| // Copyright 2015 The Weave Authors. All rights reserved. | |
| // Use of this source code is governed by a BSD-style license that can be | |
| // found in the LICENSE file. | |
| #include "src/crypto_hmac.h" | |
| #include <stddef.h> | |
| #include <stdint.h> | |
| #include <string.h> | |
| #include <openssl/evp.h> | |
| #include <openssl/hmac.h> | |
| bool uw_crypto_hmac_(const uint8_t* key, | |
| size_t key_len, | |
| const UwCryptoHmacMsg messages[], | |
| size_t num_messages, | |
| uint8_t* truncated_digest, | |
| size_t truncated_digest_len) { | |
| HMAC_CTX context = {0}; | |
| HMAC_CTX_init(&context); | |
| if (!HMAC_Init(&context, key, key_len, EVP_sha256())) | |
| return false; | |
| for (size_t i = 0; i < num_messages; ++i) { | |
| if (messages[i].num_bytes && | |
| (!messages[i].bytes || | |
| !HMAC_Update(&context, messages[i].bytes, messages[i].num_bytes))) { | |
| return false; | |
| } | |
| } | |
| const size_t kFullDigestLen = (size_t)EVP_MD_size(EVP_sha256()); | |
| if (truncated_digest_len > kFullDigestLen) { | |
| return false; | |
| } | |
| uint8_t digest[kFullDigestLen]; | |
| uint32_t len = kFullDigestLen; | |
| bool result = HMAC_Final(&context, digest, &len) && kFullDigestLen == len; | |
| HMAC_CTX_cleanup(&context); | |
| if (result) { | |
| memcpy(truncated_digest, digest, truncated_digest_len); | |
| } | |
| return result; | |
| } |