/*

 * Copyright (C) 2017 Red Hat, Inc.

 *

 * Author: Nikos Mavrogiannopoulos

 *

 * This file is part of GNUTLS.

 *

 * The GNUTLS library is free software; you can redistribute it and/or

 * modify it under the terms of the GNU Lesser General Public License

 * as published by the Free Software Foundation; either version 2.1 of

 * the License, or (at your option) any later version.

 *

 * This library is distributed in the hope that it will be useful, but

 * WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU

 * Lesser General Public License for more details.

 *

 * You should have received a copy of the GNU Lesser General Public License

 * along with this program.  If not, see <https://www.gnu.org/licenses/>

 *

 */

#include <gnutls_int.h>

#include "int/tls1-prf.h"

#include <nettle/hmac.h>

#if ENABLE_GOST

#include "gost/hmac-gost.h"

#endif

/*-

 * _gnutls_prf_raw:

 * @mac: the MAC algorithm to use, set to %GNUTLS_MAC_MD5_SHA1 for the TLS1.0 mac

 * @master_size: length of the @master variable.

 * @master: the master secret used in PRF computation

 * @label_size: length of the @label variable.

 * @label: label used in PRF computation, typically a short string.

 * @seed_size: length of the @seed variable.

 * @seed: optional extra data to seed the PRF with.

 * @outsize: size of pre-allocated output buffer to hold the output.

 * @out: pre-allocated buffer to hold the generated data.

 *

 * Apply the TLS Pseudo-Random-Function (PRF) on the master secret

 * and the provided data.

 *

 * Returns: %GNUTLS_E_SUCCESS on success, or an error code.

 -*/

int

_gnutls_prf_raw(gnutls_mac_algorithm_t mac,

		size_t master_size, const void *master,

		size_t label_size, const char *label,

		size_t seed_size, const uint8_t *seed, size_t outsize, char *out)

{

	int ret;

	switch (mac) {

	case GNUTLS_MAC_MD5_SHA1:

		tls10_prf(master_size, (uint8_t*)master, label_size, label,

			  seed_size, seed, outsize, (uint8_t*)out);

		return 0;

	case GNUTLS_MAC_SHA256:{

		struct hmac_sha256_ctx ctx;

		hmac_sha256_set_key(&ctx, master_size, (uint8_t*)master);

		ret = tls12_prf(&ctx,

			  (nettle_hash_update_func *)

			  hmac_sha256_update,

			  (nettle_hash_digest_func *)

			  hmac_sha256_digest, SHA256_DIGEST_SIZE,

			  label_size, label, seed_size,

			  seed, outsize,

			  (uint8_t*)out);

		if (unlikely(ret != 1))

			return gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);

		break;

	}

	case GNUTLS_MAC_SHA384:{

		struct hmac_sha384_ctx ctx;

		hmac_sha384_set_key(&ctx, master_size, master);

		ret = tls12_prf(&ctx,

			  (nettle_hash_update_func *)

			  hmac_sha384_update,

			  (nettle_hash_digest_func *)

			  hmac_sha384_digest, SHA384_DIGEST_SIZE,

			  label_size, label, seed_size,

			  seed, outsize,

			  (uint8_t*)out);

		if (unlikely(ret != 1))

			return gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);

		break;

	}

#if ENABLE_GOST

	case GNUTLS_MAC_STREEBOG_256:{

		struct hmac_streebog256_ctx ctx;

		hmac_streebog256_set_key(&ctx, master_size, master);

		ret = tls12_prf(&ctx,

			  (nettle_hash_update_func *)

			  hmac_streebog256_update,

			  (nettle_hash_digest_func *)

			  hmac_streebog256_digest, STREEBOG256_DIGEST_SIZE,

			  label_size, label, seed_size,

			  seed, outsize,

			  (uint8_t*)out);

		if (unlikely(ret != 1))

			return gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);

		break;

	}

	case GNUTLS_MAC_STREEBOG_512:{

		struct hmac_streebog512_ctx ctx;

		hmac_streebog512_set_key(&ctx, master_size, master);

		ret = tls12_prf(&ctx,

			  (nettle_hash_update_func *)

			  hmac_streebog512_update,

			  (nettle_hash_digest_func *)

			  hmac_streebog512_digest, STREEBOG512_DIGEST_SIZE,

			  label_size, label, seed_size,

			  seed, outsize,

			  (uint8_t*)out);

		if (unlikely(ret != 1))

			return gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);

		break;

	}

#endif

	default:

		gnutls_assert();

		_gnutls_debug_log("unhandled PRF %s\n",

				  gnutls_mac_get_name(mac));

		return GNUTLS_E_INVALID_REQUEST;

	}

	return 0;

}