mirror of
https://github.com/LadybirdBrowser/ladybird
synced 2026-05-09 08:33:28 +02:00
d4cf537d58
Add a LibCrypto::Authentication::KMAC helper over OpenSSL. Add keygen/import/export logic into WebCrypto. Register KMAC128/KMAC256 operations with SubtleCrypto.
94 lines
2.8 KiB
C++
94 lines
2.8 KiB
C++
/*
|
|
* Copyright (c) 2026, mikiubo <michele.uboldi@gmail.com>
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#include <LibCrypto/Authentication/KMAC.h>
|
|
#include <LibCrypto/OpenSSL.h>
|
|
|
|
#include <openssl/core_names.h>
|
|
#include <openssl/evp.h>
|
|
|
|
namespace Crypto::Authentication {
|
|
|
|
Optional<KMACKind> KMAC::kind_from_algorithm_name(StringView algorithm_name)
|
|
{
|
|
if (algorithm_name == "KMAC128"sv)
|
|
return KMACKind::KMAC128;
|
|
if (algorithm_name == "KMAC256"sv)
|
|
return KMACKind::KMAC256;
|
|
return {};
|
|
}
|
|
|
|
u32 KMAC::default_key_length(KMACKind kind)
|
|
{
|
|
switch (kind) {
|
|
case KMACKind::KMAC128:
|
|
return 128;
|
|
case KMACKind::KMAC256:
|
|
return 256;
|
|
}
|
|
VERIFY_NOT_REACHED();
|
|
}
|
|
|
|
KMAC::KMAC(KMACKind kind)
|
|
: m_kind(kind)
|
|
{
|
|
}
|
|
|
|
// https://wicg.github.io/webcrypto-modern-algos/#kmac-operations-sign
|
|
ErrorOr<ByteBuffer> KMAC::sign(ReadonlyBytes key, ReadonlyBytes message, u32 output_length_bits, Optional<ReadonlyBytes> customization) const
|
|
{
|
|
if (output_length_bits == 0)
|
|
return Error::from_string_literal("KMAC output length must be greater than zero");
|
|
|
|
if ((output_length_bits % 8) != 0)
|
|
return Error::from_string_literal("KMAC output length must be a multiple of 8");
|
|
|
|
auto const* mac_name = (m_kind == KMACKind::KMAC128) ? OSSL_MAC_NAME_KMAC128 : OSSL_MAC_NAME_KMAC256;
|
|
|
|
auto* mac = EVP_MAC_fetch(nullptr, mac_name, nullptr);
|
|
if (!mac)
|
|
return Error::from_string_literal("EVP_MAC_fetch failed for KMAC");
|
|
|
|
auto* ctx = EVP_MAC_CTX_new(mac);
|
|
EVP_MAC_free(mac);
|
|
if (!ctx)
|
|
return Error::from_string_literal("EVP_MAC_CTX_new failed");
|
|
|
|
size_t output_size = output_length_bits / 8;
|
|
|
|
Vector<OSSL_PARAM> params;
|
|
params.append(OSSL_PARAM_size_t(OSSL_MAC_PARAM_SIZE, &output_size));
|
|
if (customization.has_value())
|
|
params.append(OSSL_PARAM_octet_string(OSSL_MAC_PARAM_CUSTOM, const_cast<u8*>(customization.value().data()), customization.value().size()));
|
|
params.append(OSSL_PARAM_END);
|
|
|
|
if (EVP_MAC_init(ctx, key.data(), key.size(), params.data()) != 1) {
|
|
EVP_MAC_CTX_free(ctx);
|
|
return Error::from_string_literal("EVP_MAC_init failed for KMAC");
|
|
}
|
|
|
|
if (EVP_MAC_update(ctx, message.data(), message.size()) != 1) {
|
|
EVP_MAC_CTX_free(ctx);
|
|
return Error::from_string_literal("EVP_MAC_update failed for KMAC");
|
|
}
|
|
|
|
auto buf = TRY(ByteBuffer::create_uninitialized(output_size));
|
|
size_t written = 0;
|
|
if (EVP_MAC_final(ctx, buf.data(), &written, output_size) != 1) {
|
|
EVP_MAC_CTX_free(ctx);
|
|
return Error::from_string_literal("EVP_MAC_final failed for KMAC");
|
|
}
|
|
|
|
EVP_MAC_CTX_free(ctx);
|
|
|
|
if (written != output_size)
|
|
return Error::from_string_literal("EVP_MAC_final returned an unexpected output length");
|
|
|
|
return buf;
|
|
}
|
|
|
|
}
|