mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
2e601c284c
The OpenSSL engine of Digest uses the low-level API of OpenSSL, whose use has been discouraged for years for multiple reasons. A long-standing issue on a FIPS-enabled system is that using ::Digest results in crashing the Ruby process, because the low-level API lacks the mechanism to report an error (the policy violation) and thus kills the process as a last resort[1][2]. Also, the upcoming OpenSSL 3.0 will deprecate it for future removal[3]. Compiling with -Wdeprecated-declarations will start to emit warnings. A proper fix for this is to make it use the EVP API instead. This is a non-trivial work as it requires backwards-incompatible changes to the framework interface of Digest::Base and rb_digest_metadata_t. It is more than 15 years ago that the openssl library became part of the standard library. It has implemented the exactly same functionality as OpenSSL::Digest, in fact, as a subclass of Digest::Class. There is not much point in having an identical code in the digest library. Let's just get rid of OpenSSL within digest. This leaves the C implementations and the CommonCrypto engine for Apple systems. A patch is being prepared for the openssl library to provide ::Digest constants for better performance[4]. [1] https://bugs.ruby-lang.org/issues/6946 [2] https://bugs.ruby-lang.org/issues/13681 [3] https://www.openssl.org/docs/OpenSSL300Design.html [4] https://github.com/ruby/openssl/pull/377
64 lines
1.7 KiB
C
64 lines
1.7 KiB
C
/* $RoughId: md5init.c,v 1.2 2001/07/13 19:49:10 knu Exp $ */
|
|
/* $Id$ */
|
|
|
|
#include <ruby/ruby.h>
|
|
#include "../digest.h"
|
|
#if defined(MD5_USE_COMMONDIGEST)
|
|
#include "md5cc.h"
|
|
#else
|
|
#include "md5.h"
|
|
#endif
|
|
|
|
static const rb_digest_metadata_t md5 = {
|
|
RUBY_DIGEST_API_VERSION,
|
|
MD5_DIGEST_LENGTH,
|
|
MD5_BLOCK_LENGTH,
|
|
sizeof(MD5_CTX),
|
|
(rb_digest_hash_init_func_t)MD5_Init,
|
|
(rb_digest_hash_update_func_t)MD5_Update,
|
|
(rb_digest_hash_finish_func_t)MD5_Finish,
|
|
};
|
|
|
|
/*
|
|
* Document-class: Digest::MD5 < Digest::Base
|
|
* A class for calculating message digests using the MD5
|
|
* Message-Digest Algorithm by RSA Data Security, Inc., described in
|
|
* RFC1321.
|
|
*
|
|
* MD5 calculates a digest of 128 bits (16 bytes).
|
|
*
|
|
* == Examples
|
|
* require 'digest'
|
|
*
|
|
* # Compute a complete digest
|
|
* Digest::MD5.hexdigest 'abc' #=> "90015098..."
|
|
*
|
|
* # Compute digest by chunks
|
|
* md5 = Digest::MD5.new # =>#<Digest::MD5>
|
|
* md5.update "ab"
|
|
* md5 << "c" # alias for #update
|
|
* md5.hexdigest # => "90015098..."
|
|
*
|
|
* # Use the same object to compute another digest
|
|
* md5.reset
|
|
* md5 << "message"
|
|
* md5.hexdigest # => "78e73102..."
|
|
*/
|
|
void
|
|
Init_md5(void)
|
|
{
|
|
VALUE mDigest, cDigest_Base, cDigest_MD5;
|
|
|
|
#if 0
|
|
mDigest = rb_define_module("Digest"); /* let rdoc know */
|
|
#endif
|
|
mDigest = rb_digest_namespace();
|
|
cDigest_Base = rb_path2class("Digest::Base");
|
|
|
|
cDigest_MD5 = rb_define_class_under(mDigest, "MD5", cDigest_Base);
|
|
|
|
#undef RUBY_UNTYPED_DATA_WARNING
|
|
#define RUBY_UNTYPED_DATA_WARNING 0
|
|
rb_iv_set(cDigest_MD5, "metadata",
|
|
Data_Wrap_Struct(0, 0, 0, (void *)&md5));
|
|
}
|