flm01/mote/v1/openwrt/package/luci/libs/nixio/src/tls-crypto.c

186 lines
5.1 KiB
C

/*
* nixio - Linux I/O library for lua
*
* Copyright (C) 2009 Steven Barth <steven@midlink.org>
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#include "nixio-tls.h"
#include <stdlib.h>
#include <string.h>
#include <errno.h>
#include <fcntl.h>
#include <unistd.h>
static int nixio_crypto_hash__init(lua_State *L, int hmac) {
const char *type = luaL_checkstring(L, 1);
nixio_hash *hash = lua_newuserdata(L, sizeof(nixio_hash));
if (!strcmp(type, "md5")) {
hash->type = NIXIO_HASH_MD5;
hash->digest_size = MD5_DIGEST_LENGTH;
hash->block_size = 64;
hash->ctx = malloc(sizeof(MD5_CTX));
if (!hash->ctx) {
return luaL_error(L, NIXIO_OOM);
}
MD5_Init((MD5_CTX*)hash->ctx);
hash->init = (nixio_hash_initcb)MD5_Init;
hash->update = (nixio_hash_updatecb)MD5_Update;
hash->final = (nixio_hash_finalcb)MD5_Final;
} else if (!strcmp(type, "sha1")) {
hash->type = NIXIO_HASH_SHA1;
hash->digest_size = SHA_DIGEST_LENGTH;
hash->block_size = 64;
hash->ctx = malloc(sizeof(SHA_CTX));
if (!hash->ctx) {
return luaL_error(L, NIXIO_OOM);
}
SHA1_Init((SHA_CTX*)hash->ctx);
hash->init = (nixio_hash_initcb)SHA1_Init;
hash->update = (nixio_hash_updatecb)SHA1_Update;
hash->final = (nixio_hash_finalcb)SHA1_Final;
} else {
luaL_argerror(L, 1, "supported values: md5, sha1");
}
luaL_getmetatable(L, NIXIO_CRYPTO_HASH_META);
lua_setmetatable(L, -2);
if (hmac) {
const char *key = luaL_checklstring(L, 2, &hash->key_size);
if (hash->key_size > hash->block_size) {
hash->update(hash->ctx, key, hash->key_size);
hash->final(hash->digest, hash->ctx);
hash->init(hash->ctx);
hash->key_size = hash->digest_size;
memcpy(hash->key, hash->digest, hash->key_size);
} else {
memcpy(hash->key, key, hash->key_size);
}
unsigned char pad[NIXIO_CRYPTO_BLOCK_SIZE];
for (uint i = 0; i < hash->block_size; i++) {
pad[i] = (i < hash->key_size) ? (0x36 ^ hash->key[i]) : 0x36;
}
hash->update(hash->ctx, pad, hash->block_size);
hash->type |= NIXIO_HMAC_BIT;
}
return 1;
}
static int nixio_crypto_hash(lua_State *L) {
return nixio_crypto_hash__init(L, 0);
}
static int nixio_crypto_hmac(lua_State *L) {
return nixio_crypto_hash__init(L, 1);
}
static int nixio_crypto_hash_update(lua_State *L) {
nixio_hash *hash = luaL_checkudata(L, 1, NIXIO_CRYPTO_HASH_META);
if (hash->type) {
size_t len;
const char *chunk = luaL_checklstring(L, 2, &len);
hash->update(hash->ctx, chunk, len);
lua_pushvalue(L, 1);
return 1;
} else {
return luaL_error(L, "Tried to update finalized hash object.");
}
}
static int nixio_crypto_hash_final(lua_State *L) {
nixio_hash *hash = luaL_checkudata(L, 1, NIXIO_CRYPTO_HASH_META);
if (hash->type & NIXIO_HMAC_BIT) {
hash->final(hash->digest, hash->ctx);
hash->init(hash->ctx);
unsigned char pad[NIXIO_CRYPTO_BLOCK_SIZE];
for (uint i = 0; i < hash->block_size; i++) {
pad[i] = (i < hash->key_size) ? (0x5c ^ hash->key[i]) : 0x5c;
}
hash->update(hash->ctx, pad, hash->block_size);
hash->update(hash->ctx, hash->digest, hash->digest_size);
}
if (hash->type) {
hash->type = NIXIO_HASH_NONE;
hash->final(hash->digest, hash->ctx);
free(hash->ctx);
}
char hashdigest[NIXIO_DIGEST_SIZE*2];
for (uint i=0; i < hash->digest_size; i++) {
hashdigest[2*i] = nixio__bin2hex[(hash->digest[i] & 0xf0) >> 4];
hashdigest[2*i+1] = nixio__bin2hex[(hash->digest[i] & 0x0f)];
}
lua_pushlstring(L, hashdigest, hash->digest_size * 2);
memcpy(hashdigest, hash->digest, hash->digest_size);
lua_pushlstring(L, hashdigest, hash->digest_size);
return 2;
}
static int nixio_crypto_hash__gc(lua_State *L) {
nixio_hash *hash = luaL_checkudata(L, 1, NIXIO_CRYPTO_HASH_META);
if (hash->type) {
hash->final(hash->digest, hash->ctx);
free(hash->ctx);
hash->type = NIXIO_HASH_NONE;
}
return 0;
}
static int nixio_crypto_hash__tostring(lua_State *L) {
nixio_hash *hash = luaL_checkudata(L, 1, NIXIO_CRYPTO_HASH_META);
lua_pushfstring(L, "nixio hash object: %p", hash);
return 1;
}
/* module table */
static const luaL_reg R[] = {
{"hash", nixio_crypto_hash},
{"hmac", nixio_crypto_hmac},
{NULL, NULL}
};
/* hash table */
static const luaL_reg M[] = {
{"update", nixio_crypto_hash_update},
{"final", nixio_crypto_hash_final},
{"__gc", nixio_crypto_hash__gc},
{"__tostring", nixio_crypto_hash__tostring},
{NULL, NULL}
};
void nixio_open_tls_crypto(lua_State *L) {
luaL_newmetatable(L, NIXIO_CRYPTO_HASH_META);
luaL_register(L, NULL, M);
lua_pushvalue(L, -1);
lua_setfield(L, -2, "__index");
lua_pop(L, 1);
lua_newtable(L);
luaL_register(L, NULL, R);
lua_setfield(L, -2, "crypto");
}