98 lines
3.2 KiB
Java
98 lines
3.2 KiB
Java
|
package org.bouncycastle.crypto.tls;
|
||
|
|
|
||
|
|
import org.bouncycastle.crypto.Digest;
|
||
|
|
import org.bouncycastle.crypto.Mac;
|
||
|
|
import org.bouncycastle.crypto.digests.LongDigest;
|
||
|
|
import org.bouncycastle.crypto.macs.HMac;
|
||
|
|
import org.bouncycastle.crypto.params.KeyParameter;
|
||
|
|
import org.bouncycastle.util.Arrays;
|
||
|
|
|
||
|
|
/* loaded from: classes6.dex */
|
||
|
|
public class TlsMac {
|
||
|
|
protected TlsContext context;
|
||
|
|
protected int digestBlockSize;
|
||
|
|
protected int digestOverhead;
|
||
|
|
protected Mac mac;
|
||
|
|
protected int macLength;
|
||
|
|
protected byte[] secret;
|
||
|
|
|
||
|
|
protected byte[] truncate(byte[] bArr) {
|
||
|
|
int length = bArr.length;
|
||
|
|
int i = this.macLength;
|
||
|
|
return length <= i ? bArr : Arrays.copyOf(bArr, i);
|
||
|
|
}
|
||
|
|
|
||
|
|
public int getSize() {
|
||
|
|
return this.macLength;
|
||
|
|
}
|
||
|
|
|
||
|
|
public byte[] getMACSecret() {
|
||
|
|
return this.secret;
|
||
|
|
}
|
||
|
|
|
||
|
|
protected int getDigestBlockCount(int i) {
|
||
|
|
return (i + this.digestOverhead) / this.digestBlockSize;
|
||
|
|
}
|
||
|
|
|
||
|
|
public byte[] calculateMacConstantTime(long j, short s, byte[] bArr, int i, int i2, int i3, byte[] bArr2) {
|
||
|
|
byte[] calculateMac = calculateMac(j, s, bArr, i, i2);
|
||
|
|
int i4 = TlsUtils.isSSL(this.context) ? 11 : 13;
|
||
|
|
int digestBlockCount = getDigestBlockCount(i3 + i4) - getDigestBlockCount(i4 + i2);
|
||
|
|
while (true) {
|
||
|
|
digestBlockCount--;
|
||
|
|
if (digestBlockCount < 0) {
|
||
|
|
this.mac.update(bArr2[0]);
|
||
|
|
this.mac.reset();
|
||
|
|
return calculateMac;
|
||
|
|
}
|
||
|
|
this.mac.update(bArr2, 0, this.digestBlockSize);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
public byte[] calculateMac(long j, short s, byte[] bArr, int i, int i2) {
|
||
|
|
ProtocolVersion serverVersion = this.context.getServerVersion();
|
||
|
|
boolean isSSL = serverVersion.isSSL();
|
||
|
|
int i3 = isSSL ? 11 : 13;
|
||
|
|
byte[] bArr2 = new byte[i3];
|
||
|
|
TlsUtils.writeUint64(j, bArr2, 0);
|
||
|
|
TlsUtils.writeUint8(s, bArr2, 8);
|
||
|
|
if (!isSSL) {
|
||
|
|
TlsUtils.writeVersion(serverVersion, bArr2, 9);
|
||
|
|
}
|
||
|
|
TlsUtils.writeUint16(i2, bArr2, i3 - 2);
|
||
|
|
this.mac.update(bArr2, 0, i3);
|
||
|
|
this.mac.update(bArr, i, i2);
|
||
|
|
byte[] bArr3 = new byte[this.mac.getMacSize()];
|
||
|
|
this.mac.doFinal(bArr3, 0);
|
||
|
|
return truncate(bArr3);
|
||
|
|
}
|
||
|
|
|
||
|
|
public TlsMac(TlsContext tlsContext, Digest digest, byte[] bArr, int i, int i2) {
|
||
|
|
int i3;
|
||
|
|
this.context = tlsContext;
|
||
|
|
KeyParameter keyParameter = new KeyParameter(bArr, i, i2);
|
||
|
|
this.secret = Arrays.clone(keyParameter.getKey());
|
||
|
|
if (digest instanceof LongDigest) {
|
||
|
|
this.digestBlockSize = 128;
|
||
|
|
i3 = 16;
|
||
|
|
} else {
|
||
|
|
this.digestBlockSize = 64;
|
||
|
|
i3 = 8;
|
||
|
|
}
|
||
|
|
this.digestOverhead = i3;
|
||
|
|
if (TlsUtils.isSSL(tlsContext)) {
|
||
|
|
this.mac = new SSL3Mac(digest);
|
||
|
|
if (digest.getDigestSize() == 20) {
|
||
|
|
this.digestOverhead = 4;
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
this.mac = new HMac(digest);
|
||
|
|
}
|
||
|
|
this.mac.init(keyParameter);
|
||
|
|
this.macLength = this.mac.getMacSize();
|
||
|
|
if (tlsContext.getSecurityParameters().truncatedHMac) {
|
||
|
|
this.macLength = Math.min(this.macLength, 10);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|