mirror of
https://github.com/cuberite/polarssl.git
synced 2025-08-05 11:46:12 -04:00
84867cffdd
In the generic message digest abstraction, instead of storing method pointers in the per-algorithm data structure and using wrapper functions as those methods, call the per-algorithm function directly. This saves some code size (2336B -> 2043B for md with all algorithms enabled on M0+ with gcc -Os). This should also make it easier to optimize the case when a single algorithm is supported. In addition, this is a very slight security improvement since it removes one opportunity for a buffer overflow to directly turn into letting the attacker overwrite a pointer to a function pointer. This commit does not modify the documented API. However, it removes the possibility for users to define their own hash implementations and use them by building their own md_info. Changing mbedtls_md_context to contain a md type identifier rather than a pointer to an info structure would save a few more bytes and a few more runtime memory accesses, but would be a major API break since a lot of code uses `const mbedtls_md_info *` to keep track of which hash is in use.
91 lines
2.2 KiB
C
91 lines
2.2 KiB
C
/**
|
|
* \file md_internal.h
|
|
*
|
|
* \brief Message digest wrappers.
|
|
*
|
|
* \warning This in an internal header. Do not include directly.
|
|
*
|
|
* \author Adriaan de Jong <dejong@fox-it.com>
|
|
*/
|
|
/*
|
|
* Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
|
|
* SPDX-License-Identifier: Apache-2.0
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
* not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*
|
|
* This file is part of mbed TLS (https://tls.mbed.org)
|
|
*/
|
|
#ifndef MBEDTLS_MD_WRAP_H
|
|
#define MBEDTLS_MD_WRAP_H
|
|
|
|
#if !defined(MBEDTLS_CONFIG_FILE)
|
|
#include "config.h"
|
|
#else
|
|
#include MBEDTLS_CONFIG_FILE
|
|
#endif
|
|
|
|
#include "md.h"
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
/**
|
|
* Message digest information.
|
|
* Allows message digest functions to be called in a generic way.
|
|
*/
|
|
struct mbedtls_md_info_t
|
|
{
|
|
/** Digest identifier */
|
|
mbedtls_md_type_t type;
|
|
|
|
/** Name of the message digest */
|
|
const char * name;
|
|
|
|
/** Output length of the digest function in bytes */
|
|
int size;
|
|
|
|
/** Block length of the digest function in bytes */
|
|
int block_size;
|
|
};
|
|
|
|
#if defined(MBEDTLS_MD2_C)
|
|
extern const mbedtls_md_info_t mbedtls_md2_info;
|
|
#endif
|
|
#if defined(MBEDTLS_MD4_C)
|
|
extern const mbedtls_md_info_t mbedtls_md4_info;
|
|
#endif
|
|
#if defined(MBEDTLS_MD5_C)
|
|
extern const mbedtls_md_info_t mbedtls_md5_info;
|
|
#endif
|
|
#if defined(MBEDTLS_RIPEMD160_C)
|
|
extern const mbedtls_md_info_t mbedtls_ripemd160_info;
|
|
#endif
|
|
#if defined(MBEDTLS_SHA1_C)
|
|
extern const mbedtls_md_info_t mbedtls_sha1_info;
|
|
#endif
|
|
#if defined(MBEDTLS_SHA256_C)
|
|
extern const mbedtls_md_info_t mbedtls_sha224_info;
|
|
extern const mbedtls_md_info_t mbedtls_sha256_info;
|
|
#endif
|
|
#if defined(MBEDTLS_SHA512_C)
|
|
extern const mbedtls_md_info_t mbedtls_sha384_info;
|
|
extern const mbedtls_md_info_t mbedtls_sha512_info;
|
|
#endif
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif /* MBEDTLS_MD_WRAP_H */
|