1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
|
local ffi = require "ffi"
local C = ffi.C
local ffi_gc = ffi.gc
local ffi_str = ffi.string
require "resty.openssl.include.evp.mac"
local param_lib = require "resty.openssl.param"
local ctx_lib = require "resty.openssl.ctx"
local ctypes = require "resty.openssl.auxiliary.ctypes"
local format_error = require("resty.openssl.err").format_error
local OPENSSL_3X = require("resty.openssl.version").OPENSSL_3X
local _M = {}
local mt = {__index = _M}
local mac_ctx_ptr_ct = ffi.typeof('EVP_MAC_CTX*')
local param_types = {
cipher = param_lib.OSSL_PARAM_UTF8_STRING,
digest = param_lib.OSSL_PARAM_UTF8_STRING,
}
local params = {}
function _M.new(key, typ, cipher, digest, properties)
if not OPENSSL_3X then
return false, "EVP_MAC is only supported from OpenSSL 3.0"
end
local algo = C.EVP_MAC_fetch(ctx_lib.get_libctx(), typ, properties)
if algo == nil then
return nil, format_error(string.format("mac.new: invalid mac type \"%s\"", typ))
end
local ctx = C.EVP_MAC_CTX_new(algo)
if ctx == nil then
return nil, "mac.new: failed to create EVP_MAC_CTX"
end
ffi_gc(ctx, C.EVP_MAC_CTX_free)
params.digest = digest
params.cipher = cipher
local p = param_lib.construct(params, 2, param_types)
local code = C.EVP_MAC_init(ctx, key, #key, p)
if code ~= 1 then
return nil, format_error(string.format("mac.new: invalid cipher or digest type"))
end
local md_size = C.EVP_MAC_CTX_get_mac_size(ctx)
return setmetatable({
ctx = ctx,
algo = algo,
buf = ctypes.uchar_array(md_size),
buf_size = md_size,
}, mt), nil
end
function _M.istype(l)
return l and l.ctx and ffi.istype(mac_ctx_ptr_ct, l.ctx)
end
function _M:get_provider_name()
local p = C.EVP_MAC_get0_provider(self.algo)
if p == nil then
return nil
end
return ffi_str(C.OSSL_PROVIDER_get0_name(p))
end
_M.settable_params, _M.set_params, _M.gettable_params, _M.get_param = param_lib.get_params_func("EVP_MAC_CTX")
function _M:update(...)
for _, s in ipairs({...}) do
if C.EVP_MAC_update(self.ctx, s, #s) ~= 1 then
return false, format_error("digest:update")
end
end
return true, nil
end
function _M:final(s)
if s then
local _, err = self:update(s)
if err then
return nil, err
end
end
local length = ctypes.ptr_of_size_t()
if C.EVP_MAC_final(self.ctx, self.buf, length, self.buf_size) ~= 1 then
return nil, format_error("digest:final: EVP_MAC_final")
end
return ffi_str(self.buf, length[0])
end
return _M
|
