mirror of
https://github.com/status-im/status-go.git
synced 2025-01-09 06:12:55 +00:00
e8c4b7647f
* chore(upgradeSQLCipher): Upgrading SQLCipher to version 5.4.5 Changes: ### github.com/mutecomm/go-sqlcipher 1. The improved crypto argorighms from go-sqlcipher v3 are merged in v4 Tags: v4.4.2-status.1 - merge `burn_stack` improvement v4.4.2-status.2 - merge `SHA1` improvement v4.4.2-status.4- merge 'AES' improvement 2. Fixed `go-sqlcipher` to support v3 database in compatibility mode (`sqlcipher` already supports this) (Tag: v4.4.2-status.3) 3. Upgrade `sqlcipher` to v5.4.5 (Tag: v4.5.4-status.1) ### github.com/status-im/migrate/v4 1. Upgrade `go-sqlcipher` version in `github.com/status-im/migrate/v4` ### status-go 1. Upgrade `go-sqlcipher` and `migrate` modules in status-go 2. Configure the DB connections to open the DB in v3 compatibility mode * chore(upgradeSQLCipher): Use sqlcipher v3 configuration to encrypt a plain text database * chore(upgradeSQLCipher): Scanning NULL BLOB value should return nil Fixing failing tests: TestSyncDeviceSuite/TestPairingSyncDeviceClientAsReceiver; TestSyncDeviceSuite/TestPairingSyncDeviceClientAsSender Considering the following configuration: 1. Table with BLOB column has 1 NULL value 2. Query the value 3. Rows.Scan(&dest sql.NullString) Expected: dest.Valid == false; dest.String == nil Actual: dest.Valid == true; dest.String == "" * chore: Bump go-sqlcipher version to include NULL BLOB fix
95 lines
2.3 KiB
C
95 lines
2.3 KiB
C
/* LibTomCrypt, modular cryptographic library -- Tom St Denis */
|
|
/* SPDX-License-Identifier: Unlicense */
|
|
#include "tomcrypt_private.h"
|
|
|
|
/**
|
|
@file hmac_init.c
|
|
HMAC support, initialize state, Tom St Denis/Dobes Vandermeer
|
|
*/
|
|
|
|
#ifdef LTC_HMAC
|
|
|
|
#define LTC_HMAC_BLOCKSIZE hash_descriptor[hash].blocksize
|
|
|
|
/**
|
|
Initialize an HMAC context.
|
|
@param hmac The HMAC state
|
|
@param hash The index of the hash you want to use
|
|
@param key The secret key
|
|
@param keylen The length of the secret key (octets)
|
|
@return CRYPT_OK if successful
|
|
*/
|
|
int hmac_init(hmac_state *hmac, int hash, const unsigned char *key, unsigned long keylen)
|
|
{
|
|
unsigned char *buf;
|
|
unsigned long hashsize;
|
|
unsigned long i, z;
|
|
int err;
|
|
|
|
LTC_ARGCHK(hmac != NULL);
|
|
LTC_ARGCHK(key != NULL);
|
|
|
|
/* valid hash? */
|
|
if ((err = hash_is_valid(hash)) != CRYPT_OK) {
|
|
return err;
|
|
}
|
|
hmac->hash = hash;
|
|
hashsize = hash_descriptor[hash].hashsize;
|
|
|
|
/* valid key length? */
|
|
if (keylen == 0) {
|
|
return CRYPT_INVALID_KEYSIZE;
|
|
}
|
|
|
|
/* allocate ram for buf */
|
|
buf = XMALLOC(LTC_HMAC_BLOCKSIZE);
|
|
if (buf == NULL) {
|
|
return CRYPT_MEM;
|
|
}
|
|
|
|
/* check hash block fits */
|
|
if (sizeof(hmac->key) < LTC_HMAC_BLOCKSIZE) {
|
|
err = CRYPT_BUFFER_OVERFLOW;
|
|
goto LBL_ERR;
|
|
}
|
|
|
|
/* (1) make sure we have a large enough key */
|
|
if(keylen > LTC_HMAC_BLOCKSIZE) {
|
|
z = LTC_HMAC_BLOCKSIZE;
|
|
if ((err = hash_memory(hash, key, keylen, hmac->key, &z)) != CRYPT_OK) {
|
|
goto LBL_ERR;
|
|
}
|
|
keylen = hashsize;
|
|
} else {
|
|
XMEMCPY(hmac->key, key, (size_t)keylen);
|
|
}
|
|
|
|
if(keylen < LTC_HMAC_BLOCKSIZE) {
|
|
zeromem((hmac->key) + keylen, (size_t)(LTC_HMAC_BLOCKSIZE - keylen));
|
|
}
|
|
|
|
/* Create the initialization vector for step (3) */
|
|
for(i=0; i < LTC_HMAC_BLOCKSIZE; i++) {
|
|
buf[i] = hmac->key[i] ^ 0x36;
|
|
}
|
|
|
|
/* Pre-pend that to the hash data */
|
|
if ((err = hash_descriptor[hash].init(&hmac->md)) != CRYPT_OK) {
|
|
goto LBL_ERR;
|
|
}
|
|
|
|
if ((err = hash_descriptor[hash].process(&hmac->md, buf, LTC_HMAC_BLOCKSIZE)) != CRYPT_OK) {
|
|
goto LBL_ERR;
|
|
}
|
|
|
|
LBL_ERR:
|
|
#ifdef LTC_CLEAN_STACK
|
|
zeromem(buf, LTC_HMAC_BLOCKSIZE);
|
|
#endif
|
|
|
|
XFREE(buf);
|
|
return err;
|
|
}
|
|
|
|
#endif
|