mirror of
https://github.com/jart/cosmopolitan.git
synced 2025-01-31 11:37:35 +00:00
957c61cbbf
This change upgrades to GCC 12.3 and GNU binutils 2.42. The GNU linker appears to have changed things so that only a single de-duplicated str table is present in the binary, and it gets placed wherever the linker wants, regardless of what the linker script says. To cope with that we need to stop using .ident to embed licenses. As such, this change does significant work to revamp how third party licenses are defined in the codebase, using `.section .notice,"aR",@progbits`. This new GCC 12.3 toolchain has support for GNU indirect functions. It lets us support __target_clones__ for the first time. This is used for optimizing the performance of libc string functions such as strlen and friends so far on x86, by ensuring AVX systems favor a second codepath that uses VEX encoding. It shaves some latency off certain operations. It's a useful feature to have for scientific computing for the reasons explained by the test/libcxx/openmp_test.cc example which compiles for fifteen different microarchitectures. Thanks to the upgrades, it's now also possible to use newer instruction sets, such as AVX512FP16, VNNI. Cosmo now uses the %gs register on x86 by default for TLS. Doing it is helpful for any program that links `cosmo_dlopen()`. Such programs had to recompile their binaries at startup to change the TLS instructions. That's not great, since it means every page in the executable needs to be faulted. The work of rewriting TLS-related x86 opcodes, is moved to fixupobj.com instead. This is great news for MacOS x86 users, since we previously needed to morph the binary every time for that platform but now that's no longer necessary. The only platforms where we need fixup of TLS x86 opcodes at runtime are now Windows, OpenBSD, and NetBSD. On Windows we morph TLS to point deeper into the TIB, based on a TlsAlloc assignment, and on OpenBSD/NetBSD we morph %gs back into %fs since the kernels do not allow us to specify a value for the %gs register. OpenBSD users are now required to use APE Loader to run Cosmo binaries and assimilation is no longer possible. OpenBSD kernel needs to change to allow programs to specify a value for the %gs register, or it needs to stop marking executable pages loaded by the kernel as mimmutable(). This release fixes __constructor__, .ctor, .init_array, and lastly the .preinit_array so they behave the exact same way as glibc. We no longer use hex constants to define math.h symbols like M_PI.
1475 lines
37 KiB
C
1475 lines
37 KiB
C
/*-*- mode:c;indent-tabs-mode:nil;c-basic-offset:4;tab-width:4;coding:utf-8 -*-│
|
|
│ vi: set et ft=c ts=2 sts=2 sw=2 fenc=utf-8 :vi │
|
|
╞══════════════════════════════════════════════════════════════════════════════╡
|
|
│ Copyright The Mbed TLS Contributors │
|
|
│ │
|
|
│ Licensed under the Apache License, Version 2.0 (the "License"); │
|
|
│ you may not use this file except in compliance with the License. │
|
|
│ You may obtain a copy of the License at │
|
|
│ │
|
|
│ http://www.apache.org/licenses/LICENSE-2.0 │
|
|
│ │
|
|
│ Unless required by applicable law or agreed to in writing, software │
|
|
│ distributed under the License is distributed on an "AS IS" BASIS, │
|
|
│ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. │
|
|
│ See the License for the specific language governing permissions and │
|
|
│ limitations under the License. │
|
|
╚─────────────────────────────────────────────────────────────────────────────*/
|
|
#include "libc/mem/mem.h"
|
|
#include "third_party/mbedtls/aes.h"
|
|
#include "third_party/mbedtls/ccm.h"
|
|
#include "third_party/mbedtls/chacha20.h"
|
|
#include "third_party/mbedtls/chachapoly.h"
|
|
#include "third_party/mbedtls/cipher_internal.h"
|
|
#include "third_party/mbedtls/common.h"
|
|
#include "third_party/mbedtls/des.h"
|
|
#include "third_party/mbedtls/error.h"
|
|
#include "third_party/mbedtls/gcm.h"
|
|
#include "third_party/mbedtls/nist_kw.h"
|
|
#include "third_party/mbedtls/platform.h"
|
|
__static_yoink("mbedtls_notice");
|
|
|
|
#if defined(MBEDTLS_CIPHER_C)
|
|
|
|
#if defined(MBEDTLS_GCM_C)
|
|
/* shared by all GCM ciphers */
|
|
static void *gcm_ctx_alloc( void )
|
|
{
|
|
void *ctx = mbedtls_calloc( 1, sizeof( mbedtls_gcm_context ) );
|
|
|
|
if( ctx )
|
|
mbedtls_gcm_init( (mbedtls_gcm_context *) ctx );
|
|
|
|
return( ctx );
|
|
}
|
|
|
|
static void gcm_ctx_free( void *ctx )
|
|
{
|
|
mbedtls_gcm_free( ctx );
|
|
mbedtls_free( ctx );
|
|
}
|
|
#endif /* MBEDTLS_GCM_C */
|
|
|
|
#if defined(MBEDTLS_CCM_C)
|
|
/* shared by all CCM ciphers */
