1 /*
2 * QEMU Crypto hash algorithms
3 *
4 * Copyright (c) 2024 Seagate Technology LLC and/or its Affiliates
5 * Copyright (c) 2021 Red Hat, Inc.
6 *
7 * This library is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU Lesser General Public
9 * License as published by the Free Software Foundation; either
10 * version 2.1 of the License, or (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public
18 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
19 *
20 */
21
22 #include "qemu/osdep.h"
23 #include <gnutls/crypto.h>
24 #include "qapi/error.h"
25 #include "crypto/hash.h"
26 #include "hashpriv.h"
27
28
29 static int qcrypto_hash_alg_map[QCRYPTO_HASH_ALGO__MAX] = {
30 [QCRYPTO_HASH_ALGO_MD5] = GNUTLS_DIG_MD5,
31 [QCRYPTO_HASH_ALGO_SHA1] = GNUTLS_DIG_SHA1,
32 [QCRYPTO_HASH_ALGO_SHA224] = GNUTLS_DIG_SHA224,
33 [QCRYPTO_HASH_ALGO_SHA256] = GNUTLS_DIG_SHA256,
34 [QCRYPTO_HASH_ALGO_SHA384] = GNUTLS_DIG_SHA384,
35 [QCRYPTO_HASH_ALGO_SHA512] = GNUTLS_DIG_SHA512,
36 [QCRYPTO_HASH_ALGO_RIPEMD160] = GNUTLS_DIG_RMD160,
37 };
38
qcrypto_hash_supports(QCryptoHashAlgo alg)39 gboolean qcrypto_hash_supports(QCryptoHashAlgo alg)
40 {
41 size_t i;
42 const gnutls_digest_algorithm_t *algs;
43 if (alg >= G_N_ELEMENTS(qcrypto_hash_alg_map) ||
44 qcrypto_hash_alg_map[alg] == GNUTLS_DIG_UNKNOWN) {
45 return false;
46 }
47 algs = gnutls_digest_list();
48 for (i = 0; algs[i] != GNUTLS_DIG_UNKNOWN; i++) {
49 if (algs[i] == qcrypto_hash_alg_map[alg]) {
50 return true;
51 }
52 }
53 return false;
54 }
55
56 static
qcrypto_gnutls_hash_new(QCryptoHashAlgo alg,Error ** errp)57 QCryptoHash *qcrypto_gnutls_hash_new(QCryptoHashAlgo alg, Error **errp)
58 {
59 QCryptoHash *hash;
60 int ret;
61
62 hash = g_new(QCryptoHash, 1);
63 hash->alg = alg;
64 hash->opaque = g_new(gnutls_hash_hd_t, 1);
65
66 ret = gnutls_hash_init(hash->opaque, qcrypto_hash_alg_map[alg]);
67 if (ret < 0) {
68 error_setg(errp,
69 "Unable to initialize hash algorithm: %s",
70 gnutls_strerror(ret));
71 g_free(hash->opaque);
72 g_free(hash);
73 return NULL;
74 }
75
76 return hash;
77 }
78
79 static
qcrypto_gnutls_hash_free(QCryptoHash * hash)80 void qcrypto_gnutls_hash_free(QCryptoHash *hash)
81 {
82 gnutls_hash_hd_t *ctx = hash->opaque;
83
84 gnutls_hash_deinit(*ctx, NULL);
85 g_free(ctx);
86 g_free(hash);
87 }
88
89
90 static
qcrypto_gnutls_hash_update(QCryptoHash * hash,const struct iovec * iov,size_t niov,Error ** errp)91 int qcrypto_gnutls_hash_update(QCryptoHash *hash,
92 const struct iovec *iov,
93 size_t niov,
94 Error **errp)
95 {
96 int ret = 0;
97 gnutls_hash_hd_t *ctx = hash->opaque;
98
99 for (int i = 0; i < niov; i++) {
100 ret = gnutls_hash(*ctx, iov[i].iov_base, iov[i].iov_len);
101 if (ret != 0) {
102 error_setg(errp, "Failed to hash data: %s",
103 gnutls_strerror(ret));
104 return -1;
105 }
106 }
107
108 return 0;
109 }
110
111 static
qcrypto_gnutls_hash_finalize(QCryptoHash * hash,uint8_t ** result,size_t * result_len,Error ** errp)112 int qcrypto_gnutls_hash_finalize(QCryptoHash *hash,
113 uint8_t **result,
114 size_t *result_len,
115 Error **errp)
116 {
117 gnutls_hash_hd_t *ctx = hash->opaque;
118 int ret;
119
120 ret = gnutls_hash_get_len(qcrypto_hash_alg_map[hash->alg]);
121 if (ret == 0) {
122 error_setg(errp, "Unable to get hash length");
123 return -1;
124 }
125
126 if (*result_len == 0) {
127 *result_len = ret;
128 *result = g_new(uint8_t, *result_len);
129 } else if (*result_len != ret) {
130 error_setg(errp,
131 "Result buffer size %zu is smaller than hash %d",
132 *result_len, ret);
133 return -1;
134 }
135
136 gnutls_hash_output(*ctx, *result);
137 return 0;
138 }
139
140 QCryptoHashDriver qcrypto_hash_lib_driver = {
141 .hash_new = qcrypto_gnutls_hash_new,
142 .hash_update = qcrypto_gnutls_hash_update,
143 .hash_finalize = qcrypto_gnutls_hash_finalize,
144 .hash_free = qcrypto_gnutls_hash_free,
145 };
146