/* * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. * * Licensed under the Apache License, Version 2.0 (the "License"). * You may not use this file except in compliance with the License. * A copy of the License is located at * * http://aws.amazon.com/apache2.0 * * or in the "license" file accompanying this file. This file is distributed * on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either * express or implied. See the License for the specific language governing * permissions and limitations under the License. */ #pragma once #include "api/s2n.h" #include "api/unstable/fingerprint.h" #include "crypto/s2n_hash.h" #include "stuffer/s2n_stuffer.h" #include "tls/s2n_client_hello.h" #include "utils/s2n_result.h" #define S2N_JA3_HASH_STR_SIZE (MD5_DIGEST_LENGTH * 2) struct s2n_fingerprint { size_t raw_size; const struct s2n_fingerprint_method *method; struct s2n_client_hello *client_hello; struct s2n_hash_state hash; struct s2n_stuffer workspace; }; struct s2n_fingerprint_hash { uint32_t bytes_digested; struct s2n_stuffer *buffer; struct s2n_hash_state *hash; }; S2N_RESULT s2n_fingerprint_hash_add_char(struct s2n_fingerprint_hash *hash, char c); S2N_RESULT s2n_fingerprint_hash_add_str(struct s2n_fingerprint_hash *hash, const char *str, size_t str_size); S2N_RESULT s2n_fingerprint_hash_add_bytes(struct s2n_fingerprint_hash *hash, const uint8_t *b, size_t size); S2N_RESULT s2n_fingerprint_hash_digest(struct s2n_fingerprint_hash *hash, struct s2n_blob *out); bool s2n_fingerprint_hash_do_digest(struct s2n_fingerprint_hash *hash); struct s2n_fingerprint_method { s2n_hash_algorithm hash; uint32_t hash_str_size; S2N_RESULT (*fingerprint)(struct s2n_fingerprint *fingerprint, struct s2n_fingerprint_hash *hash, struct s2n_stuffer *output); }; extern struct s2n_fingerprint_method ja3_fingerprint; extern struct s2n_fingerprint_method ja4_fingerprint; bool s2n_fingerprint_is_grease_value(uint16_t val); S2N_RESULT s2n_fingerprint_parse_extension(struct s2n_stuffer *input, uint16_t *iana); S2N_RESULT s2n_fingerprint_get_legacy_version(struct s2n_client_hello *ch, uint16_t *version);