|
|
static void *ccm_ctx_alloc( void )
|
|
{
|
|
void *ctx = mbedtls_calloc( 1, sizeof( mbedtls_ccm_context ) );
|
|
|
|
if( ctx )
|
|
mbedtls_ccm_init( (mbedtls_ccm_context *) ctx );
|
|
|
|
return( ctx );
|
|
}
|
|
|
|
static void ccm_ctx_free( void *ctx )
|
|
{
|
|
mbedtls_ccm_free( ctx );
|
|
mbedtls_free( ctx );
|
|
}
|
|
#endif /* MBEDTLS_CCM_C */
|
|
|
|
#if defined(MBEDTLS_AES_C)
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
static int aes_crypt_cfb128_wrap( void *ctx, mbedtls_operation_t operation,
|
|
size_t length, size_t *iv_off, unsigned char *iv,
|
|
const unsigned char *input, unsigned char *output )
|
|
{
|
|
return mbedtls_aes_crypt_cfb128( (mbedtls_aes_context *) ctx, operation, length, iv_off, iv,
|
|
input, output );
|
|
}
|
|
#endif /* MBEDTLS_CIPHER_MODE_CFB */
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
static int aes_crypt_ofb_wrap( void *ctx, size_t length, size_t *iv_off,
|
|
unsigned char *iv, const unsigned char *input, unsigned char *output )
|
|
{
|
|
return mbedtls_aes_crypt_ofb( (mbedtls_aes_context *) ctx, length, iv_off,
|
|
iv, input, output );
|
|
}
|
|
#endif /* MBEDTLS_CIPHER_MODE_OFB */
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
static int aes_crypt_ctr_wrap( void *ctx, size_t length, size_t *nc_off,
|
|
unsigned char *nonce_counter, unsigned char *stream_block,
|
|
const unsigned char *input, unsigned char *output )
|
|
{
|
|
return mbedtls_aes_crypt_ctr( (mbedtls_aes_context *) ctx, length, nc_off, nonce_counter,
|
|
stream_block, input, output );
|
|
}
|
|
#endif /* MBEDTLS_CIPHER_MODE_CTR */
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
static int aes_crypt_xts_wrap( void *ctx, mbedtls_operation_t operation,
|
|
size_t length,
|
|
const unsigned char data_unit[16],
|
|
const unsigned char *input,
|
|
unsigned char *output )
|
|
{
|
|
mbedtls_aes_xts_context *xts_ctx = ctx;
|
|
int mode;
|
|
|
|
switch( operation )
|
|
{
|
|
case MBEDTLS_ENCRYPT:
|
|
mode = MBEDTLS_AES_ENCRYPT;
|
|
break;
|
|
case MBEDTLS_DECRYPT:
|
|
mode = MBEDTLS_AES_DECRYPT;
|
|
break;
|
|
default:
|
|
return MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA;
|
|
}
|
|
|
|
return mbedtls_aes_crypt_xts( xts_ctx, mode, length,
|
|
data_unit, input, output );
|
|
}
|
|
#endif /* MBEDTLS_CIPHER_MODE_XTS */
|
|
|
|
static int aes_setkey_dec_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
return mbedtls_aes_setkey_dec( (mbedtls_aes_context *) ctx, key, key_bitlen );
|
|
}
|
|
|
|
static int aes_setkey_enc_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
return mbedtls_aes_setkey_enc( (mbedtls_aes_context *) ctx, key, key_bitlen );
|
|
}
|
|
|
|
static void * aes_ctx_alloc( void )
|
|
{
|
|
mbedtls_aes_context *aes = mbedtls_calloc( 1, sizeof( mbedtls_aes_context ) );
|
|
|
|
if( !aes )
|
|
return( NULL );
|
|
|
|
mbedtls_aes_init( aes );
|
|
|
|
return( aes );
|
|
}
|
|
|
|
static void aes_ctx_free( void *ctx )
|
|
{
|
|
mbedtls_aes_free( (mbedtls_aes_context *) ctx );
|
|
mbedtls_free( ctx );
|
|
}
|
|
|
|
static const mbedtls_cipher_base_t aes_info = {
|
|
MBEDTLS_CIPHER_ID_AES,
|
|
(void *)mbedtls_aes_crypt_ecb,
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
(void *)mbedtls_aes_crypt_cbc,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
aes_crypt_cfb128_wrap,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
aes_crypt_ofb_wrap,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
aes_crypt_ctr_wrap,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_STREAM)
|
|
NULL,
|
|
#endif
|
|
aes_setkey_enc_wrap,
|
|
aes_setkey_dec_wrap,
|
|
aes_ctx_alloc,
|
|
aes_ctx_free
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_128_ecb_info = {
|
|
MBEDTLS_CIPHER_AES_128_ECB,
|
|
MBEDTLS_MODE_ECB,
|
|
128,
|
|
"AES-128-ECB",
|
|
0,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_192_ecb_info = {
|
|
MBEDTLS_CIPHER_AES_192_ECB,
|
|
MBEDTLS_MODE_ECB,
|
|
192,
|
|
"AES-192-ECB",
|
|
0,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_256_ecb_info = {
|
|
MBEDTLS_CIPHER_AES_256_ECB,
|
|
MBEDTLS_MODE_ECB,
|
|
256,
|
|
"AES-256-ECB",
|
|
0,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
static const mbedtls_cipher_info_t aes_128_cbc_info = {
|
|
MBEDTLS_CIPHER_AES_128_CBC,
|
|
MBEDTLS_MODE_CBC,
|
|
128,
|
|
"AES-128-CBC",
|
|
16,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_192_cbc_info = {
|
|
MBEDTLS_CIPHER_AES_192_CBC,
|
|
MBEDTLS_MODE_CBC,
|
|
192,
|
|
"AES-192-CBC",
|
|
16,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_256_cbc_info = {
|
|
MBEDTLS_CIPHER_AES_256_CBC,
|
|
MBEDTLS_MODE_CBC,
|
|
256,
|
|
"AES-256-CBC",
