view release on metacpan or  search on metacpan

include/cjws/cjws_compat.h  view on Meta::CPAN

  EC_KEY *ec;
  EVP_PKEY *pkey = NULL;
  if (nid == NID_undef) return NULL;
  ec = EC_KEY_new_by_curve_name(nid);
  if (!ec) return NULL;
  if (EC_KEY_set_public_key_affine_coordinates(ec, (BIGNUM *)x,
                                               (BIGNUM *)y) != 1) {
    EC_KEY_free(ec);
    return NULL;
  }
  if (d && EC_KEY_set_private_key(ec, d) != 1) {
    EC_KEY_free(ec);
    return NULL;
  }
  pkey = EVP_PKEY_new();
  if (!pkey || EVP_PKEY_assign_EC_KEY(pkey, ec) != 1) {
    EVP_PKEY_free(pkey);
    EC_KEY_free(ec);
    return NULL;
  }
  return pkey;

include/cjws/cjws_digest.h  view on Meta::CPAN

#ifndef CJWS_DIGEST_H
#define CJWS_DIGEST_H

#include <openssl/evp.h>

/* One-shot SHA-2 digests and HMAC. HMAC runs through the same
 * EVP_DigestSign machinery the asymmetric algorithms use
 * (EVP_PKEY_new_raw_private_key exists on 1.1 and 3.x alike), so the
 * whole JWS algorithm table is one code path. */

static const EVP_MD *cjws_md_by_bits(int bits) {
  switch (bits) {
    /* 160 is SHA-1, which no JWS algorithm reaches - cjws_alg_parse
     * still admits only 256/384/512. It exists for the raw digest and
     * HMAC surface, where RFC 6238 makes HMAC-SHA1 the interop
     * default every authenticator app assumes. */
    case 160: return EVP_sha1();
    case 256: return EVP_sha256();

include/cjws/cjws_digest.h  view on Meta::CPAN

/* HMAC-SHA-2. out must hold EVP_MAX_MD_SIZE. Returns MAC length or 0. */
static STRLEN cjws_hmac(int bits, const unsigned char *key, STRLEN keylen,
                        const unsigned char *in, STRLEN n,
                        unsigned char *out) {
  const EVP_MD *md = cjws_md_by_bits(bits);
  EVP_PKEY *pk = NULL;
  EVP_MD_CTX *ctx = NULL;
  size_t maclen = 0;
  if (!md) return 0;
  pk = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, NULL, key, keylen);
  if (!pk) return 0;
  ctx = EVP_MD_CTX_new();
  if (!ctx) { EVP_PKEY_free(pk); return 0; }
  if (EVP_DigestSignInit(ctx, NULL, md, NULL, pk) == 1
      && EVP_DigestSign(ctx, NULL, &maclen, in, n) == 1
      && maclen <= EVP_MAX_MD_SIZE
      && EVP_DigestSign(ctx, out, &maclen, in, n) == 1) {
    EVP_MD_CTX_free(ctx);
    EVP_PKEY_free(pk);
    return (STRLEN)maclen;