CryptPkcs5Pbkdf2.c

Go to the documentation of this file.

 
#include "InternalCryptLib.h"
#include <openssl/evp.h>
#include <openssl/hmac.h>
 
BOOLEAN
EFIAPI
Pkcs5HashPassword (
  IN  UINTN        PasswordLength,
  IN  CONST CHAR8  *Password,
  IN  UINTN        SaltLength,
  IN  CONST UINT8  *Salt,
  IN  UINTN        IterationCount,
  IN  UINTN        DigestSize,
  IN  UINTN        KeyLength,
  OUT UINT8        *OutKey
  )
{
  CONST EVP_MD  *HashAlg;
 
  HashAlg = NULL;
 
  //
  // Parameter Checking.
  //
  if ((Password == NULL) || (Salt == NULL) || (OutKey == NULL)) {
    return FALSE;
  }
 
  if ((PasswordLength == 0) || (PasswordLength > INT_MAX) ||
      (SaltLength == 0) || (SaltLength > INT_MAX) ||
      (KeyLength == 0) || (KeyLength > INT_MAX) ||
      (IterationCount < 1) || (IterationCount > INT_MAX))
  {
    return FALSE;
  }
 
  //
  // Make sure the digest algorithm is supported.
  //
  switch (DigestSize) {
    case SHA1_DIGEST_SIZE:
      HashAlg = EVP_sha1 ();
      break;
    case SHA256_DIGEST_SIZE:
      HashAlg = EVP_sha256 ();
      break;
    default:
      return FALSE;
      break;
  }
 
  //
  // Perform password-based key derivation routines.
  //
  return (BOOLEAN)PKCS5_PBKDF2_HMAC (
                    (const char *)Password,
                    (int)PasswordLength,
                    (const unsigned char *)Salt,
                    (int)SaltLength,
                    (int)IterationCount,
                    HashAlg,
                    (int)KeyLength,
                    (unsigned char *)OutKey
                    );
}