WIP: HMAC

Author: JulioLoayzaM

tests/harness/HMAC/verify.c

@@ -0,0 +1,41 @@
+#include <openssl/crypto.h>
+#include <openssl/err.h>
+#include <openssl/evp.h>
+#include <sched.h>
+#include <stdint.h>
+#include <stdlib.h>
+
+int CC_HMAC_verify_sha256(const uint8_t *mac, const size_t mac_size,
+                          const uint8_t *key, const size_t key_size,
+                          const uint8_t *msg, const size_t msg_size) {
+  EVP_MD_CTX *mdctx = NULL;
+  const EVP_MD *md = NULL;
+  EVP_PKEY *pkey = NULL;
+  uint8_t buf[EVP_MAX_MD_SIZE] = {0};
+
+  if (NULL == (mdctx = EVP_MD_CTX_new()))
+    goto error_ctx_new;
+  if (NULL == (md = EVP_get_digestbyname("SHA-384")))
+    goto error_by_name;
+
+  if (NULL ==
+      (pkey = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, NULL, key, key_size)))
+    goto error;
+  if (1 != EVP_DigestVerifyInit(mdctx, NULL, md, NULL, pkey))
+    goto error;
+  if (1 != EVP_DigestVerifyUpdate(mdctx, msg, msg_size))
+    goto error;
+  if (1 != EVP_DigestVerifyFinal(mdctx, buf, EVP_MAX_MD_SIZE))
+    goto error;
+
+  EVP_MD_CTX_free(mdctx);
+  EVP_PKEY_free(pkey);
+  return (CRYPTO_memcmp(mac, buf, mac_size) == 0);
+
+error:
+  EVP_PKEY_free(pkey);
+error_by_name:
+  EVP_MD_CTX_free(mdctx);
+error_ctx_new:
+  return -2;
+}

tests/harness/HMAC/verify.py

@@ -6,3 +6,8 @@
 def CC_HMAC_verify_sha256(key: bytes, msg: bytes, mac: bytes) -> bytes:
     digest = hmac.digest(key, msg, "sha256")
     return hmac.compare_digest(digest, mac)
+
+
+def CC_HMAC_verify_sha256_truncated(key: bytes, msg: bytes, mac: bytes) -> bytes:
+    digest = hmac.digest(key, msg, "sha256")
+    return hmac.compare_digest(digest[: len(mac)], mac)