22

✏️ Editing: mac.lua

local ffi = require "ffi"
local C = ffi.C
local ffi_gc = ffi.gc
local ffi_str = ffi.string

require "resty.openssl.include.evp.mac"
local param_lib = require "resty.openssl.param"
local ctx_lib = require "resty.openssl.ctx"
local ctypes = require "resty.openssl.auxiliary.ctypes"
local format_error = require("resty.openssl.err").format_error
local OPENSSL_3X = require("resty.openssl.version").OPENSSL_3X

local _M = {}
local mt = {__index = _M}

local mac_ctx_ptr_ct = ffi.typeof('EVP_MAC_CTX*')
local param_types = {
  cipher = param_lib.OSSL_PARAM_UTF8_STRING,
  digest = param_lib.OSSL_PARAM_UTF8_STRING,
}
local params = {}

function _M.new(key, typ, cipher, digest, properties)
  if not OPENSSL_3X then
    return false, "EVP_MAC is only supported from OpenSSL 3.0"
  end

local algo = C.EVP_MAC_fetch(ctx_lib.get_libctx(), typ, properties)
  if algo == nil then
    return nil, format_error(string.format("mac.new: invalid mac type \"%s\"", typ))
  end
  ffi_gc(algo, C.EVP_MAC_free)

local ctx = C.EVP_MAC_CTX_new(algo)
  if ctx == nil then
    return nil, "mac.new: failed to create EVP_MAC_CTX"
  end
  ffi_gc(ctx, C.EVP_MAC_CTX_free)
  
  params.digest = digest
  params.cipher = cipher
  local p = param_lib.construct(params, 2, param_types)

local keyl = #key
  local code = C.EVP_MAC_init(ctx, key, keyl, p)
  if code ~= 1 then
    return nil, format_error(string.format("mac.new: invalid cipher or digest type"))
  end

local md_size = C.EVP_MAC_CTX_get_mac_size(ctx)

return setmetatable({
    ctx = ctx,
    algo = algo,
    buf = ctypes.uchar_array(md_size),
    buf_size = md_size,
    _reset = function() return C.EVP_MAC_init(ctx, key, keyl, p) end,
  }, mt), nil
end

function _M.istype(l)
  return l and l.ctx and ffi.istype(mac_ctx_ptr_ct, l.ctx)
end

function _M:get_provider_name()
  local p = C.EVP_MAC_get0_provider(self.algo)
  if p == nil then
    return nil
  end
  return ffi_str(C.OSSL_PROVIDER_get0_name(p))
end

_M.settable_params, _M.set_params, _M.gettable_params, _M.get_param = param_lib.get_params_func("EVP_MAC_CTX")

function _M:update(...)
  for _, s in ipairs({...}) do
    if C.EVP_MAC_update(self.ctx, s, #s) ~= 1 then
      return false, format_error("mac:update")
    end
  end
  return true, nil
end

function _M:final(s)
  if s then
    if C.EVP_MAC_update(self.ctx, s, #s) ~= 1 then
      return false, format_error("mac:final")
    end
  end

local length = ctypes.ptr_of_size_t()
  if C.EVP_MAC_final(self.ctx, self.buf, length, self.buf_size) ~= 1 then
    return nil, format_error("mac:final: EVP_MAC_final")
  end
  return ffi_str(self.buf, length[0])
end

function _M:reset()
  local code = self._reset()
  if code ~= 1 then
    return false, format_error("mac:reset")
  end

return true
end

return _M

MR SKB