PageRenderTime 34ms CodeModel.GetById 19ms app.highlight 11ms RepoModel.GetById 1ms app.codeStats 0ms

/contrib/bind9/bin/tools/isc-hmac-fixup.c

https://bitbucket.org/freebsd/freebsd-head/
C | 136 lines | 105 code | 15 blank | 16 comment | 24 complexity | 2d435964d9a0ee1d81245944fedc6c57 MD5 | raw file
  1/*
  2 * Copyright (C) 2010  Internet Systems Consortium, Inc. ("ISC")
  3 *
  4 * Permission to use, copy, modify, and/or distribute this software for any
  5 * purpose with or without fee is hereby granted, provided that the above
  6 * copyright notice and this permission notice appear in all copies.
  7 *
  8 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
  9 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
 10 * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
 11 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
 12 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
 13 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 14 * PERFORMANCE OF THIS SOFTWARE.
 15 */
 16
 17/* $Id: isc-hmac-fixup.c,v 1.4 2010/03/10 02:17:52 marka Exp $ */
 18
 19#include <config.h>
 20
 21#include <isc/base64.h>
 22#include <isc/buffer.h>
 23#include <isc/md5.h>
 24#include <isc/region.h>
 25#include <isc/result.h>
 26#include <isc/sha1.h>
 27#include <isc/sha2.h>
 28#include <isc/stdio.h>
 29#include <isc/string.h>
 30
 31#define HMAC_LEN	64
 32
 33int
 34main(int argc, char **argv)  {
 35	isc_buffer_t buf;
 36	unsigned char key[1024];
 37	char secret[1024];
 38	char base64[(1024*4)/3];
 39	isc_region_t r;
 40	isc_result_t result;
 41
 42	if (argc != 3) {
 43		fprintf(stderr, "Usage:\t%s algorithm secret\n", argv[0]);
 44		fprintf(stderr, "\talgorithm: (MD5 | SHA1 | SHA224 | "
 45				"SHA256 | SHA384 | SHA512)\n");
 46		return (1);
 47	}
 48
 49	isc_buffer_init(&buf, secret, sizeof(secret));
 50	result = isc_base64_decodestring(argv[2], &buf);
 51	if (result != ISC_R_SUCCESS) {
 52		fprintf(stderr, "error: %s\n", isc_result_totext(result));
 53		return (1);
 54	}
 55	isc__buffer_usedregion(&buf, &r);
 56
 57	if (!strcasecmp(argv[1], "md5") ||
 58	    !strcasecmp(argv[1], "hmac-md5")) {
 59		if (r.length > HMAC_LEN) {
 60			isc_md5_t md5ctx;
 61			isc_md5_init(&md5ctx);
 62			isc_md5_update(&md5ctx, r.base, r.length);
 63			isc_md5_final(&md5ctx, key);
 64
 65			r.base = key;
 66			r.length = ISC_MD5_DIGESTLENGTH;
 67		}
 68	} else if (!strcasecmp(argv[1], "sha1") ||
 69		   !strcasecmp(argv[1], "hmac-sha1")) {
 70		if (r.length > ISC_SHA1_DIGESTLENGTH) {
 71			isc_sha1_t sha1ctx;
 72			isc_sha1_init(&sha1ctx);
 73			isc_sha1_update(&sha1ctx, r.base, r.length);
 74			isc_sha1_final(&sha1ctx, key);
 75
 76			r.base = key;
 77			r.length = ISC_SHA1_DIGESTLENGTH;
 78		}
 79	} else if (!strcasecmp(argv[1], "sha224") ||
 80		   !strcasecmp(argv[1], "hmac-sha224")) {
 81		if (r.length > ISC_SHA224_DIGESTLENGTH) {
 82			isc_sha224_t sha224ctx;
 83			isc_sha224_init(&sha224ctx);
 84			isc_sha224_update(&sha224ctx, r.base, r.length);
 85			isc_sha224_final(key, &sha224ctx);
 86
 87			r.base = key;
 88			r.length = ISC_SHA224_DIGESTLENGTH;
 89		}
 90	} else if (!strcasecmp(argv[1], "sha256") ||
 91		   !strcasecmp(argv[1], "hmac-sha256")) {
 92		if (r.length > ISC_SHA256_DIGESTLENGTH) {
 93			isc_sha256_t sha256ctx;
 94			isc_sha256_init(&sha256ctx);
 95			isc_sha256_update(&sha256ctx, r.base, r.length);
 96			isc_sha256_final(key, &sha256ctx);
 97
 98			r.base = key;
 99			r.length = ISC_SHA256_DIGESTLENGTH;
100		}
101	} else if (!strcasecmp(argv[1], "sha384") ||
102		   !strcasecmp(argv[1], "hmac-sha384")) {
103		if (r.length > ISC_SHA384_DIGESTLENGTH) {
104			isc_sha384_t sha384ctx;
105			isc_sha384_init(&sha384ctx);
106			isc_sha384_update(&sha384ctx, r.base, r.length);
107			isc_sha384_final(key, &sha384ctx);
108
109			r.base = key;
110			r.length = ISC_SHA384_DIGESTLENGTH;
111		}
112	} else if (!strcasecmp(argv[1], "sha512") ||
113		   !strcasecmp(argv[1], "hmac-sha512")) {
114		if (r.length > ISC_SHA512_DIGESTLENGTH) {
115			isc_sha512_t sha512ctx;
116			isc_sha512_init(&sha512ctx);
117			isc_sha512_update(&sha512ctx, r.base, r.length);
118			isc_sha512_final(key, &sha512ctx);
119
120			r.base = key;
121			r.length = ISC_SHA512_DIGESTLENGTH;
122		}
123	} else {
124		fprintf(stderr, "unknown hmac/digest algorithm: %s\n", argv[1]);
125		return (1);
126	}
127
128	isc_buffer_init(&buf, base64, sizeof(base64));
129	result = isc_base64_totext(&r, 0, "", &buf);
130	if (result != ISC_R_SUCCESS) {
131		fprintf(stderr, "error: %s\n", isc_result_totext(result));
132		return (1);
133	}
134	fprintf(stdout, "%.*s\n", (int)isc_buffer_usedlength(&buf), base64);
135	return (0);
136}