|
|
16,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
#endif /* MBEDTLS_CIPHER_MODE_CBC */
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
static const mbedtls_cipher_info_t aes_128_cfb128_info = {
|
|
MBEDTLS_CIPHER_AES_128_CFB128,
|
|
MBEDTLS_MODE_CFB,
|
|
128,
|
|
"AES-128-CFB128",
|
|
16,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_192_cfb128_info = {
|
|
MBEDTLS_CIPHER_AES_192_CFB128,
|
|
MBEDTLS_MODE_CFB,
|
|
192,
|
|
"AES-192-CFB128",
|
|
16,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_256_cfb128_info = {
|
|
MBEDTLS_CIPHER_AES_256_CFB128,
|
|
MBEDTLS_MODE_CFB,
|
|
256,
|
|
"AES-256-CFB128",
|
|
16,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
#endif /* MBEDTLS_CIPHER_MODE_CFB */
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
static const mbedtls_cipher_info_t aes_128_ofb_info = {
|
|
MBEDTLS_CIPHER_AES_128_OFB,
|
|
MBEDTLS_MODE_OFB,
|
|
128,
|
|
"AES-128-OFB",
|
|
16,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_192_ofb_info = {
|
|
MBEDTLS_CIPHER_AES_192_OFB,
|
|
MBEDTLS_MODE_OFB,
|
|
192,
|
|
"AES-192-OFB",
|
|
16,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_256_ofb_info = {
|
|
MBEDTLS_CIPHER_AES_256_OFB,
|
|
MBEDTLS_MODE_OFB,
|
|
256,
|
|
"AES-256-OFB",
|
|
16,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
#endif /* MBEDTLS_CIPHER_MODE_OFB */
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
static const mbedtls_cipher_info_t aes_128_ctr_info = {
|
|
MBEDTLS_CIPHER_AES_128_CTR,
|
|
MBEDTLS_MODE_CTR,
|
|
128,
|
|
"AES-128-CTR",
|
|
16,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_192_ctr_info = {
|
|
MBEDTLS_CIPHER_AES_192_CTR,
|
|
MBEDTLS_MODE_CTR,
|
|
192,
|
|
"AES-192-CTR",
|
|
16,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_256_ctr_info = {
|
|
MBEDTLS_CIPHER_AES_256_CTR,
|
|
MBEDTLS_MODE_CTR,
|
|
256,
|
|
"AES-256-CTR",
|
|
16,
|
|
0,
|
|
16,
|
|
&aes_info
|
|
};
|
|
#endif /* MBEDTLS_CIPHER_MODE_CTR */
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
static int xts_aes_setkey_enc_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
mbedtls_aes_xts_context *xts_ctx = ctx;
|
|
return( mbedtls_aes_xts_setkey_enc( xts_ctx, key, key_bitlen ) );
|
|
}
|
|
|
|
static int xts_aes_setkey_dec_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
mbedtls_aes_xts_context *xts_ctx = ctx;
|
|
return( mbedtls_aes_xts_setkey_dec( xts_ctx, key, key_bitlen ) );
|
|
}
|
|
|
|
static void *xts_aes_ctx_alloc( void )
|
|
{
|
|
mbedtls_aes_xts_context *xts_ctx = mbedtls_calloc( 1, sizeof( *xts_ctx ) );
|
|
|
|
if( xts_ctx != NULL )
|
|
mbedtls_aes_xts_init( xts_ctx );
|
|
|
|
return( xts_ctx );
|
|
}
|
|
|
|
static void xts_aes_ctx_free( void *ctx )
|
|
{
|
|
mbedtls_aes_xts_context *xts_ctx = ctx;
|
|
|
|
if( xts_ctx == NULL )
|
|
return;
|
|
|
|
mbedtls_aes_xts_free( xts_ctx );
|
|
mbedtls_free( xts_ctx );
|
|
}
|
|
|
|
static const mbedtls_cipher_base_t xts_aes_info = {
|
|
MBEDTLS_CIPHER_ID_AES,
|
|
NULL,
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
aes_crypt_xts_wrap,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_STREAM)
|
|
NULL,
|
|
#endif
|
|
xts_aes_setkey_enc_wrap,
|
|
xts_aes_setkey_dec_wrap,
|
|
xts_aes_ctx_alloc,
|
|
xts_aes_ctx_free
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_128_xts_info = {
|
|
MBEDTLS_CIPHER_AES_128_XTS,
|
|
MBEDTLS_MODE_XTS,
|
|
256,
|
|
"AES-128-XTS",
|
|
16,
|
|
0,
|
|
16,
|
|
&xts_aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_256_xts_info = {
|
|
MBEDTLS_CIPHER_AES_256_XTS,
|
|
MBEDTLS_MODE_XTS,
|
|
512,
|
|
"AES-256-XTS",
|
|
16,
|
|
0,
|
|
16,
|
|
&xts_aes_info
|
|
};
|
|
#endif /* MBEDTLS_CIPHER_MODE_XTS */
|
|
|
|
#if defined(MBEDTLS_GCM_C)
|
|
static int gcm_aes_setkey_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
return mbedtls_gcm_setkey( (mbedtls_gcm_context *) ctx, MBEDTLS_CIPHER_ID_AES,
|
|
key, key_bitlen );
|
|
}
|
|
|
|
static const mbedtls_cipher_base_t gcm_aes_info = {
|
|
MBEDTLS_CIPHER_ID_AES,
|
|
NULL,
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_STREAM)
|
|
NULL,
|
|
#endif
|
|
gcm_aes_setkey_wrap,
|
|
gcm_aes_setkey_wrap,
|
|
gcm_ctx_alloc,
|
|
gcm_ctx_free,
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_128_gcm_info = {
|
|
MBEDTLS_CIPHER_AES_128_GCM,
|
|
MBEDTLS_MODE_GCM,
|
|
128,
|
|
"AES-128-GCM",
|
|
12,
|
|
MBEDTLS_CIPHER_VARIABLE_IV_LEN,
|
|
16,
|
|
&gcm_aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_192_gcm_info = {
|
|
MBEDTLS_CIPHER_AES_192_GCM,
|
|
MBEDTLS_MODE_GCM,
|
|
192,
|
|
"AES-192-GCM",
|
|
12,
|
|
MBEDTLS_CIPHER_VARIABLE_IV_LEN,
|
|
16,
|
|
&gcm_aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_256_gcm_info = {
