Merge files

native/src/boot/sign.rs

@@ -15,6 +15,7 @@ use rsa::pkcs8::SubjectPublicKeyInfoRef;
 use rsa::signature::hazmat::{PrehashSigner, PrehashVerifier};
 use rsa::signature::SignatureEncoding;
 use rsa::{RsaPrivateKey, RsaPublicKey};
+use sha1::Sha1;
 use sha2::{Sha256, Sha384};
 use x509_cert::der::asn1::{OctetString, PrintableString};
 use x509_cert::der::Any;
@@ -26,6 +27,55 @@ use base::{log_err, LoggedResult, MappedFile, ResultExt, StrErr, Utf8CStr};
 
 use crate::ffi::BootImage;
 
+pub enum SHA {
+    SHA1(Sha1),
+    SHA256(Sha256),
+}
+
+impl SHA {
+    pub fn update(&mut self, data: &[u8]) {
+        match self {
+            SHA::SHA1(h) => h.update(data),
+            SHA::SHA256(h) => h.update(data),
+        }
+    }
+
+    pub fn output_size(&self) -> usize {
+        match self {
+            SHA::SHA1(h) => h.output_size(),
+            SHA::SHA256(h) => h.output_size(),
+        }
+    }
+
+    pub fn finalize_into(&mut self, out: &mut [u8]) {
+        match self {
+            SHA::SHA1(h) => h.finalize_into_reset(out),
+            SHA::SHA256(h) => h.finalize_into_reset(out),
+        }
+        .ok();
+    }
+}
+
+pub fn get_sha(use_sha1: bool) -> Box<SHA> {
+    Box::new(if use_sha1 {
+        SHA::SHA1(Sha1::default())
+    } else {
+        SHA::SHA256(Sha256::default())
+    })
+}
+
+pub fn sha1_hash(data: &[u8], out: &mut [u8]) {
+    let mut h = Sha1::default();
+    h.update(data);
+    DynDigest::finalize_into(h, out).ok();
+}
+
+pub fn sha256_hash(data: &[u8], out: &mut [u8]) {
+    let mut h = Sha256::default();
+    h.update(data);
+    DynDigest::finalize_into(h, out).ok();
+}
+
 #[allow(clippy::large_enum_variant)]
 enum SigningKey {
     SHA256withRSA(RsaSigningKey<Sha256>),
@@ -147,7 +197,7 @@ impl Signer {
  *     },
  *     signature ::= OCTET STRING
  * }
-*/
+ */
 
 #[derive(Sequence)]
 struct AuthenticatedAttributes {