]> git.ipfire.org Git - thirdparty/openssl.git/commit - providers/common/include/prov/providercommonerr.h
[KDF] Add KBKDF implementation for counter-mode HMAC
authorRobbie Harwood <rharwood@redhat.com>
Tue, 10 Sep 2019 21:46:44 +0000 (17:46 -0400)
committerRichard Levitte <levitte@openssl.org>
Fri, 27 Sep 2019 21:17:26 +0000 (23:17 +0200)
commita39bc4404baa4e065d01efe829a1f26eba737049
treee9e744551b5ab87c382f569ff115e8b354dcfb1c
parent8f3b8fd6f45fc5f2ab924011908a1e66c2dba462
[KDF] Add KBKDF implementation for counter-mode HMAC

Implement SP800-108 section 5.1 with HMAC intended for use in Kerberos.
Add test vectors from RFC 8009.

Adds error codes PROV_R_INVALID_MAC and PROV_R_MISSING_MAC.

Signed-off-by: Robbie Harwood <rharwood@redhat.com>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/9924)
crypto/err/openssl.txt
doc/man7/EVP_KDF-KB.pod [new file with mode: 0644]
include/openssl/core_names.h
providers/common/include/internal/provider_algs.h
providers/common/include/internal/providercommonerr.h
providers/common/kdfs/build.info
providers/common/kdfs/kbkdf.c [new file with mode: 0644]
providers/default/defltprov.c
providers/fips/fipsprov.c
test/evp_kdf_test.c