA1_INIT) && !defined(DEPRECATED_SHA1_INIT)
47d83a80eeSchristos SHA1_Init(&ctx);
48d83a80eeSchristos SHA1_Update(&ctx, in, inlength);
49d83a80eeSchristos if(saltlength > 0)
50d83a80eeSchristos SHA1_Update(&ctx, salt, saltlength);
51d83a80eeSchristos SHA1_Final(out, &ctx);
52*ee758998Schristos #else
53*ee758998Schristos if(!EVP_DigestInit(ctx, EVP_sha1()))
54*ee758998Schristos log_msg(LOG_ERR, "iterated_hash could not EVP_DigestInit");
55*ee758998Schristos
56*ee758998Schristos if(!EVP_DigestUpdate(ctx, in, inlength))
57*ee758998Schristos log_msg(LOG_ERR, "iterated_hash could not EVP_DigestUpdate");
58*ee758998Schristos if(saltlength > 0) {
59*ee758998Schristos if(!EVP_DigestUpdate(ctx, salt, saltlength))
60*ee758998Schristos log_msg(LOG_ERR, "iterated_hash could not EVP_DigestUpdate salt");
61*ee758998Schristos }
62*ee758998Schristos if(!EVP_DigestFinal_ex(ctx, out, NULL))
63*ee758998Schristos log_msg(LOG_ERR, "iterated_hash could not EVP_DigestFinal_ex");
64*ee758998Schristos #endif
65d83a80eeSchristos in=out;
66d83a80eeSchristos inlength=SHA_DIGEST_LENGTH;
67d83a80eeSchristos }
68*ee758998Schristos #if defined(HAVE_SHA1_INIT) && !defined(DEPRECATED_SHA1_INIT)
69*ee758998Schristos #else
70*ee758998Schristos EVP_MD_CTX_destroy(ctx);
71*ee758998Schristos #endif
72d83a80eeSchristos return SHA_DIGEST_LENGTH;
73d83a80eeSchristos #else
74d83a80eeSchristos (void)out; (void)salt; (void)saltlength;
75d83a80eeSchristos (void)in; (void)inlength; (void)iterations;
76d83a80eeSchristos return 0;
77d83a80eeSchristos #endif
78d83a80eeSchristos }
79d83a80eeSchristos
80d83a80eeSchristos #endif /* NSEC3 */
81