123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159 |
- /* SSLHMac.java -- SSLv3's MAC algorithm.
- Copyright (C) 2006 Free Software Foundation, Inc.
- This file is a part of GNU Classpath.
- GNU Classpath is free software; you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation; either version 2 of the License, or (at
- your option) any later version.
- GNU Classpath is distributed in the hope that it will be useful, but
- WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
- General Public License for more details.
- You should have received a copy of the GNU General Public License
- along with GNU Classpath; if not, write to the Free Software
- Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301
- USA
- Linking this library statically or dynamically with other modules is
- making a combined work based on this library. Thus, the terms and
- conditions of the GNU General Public License cover the whole
- combination.
- As a special exception, the copyright holders of this library give you
- permission to link this library with independent modules to produce an
- executable, regardless of the license terms of these independent
- modules, and to copy and distribute the resulting executable under
- terms of your choice, provided that you also meet, for each linked
- independent module, the terms and conditions of the license of that
- module. An independent module is a module which is not derived from
- or based on this library. If you modify this library, you may extend
- this exception to your version of the library, but you are not
- obligated to do so. If you do not wish to do so, delete this
- exception statement from your version. */
- package gnu.javax.net.ssl.provider;
- import java.util.Arrays;
- import java.util.Map;
- import gnu.java.security.hash.HashFactory;
- import gnu.java.security.hash.IMessageDigest;
- import gnu.javax.crypto.mac.IMac;
- /**
- * The MAC function in SSLv3. This mac is defined as:
- *
- * <pre>
- * hash(MAC_write_secret, pad_2 +
- * hash(MAC_write_secret + pad_1 + data));</pre>
- *
- * <p><tt>hash</tt> is e.g. MD5 or SHA-1, <tt>pad_1</tt> is the value
- * 0x36 48 times for MD5 and 40 times for SHA-1, and <tt>pad_2</tt> is
- * the value 0x5c repeated similarly.
- */
- class SSLHMac implements IMac, Cloneable
- {
- // Fields.
- // -------------------------------------------------------------------------
- static final byte PAD1 = 0x36;
- static final byte PAD2 = 0x5c;
- protected IMessageDigest md;
- protected byte[] key;
- protected final byte[] pad1, pad2;
- // Constructors.
- // -------------------------------------------------------------------------
- SSLHMac(String mdName)
- {
- super();
- this.md = HashFactory.getInstance(mdName);
- if (mdName.equalsIgnoreCase("MD5"))
- {
- pad1 = new byte[48];
- pad2 = new byte[48];
- }
- else
- {
- pad1 = new byte[40];
- pad2 = new byte[40];
- }
- Arrays.fill(pad1, PAD1);
- Arrays.fill(pad2, PAD2);
- }
- // Instance methods.
- // -------------------------------------------------------------------------
- public Object clone()
- {
- try
- {
- return super.clone();
- }
- catch (CloneNotSupportedException cnse)
- {
- throw new Error();
- }
- }
- public String name()
- {
- return "SSLHMac-" + md.name();
- }
- public int macSize()
- {
- return md.hashSize();
- }
- public void init(Map attributes)
- {
- key = (byte[]) attributes.get(MAC_KEY_MATERIAL);
- if (key == null)
- throw new NullPointerException();
- reset();
- }
- public void reset()
- {
- md.reset();
- md.update(key, 0, key.length);
- md.update(pad1, 0, pad1.length);
- }
- public byte[] digest()
- {
- byte[] h1 = md.digest();
- md.update(key, 0, key.length);
- md.update(pad2, 0, pad2.length);
- md.update(h1, 0, h1.length);
- byte[] result = md.digest();
- reset();
- return result;
- }
- public void update(byte b)
- {
- md.update(b);
- }
- public void update(byte[] buf, int off, int len)
- {
- md.update(buf, off, len);
- }
- public boolean selfTest()
- {
- return true; // XXX
- }
- }
|