|
|
MBEDTLS_CIPHER_AES_256_GCM,
|
|
MBEDTLS_MODE_GCM,
|
|
256,
|
|
"AES-256-GCM",
|
|
12,
|
|
MBEDTLS_CIPHER_VARIABLE_IV_LEN,
|
|
16,
|
|
&gcm_aes_info
|
|
};
|
|
#endif /* MBEDTLS_GCM_C */
|
|
|
|
#if defined(MBEDTLS_CCM_C)
|
|
static int ccm_aes_setkey_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
return mbedtls_ccm_setkey( (mbedtls_ccm_context *) ctx, MBEDTLS_CIPHER_ID_AES,
|
|
key, key_bitlen );
|
|
}
|
|
|
|
static const mbedtls_cipher_base_t ccm_aes_info = {
|
|
MBEDTLS_CIPHER_ID_AES,
|
|
NULL,
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_STREAM)
|
|
NULL,
|
|
#endif
|
|
ccm_aes_setkey_wrap,
|
|
ccm_aes_setkey_wrap,
|
|
ccm_ctx_alloc,
|
|
ccm_ctx_free,
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_128_ccm_info = {
|
|
MBEDTLS_CIPHER_AES_128_CCM,
|
|
MBEDTLS_MODE_CCM,
|
|
128,
|
|
"AES-128-CCM",
|
|
12,
|
|
MBEDTLS_CIPHER_VARIABLE_IV_LEN,
|
|
16,
|
|
&ccm_aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_192_ccm_info = {
|
|
MBEDTLS_CIPHER_AES_192_CCM,
|
|
MBEDTLS_MODE_CCM,
|
|
192,
|
|
"AES-192-CCM",
|
|
12,
|
|
MBEDTLS_CIPHER_VARIABLE_IV_LEN,
|
|
16,
|
|
&ccm_aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_256_ccm_info = {
|
|
MBEDTLS_CIPHER_AES_256_CCM,
|
|
MBEDTLS_MODE_CCM,
|
|
256,
|
|
"AES-256-CCM",
|
|
12,
|
|
MBEDTLS_CIPHER_VARIABLE_IV_LEN,
|
|
16,
|
|
&ccm_aes_info
|
|
};
|
|
#endif /* MBEDTLS_CCM_C */
|
|
|
|
#endif /* MBEDTLS_AES_C */
|
|
|
|
#if defined(MBEDTLS_DES_C)
|
|
|
|
static int des_crypt_ecb_wrap( void *ctx, mbedtls_operation_t operation,
|
|
const unsigned char *input, unsigned char *output )
|
|
{
|
|
((void) operation);
|
|
return mbedtls_des_crypt_ecb( (mbedtls_des_context *) ctx, input, output );
|
|
}
|
|
|
|
static int des3_crypt_ecb_wrap( void *ctx, mbedtls_operation_t operation,
|
|
const unsigned char *input, unsigned char *output )
|
|
{
|
|
((void) operation);
|
|
return mbedtls_des3_crypt_ecb( (mbedtls_des3_context *) ctx, input, output );
|
|
}
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
static int des_crypt_cbc_wrap( void *ctx, mbedtls_operation_t operation, size_t length,
|
|
unsigned char *iv, const unsigned char *input, unsigned char *output )
|
|
{
|
|
return mbedtls_des_crypt_cbc( (mbedtls_des_context *) ctx, operation, length, iv, input,
|
|
output );
|
|
}
|
|
#endif /* MBEDTLS_CIPHER_MODE_CBC */
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
static int des3_crypt_cbc_wrap( void *ctx, mbedtls_operation_t operation, size_t length,
|
|
unsigned char *iv, const unsigned char *input, unsigned char *output )
|
|
{
|
|
return mbedtls_des3_crypt_cbc( (mbedtls_des3_context *) ctx, operation, length, iv, input,
|
|
output );
|
|
}
|
|
#endif /* MBEDTLS_CIPHER_MODE_CBC */
|
|
|
|
static int des_setkey_dec_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
((void) key_bitlen);
|
|
|
|
return mbedtls_des_setkey_dec( (mbedtls_des_context *) ctx, key );
|
|
}
|
|
|
|
static int des_setkey_enc_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
((void) key_bitlen);
|
|
|
|
return mbedtls_des_setkey_enc( (mbedtls_des_context *) ctx, key );
|
|
}
|
|
|
|
static int des3_set2key_dec_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
((void) key_bitlen);
|
|
|
|
return mbedtls_des3_set2key_dec( (mbedtls_des3_context *) ctx, key );
|
|
}
|
|
|
|
static int des3_set2key_enc_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
((void) key_bitlen);
|
|
|
|
return mbedtls_des3_set2key_enc( (mbedtls_des3_context *) ctx, key );
|
|
}
|
|
|
|
static int des3_set3key_dec_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
((void) key_bitlen);
|
|
|
|
return mbedtls_des3_set3key_dec( (mbedtls_des3_context *) ctx, key );
|
|
}
|
|
|
|
static int des3_set3key_enc_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
((void) key_bitlen);
|
|
|
|
return mbedtls_des3_set3key_enc( (mbedtls_des3_context *) ctx, key );
|
|
}
|
|
|
|
static void * des_ctx_alloc( void )
|
|
{
|
|
mbedtls_des_context *des = mbedtls_calloc( 1, sizeof( mbedtls_des_context ) );
|
|
|
|
if( des == NULL )
|
|
return( NULL );
|
|
|
|
mbedtls_des_init( des );
|
|
|
|
return( des );
|
|
}
|
|
|
|
static void des_ctx_free( void *ctx )
|
|
{
|
|
mbedtls_des_free( (mbedtls_des_context *) ctx );
|
|
mbedtls_free( ctx );
|
|
}
|
|
|
|
static void * des3_ctx_alloc( void )
|
|
{
|
|
mbedtls_des3_context *des3;
|
|
des3 = mbedtls_calloc( 1, sizeof( mbedtls_des3_context ) );
|
|
|
|
if( des3 == NULL )
|
|
return( NULL );
|
|
|
|
mbedtls_des3_init( des3 );
|
|
|
|
return( des3 );
|
|
}
|
|
|
|
static void des3_ctx_free( void *ctx )
|
|
{
|
|
