/************************************************************************
 *
 * Copyright (C) 2020 IRCAD France
 * Copyright (C) 2020 IHU Strasbourg
 *
 * This file is part of Sight.
 *
 * Sight is free software: you can redistribute it and/or modify it under
 * the terms of the GNU Lesser General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * Sight is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with Sight. If not, see <https://www.gnu.org/licenses/>.
 *
 ***********************************************************************/

/*
   ---------------------------------------------------------------------------
   Copyright (c) 1998-2010, Brian Gladman, Worcester, UK. All rights reserved.

   The redistribution and use of this software (with or without changes)
   is allowed without the payment of fees or royalties provided that:

   source code distributions include the above copyright notice, this
   list of conditions and the following disclaimer;

   binary distributions include the above copyright notice, this list
   of conditions and the following disclaimer in their documentation.

   This software is provided 'as is' with no explicit or implied warranties
   in respect of its operation, including, but not limited to, correctness
   and fitness for purpose.
   ---------------------------------------------------------------------------
   Issue Date: 20/12/2007

   This is an implementation of HMAC, the FIPS standard keyed hash function
 */

#include "minizip/hmac.h"

#if defined(__cplusplus)
extern "C"
{
#endif

/* initialise the HMAC context to zero */
int hmac_sha_begin(enum hmac_hash hash, hmac_ctx cx[1])
{
    memset(cx, 0, sizeof(hmac_ctx));
    switch(hash)
    {
#ifdef SHA_1
        case HMAC_SHA1:
            cx->f_begin    = (hf_begin*)sha1_begin;
            cx->f_hash     = (hf_hash*)sha1_hash;
            cx->f_end      = (hf_end*)sha1_end;
            cx->input_len  = SHA1_BLOCK_SIZE;
            cx->output_len = SHA1_DIGEST_SIZE;
            break;
#endif
#ifdef SHA_224
        case HMAC_SHA224:
            cx->f_begin    = (hf_begin*)sha224_begin;
            cx->f_hash     = (hf_hash*)sha224_hash;
            cx->f_end      = (hf_end*)sha224_end;
            cx->input_len  = SHA224_BLOCK_SIZE;
            cx->output_len = SHA224_DIGEST_SIZE;
            break;
#endif
#ifdef SHA_256
        case HMAC_SHA256:
            cx->f_begin    = (hf_begin*)sha256_begin;
            cx->f_hash     = (hf_hash*)sha256_hash;
            cx->f_end      = (hf_end*)sha256_end;
            cx->input_len  = SHA256_BLOCK_SIZE;
            cx->output_len = SHA256_DIGEST_SIZE;
            break;
#endif
#ifdef SHA_384
        case HMAC_SHA384:
            cx->f_begin    = (hf_begin*)sha384_begin;
            cx->f_hash     = (hf_hash*)sha384_hash;
            cx->f_end      = (hf_end*)sha384_end;
            cx->input_len  = SHA384_BLOCK_SIZE;
            cx->output_len = SHA384_DIGEST_SIZE;
            break;
#endif
#ifdef SHA_512
        case HMAC_SHA512:
            cx->f_begin    = (hf_begin*)sha512_begin;
            cx->f_hash     = (hf_hash*)sha512_hash;
            cx->f_end      = (hf_end*)sha512_end;
            cx->input_len  = SHA512_BLOCK_SIZE;
            cx->output_len = SHA512_DIGEST_SIZE;
            break;
        case HMAC_SHA512_256:
            cx->f_begin    = (hf_begin*)sha512_256_begin;
            cx->f_hash     = (hf_hash*)sha512_256_hash;
            cx->f_end      = (hf_end*)sha512_256_end;
            cx->input_len  = SHA512_256_BLOCK_SIZE;
            cx->output_len = SHA512_256_DIGEST_SIZE;
            break;
        case HMAC_SHA512_224:
            cx->f_begin    = (hf_begin*)sha512_224_begin;
            cx->f_hash     = (hf_hash*)sha512_224_hash;
            cx->f_end      = (hf_end*)sha512_224_end;
            cx->input_len  = SHA512_224_BLOCK_SIZE;
            cx->output_len = SHA512_224_DIGEST_SIZE;
            break;
        case HMAC_SHA512_192:
            cx->f_begin    = (hf_begin*)sha512_192_begin;
            cx->f_hash     = (hf_hash*)sha512_192_hash;
            cx->f_end      = (hf_end*)sha512_192_end;
            cx->input_len  = SHA512_192_BLOCK_SIZE;
            cx->output_len = SHA512_192_DIGEST_SIZE;
            break;
        case HMAC_SHA512_128:
            cx->f_begin    = (hf_begin*)sha512_128_begin;
            cx->f_hash     = (hf_hash*)sha512_128_hash;
            cx->f_end      = (hf_begin*)sha512_128_end;
            cx->input_len  = SHA512_128_BLOCK_SIZE;
            cx->output_len = SHA512_128_DIGEST_SIZE;
            break;
#endif
    }
    return (int)cx->output_len;
}

