PostgreSQL Source Code  git master
px-crypt.c
Go to the documentation of this file.
1 /*
2  * px-crypt.c
3  * Wrapper for various crypt algorithms.
4  *
5  * Copyright (c) 2001 Marko Kreen
6  * All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  * 1. Redistributions of source code must retain the above copyright
12  * notice, this list of conditions and the following disclaimer.
13  * 2. Redistributions in binary form must reproduce the above copyright
14  * notice, this list of conditions and the following disclaimer in the
15  * documentation and/or other materials provided with the distribution.
16  *
17  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27  * SUCH DAMAGE.
28  *
29  * contrib/pgcrypto/px-crypt.c
30  */
31 
32 #include "postgres.h"
33 
34 #include "px-crypt.h"
35 #include "px.h"
36 
37 static char *
38 run_crypt_des(const char *psw, const char *salt,
39  char *buf, unsigned len)
40 {
41  char *res;
42 
43  res = px_crypt_des(psw, salt);
44  if (res == NULL || strlen(res) > len - 1)
45  return NULL;
46  strcpy(buf, res);
47  return buf;
48 }
49 
50 static char *
51 run_crypt_md5(const char *psw, const char *salt,
52  char *buf, unsigned len)
53 {
54  char *res;
55 
56  res = px_crypt_md5(psw, salt, buf, len);
57  return res;
58 }
59 
60 static char *
61 run_crypt_bf(const char *psw, const char *salt,
62  char *buf, unsigned len)
63 {
64  char *res;
65 
66  res = _crypt_blowfish_rn(psw, salt, buf, len);
67  return res;
68 }
69 
71 {
72  char *id;
73  unsigned id_len;
74  char *(*crypt) (const char *psw, const char *salt,
75  char *buf, unsigned len);
76 };
77 
78 static const struct px_crypt_algo
80  {"$2a$", 4, run_crypt_bf},
81  {"$2x$", 4, run_crypt_bf},
82  {"$2$", 3, NULL}, /* N/A */
83  {"$1$", 3, run_crypt_md5},
84  {"_", 1, run_crypt_des},
85  {"", 0, run_crypt_des},
86  {NULL, 0, NULL}
87 };
88 
89 char *
90 px_crypt(const char *psw, const char *salt, char *buf, unsigned len)
91 {
92  const struct px_crypt_algo *c;
93 
94  for (c = px_crypt_list; c->id; c++)
95  {
96  if (!c->id_len)
97  break;
98  if (strncmp(salt, c->id, c->id_len) == 0)
99  break;
100  }
101 
102  if (c->crypt == NULL)
103  return NULL;
104 
105  return c->crypt(psw, salt, buf, len);
106 }
107 
108 /*
109  * salt generators
110  */
111 
112 struct generator
113 {
114  char *name;
115  char *(*gen) (unsigned long count, const char *input, int size,
116  char *output, int output_size);
121 };
122 
123 static struct generator gen_list[] = {
124  {"des", _crypt_gensalt_traditional_rn, 2, 0, 0, 0},
125  {"md5", _crypt_gensalt_md5_rn, 6, 0, 0, 0},
126  {"xdes", _crypt_gensalt_extended_rn, 3, PX_XDES_ROUNDS, 1, 0xFFFFFF},
127  {"bf", _crypt_gensalt_blowfish_rn, 16, PX_BF_ROUNDS, 4, 31},
128  {NULL, NULL, 0, 0, 0, 0}
129 };
130 
131 int
132 px_gen_salt(const char *salt_type, char *buf, int rounds)
133 {
134  struct generator *g;
135  char *p;
136  char rbuf[16];
137 
138  for (g = gen_list; g->name; g++)
139  if (pg_strcasecmp(g->name, salt_type) == 0)
140  break;
141 
142  if (g->name == NULL)
143  return PXE_UNKNOWN_SALT_ALGO;
144 
145  if (g->def_rounds)
146  {
147  if (rounds == 0)
148  rounds = g->def_rounds;
149 
150  if (rounds < g->min_rounds || rounds > g->max_rounds)
151  return PXE_BAD_SALT_ROUNDS;
152  }
153 
154  if (!pg_strong_random(rbuf, g->input_len))
155  return PXE_NO_RANDOM;
156 
157  p = g->gen(rounds, rbuf, g->input_len, buf, PX_MAX_SALT_LEN);
158  px_memset(rbuf, 0, sizeof(rbuf));
159 
160  if (p == NULL)
161  return PXE_BAD_SALT_ROUNDS;
162 
163  return strlen(p);
164 }
int input_len
Definition: px-crypt.c:117
char *(* gen)(unsigned long count, const char *input, int size, char *output, int output_size)
Definition: px-crypt.c:115
char * _crypt_blowfish_rn(const char *key, const char *setting, char *output, int size)
static void output(uint64 loop_count)
#define PX_BF_ROUNDS
Definition: px-crypt.h:46
static char * run_crypt_bf(const char *psw, const char *salt, char *buf, unsigned len)
Definition: px-crypt.c:61
int min_rounds
Definition: px-crypt.c:119
#define PXE_NO_RANDOM
Definition: px.h:75
int pg_strcasecmp(const char *s1, const char *s2)
Definition: pgstrcasecmp.c:36
#define PX_MAX_SALT_LEN
Definition: px-crypt.h:39
char * _crypt_gensalt_md5_rn(unsigned long count, const char *input, int size, char *output, int output_size)
Definition: crypt-gensalt.c:79
#define PXE_UNKNOWN_SALT_ALGO
Definition: px.h:72
static char * run_crypt_des(const char *psw, const char *salt, char *buf, unsigned len)
Definition: px-crypt.c:38
static const struct px_crypt_algo px_crypt_list[]
Definition: px-crypt.c:79
static struct generator gen_list[]
Definition: px-crypt.c:123
char * c
static char * buf
Definition: pg_test_fsync.c:67
int px_gen_salt(const char *salt_type, char *buf, int rounds)
Definition: px-crypt.c:132
char *(* crypt)(const char *psw, const char *salt, char *buf, unsigned len)
Definition: px-crypt.c:74
char * _crypt_gensalt_traditional_rn(unsigned long count, const char *input, int size, char *output, int output_size)
Definition: crypt-gensalt.c:25
char * _crypt_gensalt_blowfish_rn(unsigned long count, const char *input, int size, char *output, int output_size)
#define PX_XDES_ROUNDS
Definition: px-crypt.h:43
char * px_crypt_md5(const char *pw, const char *salt, char *passwd, unsigned dstlen)
Definition: crypt-md5.c:34
int max_rounds
Definition: px-crypt.c:120
unsigned id_len
Definition: px-crypt.c:73
bool pg_strong_random(void *buf, size_t len)
#define PXE_BAD_SALT_ROUNDS
Definition: px.h:73
static char * run_crypt_md5(const char *psw, const char *salt, char *buf, unsigned len)
Definition: px-crypt.c:51
char * id
Definition: px-crypt.c:72
char * px_crypt_des(const char *key, const char *setting)
Definition: crypt-des.c:651
int def_rounds
Definition: px-crypt.c:118
char * px_crypt(const char *psw, const char *salt, char *buf, unsigned len)
Definition: px-crypt.c:90
char * _crypt_gensalt_extended_rn(unsigned long count, const char *input, int size, char *output, int output_size)
Definition: crypt-gensalt.c:43
char * name
Definition: px-crypt.c:114
void px_memset(void *ptr, int c, size_t len)
Definition: px.c:126