feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

on send echde server_key_exchange only do hash(es) required

Browse Source
This commit is contained in:
toddouska
2015-04-08 11:22:22 -07:00
parent af0204a069
commit b59d922d51
1 changed files with 165 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files

231
src/internal.c
View File

@ -11704,6 +11704,20 @@ int DoSessionTicket(WOLFSSL* ssl,
#endif #endif
word32 expSz = MAX_EXPORT_ECC_SZ; word32 expSz = MAX_EXPORT_ECC_SZ;
#ifndef NO_OLD_TLS
byte doMd5 = 0;
byte doSha = 0;
#endif
#ifndef NO_SHA256
byte doSha256 = 0;
#endif
#ifdef WOLFSSL_SHA384
byte doSha384 = 0;
#endif
#ifdef WOLFSSL_SHA512
byte doSha512 = 0;
#endif
if (ssl->specs.static_ecdh) { if (ssl->specs.static_ecdh) {
WOLFSSL_MSG("Using Static ECDH, not sending ServerKeyExchagne"); WOLFSSL_MSG("Using Static ECDH, not sending ServerKeyExchagne");
return 0; return 0;
@ -11832,8 +11846,66 @@ int DoSessionTicket(WOLFSSL* ssl,
XMEMCPY(output + idx, exportBuf, expSz); XMEMCPY(output + idx, exportBuf, expSz);
idx += expSz; idx += expSz;
if (IsAtLeastTLSv1_2(ssl)) { if (IsAtLeastTLSv1_2(ssl)) {
byte setHash = 0;
output[idx++] = ssl->suites->hashAlgo; output[idx++] = ssl->suites->hashAlgo;
output[idx++] = ssl->suites->sigAlgo; output[idx++] = ssl->suites->sigAlgo;
switch (ssl->suites->hashAlgo) {
case sha512_mac:
#ifdef WOLFSSL_SHA512
doSha512 = 1;
setHash = 1;
#endif
break;
case sha384_mac:
#ifdef WOLFSSL_SHA384
doSha384 = 1;
setHash = 1;
#endif
break;
case sha256_mac:
#ifndef NO_SHA256
doSha256 = 1;
setHash = 1;
#endif
break;
case sha_mac:
#ifndef NO_OLD_TLS
doSha = 1;
setHash = 1;
#endif
break;
default:
WOLFSSL_MSG("Bad hash sig algo");
break;
}
if (setHash == 0) {
#ifndef NO_RSA
wc_FreeRsaKey(&rsaKey);
#endif
wc_ecc_free(&dsaKey);
ERROR_OUT(ALGO_ID_E, done_a);
}
} else {
/* only using sha and md5 for rsa */
#ifndef NO_OLD_TLS
doSha = 1;
if (ssl->suites->sigAlgo == rsa_sa_algo) {
doMd5 = 1;
}
#else
#ifndef NO_RSA
wc_FreeRsaKey(&rsaKey);
#endif
wc_ecc_free(&dsaKey);
ERROR_OUT(ALGO_ID_E, done_a);
#endif
} }
/* Signtaure length will be written later, when we're sure what it /* Signtaure length will be written later, when we're sure what it
@ -11899,95 +11971,115 @@ int DoSessionTicket(WOLFSSL* ssl,
#ifndef NO_OLD_TLS #ifndef NO_OLD_TLS
/* md5 */ /* md5 */
#ifdef WOLFSSL_SMALL_STACK #ifdef WOLFSSL_SMALL_STACK
md5 = (Md5*)XMALLOC(sizeof(Md5), NULL, DYNAMIC_TYPE_TMP_BUFFER); if (doMd5) {
if (md5 == NULL) md5 = (Md5*)XMALLOC(sizeof(Md5), NULL,
ERROR_OUT(MEMORY_E, done_a2); DYNAMIC_TYPE_TMP_BUFFER);
if (md5 == NULL)
ERROR_OUT(MEMORY_E, done_a2);
}
#endif #endif
wc_InitMd5(md5); if (doMd5) {
wc_Md5Update(md5, ssl->arrays->clientRandom, RAN_LEN); wc_InitMd5(md5);
wc_Md5Update(md5, ssl->arrays->serverRandom, RAN_LEN); wc_Md5Update(md5, ssl->arrays->clientRandom, RAN_LEN);
wc_Md5Update(md5, output + preSigIdx, preSigSz); wc_Md5Update(md5, ssl->arrays->serverRandom, RAN_LEN);
wc_Md5Final(md5, hash); wc_Md5Update(md5, output + preSigIdx, preSigSz);
wc_Md5Final(md5, hash);
}
/* sha */ /* sha */
#ifdef WOLFSSL_SMALL_STACK #ifdef WOLFSSL_SMALL_STACK
sha = (Sha*)XMALLOC(sizeof(Sha), NULL, DYNAMIC_TYPE_TMP_BUFFER); if (doSha) {
if (sha == NULL) sha = (Sha*)XMALLOC(sizeof(Sha), NULL,
ERROR_OUT(MEMORY_E, done_a2); DYNAMIC_TYPE_TMP_BUFFER);
if (sha == NULL)
ERROR_OUT(MEMORY_E, done_a2);
}
#endif #endif
ret = wc_InitSha(sha); if (doSha) {
if (ret != 0) ret = wc_InitSha(sha);
goto done_a2; if (ret != 0) goto done_a2;
wc_ShaUpdate(sha, ssl->arrays->clientRandom, RAN_LEN); wc_ShaUpdate(sha, ssl->arrays->clientRandom, RAN_LEN);
wc_ShaUpdate(sha, ssl->arrays->serverRandom, RAN_LEN); wc_ShaUpdate(sha, ssl->arrays->serverRandom, RAN_LEN);
wc_ShaUpdate(sha, output + preSigIdx, preSigSz); wc_ShaUpdate(sha, output + preSigIdx, preSigSz);
wc_ShaFinal(sha, &hash[MD5_DIGEST_SIZE]); wc_ShaFinal(sha, &hash[MD5_DIGEST_SIZE]);
}
#endif #endif
#ifndef NO_SHA256 #ifndef NO_SHA256
#ifdef WOLFSSL_SMALL_STACK #ifdef WOLFSSL_SMALL_STACK
sha256 = (Sha256*)XMALLOC(sizeof(Sha256), NULL, if (doSha256) {
DYNAMIC_TYPE_TMP_BUFFER); sha256 = (Sha256*)XMALLOC(sizeof(Sha256), NULL,
hash256 = (byte*)XMALLOC(SHA256_DIGEST_SIZE, NULL, DYNAMIC_TYPE_TMP_BUFFER);
DYNAMIC_TYPE_TMP_BUFFER); hash256 = (byte*)XMALLOC(SHA256_DIGEST_SIZE, NULL,
if (sha256 == NULL || hash256 == NULL) DYNAMIC_TYPE_TMP_BUFFER);
ERROR_OUT(MEMORY_E, done_a2); if (sha256 == NULL || hash256 == NULL)
ERROR_OUT(MEMORY_E, done_a2);
}
#endif #endif
if (!(ret = wc_InitSha256(sha256)) if (doSha256) {
&& !(ret = wc_Sha256Update(sha256, ssl->arrays->clientRandom, if (!(ret = wc_InitSha256(sha256))
RAN_LEN)) && !(ret = wc_Sha256Update(sha256,
&& !(ret = wc_Sha256Update(sha256, ssl->arrays->serverRandom, ssl->arrays->clientRandom, RAN_LEN))
RAN_LEN)) && !(ret = wc_Sha256Update(sha256,
&& !(ret = wc_Sha256Update(sha256, output + preSigIdx, preSigSz))) ssl->arrays->serverRandom, RAN_LEN))
ret = wc_Sha256Final(sha256, hash256); && !(ret = wc_Sha256Update(sha256,
output + preSigIdx, preSigSz)))
ret = wc_Sha256Final(sha256, hash256);
if (ret != 0) if (ret != 0) goto done_a2;
goto done_a2; }
#endif #endif
#ifdef WOLFSSL_SHA384 #ifdef WOLFSSL_SHA384
#ifdef WOLFSSL_SMALL_STACK #ifdef WOLFSSL_SMALL_STACK
sha384 = (Sha384*)XMALLOC(sizeof(Sha384), NULL, if (doSha384) {
DYNAMIC_TYPE_TMP_BUFFER); sha384 = (Sha384*)XMALLOC(sizeof(Sha384), NULL,
hash384 = (byte*)XMALLOC(SHA384_DIGEST_SIZE, NULL, DYNAMIC_TYPE_TMP_BUFFER);
DYNAMIC_TYPE_TMP_BUFFER); hash384 = (byte*)XMALLOC(SHA384_DIGEST_SIZE, NULL,
if (sha384 == NULL || hash384 == NULL) DYNAMIC_TYPE_TMP_BUFFER);
ERROR_OUT(MEMORY_E, done_a2); if (sha384 == NULL || hash384 == NULL)
ERROR_OUT(MEMORY_E, done_a2);
}
#endif #endif
if (!(ret = wc_InitSha384(sha384)) if (doSha384) {
&& !(ret = wc_Sha384Update(sha384, ssl->arrays->clientRandom, if (!(ret = wc_InitSha384(sha384))
RAN_LEN)) && !(ret = wc_Sha384Update(sha384,
&& !(ret = wc_Sha384Update(sha384, ssl->arrays->serverRandom, ssl->arrays->clientRandom, RAN_LEN))
RAN_LEN)) && !(ret = wc_Sha384Update(sha384,
&& !(ret = wc_Sha384Update(sha384, output + preSigIdx, preSigSz))) ssl->arrays->serverRandom, RAN_LEN))
ret = wc_Sha384Final(sha384, hash384); && !(ret = wc_Sha384Update(sha384,
output + preSigIdx, preSigSz)))
ret = wc_Sha384Final(sha384, hash384);
if (ret != 0) if (ret != 0) goto done_a2;
goto done_a2; }
#endif #endif
#ifdef WOLFSSL_SHA512 #ifdef WOLFSSL_SHA512
#ifdef WOLFSSL_SMALL_STACK #ifdef WOLFSSL_SMALL_STACK
sha512 = (Sha512*)XMALLOC(sizeof(Sha512), NULL, if (doSha512) {
DYNAMIC_TYPE_TMP_BUFFER); sha512 = (Sha512*)XMALLOC(sizeof(Sha512), NULL,
hash512 = (byte*)XMALLOC(SHA512_DIGEST_SIZE, NULL, DYNAMIC_TYPE_TMP_BUFFER);
DYNAMIC_TYPE_TMP_BUFFER); hash512 = (byte*)XMALLOC(SHA512_DIGEST_SIZE, NULL,
if (sha512 == NULL || hash512 == NULL) DYNAMIC_TYPE_TMP_BUFFER);
ERROR_OUT(MEMORY_E, done_a2); if (sha512 == NULL || hash512 == NULL)
ERROR_OUT(MEMORY_E, done_a2);
}
#endif #endif
if (!(ret = wc_InitSha512(sha512)) if (doSha512) {
&& !(ret = wc_Sha512Update(sha512, ssl->arrays->clientRandom, if (!(ret = wc_InitSha512(sha512))
RAN_LEN)) && !(ret = wc_Sha512Update(sha512,
&& !(ret = wc_Sha512Update(sha512, ssl->arrays->serverRandom, ssl->arrays->clientRandom, RAN_LEN))
RAN_LEN)) && !(ret = wc_Sha512Update(sha512,
&& !(ret = wc_Sha512Update(sha512, output + preSigIdx, preSigSz))) ssl->arrays->serverRandom, RAN_LEN))
ret = wc_Sha512Final(sha512, hash512); && !(ret = wc_Sha512Update(sha512,
output + preSigIdx, preSigSz)))
ret = wc_Sha512Final(sha512, hash512);
if (ret != 0) if (ret != 0) goto done_a2;
goto done_a2; }
#endif #endif
#ifndef NO_RSA #ifndef NO_RSA
@ -12040,8 +12132,15 @@ int DoSessionTicket(WOLFSSL* ssl,
#endif #endif
} }
signSz = wc_EncodeSignature(encodedSig, digest, digestSz, if (digest == NULL) {
typeH); #ifndef NO_RSA
wc_FreeRsaKey(&rsaKey);
#endif
wc_ecc_free(&dsaKey);
ERROR_OUT(ALGO_ID_E, done_a2);
}
signSz = wc_EncodeSignature(encodedSig, digest,
digestSz, typeH);
signBuffer = encodedSig; signBuffer = encodedSig;
} }
/* write sig size here */ /* write sig size here */