mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
231247c010
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@4128 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
377 lines
8.2 KiB
C
377 lines
8.2 KiB
C
/*
|
|
* $Id$
|
|
* 'OpenSSL for Ruby' project
|
|
* Copyright (C) 2001-2002 Michal Rokos <m.rokos@sh.cvut.cz>
|
|
* All rights reserved.
|
|
*/
|
|
/*
|
|
* This program is licenced under the same licence as Ruby.
|
|
* (See the file 'LICENCE'.)
|
|
*/
|
|
#include "ossl.h"
|
|
|
|
#define MakeCipher(obj, klass, ctx) \
|
|
obj = Data_Make_Struct(klass, EVP_CIPHER_CTX, 0, ossl_cipher_free, ctx)
|
|
#define GetCipher(obj, ctx) do { \
|
|
Data_Get_Struct(obj, EVP_CIPHER_CTX, ctx); \
|
|
if (!ctx) { \
|
|
ossl_raise(rb_eRuntimeError, "Cipher not inititalized!"); \
|
|
} \
|
|
} while (0)
|
|
#define SafeGetCipher(obj, ctx) do { \
|
|
OSSL_Check_Kind(obj, cCipher); \
|
|
GetCipher(obj, ctx); \
|
|
} while (0)
|
|
|
|
/*
|
|
* Classes
|
|
*/
|
|
VALUE mCipher;
|
|
VALUE cCipher;
|
|
VALUE eCipherError;
|
|
|
|
/*
|
|
* PUBLIC
|
|
*/
|
|
const EVP_CIPHER *
|
|
GetCipherPtr(VALUE obj)
|
|
{
|
|
EVP_CIPHER_CTX *ctx;
|
|
|
|
SafeGetCipher(obj, ctx);
|
|
|
|
return EVP_CIPHER_CTX_cipher(ctx);
|
|
}
|
|
|
|
/*
|
|
* PRIVATE
|
|
*/
|
|
static void
|
|
ossl_cipher_free(EVP_CIPHER_CTX *ctx)
|
|
{
|
|
if (ctx) {
|
|
EVP_CIPHER_CTX_cleanup(ctx);
|
|
free(ctx);
|
|
}
|
|
}
|
|
|
|
static VALUE
|
|
ossl_cipher_alloc(VALUE klass)
|
|
{
|
|
EVP_CIPHER_CTX *ctx;
|
|
VALUE obj;
|
|
|
|
MakeCipher(obj, klass, ctx);
|
|
|
|
return obj;
|
|
}
|
|
DEFINE_ALLOC_WRAPPER(ossl_cipher_alloc)
|
|
|
|
static VALUE
|
|
ossl_cipher_initialize(VALUE self, VALUE str)
|
|
{
|
|
EVP_CIPHER_CTX *ctx;
|
|
const EVP_CIPHER *cipher;
|
|
char *name;
|
|
|
|
GetCipher(self, ctx);
|
|
|
|
name = StringValuePtr(str);
|
|
|
|
if (!(cipher = EVP_get_cipherbyname(name))) {
|
|
ossl_raise(rb_eRuntimeError, "Unsupported cipher algorithm (%s).", name);
|
|
}
|
|
EVP_CIPHER_CTX_init(ctx);
|
|
if (EVP_CipherInit(ctx, cipher, NULL, NULL, -1) != 1)
|
|
ossl_raise(eCipherError, NULL);
|
|
|
|
return self;
|
|
}
|
|
static VALUE
|
|
ossl_cipher_copy(VALUE self, VALUE other)
|
|
{
|
|
EVP_CIPHER_CTX *ctx1, *ctx2;
|
|
|
|
rb_check_frozen(self);
|
|
if (self == other) return self;
|
|
|
|
GetCipher(self, ctx1);
|
|
SafeGetCipher(other, ctx2);
|
|
|
|
memcpy(ctx1, ctx2, sizeof(EVP_CIPHER_CTX));
|
|
|
|
return self;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_cipher_reset(VALUE self)
|
|
{
|
|
EVP_CIPHER_CTX *ctx;
|
|
|
|
GetCipher(self, ctx);
|
|
if (EVP_CipherInit(ctx, NULL, NULL, NULL, -1) != 1)
|
|
ossl_raise(eCipherError, NULL);
|
|
|
|
return self;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_cipher_encrypt(int argc, VALUE *argv, VALUE self)
|
|
{
|
|
EVP_CIPHER_CTX *ctx;
|
|
unsigned char iv[EVP_MAX_IV_LENGTH], key[EVP_MAX_KEY_LENGTH];
|
|
VALUE pass, init_v;
|
|
|
|
GetCipher(self, ctx);
|
|
|
|
rb_scan_args(argc, argv, "02", &pass, &init_v);
|
|
|
|
if (NIL_P(init_v)) {
|
|
/*
|
|
* TODO:
|
|
* random IV generation!
|
|
*/
|
|
memcpy(iv, "OpenSSL for Ruby rulez!", sizeof(iv));
|
|
/*
|
|
RAND_add(data,i,0); where from take data?