mbedtls_des3_free( (mbedtls_des3_context *) ctx );
|
|
mbedtls_free( ctx );
|
|
}
|
|
|
|
static const mbedtls_cipher_base_t des_info = {
|
|
MBEDTLS_CIPHER_ID_DES,
|
|
des_crypt_ecb_wrap,
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
des_crypt_cbc_wrap,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_STREAM)
|
|
NULL,
|
|
#endif
|
|
des_setkey_enc_wrap,
|
|
des_setkey_dec_wrap,
|
|
des_ctx_alloc,
|
|
des_ctx_free
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t des_ecb_info = {
|
|
MBEDTLS_CIPHER_DES_ECB,
|
|
MBEDTLS_MODE_ECB,
|
|
MBEDTLS_KEY_LENGTH_DES,
|
|
"DES-ECB",
|
|
0,
|
|
0,
|
|
8,
|
|
&des_info
|
|
};
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
static const mbedtls_cipher_info_t des_cbc_info = {
|
|
MBEDTLS_CIPHER_DES_CBC,
|
|
MBEDTLS_MODE_CBC,
|
|
MBEDTLS_KEY_LENGTH_DES,
|
|
"DES-CBC",
|
|
8,
|
|
0,
|
|
8,
|
|
&des_info
|
|
};
|
|
#endif /* MBEDTLS_CIPHER_MODE_CBC */
|
|
|
|
static const mbedtls_cipher_base_t des_ede_info = {
|
|
MBEDTLS_CIPHER_ID_DES,
|
|
des3_crypt_ecb_wrap,
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
des3_crypt_cbc_wrap,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_STREAM)
|
|
NULL,
|
|
#endif
|
|
des3_set2key_enc_wrap,
|
|
des3_set2key_dec_wrap,
|
|
des3_ctx_alloc,
|
|
des3_ctx_free
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t des_ede_ecb_info = {
|
|
MBEDTLS_CIPHER_DES_EDE_ECB,
|
|
MBEDTLS_MODE_ECB,
|
|
MBEDTLS_KEY_LENGTH_DES_EDE,
|
|
"DES-EDE-ECB",
|
|
0,
|
|
0,
|
|
8,
|
|
&des_ede_info
|
|
};
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
static const mbedtls_cipher_info_t des_ede_cbc_info = {
|
|
MBEDTLS_CIPHER_DES_EDE_CBC,
|
|
MBEDTLS_MODE_CBC,
|
|
MBEDTLS_KEY_LENGTH_DES_EDE,
|
|
"DES-EDE-CBC",
|
|
8,
|
|
0,
|
|
8,
|
|
&des_ede_info
|
|
};
|
|
#endif /* MBEDTLS_CIPHER_MODE_CBC */
|
|
|
|
static const mbedtls_cipher_base_t des_ede3_info = {
|
|
MBEDTLS_CIPHER_ID_3DES,
|
|
des3_crypt_ecb_wrap,
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
des3_crypt_cbc_wrap,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_STREAM)
|
|
NULL,
|
|
#endif
|
|
des3_set3key_enc_wrap,
|
|
des3_set3key_dec_wrap,
|
|
des3_ctx_alloc,
|
|
des3_ctx_free
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t des_ede3_ecb_info = {
|
|
MBEDTLS_CIPHER_DES_EDE3_ECB,
|
|
MBEDTLS_MODE_ECB,
|
|
MBEDTLS_KEY_LENGTH_DES_EDE3,
|
|
"DES-EDE3-ECB",
|
|
0,
|
|
0,
|
|
8,
|
|
&des_ede3_info
|
|
};
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
static const mbedtls_cipher_info_t des_ede3_cbc_info = {
|
|
MBEDTLS_CIPHER_DES_EDE3_CBC,
|
|
MBEDTLS_MODE_CBC,
|
|
MBEDTLS_KEY_LENGTH_DES_EDE3,
|
|
"DES-EDE3-CBC",
|
|
8,
|
|
0,
|
|
8,
|
|
&des_ede3_info
|
|
};
|
|
#endif /* MBEDTLS_CIPHER_MODE_CBC */
|
|
#endif /* MBEDTLS_DES_C */
|
|
|
|
#if defined(MBEDTLS_BLOWFISH_C)
|
|
|
|
static int blowfish_crypt_ecb_wrap( void *ctx, mbedtls_operation_t operation,
|
|
const unsigned char *input, unsigned char *output )
|
|
{
|
|
return mbedtls_blowfish_crypt_ecb( (mbedtls_blowfish_context *) ctx, operation, input,
|
|
output );
|
|
}
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
static int blowfish_crypt_cbc_wrap( void *ctx, mbedtls_operation_t operation,
|
|
size_t length, unsigned char *iv, const unsigned char *input,
|
|
unsigned char *output )
|
|
{
|
|
return mbedtls_blowfish_crypt_cbc( (mbedtls_blowfish_context *) ctx, operation, length, iv,
|
|
input, output );
|
|
}
|
|
#endif /* MBEDTLS_CIPHER_MODE_CBC */
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
static int blowfish_crypt_cfb64_wrap( void *ctx, mbedtls_operation_t operation,
|
|
size_t length, size_t *iv_off, unsigned char *iv,
|
|
const unsigned char *input, unsigned char *output )
|
|
{
|
|
return mbedtls_blowfish_crypt_cfb64( (mbedtls_blowfish_context *) ctx, operation, length,
|
|
iv_off, iv, input, output );
|
|
}
|
|
#endif /* MBEDTLS_CIPHER_MODE_CFB */
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
static int blowfish_crypt_ctr_wrap( void *ctx, size_t length, size_t *nc_off,
|
|
unsigned char *nonce_counter, unsigned char *stream_block,
|
|
const unsigned char *input, unsigned char *output )
|
|
{
|
|
return mbedtls_blowfish_crypt_ctr( (mbedtls_blowfish_context *) ctx, length, nc_off,
|
|
nonce_counter, stream_block, input, output );
|
|
}
|
|
#endif /* MBEDTLS_CIPHER_MODE_CTR */
|
|
|
|
static int blowfish_setkey_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
return mbedtls_blowfish_setkey( (mbedtls_blowfish_context *) ctx, key, key_bitlen );
|
|
}
|
|
|
|
static void * blowfish_ctx_alloc( void )
|
|
{
|
|
mbedtls_blowfish_context *ctx;
|
|
