1 files changed, 64 insertions, 0 deletions
diff --git a/src/lib/crypto/nss/hash_provider/hash_gen.c b/src/lib/crypto/nss/hash_provider/hash_gen.c
new file mode 100644
index 0000000..0448674
--- /dev/null
+++ b/src/lib/crypto/nss/hash_provider/hash_gen.c
@@ -0,0 +1,64 @@
+/*
+ * Copyright (C) 2010 Red Hat, Inc.
+ *
+ * All rights reserved.
+ *
+ * Export of this software from the United States of America may require
+ * a specific license from the United States Government.  It is the
+ * responsibility of any person or organization contemplating export to
+ * obtain such a license before exporting.
+ *
+ * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
+ * distribute this software and its documentation for any purpose and
+ * without fee is hereby granted, provided that the above copyright
+ * notice appear in all copies and that both that copyright notice and
+ * this permission notice appear in supporting documentation, and that
+ * the name of FundsXpress. not be used in advertising or publicity pertaining
+ * to distribution of the software without specific, written prior
+ * permission.  FundsXpress makes no representations about the suitability of
+ * this software for any purpose.  It is provided "as is" without express
+ * or implied warranty.
+ *
+ * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
+ * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
+ */
+
+#include "k5-int.h"
+#include "sechash.h"
+#include "nss_gen.h"
+#include "aead.h"
+
+krb5_error_code
+k5_nss_gen_hash(HASH_HashType hashType, const krb5_crypto_iov *data,
+	    size_t num_data, krb5_data *output)
+{
+    unsigned int i;
+    HASHContext *ctx;
+    krb5_error_code ret;
+
+    ret = k5_nss_init();
+    if (ret) return ret;
+
+    if (output->length != HASH_ResultLen(hashType))
+	return(KRB5_CRYPTO_INTERNAL);
+
+    ctx = HASH_Create(hashType);
+    if (!ctx) 
+	return(ENOMEM);
+
+    HASH_Begin(ctx);
+    for (i=0; i < num_data; i++) {
+	const krb5_crypto_iov *iov = &data[i];
+
+	if (iov->data.length && SIGN_IOV(iov))
+	    HASH_Update(ctx, (unsigned char *) iov->data.data, 
+			iov->data.length);
+    }
+
+    HASH_End(ctx, (unsigned char *)output->data, 
+		&output->length, output->length);
+
+    return(0);
+}
+