|
|
if (RAND_pseudo_bytes(iv, 8) < 0) {
|
|
ossl_raise(eCipherError, NULL);
|
|
}
|
|
*/
|
|
}
|
|
else {
|
|
init_v = rb_obj_as_string(init_v);
|
|
if (EVP_MAX_IV_LENGTH > RSTRING(init_v)->len) {
|
|
memset(iv, 0, EVP_MAX_IV_LENGTH);
|
|
memcpy(iv, RSTRING(init_v)->ptr, RSTRING(init_v)->len);
|
|
}
|
|
else {
|
|
memcpy(iv, RSTRING(init_v)->ptr, sizeof(iv));
|
|
}
|
|
}
|
|
|
|
if (EVP_CipherInit(ctx, NULL, NULL, NULL, 1) != 1) {
|
|
ossl_raise(eCipherError, NULL);
|
|
}
|
|
|
|
if (!NIL_P(pass)) {
|
|
StringValue(pass);
|
|
|
|
EVP_BytesToKey(EVP_CIPHER_CTX_cipher(ctx), EVP_md5(), iv,
|
|
RSTRING(pass)->ptr, RSTRING(pass)->len, 1, key, NULL);
|
|
if (EVP_CipherInit(ctx, NULL, key, iv, -1) != 1) {
|
|
ossl_raise(eCipherError, NULL);
|
|
}
|
|
}
|
|
|
|
return self;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_cipher_decrypt(int argc, VALUE *argv, VALUE self)
|
|
{
|
|
EVP_CIPHER_CTX *ctx;
|
|
unsigned char iv[EVP_MAX_IV_LENGTH], key[EVP_MAX_KEY_LENGTH];
|
|
VALUE pass, init_v;
|
|
|
|
GetCipher(self, ctx);
|
|
rb_scan_args(argc, argv, "02", &pass, &init_v);
|
|
|
|
if (NIL_P(init_v)) {
|
|
/*
|
|
* TODO:
|
|
* random IV generation!
|
|
*/
|
|
memcpy(iv, "OpenSSL for Ruby rulez!", EVP_MAX_IV_LENGTH);
|
|
}
|
|
else {
|
|
init_v = rb_obj_as_string(init_v);
|
|
if (EVP_MAX_IV_LENGTH > RSTRING(init_v)->len) {
|
|
memset(iv, 0, EVP_MAX_IV_LENGTH);
|
|
memcpy(iv, RSTRING(init_v)->ptr, RSTRING(init_v)->len);
|
|
}
|
|
else {
|
|
memcpy(iv, RSTRING(init_v)->ptr, EVP_MAX_IV_LENGTH);
|
|
}
|
|
}
|
|
|
|
if (EVP_CipherInit(ctx, NULL, NULL, NULL, 0) != 1) {
|
|
ossl_raise(eCipherError, NULL);
|
|
}
|
|
|
|
if (!NIL_P(pass)) {
|
|
StringValue(pass);
|
|
|
|
EVP_BytesToKey(EVP_CIPHER_CTX_cipher(ctx), EVP_md5(), iv,
|
|
RSTRING(pass)->ptr, RSTRING(pass)->len, 1, key, NULL);
|
|
if (EVP_CipherInit(ctx, NULL, key, iv, -1) != 1) {
|
|
ossl_raise(eCipherError, NULL);
|
|
}
|
|
}
|
|
|
|
return self;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_cipher_update(VALUE self, VALUE data)
|
|
{
|
|
EVP_CIPHER_CTX *ctx;
|
|
char *in, *out;
|
|
int in_len, out_len;
|
|
VALUE str;
|
|
|
|
GetCipher(self, ctx);
|
|
|
|
StringValue(data);
|
|
in = RSTRING(data)->ptr;
|
|
in_len = RSTRING(data)->len;
|
|
|
|
if (!(out = OPENSSL_malloc(in_len+EVP_CIPHER_CTX_block_size(ctx)))) {
|
|
ossl_raise(eCipherError, NULL);
|
|
}
|
|
if (!EVP_CipherUpdate(ctx, out, &out_len, in, in_len)) {
|
|
OPENSSL_free(out);
|
|
ossl_raise(eCipherError, NULL);
|
|
}
|
|
str = rb_str_new(out, out_len);
|
|
OPENSSL_free(out);
|
|
|
|
return str;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_cipher_final(VALUE self)
|
|
{
|
|
EVP_CIPHER_CTX *ctx;
|
|
char *out;
|
|
int out_len;
|
|
VALUE str;
|
|
|
|
GetCipher(self, ctx);
|
|
|
|
if (!(out = OPENSSL_malloc(EVP_CIPHER_CTX_block_size(ctx)))) {
|
|
ossl_raise(eCipherError, NULL);
|
|
}
|
|
if (!EVP_CipherFinal(ctx, out, &out_len)) {
|
|
OPENSSL_free(out);
|
|
ossl_raise(eCipherError, NULL);
|
|
}
|
|
|
|
str = rb_str_new(out, out_len);
|
|
OPENSSL_free(out);
|
|
|
|
return str;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_cipher_name(VALUE self)
