How to store openSSL EVP_MD and EVP_MD_CTX in local buffers

[Dr Paul Dale]

Structures are opaque after OpenSSL 1.0.  There is no way to do what you 
want.

The recommended path is to call EVP_MD_CTX_dup() to create a copy of the 
context and use that the second time around.


Pauli


On 24/3/21 2:03 pm, Vuthur Pavankumar wrote:
> Hi All,
>
> I was implementing SHA3 multi-call as below using openSSL version 
> openssl-1.1.1j
>
> init:
> const EVP_MD *evpmd = EVP_sha3_256();
> EVP_MD_CTX *ctx = EVP_MD_CTX_new()
> EVP_DigestInit_ex(ctx, evpmd, NULL);
> store ctx and evpmd in local buffer. and reuse it for update and final
> EVP_MD_CTX_free(ctx)
>
> update:
> get ctx and evpmd from local buffer and update ctx with evpmd and pass 
> it to  EVP_DigestUpdate method
>
> EVP_DigestUpdate(ctx, msg, msg_len); -> get ctx from  local buffer
>
> Final:
> get ctx and evpmd from local buffer and update ctx with evpmd and pass 
> it to  EVP_DigestUpdate method
> if(shake)
> EVP_DigestFinalXOF(ctx, md , mdlen); -> get ctx from  local buffer
> else
> EVP_DigestFinal_ex(ctx, md, &mdlen)
>
> Note:
> some buggy applications may not call the final call and the memory 
> allocated using OpenSSL in Digest init may not be freed.
> to avoid it I want to store EVP_MD_CTX and EVP_MD data in a local 
> buffer and reuse it instead of storing *ctx and freeing in the final call.
>
> the problem I am facing:
> 1.declaring below struct and compiling resulted in an error.
> error: field 'evpmd_ctx' has incomplete type
> error: field 'evpmd' has incomplete type
>
> typedef struct {
> uint16_t abc;
> uint16_t xyz;
> uint16_t reserved1;
> uint16_t reserved2;
> EVP_MD_CTX evpmd_ctx;
> EVP_MD evpmd;
> } SHA3Data;
>
> 2.same error for sizeof(EVP_MD_CTX ) and sizeof(EVP_MD )
>
> looks like EVP_MD_CTX and EVP_MD data are opaque to applications.
>
> *Do we have any other means to store  EVP_MD_CTX and EVP_MD data in 
> local buffers and reuse them in update and Final calls?*
>
> Thanks,
> Pavan
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mta.openssl.org/pipermail/openssl-users/attachments/20210324/47c04ac3/attachment-0001.html>