ctx = mbedtls_calloc( 1, sizeof( mbedtls_blowfish_context ) );
|
|
|
|
if( ctx == NULL )
|
|
return( NULL );
|
|
|
|
mbedtls_blowfish_init( ctx );
|
|
|
|
return( ctx );
|
|
}
|
|
|
|
static void blowfish_ctx_free( void *ctx )
|
|
{
|
|
mbedtls_blowfish_free( (mbedtls_blowfish_context *) ctx );
|
|
mbedtls_free( ctx );
|
|
}
|
|
|
|
static const mbedtls_cipher_base_t blowfish_info = {
|
|
MBEDTLS_CIPHER_ID_BLOWFISH,
|
|
blowfish_crypt_ecb_wrap,
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
blowfish_crypt_cbc_wrap,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
blowfish_crypt_cfb64_wrap,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
blowfish_crypt_ctr_wrap,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_STREAM)
|
|
NULL,
|
|
#endif
|
|
blowfish_setkey_wrap,
|
|
blowfish_setkey_wrap,
|
|
blowfish_ctx_alloc,
|
|
blowfish_ctx_free
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t blowfish_ecb_info = {
|
|
MBEDTLS_CIPHER_BLOWFISH_ECB,
|
|
MBEDTLS_MODE_ECB,
|
|
128,
|
|
"BLOWFISH-ECB",
|
|
0,
|
|
MBEDTLS_CIPHER_VARIABLE_KEY_LEN,
|
|
8,
|
|
&blowfish_info
|
|
};
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
static const mbedtls_cipher_info_t blowfish_cbc_info = {
|
|
MBEDTLS_CIPHER_BLOWFISH_CBC,
|
|
MBEDTLS_MODE_CBC,
|
|
128,
|
|
"BLOWFISH-CBC",
|
|
8,
|
|
MBEDTLS_CIPHER_VARIABLE_KEY_LEN,
|
|
8,
|
|
&blowfish_info
|
|
};
|
|
#endif /* MBEDTLS_CIPHER_MODE_CBC */
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
static const mbedtls_cipher_info_t blowfish_cfb64_info = {
|
|
MBEDTLS_CIPHER_BLOWFISH_CFB64,
|
|
MBEDTLS_MODE_CFB,
|
|
128,
|
|
"BLOWFISH-CFB64",
|
|
8,
|
|
MBEDTLS_CIPHER_VARIABLE_KEY_LEN,
|
|
8,
|
|
&blowfish_info
|
|
};
|
|
#endif /* MBEDTLS_CIPHER_MODE_CFB */
|
|
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
static const mbedtls_cipher_info_t blowfish_ctr_info = {
|
|
MBEDTLS_CIPHER_BLOWFISH_CTR,
|
|
MBEDTLS_MODE_CTR,
|
|
128,
|
|
"BLOWFISH-CTR",
|
|
8,
|
|
MBEDTLS_CIPHER_VARIABLE_KEY_LEN,
|
|
8,
|
|
&blowfish_info
|
|
};
|
|
#endif /* MBEDTLS_CIPHER_MODE_CTR */
|
|
#endif /* MBEDTLS_BLOWFISH_C */
|
|
|
|
#if defined(MBEDTLS_CHACHA20_C)
|
|
|
|
static int chacha20_setkey_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
if( key_bitlen != 256U )
|
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
|
|
|
if ( 0 != mbedtls_chacha20_setkey( (mbedtls_chacha20_context*)ctx, key ) )
|
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
|
|
|
return( 0 );
|
|
}
|
|
|
|
static int chacha20_stream_wrap( void *ctx, size_t length,
|
|
const unsigned char *input,
|
|
unsigned char *output )
|
|
{
|
|
int ret = MBEDTLS_ERR_THIS_CORRUPTION;
|
|
|
|
ret = mbedtls_chacha20_update( ctx, length, input, output );
|
|
if( ret == MBEDTLS_ERR_CHACHA20_BAD_INPUT_DATA )
|
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
|
|
|
return( ret );
|
|
}
|
|
|
|
static void * chacha20_ctx_alloc( void )
|
|
{
|
|
mbedtls_chacha20_context *ctx;
|
|
ctx = mbedtls_calloc( 1, sizeof( mbedtls_chacha20_context ) );
|
|
|
|
if( ctx == NULL )
|
|
return( NULL );
|
|
|
|
mbedtls_chacha20_init( ctx );
|
|
|
|
return( ctx );
|
|
}
|
|
|
|
static void chacha20_ctx_free( void *ctx )
|
|
{
|
|
mbedtls_chacha20_free( (mbedtls_chacha20_context *) ctx );
|
|
mbedtls_free( ctx );
|
|
}
|
|
|
|
static const mbedtls_cipher_base_t chacha20_base_info = {
|
|
MBEDTLS_CIPHER_ID_CHACHA20,
|
|
NULL,
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_STREAM)
|
|
chacha20_stream_wrap,
|
|
#endif
|
|
chacha20_setkey_wrap,
|
|
chacha20_setkey_wrap,
|
|
chacha20_ctx_alloc,
|
|
chacha20_ctx_free
|
|
};
|
|
static const mbedtls_cipher_info_t chacha20_info = {
|
|
MBEDTLS_CIPHER_CHACHA20,
|
|
MBEDTLS_MODE_STREAM,
|
|
256,
|
|
"CHACHA20",
|
|
12,
|
|
0,
|
|
1,
|
|
&chacha20_base_info
|
|
};
|
|
#endif /* MBEDTLS_CHACHA20_C */
|
|
|
|
#if defined(MBEDTLS_CHACHAPOLY_C)
|
|
|
|
static int chachapoly_setkey_wrap( void *ctx,
|
|
const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
if( key_bitlen != 256U )
|
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
|
|
|
if ( 0 != mbedtls_chachapoly_setkey( (mbedtls_chachapoly_context*)ctx, key ) )
|
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
|
|
|
return( 0 );
|
|
}
|
|
|
|
static void * chachapoly_ctx_alloc( void )
|
|
{
|
|
mbedtls_chachapoly_context *ctx;
|
|
ctx = mbedtls_calloc( 1, sizeof( mbedtls_chachapoly_context ) );
|
|
|
|
if( ctx == NULL )
|
|
return( NULL );
|
|
|
|
mbedtls_chachapoly_init( ctx );
|
|
|
|
return( ctx );
|
|
}
|
|
|
|
static void chachapoly_ctx_free( void *ctx )
|
|
{
|
|
mbedtls_chachapoly_free( (mbedtls_chachapoly_context *) ctx );
|
|
mbedtls_free( ctx );