|
|
{
|
|
EVP_CIPHER_CTX *ctx;
|
|
|
|
GetCipher(self, ctx);
|
|
|
|
return rb_str_new2(EVP_CIPHER_name(EVP_CIPHER_CTX_cipher(ctx)));
|
|
}
|
|
|
|
static VALUE
|
|
ossl_cipher_set_key(VALUE self, VALUE key)
|
|
{
|
|
EVP_CIPHER_CTX *ctx;
|
|
|
|
StringValue(key);
|
|
GetCipher(self, ctx);
|
|
|
|
if (RSTRING(key)->len < EVP_CIPHER_CTX_key_length(ctx))
|
|
ossl_raise(eCipherError, "key length too short");
|
|
|
|
if (EVP_CipherInit(ctx, NULL, RSTRING(key)->ptr, NULL, -1) != 1)
|
|
ossl_raise(eCipherError, NULL);
|
|
|
|
return key;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_cipher_set_iv(VALUE self, VALUE iv)
|
|
{
|
|
EVP_CIPHER_CTX *ctx;
|
|
|
|
StringValue(iv);
|
|
GetCipher(self, ctx);
|
|
|
|
if (RSTRING(iv)->len < EVP_CIPHER_CTX_iv_length(ctx))
|
|
ossl_raise(eCipherError, "iv length too short");
|
|
|
|
if (EVP_CipherInit(ctx, NULL, NULL, RSTRING(iv)->ptr, -1) != 1)
|
|
ossl_raise(eCipherError, NULL);
|
|
|
|
return iv;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_cipher_set_padding(VALUE self, VALUE padding)
|
|
{
|
|
#if defined(HAVE_ST_FLAGS)
|
|
EVP_CIPHER_CTX *ctx;
|
|
|
|
GetCipher(self, ctx);
|
|
|
|
if (EVP_CIPHER_CTX_set_padding(ctx, NUM2INT(padding)) != 1)
|
|
ossl_raise(eCipherError, NULL);
|
|
#else
|
|
rb_notimplement();
|
|
#endif
|
|
return padding;
|
|
}
|
|
|
|
#define CIPHER_0ARG_INT(func) \
|
|
static VALUE \
|
|
ossl_cipher_##func(VALUE self) \
|
|
{ \
|
|
EVP_CIPHER_CTX *ctx; \
|
|
GetCipher(self, ctx); \
|
|
return INT2NUM(EVP_CIPHER_##func(EVP_CIPHER_CTX_cipher(ctx))); \
|
|
}
|
|
CIPHER_0ARG_INT(key_length)
|
|
CIPHER_0ARG_INT(iv_length)
|
|
CIPHER_0ARG_INT(block_size)
|
|
|
|
/*
|
|
* INIT
|
|
*/
|
|
void
|
|
Init_ossl_cipher(void)
|
|
{
|
|
mCipher = rb_define_module_under(mOSSL, "Cipher");
|
|
eCipherError = rb_define_class_under(mOSSL, "CipherError", eOSSLError);
|
|
cCipher = rb_define_class_under(mCipher, "Cipher", rb_cObject);
|
|
|
|
rb_define_alloc_func(cCipher, ossl_cipher_alloc);
|
|
rb_define_method(cCipher, "initialize", ossl_cipher_initialize, 1);
|
|
|
|
rb_define_copy_func(cCipher, ossl_cipher_copy);
|
|
|
|
rb_define_method(cCipher, "reset", ossl_cipher_reset, 0);
|
|
|
|
rb_define_method(cCipher, "encrypt", ossl_cipher_encrypt, -1);
|
|
rb_define_method(cCipher, "decrypt", ossl_cipher_decrypt, -1);
|
|
rb_define_method(cCipher, "update", ossl_cipher_update, 1);
|
|
rb_define_alias(cCipher, "<<", "update");
|
|
rb_define_method(cCipher, "final", ossl_cipher_final, 0);
|
|
|
|
rb_define_method(cCipher, "name", ossl_cipher_name, 0);
|
|
|
|
rb_define_method(cCipher, "key=", ossl_cipher_set_key, 1);
|
|
rb_define_method(cCipher, "key_len", ossl_cipher_key_length, 0);
|
|
/*
|
|
* TODO
|
|
* int EVP_CIPHER_CTX_set_key_length(EVP_CIPHER_CTX *x, int keylen);
|
|
*/
|
|
rb_define_method(cCipher, "iv=", ossl_cipher_set_iv, 1);
|
|
rb_define_method(cCipher, "iv_len", ossl_cipher_iv_length, 0);
|
|
|
|
rb_define_method(cCipher, "block_size", ossl_cipher_block_size, 0);
|
|
|
|
rb_define_method(cCipher, "padding=", ossl_cipher_set_padding, 1);
|
|
|
|
} /* Init_ossl_cipher */
|
|
|