2 * Copyright (C) 2012 Martin Storsjo
4 * This file is part of FFmpeg.
6 * FFmpeg is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2.1 of the License, or (at your option) any later version.
11 * FFmpeg is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with FFmpeg; if not, write to the Free Software
18 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
23 #include "attributes.h"
30 #define MAX_HASHLEN 64
31 #define MAX_BLOCKLEN 128
35 int blocklen, hashlen;
36 void (*final)(void*, uint8_t*);
37 void (*update)(void*, const uint8_t*, int len);
39 uint8_t key[MAX_BLOCKLEN];
43 #define DEFINE_SHA(bits) \
44 static av_cold void sha ## bits ##_init(void *ctx) \
46 av_sha_init(ctx, bits); \
49 #define DEFINE_SHA512(bits) \
50 static av_cold void sha ## bits ##_init(void *ctx) \
52 av_sha512_init(ctx, bits); \
61 AVHMAC *av_hmac_alloc(enum AVHMACType type)
63 AVHMAC *c = av_mallocz(sizeof(*c));
70 c->init = (void*)av_md5_init;
71 c->update = (void*)av_md5_update;
72 c->final = (void*)av_md5_final;
73 c->hash = av_md5_alloc();
78 c->init = sha160_init;
79 c->update = (void*)av_sha_update;
80 c->final = (void*)av_sha_final;
81 c->hash = av_sha_alloc();
85 case AV_HMAC_SHA224_DEPRECATED:
89 c->init = sha224_init;
90 c->update = (void*)av_sha_update;
91 c->final = (void*)av_sha_final;
92 c->hash = av_sha_alloc();
96 case AV_HMAC_SHA256_DEPRECATED:
100 c->init = sha256_init;
101 c->update = (void*)av_sha_update;
102 c->final = (void*)av_sha_final;
103 c->hash = av_sha_alloc();
108 c->init = sha384_init;
109 c->update = (void*)av_sha512_update;
110 c->final = (void*)av_sha512_final;
111 c->hash = av_sha512_alloc();
116 c->init = sha512_init;
117 c->update = (void*)av_sha512_update;
118 c->final = (void*)av_sha512_final;
119 c->hash = av_sha512_alloc();
132 void av_hmac_free(AVHMAC *c)
140 void av_hmac_init(AVHMAC *c, const uint8_t *key, unsigned int keylen)
143 uint8_t block[MAX_BLOCKLEN];
144 if (keylen > c->blocklen) {
146 c->update(c->hash, key, keylen);
147 c->final(c->hash, c->key);
148 c->keylen = c->hashlen;
150 memcpy(c->key, key, keylen);
154 for (i = 0; i < c->keylen; i++)
155 block[i] = c->key[i] ^ 0x36;
156 for (i = c->keylen; i < c->blocklen; i++)
158 c->update(c->hash, block, c->blocklen);
161 void av_hmac_update(AVHMAC *c, const uint8_t *data, unsigned int len)
163 c->update(c->hash, data, len);
166 int av_hmac_final(AVHMAC *c, uint8_t *out, unsigned int outlen)
168 uint8_t block[MAX_BLOCKLEN];
170 if (outlen < c->hashlen)
171 return AVERROR(EINVAL);
172 c->final(c->hash, out);
174 for (i = 0; i < c->keylen; i++)
175 block[i] = c->key[i] ^ 0x5C;
176 for (i = c->keylen; i < c->blocklen; i++)
178 c->update(c->hash, block, c->blocklen);
179 c->update(c->hash, out, c->hashlen);
180 c->final(c->hash, out);
184 int av_hmac_calc(AVHMAC *c, const uint8_t *data, unsigned int len,
185 const uint8_t *key, unsigned int keylen,
186 uint8_t *out, unsigned int outlen)
188 av_hmac_init(c, key, keylen);
189 av_hmac_update(c, data, len);
190 return av_hmac_final(c, out, outlen);
196 static void test(AVHMAC *hmac, const uint8_t *key, int keylen,
197 const uint8_t *data, int datalen)
199 uint8_t buf[MAX_HASHLEN];
201 // Some of the test vectors are strings, where sizeof() includes the
202 // trailing null byte - remove that.
203 if (!key[keylen - 1])
205 if (!data[datalen - 1])
207 out = av_hmac_calc(hmac, data, datalen, key, keylen, buf, sizeof(buf));
208 for (i = 0; i < out; i++)
209 printf("%02x", buf[i]);
215 uint8_t key1[20], key3[131], data3[50];
218 static const uint8_t key2[] = "Jefe";
219 static const uint8_t data1[] = "Hi There";
220 static const uint8_t data2[] = "what do ya want for nothing?";
221 static const uint8_t data4[] = "Test Using Larger Than Block-Size Key - Hash Key First";
222 static const uint8_t data5[] = "Test Using Larger Than Block-Size Key and Larger Than One Block-Size Data";
223 static const uint8_t data6[] = "This is a test using a larger than block-size key and a larger "
224 "than block-size data. The key needs to be hashed before being used"
225 " by the HMAC algorithm.";
226 memset(key1, 0x0b, sizeof(key1));
227 memset(key3, 0xaa, sizeof(key3));
228 memset(data3, 0xdd, sizeof(data3));
231 for (i = AV_HMAC_MD5; i <= AV_HMAC_SHA1; i++) {
232 hmac = av_hmac_alloc(i);
235 // RFC 2202 test vectors
236 test(hmac, key1, hmac->hashlen, data1, sizeof(data1));
237 test(hmac, key2, sizeof(key2), data2, sizeof(data2));
238 test(hmac, key3, hmac->hashlen, data3, sizeof(data3));
239 test(hmac, key3, 80, data4, sizeof(data4));
240 test(hmac, key3, 80, data5, sizeof(data5));
245 for (i = AV_HMAC_SHA224; i <= AV_HMAC_SHA256; i++) {
246 hmac = av_hmac_alloc(i);
249 // RFC 4231 test vectors
250 test(hmac, key1, sizeof(key1), data1, sizeof(data1));
251 test(hmac, key2, sizeof(key2), data2, sizeof(data2));
252 test(hmac, key3, 20, data3, sizeof(data3));
253 test(hmac, key3, sizeof(key3), data4, sizeof(data4));
254 test(hmac, key3, sizeof(key3), data6, sizeof(data6));
258 for (i = AV_HMAC_SHA384; i <= AV_HMAC_SHA512; i++) {
259 hmac = av_hmac_alloc(i);
262 // RFC 4231 test vectors
263 test(hmac, key1, sizeof(key1), data1, sizeof(data1));
264 test(hmac, key2, sizeof(key2), data2, sizeof(data2));
265 test(hmac, key3, 20, data3, sizeof(data3));
266 test(hmac, key3, sizeof(key3), data4, sizeof(data4));
267 test(hmac, key3, sizeof(key3), data6, sizeof(data6));