mirror of
https://github.com/acanas/swad-core.git
synced 2024-09-22 00:00:40 +02:00
123 lines
5.5 KiB
C
123 lines
5.5 KiB
C
|
// swad_cryptography.c: cryptography
|
|||
|
|
|||
|
/*
|
|||
|
SWAD (Shared Workspace At a Distance),
|
|||
|
is a web platform developed at the University of Granada (Spain),
|
|||
|
and used to support university teaching.
|
|||
|
|
|||
|
This file is part of SWAD core.
|
|||
|
Copyright (C) 1999-2014 Antonio Ca<EFBFBD>as Vargas
|
|||
|
|
|||
|
This program is free software: you can redistribute it and/or modify
|
|||
|
it under the terms of the GNU Affero General Public License as
|
|||
|
published by the Free Software Foundation, either version 3 of the
|
|||
|
License, or (at your option) any later version.
|
|||
|
|
|||
|
This program is distributed in the hope that it will be useful,
|
|||
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|||
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|||
|
GNU Affero General Public License for more details.
|
|||
|
|
|||
|
You should have received a copy of the GNU Affero General Public License
|
|||
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|||
|
*/
|
|||
|
/*****************************************************************************/
|
|||
|
/********************************* Headers ***********************************/
|
|||
|
/*****************************************************************************/
|
|||
|
|
|||
|
#include <stdio.h> // For fprintf
|
|||
|
#include <string.h> // For string functions
|
|||
|
#include <unistd.h> // For access, lstat, getpid, chdir, symlink
|
|||
|
|
|||
|
#include "sha2/sha2.h" // For sha-256 and sha-512 algorithms
|
|||
|
#include "swad_cryptography.h"
|
|||
|
|
|||
|
/*****************************************************************************/
|
|||
|
/************** External global variables from others modules ****************/
|
|||
|
/*****************************************************************************/
|
|||
|
|
|||
|
extern const char Str_BIN_TO_BASE64URL[64];
|
|||
|
|
|||
|
/*****************************************************************************/
|
|||
|
/************************ Internal global variables **************************/
|
|||
|
/*****************************************************************************/
|
|||
|
|
|||
|
/***** SHA-256 algorithm *****/
|
|||
|
|
|||
|
#define BITS_SHA256_ENCRYPTION 256
|
|||
|
#define BYTES_SHA256_ENCRYPTION (BITS_SHA256_ENCRYPTION/8)
|
|||
|
|
|||
|
/***** SHA-512 algorithm *****/
|
|||
|
|
|||
|
#define BITS_SHA512_ENCRYPTION 512
|
|||
|
#define BYTES_SHA512_ENCRYPTION (BITS_SHA512_ENCRYPTION/8)
|
|||
|
|
|||
|
/*****************************************************************************/
|
|||
|
/***************************** Internal prototypes ***************************/
|
|||
|
/*****************************************************************************/
|
|||
|
|
|||
|
/*****************************************************************************/
|
|||
|
/*************** Encrypt a plain text using SHA=256 algorithm ****************/
|
|||
|
/*****************************************************************************/
|
|||
|
|
|||
|
// Pointers to PlainText and EncryptedText can point to the same place
|
|||
|
void Cry_EncryptSHA256Base64 (const char *PlainText,char EncryptedText[Cry_LENGTH_ENCRYPTED_STR_SHA256_BASE64+1])
|
|||
|
{
|
|||
|
int i,j;
|
|||
|
unsigned char digest256[SHA256_DIGEST_SIZE];
|
|||
|
|
|||
|
/* Encrypt function */
|
|||
|
sha256 ((const unsigned char *) PlainText, strlen (PlainText), digest256);
|
|||
|
|
|||
|
/* Copy digest256 into EncryptedText, changing from binary to BASE64 */
|
|||
|
for (i = 0, j = 0;
|
|||
|
i < BYTES_SHA256_ENCRYPTION;
|
|||
|
i += 3) // 256 bits, 32 bytes
|
|||
|
{
|
|||
|
EncryptedText[j++] = Str_BIN_TO_BASE64URL [(digest256[ i ] & 0xFC) >> 2];
|
|||
|
if (i == (BYTES_SHA256_ENCRYPTION-2)) // i == 30, j == 42, last character to fill in encrypted text
|
|||
|
{
|
|||
|
EncryptedText[j++] = Str_BIN_TO_BASE64URL [((digest256[ i ] & 0x03) << 4) | ((digest256[i+1] & 0xF0) >> 4)];
|
|||
|
EncryptedText[ j ] = Str_BIN_TO_BASE64URL [((digest256[i+1] & 0x0F) << 2) ];
|
|||
|
}
|
|||
|
else
|
|||
|
{
|
|||
|
EncryptedText[j++] = Str_BIN_TO_BASE64URL [((digest256[ i ] & 0x03) << 4) | ((digest256[i+1] & 0xF0) >> 4)];
|
|||
|
EncryptedText[j++] = Str_BIN_TO_BASE64URL [((digest256[i+1] & 0x0F) << 2) | ((digest256[i+2] & 0xC0) >> 6)];
|
|||
|
EncryptedText[j++] = Str_BIN_TO_BASE64URL [ (digest256[i+2] & 0x3F) ];
|
|||
|
}
|
|||
|
}
|
|||
|
EncryptedText[Cry_LENGTH_ENCRYPTED_STR_SHA256_BASE64] = '\0';
|
|||
|
}
|
|||
|
|
|||
|
/*****************************************************************************/
|
|||
|
/*************** Encrypt a plain text using SHA=512 algorithm ****************/
|
|||
|
/*****************************************************************************/
|
|||
|
|
|||
|
// Pointers to PlainText and EncryptedText can point to the same place
|
|||
|
void Cry_EncryptSHA512Base64 (const char *PlainText,char EncryptedText[Cry_LENGTH_ENCRYPTED_STR_SHA512_BASE64+1])
|
|||
|
{
|
|||
|
int i,j;
|
|||
|
unsigned char digest512[SHA512_DIGEST_SIZE];
|
|||
|
|
|||
|
/* Encrypt function */
|
|||
|
sha512 ((const unsigned char *) PlainText, strlen (PlainText), digest512);
|
|||
|
|
|||
|
/* Copy digest512 into EncryptedText, changing from binary to BASE64 */
|
|||
|
for (i = 0, j = 0;
|
|||
|
i < BYTES_SHA512_ENCRYPTION;
|
|||
|
i += 3) // 512 bits, 64 bytes
|
|||
|
{
|
|||
|
EncryptedText[j++] = Str_BIN_TO_BASE64URL [(digest512[ i ] & 0xFC) >> 2];
|
|||
|
if (i == (BYTES_SHA512_ENCRYPTION-1)) // i == 63, j == 85, last character to fill in encrypted text
|
|||
|
EncryptedText[ j ] = Str_BIN_TO_BASE64URL [(digest512[ i ] & 0x03) << 4];
|
|||
|
else
|
|||
|
{
|
|||
|
EncryptedText[j++] = Str_BIN_TO_BASE64URL [((digest512[ i ] & 0x03) << 4) | ((digest512[i+1] & 0xF0) >> 4)];
|
|||
|
EncryptedText[j++] = Str_BIN_TO_BASE64URL [((digest512[i+1] & 0x0F) << 2) | ((digest512[i+2] & 0xC0) >> 6)];
|
|||
|
EncryptedText[j++] = Str_BIN_TO_BASE64URL [ (digest512[i+2] & 0x3F) ];
|
|||
|
}
|
|||
|
}
|
|||
|
EncryptedText[Cry_LENGTH_ENCRYPTED_STR_SHA512_BASE64] = '\0';
|
|||
|
}
|