2 * QEMU Crypto hash algorithms
4 * Copyright (c) 2015 Red Hat, Inc.
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
21 #include "qemu/osdep.h"
22 #include "crypto/hash.h"
24 #ifdef CONFIG_GNUTLS_HASH
25 #include <gnutls/gnutls.h>
26 #include <gnutls/crypto.h>
28 static int qcrypto_hash_alg_map
[QCRYPTO_HASH_ALG__MAX
] = {
29 [QCRYPTO_HASH_ALG_MD5
] = GNUTLS_DIG_MD5
,
30 [QCRYPTO_HASH_ALG_SHA1
] = GNUTLS_DIG_SHA1
,
31 [QCRYPTO_HASH_ALG_SHA256
] = GNUTLS_DIG_SHA256
,
34 static size_t qcrypto_hash_alg_size
[QCRYPTO_HASH_ALG__MAX
] = {
35 [QCRYPTO_HASH_ALG_MD5
] = 16,
36 [QCRYPTO_HASH_ALG_SHA1
] = 20,
37 [QCRYPTO_HASH_ALG_SHA256
] = 32,
40 gboolean
qcrypto_hash_supports(QCryptoHashAlgorithm alg
)
42 if (alg
< G_N_ELEMENTS(qcrypto_hash_alg_map
)) {
48 size_t qcrypto_hash_digest_len(QCryptoHashAlgorithm alg
)
50 if (alg
>= G_N_ELEMENTS(qcrypto_hash_alg_size
)) {
53 return qcrypto_hash_alg_size
[alg
];
57 int qcrypto_hash_bytesv(QCryptoHashAlgorithm alg
,
58 const struct iovec
*iov
,
67 if (alg
>= G_N_ELEMENTS(qcrypto_hash_alg_map
)) {
69 "Unknown hash algorithm %d",
74 ret
= gnutls_hash_init(&dig
, qcrypto_hash_alg_map
[alg
]);
78 "Unable to initialize hash algorithm: %s",
79 gnutls_strerror(ret
));
83 for (i
= 0; i
< niov
; i
++) {
84 ret
= gnutls_hash(dig
, iov
[i
].iov_base
, iov
[i
].iov_len
);
87 "Unable process hash data: %s",
88 gnutls_strerror(ret
));
93 ret
= gnutls_hash_get_len(qcrypto_hash_alg_map
[alg
]);
96 "Unable to get hash length: %s",
97 gnutls_strerror(ret
));
100 if (*resultlen
== 0) {
102 *result
= g_new0(uint8_t, *resultlen
);
103 } else if (*resultlen
!= ret
) {
105 "Result buffer size %zu is smaller than hash %d",
110 gnutls_hash_deinit(dig
, *result
);
114 gnutls_hash_deinit(dig
, NULL
);
118 #else /* ! CONFIG_GNUTLS_HASH */
120 gboolean
qcrypto_hash_supports(QCryptoHashAlgorithm alg G_GNUC_UNUSED
)
125 int qcrypto_hash_bytesv(QCryptoHashAlgorithm alg
,
126 const struct iovec
*iov G_GNUC_UNUSED
,
127 size_t niov G_GNUC_UNUSED
,
128 uint8_t **result G_GNUC_UNUSED
,
129 size_t *resultlen G_GNUC_UNUSED
,
133 "Hash algorithm %d not supported without GNUTLS",
138 #endif /* ! CONFIG_GNUTLS_HASH */
140 int qcrypto_hash_bytes(QCryptoHashAlgorithm alg
,
147 struct iovec iov
= { .iov_base
= (char *)buf
,
149 return qcrypto_hash_bytesv(alg
, &iov
, 1, result
, resultlen
, errp
);
152 static const char hex
[] = "0123456789abcdef";
154 int qcrypto_hash_digestv(QCryptoHashAlgorithm alg
,
155 const struct iovec
*iov
,
160 uint8_t *result
= NULL
;
161 size_t resultlen
= 0;
164 if (qcrypto_hash_bytesv(alg
, iov
, niov
, &result
, &resultlen
, errp
) < 0) {
168 *digest
= g_new0(char, (resultlen
* 2) + 1);
169 for (i
= 0 ; i
< resultlen
; i
++) {
170 (*digest
)[(i
* 2)] = hex
[(result
[i
] >> 4) & 0xf];
171 (*digest
)[(i
* 2) + 1] = hex
[result
[i
] & 0xf];
173 (*digest
)[resultlen
* 2] = '\0';
178 int qcrypto_hash_digest(QCryptoHashAlgorithm alg
,
184 struct iovec iov
= { .iov_base
= (char *)buf
, .iov_len
= len
};
186 return qcrypto_hash_digestv(alg
, &iov
, 1, digest
, errp
);
189 int qcrypto_hash_base64v(QCryptoHashAlgorithm alg
,
190 const struct iovec
*iov
,
195 uint8_t *result
= NULL
;
196 size_t resultlen
= 0;
198 if (qcrypto_hash_bytesv(alg
, iov
, niov
, &result
, &resultlen
, errp
) < 0) {
202 *base64
= g_base64_encode(result
, resultlen
);
207 int qcrypto_hash_base64(QCryptoHashAlgorithm alg
,
213 struct iovec iov
= { .iov_base
= (char *)buf
, .iov_len
= len
};
215 return qcrypto_hash_base64v(alg
, &iov
, 1, base64
, errp
);