initial import

Author: bonifaido

.github/workflows/build.yml

@@ -0,0 +1,23 @@
+name: Build
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      # - name: Install prerequisites
+      #   run: sudo apt-get install -y libssl-dev check
+
+      - name: Build tests
+        run: make test
+
+      - name: Run tests
+        run: ./test

.gitignore

@@ -0,0 +1,61 @@
+# Prerequisites
+*.d
+
+# Object files
+*.o
+*.ko
+*.obj
+*.elf
+
+# Linker output
+*.ilk
+*.map
+*.exp
+
+# Precompiled Headers
+*.gch
+*.pch
+
+# Libraries
+*.lib
+*.a
+*.la
+*.lo
+
+# Shared objects (inc. Windows DLLs)
+*.dll
+*.so
+*.so.*
+*.dylib
+
+# Executables
+*.exe
+*.out
+*.app
+*.i*86
+*.x86_64
+*.hex
+
+# Debug files
+*.dSYM/
+*.su
+*.idb
+*.pdb
+
+# Kernel Module Compile Results
+*.mod*
+*.cmd
+.tmp_versions/
+modules.order
+Module.symvers
+Mkfile.old
+dkms.conf
+
+# Build directories
+build/
+
+# Dependencies
+aws_sigv4/deps
+
+test
+example

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Riptides Labs
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

Makefile

@@ -0,0 +1,27 @@
+# Makefile for AWS SigV4 C implementation
+
+CC = gcc
+CFLAGS = -Wall -Wextra -std=c99 -fPIC $(shell pkg-config --cflags libssl)
+LIB_NAME = libsigv4.so
+LIB_SRC = sigv4.c
+LIB_HDR = sigv4.h
+EXAMPLE_SRC = example.c
+EXAMPLE_BIN = example
+TEST_SRC = test.c
+TEST_BIN = test
+OPENSSL_LIBS = $(shell pkg-config --libs libssl,libcrypto)
+CHECK_LIBS = $(shell pkg-config --libs check)
+
+all: $(LIB_NAME) $(EXAMPLE_BIN)
+
+$(LIB_NAME): $(LIB_SRC) $(LIB_HDR)
+	$(CC) $(CFLAGS) -shared -o $@ $(LIB_SRC) $(OPENSSL_LIBS)
+
+$(EXAMPLE_BIN): $(EXAMPLE_SRC) $(LIB_NAME)
+	$(CC) -Wall -Wextra -std=c99 $(shell pkg-config --cflags libssl) -o $@ $(EXAMPLE_SRC) -L. -lsigv4 $(OPENSSL_LIBS)
+
+$(TEST_BIN): $(TEST_SRC) $(LIB_NAME)
+	$(CC) -Wall -Wextra -std=c99 $(shell pkg-config --cflags libssl,check) -o $@ $(TEST_SRC) -L. -lsigv4 $(OPENSSL_LIBS) $(CHECK_LIBS)
+
+clean:
+	rm -f $(LIB_NAME) $(EXAMPLE_BIN) $(TEST_BIN) *.o

README.md

@@ -0,0 +1,67 @@
+# AWS SigV4 C Library
+
+This project provides a C implementation of AWS Signature Version 4 (SigV4) signing, suitable for use in embedded, kernel, or user-space applications. It includes a shared library and an example application demonstrating usage.
+
+## Features
+- AWS SigV4 signing for HTTP requests
+- OpenSSL integration for cryptographic operations
+- Simple API for integration into C projects
+- Example usage included
+- System header configurability via `SIGV4_SYSTEM_HEADER`
+
+## Building
+
+### Prerequisites
+- GCC or compatible C compiler
+- OpenSSL development libraries
+- `pkg-config` utility
+
+### Build Instructions
+
+To build the shared library and example application, run:
+
+```sh
+make
+```
+
+This will produce:
+- `libsigv4.so`: Shared library implementing SigV4
+- `example`: Example application using the library
+
+### Clean Build Artifacts
+
+```sh
+make clean
+```
+
+## Usage
+
+### System Header Configurability
+You can configure the system header used by the library by defining the macro `SIGV4_SYSTEM_HEADER` during compilation. This allows integration with custom or platform-specific headers as needed.
+
+Example:
+```sh
+gcc -DSIGV4_SYSTEM_HEADER='<your_header.h>' ...
+```
+
+### Linking
+Include the header in your application:
+
+```c
+#include "sigv4.h"
+```
+
+Link against the shared library and OpenSSL:
+
+```
+-L. -lsigv4 $(pkg-config --libs libssl)
+```
+
+### Example
+See `example.c` for a usage demonstration.
+
+## License
+See `LICENSE` for details.
+
+## Contributing
+Pull requests and issues are welcome!

example.c

@@ -0,0 +1,51 @@
+#include <stdio.h>
+#include <openssl/hmac.h>
+#include <openssl/sha.h>
+
+#include "sigv4.h"
+
+int HMAC_SHA256(const unsigned char *data, size_t data_len,
+                const unsigned char *key, size_t key_len,
+                unsigned char *out, size_t *out_len)
+{
+    unsigned int len = 0;
+    HMAC(EVP_sha256(), key, key_len, data, data_len, out, &len);
+    *out_len = len;
+    return 0;
+}
+
+int main()
+{
+    aws_sigv4_params_t sigv4_params = {
+        .access_key_id = aws_sigv4_string((unsigned char *)"your_access_key"),
+        .secret_access_key = aws_sigv4_string((unsigned char *)"your_secret_key"),
+        .method = aws_sigv4_string((unsigned char *)"GET"),
+        .uri = aws_sigv4_string((unsigned char *)"/"),
+        .query_str = aws_sigv4_string((unsigned char *)"encoding-type=url"),
+        .host = aws_sigv4_string((unsigned char *)"riptides-sigv4.s3.eu-central-1.amazonaws.com"),
+        .region = aws_sigv4_string((unsigned char *)"eu-central-1"),
+        .service = aws_sigv4_string((unsigned char *)"s3"),
+        .x_amz_date = aws_sigv4_string((unsigned char *)"20250815T071550Z"),
+        .hmac_sha256 = HMAC_SHA256,
+        .sha256 = (void *)SHA256,
+        .sort = qsort,
+    };
+
+    char auth_buf[AWS_SIGV4_AUTH_HEADER_MAX_LEN] = {0};
+    aws_sigv4_header_t auth_header = {
+        .value = aws_sigv4_string((unsigned char *)auth_buf)};
+
+    // Initialize sigv4_params and auth_header as needed
+
+    int status = aws_sigv4_sign(&sigv4_params, &auth_header);
+    if (status == AWS_SIGV4_OK)
+    {
+        printf("Signature: %s\n", auth_header.value.data);
+    }
+    else
+    {
+        printf("Failed to sign request, status: %d\n", status);
+    }
+
+    return 0;
+}