|
|
}
|
|
|
|
static const mbedtls_cipher_base_t chachapoly_base_info = {
|
|
MBEDTLS_CIPHER_ID_CHACHA20,
|
|
NULL,
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_STREAM)
|
|
NULL,
|
|
#endif
|
|
chachapoly_setkey_wrap,
|
|
chachapoly_setkey_wrap,
|
|
chachapoly_ctx_alloc,
|
|
chachapoly_ctx_free
|
|
};
|
|
static const mbedtls_cipher_info_t chachapoly_info = {
|
|
MBEDTLS_CIPHER_CHACHA20_POLY1305,
|
|
MBEDTLS_MODE_CHACHAPOLY,
|
|
256,
|
|
"CHACHA20-POLY1305",
|
|
12,
|
|
0,
|
|
1,
|
|
&chachapoly_base_info
|
|
};
|
|
#endif /* MBEDTLS_CHACHAPOLY_C */
|
|
|
|
#if defined(MBEDTLS_CIPHER_NULL_CIPHER)
|
|
static int null_crypt_stream( void *ctx, size_t length,
|
|
const unsigned char *input,
|
|
unsigned char *output )
|
|
{
|
|
((void) ctx);
|
|
memmove( output, input, length );
|
|
return( 0 );
|
|
}
|
|
|
|
static int null_setkey( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
((void) ctx);
|
|
((void) key);
|
|
((void) key_bitlen);
|
|
|
|
return( 0 );
|
|
}
|
|
|
|
static void * null_ctx_alloc( void )
|
|
{
|
|
return( (void *) 1 );
|
|
}
|
|
|
|
static void null_ctx_free( void *ctx )
|
|
{
|
|
((void) ctx);
|
|
}
|
|
|
|
static const mbedtls_cipher_base_t null_base_info = {
|
|
MBEDTLS_CIPHER_ID_NULL,
|
|
NULL,
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_STREAM)
|
|
null_crypt_stream,
|
|
#endif
|
|
null_setkey,
|
|
null_setkey,
|
|
null_ctx_alloc,
|
|
null_ctx_free
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t null_cipher_info = {
|
|
MBEDTLS_CIPHER_NULL,
|
|
MBEDTLS_MODE_STREAM,
|
|
0,
|
|
"NULL",
|
|
0,
|
|
0,
|
|
1,
|
|
&null_base_info
|
|
};
|
|
#endif /* defined(MBEDTLS_CIPHER_NULL_CIPHER) */
|
|
|
|
#if defined(MBEDTLS_NIST_KW_C)
|
|
static void *kw_ctx_alloc( void )
|
|
{
|
|
void *ctx = mbedtls_calloc( 1, sizeof( mbedtls_nist_kw_context ) );
|
|
|
|
if( ctx != NULL )
|
|
mbedtls_nist_kw_init( (mbedtls_nist_kw_context *) ctx );
|
|
|
|
return( ctx );
|
|
}
|
|
|
|
static void kw_ctx_free( void *ctx )
|
|
{
|
|
mbedtls_nist_kw_free( ctx );
|
|
mbedtls_free( ctx );
|
|
}
|
|
|
|
static int kw_aes_setkey_wrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
return mbedtls_nist_kw_setkey( (mbedtls_nist_kw_context *) ctx,
|
|
MBEDTLS_CIPHER_ID_AES, key, key_bitlen, 1 );
|
|
}
|
|
|
|
static int kw_aes_setkey_unwrap( void *ctx, const unsigned char *key,
|
|
unsigned int key_bitlen )
|
|
{
|
|
return mbedtls_nist_kw_setkey( (mbedtls_nist_kw_context *) ctx,
|
|
MBEDTLS_CIPHER_ID_AES, key, key_bitlen, 0 );
|
|
}
|
|
|
|
static const mbedtls_cipher_base_t kw_aes_info = {
|
|
MBEDTLS_CIPHER_ID_AES,
|
|
NULL,
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
NULL,
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_STREAM)
|
|
NULL,
|
|
#endif
|
|
kw_aes_setkey_wrap,
|
|
kw_aes_setkey_unwrap,
|
|
kw_ctx_alloc,
|
|
kw_ctx_free,
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_128_nist_kw_info = {
|
|
MBEDTLS_CIPHER_AES_128_KW,
|
|
MBEDTLS_MODE_KW,
|
|
128,
|
|
"AES-128-KW",
|
|
0,
|
|
0,
|
|
16,
|
|
&kw_aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_192_nist_kw_info = {
|
|
MBEDTLS_CIPHER_AES_192_KW,
|
|
MBEDTLS_MODE_KW,
|
|
192,
|
|
"AES-192-KW",
|
|
0,
|
|
0,
|
|
16,
|
|
&kw_aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_256_nist_kw_info = {
|
|
MBEDTLS_CIPHER_AES_256_KW,
|
|
MBEDTLS_MODE_KW,
|
|
256,
|
|
"AES-256-KW",
|
|
0,
|
|
0,
|
|
16,
|
|
&kw_aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_128_nist_kwp_info = {
|
|
MBEDTLS_CIPHER_AES_128_KWP,
|
|
MBEDTLS_MODE_KWP,
|
|
128,
|
|
"AES-128-KWP",
|
|
0,
|
|
0,
|
|
16,
|
|
&kw_aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_192_nist_kwp_info = {
|
|
MBEDTLS_CIPHER_AES_192_KWP,
|
|
MBEDTLS_MODE_KWP,
|
|
192,
|
|
"AES-192-KWP",
|
|
0,
|
|
0,
|
|
16,
|
|
&kw_aes_info
|
|
};
|
|
|
|
static const mbedtls_cipher_info_t aes_256_nist_kwp_info = {
|
|
MBEDTLS_CIPHER_AES_256_KWP,
|
|
MBEDTLS_MODE_KWP,
|
|
256,
|
|
"AES-256-KWP",
|
|
0,
|
|
0,
|
|
16,
|
|
&kw_aes_info
|
|
};
|
|
#endif /* MBEDTLS_NIST_KW_C */
|
|
|
|
const mbedtls_cipher_definition_t mbedtls_cipher_definitions[] =
|
|
{
|
|
#if defined(MBEDTLS_AES_C)
|
|
{ MBEDTLS_CIPHER_AES_128_ECB, &aes_128_ecb_info },
|
|
{ MBEDTLS_CIPHER_AES_192_ECB, &aes_192_ecb_info },
|
|
{ MBEDTLS_CIPHER_AES_256_ECB, &aes_256_ecb_info },
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
{ MBEDTLS_CIPHER_AES_128_CBC, &aes_128_cbc_info },
|
|
{ MBEDTLS_CIPHER_AES_192_CBC, &aes_192_cbc_info },
|
|
{ MBEDTLS_CIPHER_AES_256_CBC, &aes_256_cbc_info },
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
{ MBEDTLS_CIPHER_AES_128_CFB128, &aes_128_cfb128_info },
|
|
