package org.apache.bookkeeper.client; /* * Licensed to the Apache Software Foundation (ASF) under one * or more contributor license agreements. See the NOTICE file * distributed with this work for additional information * regarding copyright ownership. The ASF licenses this file * to you under the Apache License, Version 2.0 (the * "License"); you may not use this file except in compliance * with the License. You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ import java.security.GeneralSecurityException; import java.security.MessageDigest; import java.security.NoSuchAlgorithmException; import javax.crypto.Mac; import javax.crypto.spec.SecretKeySpec; import org.slf4j.Logger; import org.slf4j.LoggerFactory; import static com.google.common.base.Charsets.UTF_8; class MacDigestManager extends DigestManager { private final static Logger LOG = LoggerFactory.getLogger(MacDigestManager.class); public static String DIGEST_ALGORITHM = "SHA-1"; public static String KEY_ALGORITHM = "HmacSHA1"; final byte[] passwd; private final ThreadLocal<Mac> mac = new ThreadLocal<Mac>() { @Override protected Mac initialValue() { try { byte[] macKey = genDigest("mac", passwd); SecretKeySpec keySpec = new SecretKeySpec(macKey, KEY_ALGORITHM); Mac mac = Mac.getInstance(KEY_ALGORITHM); mac.init(keySpec); return mac; } catch (GeneralSecurityException gse) { LOG.error("Couldn't not get mac instance", gse); return null; } } }; public MacDigestManager(long ledgerId, byte[] passwd) throws GeneralSecurityException { super(ledgerId); this.passwd = passwd; } static byte[] genDigest(String pad, byte[] passwd) throws NoSuchAlgorithmException { MessageDigest digest = MessageDigest.getInstance(DIGEST_ALGORITHM); digest.update(pad.getBytes(UTF_8)); digest.update(passwd); return digest.digest(); } @Override int getMacCodeLength() { return 20; } @Override byte[] getValueAndReset() { return mac.get().doFinal(); } @Override void update(byte[] data, int offset, int length) { mac.get().update(data, offset, length); } }