mac.go 1.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657
  1. // Copyright 2012 The Go Authors. All rights reserved.
  2. // Use of this source code is governed by a BSD-style
  3. // license that can be found in the LICENSE file.
  4. package ssh
  5. // Message authentication support
  6. import (
  7. "crypto/hmac"
  8. "crypto/sha1"
  9. "crypto/sha256"
  10. "hash"
  11. )
  12. type macMode struct {
  13. keySize int
  14. new func(key []byte) hash.Hash
  15. }
  16. // truncatingMAC wraps around a hash.Hash and truncates the output digest to
  17. // a given size.
  18. type truncatingMAC struct {
  19. length int
  20. hmac hash.Hash
  21. }
  22. func (t truncatingMAC) Write(data []byte) (int, error) {
  23. return t.hmac.Write(data)
  24. }
  25. func (t truncatingMAC) Sum(in []byte) []byte {
  26. out := t.hmac.Sum(in)
  27. return out[:len(in)+t.length]
  28. }
  29. func (t truncatingMAC) Reset() {
  30. t.hmac.Reset()
  31. }
  32. func (t truncatingMAC) Size() int {
  33. return t.length
  34. }
  35. func (t truncatingMAC) BlockSize() int { return t.hmac.BlockSize() }
  36. var macModes = map[string]*macMode{
  37. "hmac-sha2-256": {32, func(key []byte) hash.Hash {
  38. return hmac.New(sha256.New, key)
  39. }},
  40. "hmac-sha1": {20, func(key []byte) hash.Hash {
  41. return hmac.New(sha1.New, key)
  42. }},
  43. "hmac-sha1-96": {20, func(key []byte) hash.Hash {
  44. return truncatingMAC{12, hmac.New(sha1.New, key)}
  45. }},
  46. }