/* input the HMAC key (can be called multiple times)    */
int hmac_sha_key(const unsigned char key[], unsigned long key_len, hmac_ctx cx[1])
{
    if(cx->klen == HMAC_IN_DATA)                /* error if further key input   */
    {
        return EXIT_FAILURE;                    /* is attempted in data mode    */

    }
    if(cx->klen + key_len > cx->input_len)      /* if the key has to be hashed  */
    {
        if(cx->klen <= cx->input_len)           /* if the hash has not yet been */
        {                                       /* started, initialise it and   */
            cx->f_begin(cx->sha_ctx);           /* hash stored key characters   */
            cx->f_hash(cx->key, cx->klen, cx->sha_ctx);
        }

        cx->f_hash(key, key_len, cx->sha_ctx);  /* hash long key data into hash */
    }
    else                                        /* otherwise store key data     */
    {
        memcpy(cx->key + cx->klen, key, key_len);
    }

    cx->klen += key_len;                        /* update the key length count  */
    return EXIT_SUCCESS;
}

/* input the HMAC data (can be called multiple times) - */
/* note that this call terminates the key input phase   */
void hmac_sha_data(const unsigned char data[], unsigned long data_len, hmac_ctx cx[1])
{
    unsigned int i;

    if(cx->klen != HMAC_IN_DATA)                /* if not yet in data phase */
    {
        if(cx->klen > cx->input_len)            /* if key is being hashed   */
        {                                       /* complete the hash and    */
            cx->f_end(cx->key, cx->sha_ctx);    /* store the result as the  */
            cx->klen = cx->output_len;          /* key and set new length   */
        }

        /* pad the key if necessary */
        memset(cx->key + cx->klen, 0, cx->input_len - cx->klen);

        /* xor ipad into key value  */
        for(i = 0; i < (cx->input_len >> 2); ++i)
        {
            ((uint32_t*)cx->key)[i] ^= 0x36363636;
        }

        /* and start hash operation */
        cx->f_begin(cx->sha_ctx);
        cx->f_hash(cx->key, cx->input_len, cx->sha_ctx);

        /* mark as now in data mode */
        cx->klen = HMAC_IN_DATA;
    }

    /* hash the data (if any)       */
    if(data_len)
    {
        cx->f_hash(data, data_len, cx->sha_ctx);
    }
}

/* compute and output the MAC value */
void hmac_sha_end(unsigned char mac[], unsigned long mac_len, hmac_ctx cx[1])
{
    unsigned char dig[HMAC_MAX_OUTPUT_SIZE];
    unsigned int i;

    /* if no data has been entered perform a null data phase        */
    if(cx->klen != HMAC_IN_DATA)
    {
        hmac_sha_data((const unsigned char*)0, 0, cx);
    }

    cx->f_end(dig, cx->sha_ctx);        /* complete the inner hash       */

    /* set outer key value using opad and removing ipad */
    for(i = 0; i < (cx->input_len >> 2); ++i)
    {
        ((uint32_t*)cx->key)[i] ^= 0x36363636 ^ 0x5c5c5c5c;
    }

    /* perform the outer hash operation */
    cx->f_begin(cx->sha_ctx);
    cx->f_hash(cx->key, cx->input_len, cx->sha_ctx);
    cx->f_hash(dig, cx->output_len, cx->sha_ctx);
    cx->f_end(dig, cx->sha_ctx);

    /* output the hash value            */
    for(i = 0; i < mac_len; ++i)
    {
        mac[i] = dig[i];
    }
}

/* 'do it all in one go' subroutine     */
void hmac_sha(enum hmac_hash hash, const unsigned char key[], unsigned long key_len,
              const unsigned char data[], unsigned long data_len,
              unsigned char mac[], unsigned long mac_len)
{
    hmac_ctx cx[1];

    hmac_sha_begin(hash, cx);
    hmac_sha_key(key, key_len, cx);
    hmac_sha_data(data, data_len, cx);
    hmac_sha_end(mac, mac_len, cx);
}

#if defined(__cplusplus)
}
#endif
