ligang/vpp
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ipsec: esp-decrypt rework

Browse Source 
Change-Id: Icf83c876d0880d1872b84e0a3d34be654b76149f
Signed-off-by: Damjan Marion <damarion@cisco.com>
This commit is contained in:
Damjan Marion
2019-03-25 15:54:40 +01:00
committed by Damjan Marion
parent d7603d97e0
commit b4fff3a397
5 changed files with 339 additions and 236 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
src/plugins/crypto_openssl/main.c
View File

@@ -111,16 +111,23 @@ openssl_ops_hmac (vlib_main_t * vm, vnet_crypto_op_t * ops[], u32 n_ops,
{
vnet_crypto_op_t *op = ops[i];
unsigned int out_len;
size_t sz = op->hmac_trunc_len ? op->hmac_trunc_len : EVP_MD_size (md);
HMAC_Init_ex (ctx, op->key, op->key_len, md, NULL);
HMAC_Update (ctx, op->src, op->len);
if (op->hmac_trunc_len)
HMAC_Final (ctx, buffer, &out_len);
if (op->flags & VNET_CRYPTO_OP_FLAG_HMAC_CHECK)
{
HMAC_Final (ctx, buffer, &out_len);
clib_memcpy_fast (op->dst, buffer, op->hmac_trunc_len);
if ((memcmp (op->dst, buffer, sz)))
{
n_ops -= 1;
op->status = VNET_CRYPTO_OP_STATUS_FAIL_BAD_HMAC;
continue;
}
}
else
HMAC_Final (ctx, op->dst, &out_len);
clib_memcpy_fast (op->dst, buffer, sz);
op->status = VNET_CRYPTO_OP_STATUS_COMPLETED;
}
return n_ops;