nasl_crypto_helper.h File Reference

#include "nasl_lex_ctxt.h"
#include <gpg-error.h>

Include dependency graph for nasl_crypto_helper.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions
void *	hmac_md5_for_prf (const void *key, int keylen, const void *buf, int buflen)
void *	hmac_sha1 (const void *key, int keylen, const void *buf, int buflen)
void *	hmac_sha256 (const void *key, int keylen, const void *buf, int buflen)
void *	hmac_sha384 (const void *key, int keylen, const void *buf, int buflen)
tree_cell *	nasl_smb_sign (const int algo, lex_ctxt *lexic)
gpg_err_code_t	mac (const char *key, const size_t key_len, const char *data, const size_t data_len, const char *iv, const size_t iv_len, int algo, int flags, char **out, size_t *out_len)

Function Documentation

hmac_md5_for_prf()

void* hmac_md5_for_prf	(	const void *	key,
		int	keylen,
		const void *	buf,
		int	buflen
	)

Definition at line 20 of file nasl_crypt_helper.c.

{
  void *signature = g_malloc0 (16);
  gsize signlen = 16;
  GHmac *hmac;
 
  hmac = g_hmac_new (G_CHECKSUM_MD5, key, keylen);
  g_hmac_update (hmac, buf, buflen);
  g_hmac_get_digest (hmac, signature, &signlen);
  g_hmac_unref (hmac);
  return signature;
}

Referenced by tls_prf().

Here is the caller graph for this function:

hmac_sha1()

void* hmac_sha1	(	const void *	key,
		int	keylen,
		const void *	buf,
		int	buflen
	)

Definition at line 34 of file nasl_crypt_helper.c.

{
  void *signature = g_malloc0 (20);
  gsize signlen = 20;
  GHmac *hmac;
 
  hmac = g_hmac_new (G_CHECKSUM_SHA1, key, keylen);
  g_hmac_update (hmac, buf, buflen);
  g_hmac_get_digest (hmac, signature, &signlen);
  g_hmac_unref (hmac);
  return signature;
}

Referenced by tls_prf().

Here is the caller graph for this function:

hmac_sha256()

void* hmac_sha256	(	const void *	key,
		int	keylen,
		const void *	buf,
		int	buflen
	)

Definition at line 48 of file nasl_crypt_helper.c.

{
  void *signature = g_malloc0 (32);
  gsize signlen = 32;
  GHmac *hmac;
 
  hmac = g_hmac_new (G_CHECKSUM_SHA256, key, keylen);
  g_hmac_update (hmac, buf, buflen);
  g_hmac_get_digest (hmac, signature, &signlen);
  g_hmac_unref (hmac);
  return signature;
}

Referenced by nasl_hmac_sha256(), smb_sign(), and tls_prf().

Here is the caller graph for this function:

hmac_sha384()

void* hmac_sha384	(	const void *	key,
		int	keylen,
		const void *	buf,
		int	buflen
	)

Definition at line 62 of file nasl_crypt_helper.c.

{
  gcry_md_hd_t hd;
  gcry_error_t err;
  void *ret;
 
  if (!buf || buflen <= 0)
    return NULL;
 
  err = gcry_md_open (&hd, GCRY_MD_SHA384, key ? GCRY_MD_FLAG_HMAC : 0);
  if (err)
    {
      g_message ("nasl_gcrypt_hash(): gcry_md_open failed: %s/%s",
                 gcry_strsource (err), gcry_strerror (err));
      return NULL;
    }
 
  if (key)
    {
      err = gcry_md_setkey (hd, key, keylen);
      if (err)
        {
          g_message ("nasl_gcrypt_hash(): gcry_md_setkey failed: %s/%s",
                     gcry_strsource (err), gcry_strerror (err));
          return NULL;
        }
    }
 
  gcry_md_write (hd, buf, buflen);
  ret = g_memdup2 (gcry_md_read (hd, 0), 48);
  gcry_md_close (hd);
  return ret;
}

Referenced by tls_prf().

Here is the caller graph for this function:

mac()

gpg_err_code_t mac	(	const char *	key,
		const size_t	key_len,
		const char *	data,
		const size_t	data_len,
		const char *	iv,
		const size_t	iv_len,
		int	algo,
		int	flags,
		char **	out,
		size_t *	out_len
	)

Definition at line 97 of file nasl_crypt_helper.c.

{
  // guardian
  gpg_err_code_t result = 0;
  gcry_mac_hd_t hd;
  if (key == NULL || key_len < 1)
    return GPG_ERR_MISSING_KEY;
  if (data == NULL || data_len < 1)
    return GPG_ERR_MISSING_VALUE;
  if (out == NULL)
    {
      return GPG_ERR_GENERAL;
    }
  if ((result = gcry_mac_open (&hd, algo, flags, NULL)))
    return result;
  if ((result = gcry_mac_setkey (hd, key, key_len)))
    goto cexit;
  if (iv && (result = gcry_mac_setiv (hd, iv, iv_len)))
    goto cexit;
  if ((result = gcry_mac_write (hd, data, data_len)))
    goto cexit;
 
  *out_len = gcry_mac_get_algo_maclen (algo);
  if ((*out = g_malloc0 (*out_len * sizeof (*out))) == NULL)
    {
      result = GPG_ERR_ENOMEM;
      goto cexit;
    }
  if ((result = gcry_mac_read (hd, *out, out_len)))
    goto cexit;
 
cexit:
  gcry_mac_close (hd);
  return result;
}

Referenced by get_local_mac_address_from_ip(), nasl_get_local_mac_address_from_ip(), nasl_mac(), nasl_send_arp_request(), smb_sign(), and socket_get_ssl_ciphersuite().

Here is the caller graph for this function:

nasl_smb_sign()

tree_cell* nasl_smb_sign	(	const int	algo,
		lex_ctxt *	lexic
	)

Definition at line 179 of file nasl_crypt_helper.c.

{
  char *key, *buf, *iv, *res;
  int keylen, buflen, ivlen;
  gcry_error_t error;
  tree_cell *retc = NULL;
 
  key = get_str_var_by_name (lexic, "key");
  buf = get_str_var_by_name (lexic, "buf");
  iv = get_str_var_by_name (lexic, "iv");
  keylen = get_var_size_by_name (lexic, "key");
  buflen = get_var_size_by_name (lexic, "buf");
  ivlen = get_var_size_by_name (lexic, "iv");
 
  switch ((error = smb_sign (algo, key, keylen, buf, buflen, iv, ivlen, &res)))
    {
    case GPG_ERR_NO_ERROR:
      retc = alloc_typed_cell (CONST_DATA);
      retc->x.str_val = res;
      retc->size = buflen;
      break;
    case GPG_ERR_MISSING_KEY:
    case GPG_ERR_MISSING_VALUE:
      nasl_perror (lexic, "Syntax: nasl_mac: Missing key, or data argument");
      break;
    default:
      nasl_perror (lexic, "Internal: %s.", gcry_strerror (error));
    }
 
  return retc;
}

References alloc_typed_cell(), CONST_DATA, get_str_var_by_name(), get_var_size_by_name(), nasl_perror(), TC::size, smb_sign(), TC::str_val, and TC::x.

Referenced by nasl_get_smb2_sign(), nasl_smb_cmac_aes_sign(), and nasl_smb_gmac_aes_sign().

Here is the call graph for this function:

Here is the caller graph for this function: