auth/hmac: 0-pad the hashed key in longer-than-blocksize case

This commit is contained in:
Lucas Gabriel Vuotto 2024-06-06 17:14:30 +00:00
parent d6235df66f
commit 11b86db9db
1 changed files with 5 additions and 4 deletions

View File

@ -42,12 +42,13 @@ hmac_common_init(void *arg, const uint8_t *key, size_t keylen)
!lc_hash_update(ctx->hctx, key, keylen) || !lc_hash_update(ctx->hctx, key, keylen) ||
!lc_hash_final(ctx->hctx, ctx->key, &olen)) !lc_hash_final(ctx->hctx, ctx->key, &olen))
return 0; return 0;
} else { keylen = olen;
} else
for (i = 0; i < keylen; i++) for (i = 0; i < keylen; i++)
ctx->key[i] = key[i]; ctx->key[i] = key[i];
for (; i < ctx->blocksz; i++)
for (i = keylen; i < ctx->blocksz; i++)
ctx->key[i] = 0; ctx->key[i] = 0;
}
for (i = 0; i < ctx->blocksz; i++) for (i = 0; i < ctx->blocksz; i++)
ikeypad[i] = ctx->key[i] ^ HMAC_IPAD; ikeypad[i] = ctx->key[i] ^ HMAC_IPAD;