{ MBEDTLS_CIPHER_AES_192_CFB128, &aes_192_cfb128_info },
|
|
{ MBEDTLS_CIPHER_AES_256_CFB128, &aes_256_cfb128_info },
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_OFB)
|
|
{ MBEDTLS_CIPHER_AES_128_OFB, &aes_128_ofb_info },
|
|
{ MBEDTLS_CIPHER_AES_192_OFB, &aes_192_ofb_info },
|
|
{ MBEDTLS_CIPHER_AES_256_OFB, &aes_256_ofb_info },
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
{ MBEDTLS_CIPHER_AES_128_CTR, &aes_128_ctr_info },
|
|
{ MBEDTLS_CIPHER_AES_192_CTR, &aes_192_ctr_info },
|
|
{ MBEDTLS_CIPHER_AES_256_CTR, &aes_256_ctr_info },
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_XTS)
|
|
{ MBEDTLS_CIPHER_AES_128_XTS, &aes_128_xts_info },
|
|
{ MBEDTLS_CIPHER_AES_256_XTS, &aes_256_xts_info },
|
|
#endif
|
|
#if defined(MBEDTLS_GCM_C)
|
|
{ MBEDTLS_CIPHER_AES_128_GCM, &aes_128_gcm_info },
|
|
{ MBEDTLS_CIPHER_AES_192_GCM, &aes_192_gcm_info },
|
|
{ MBEDTLS_CIPHER_AES_256_GCM, &aes_256_gcm_info },
|
|
#endif
|
|
#if defined(MBEDTLS_CCM_C)
|
|
{ MBEDTLS_CIPHER_AES_128_CCM, &aes_128_ccm_info },
|
|
{ MBEDTLS_CIPHER_AES_192_CCM, &aes_192_ccm_info },
|
|
{ MBEDTLS_CIPHER_AES_256_CCM, &aes_256_ccm_info },
|
|
#endif
|
|
#endif /* MBEDTLS_AES_C */
|
|
|
|
#if defined(MBEDTLS_BLOWFISH_C)
|
|
{ MBEDTLS_CIPHER_BLOWFISH_ECB, &blowfish_ecb_info },
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
{ MBEDTLS_CIPHER_BLOWFISH_CBC, &blowfish_cbc_info },
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
{ MBEDTLS_CIPHER_BLOWFISH_CFB64, &blowfish_cfb64_info },
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
{ MBEDTLS_CIPHER_BLOWFISH_CTR, &blowfish_ctr_info },
|
|
#endif
|
|
#endif /* MBEDTLS_BLOWFISH_C */
|
|
|
|
#if defined(MBEDTLS_CAMELLIA_C)
|
|
{ MBEDTLS_CIPHER_CAMELLIA_128_ECB, &camellia_128_ecb_info },
|
|
{ MBEDTLS_CIPHER_CAMELLIA_192_ECB, &camellia_192_ecb_info },
|
|
{ MBEDTLS_CIPHER_CAMELLIA_256_ECB, &camellia_256_ecb_info },
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
{ MBEDTLS_CIPHER_CAMELLIA_128_CBC, &camellia_128_cbc_info },
|
|
{ MBEDTLS_CIPHER_CAMELLIA_192_CBC, &camellia_192_cbc_info },
|
|
{ MBEDTLS_CIPHER_CAMELLIA_256_CBC, &camellia_256_cbc_info },
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CFB)
|
|
{ MBEDTLS_CIPHER_CAMELLIA_128_CFB128, &camellia_128_cfb128_info },
|
|
{ MBEDTLS_CIPHER_CAMELLIA_192_CFB128, &camellia_192_cfb128_info },
|
|
{ MBEDTLS_CIPHER_CAMELLIA_256_CFB128, &camellia_256_cfb128_info },
|
|
#endif
|
|
#if defined(MBEDTLS_CIPHER_MODE_CTR)
|
|
{ MBEDTLS_CIPHER_CAMELLIA_128_CTR, &camellia_128_ctr_info },
|
|
{ MBEDTLS_CIPHER_CAMELLIA_192_CTR, &camellia_192_ctr_info },
|
|
{ MBEDTLS_CIPHER_CAMELLIA_256_CTR, &camellia_256_ctr_info },
|
|
#endif
|
|
#if defined(MBEDTLS_GCM_C)
|
|
{ MBEDTLS_CIPHER_CAMELLIA_128_GCM, &camellia_128_gcm_info },
|
|
{ MBEDTLS_CIPHER_CAMELLIA_192_GCM, &camellia_192_gcm_info },
|
|
{ MBEDTLS_CIPHER_CAMELLIA_256_GCM, &camellia_256_gcm_info },
|
|
#endif
|
|
#if defined(MBEDTLS_CCM_C)
|
|
{ MBEDTLS_CIPHER_CAMELLIA_128_CCM, &camellia_128_ccm_info },
|
|
{ MBEDTLS_CIPHER_CAMELLIA_192_CCM, &camellia_192_ccm_info },
|
|
{ MBEDTLS_CIPHER_CAMELLIA_256_CCM, &camellia_256_ccm_info },
|
|
#endif
|
|
#endif /* MBEDTLS_CAMELLIA_C */
|
|
|
|
#if defined(MBEDTLS_DES_C)
|
|
{ MBEDTLS_CIPHER_DES_ECB, &des_ecb_info },
|
|
{ MBEDTLS_CIPHER_DES_EDE_ECB, &des_ede_ecb_info },
|
|
{ MBEDTLS_CIPHER_DES_EDE3_ECB, &des_ede3_ecb_info },
|
|
#if defined(MBEDTLS_CIPHER_MODE_CBC)
|
|
{ MBEDTLS_CIPHER_DES_CBC, &des_cbc_info },
|
|
{ MBEDTLS_CIPHER_DES_EDE_CBC, &des_ede_cbc_info },
|
|
{ MBEDTLS_CIPHER_DES_EDE3_CBC, &des_ede3_cbc_info },
|
|
#endif
|
|
#endif /* MBEDTLS_DES_C */
|
|
|
|
#if defined(MBEDTLS_CHACHA20_C)
|
|
{ MBEDTLS_CIPHER_CHACHA20, &chacha20_info },
|
|
#endif
|
|
|
|
#if defined(MBEDTLS_CHACHAPOLY_C)
|
|
{ MBEDTLS_CIPHER_CHACHA20_POLY1305, &chachapoly_info },
|
|
#endif
|
|
|
|
#if defined(MBEDTLS_NIST_KW_C)
|
|
{ MBEDTLS_CIPHER_AES_128_KW, &aes_128_nist_kw_info },
|
|
{ MBEDTLS_CIPHER_AES_192_KW, &aes_192_nist_kw_info },
|
|
{ MBEDTLS_CIPHER_AES_256_KW, &aes_256_nist_kw_info },
|
|
{ MBEDTLS_CIPHER_AES_128_KWP, &aes_128_nist_kwp_info },
|
|
{ MBEDTLS_CIPHER_AES_192_KWP, &aes_192_nist_kwp_info },
|
|
{ MBEDTLS_CIPHER_AES_256_KWP, &aes_256_nist_kwp_info },
|
|
#endif
|
|
|
|
#if defined(MBEDTLS_CIPHER_NULL_CIPHER)
|
|
{ MBEDTLS_CIPHER_NULL, &null_cipher_info },
|
|
#endif /* MBEDTLS_CIPHER_NULL_CIPHER */
|
|
|
|
{ MBEDTLS_CIPHER_NONE, NULL }
|
|
};
|
|
|
|
#define NUM_CIPHERS ( sizeof(mbedtls_cipher_definitions) / \
|
|
sizeof(mbedtls_cipher_definitions[0]) )
|
|
int mbedtls_cipher_supported[NUM_CIPHERS];
|
|
|
|
#endif /* MBEDTLS_CIPHER_C */
|