diff options
Diffstat (limited to 'src/lib/libcrypto/cmac')
| -rw-r--r-- | src/lib/libcrypto/cmac/cm_ameth.c | 89 | ||||
| -rw-r--r-- | src/lib/libcrypto/cmac/cm_pmeth.c | 213 | ||||
| -rw-r--r-- | src/lib/libcrypto/cmac/cmac.c | 281 | ||||
| -rw-r--r-- | src/lib/libcrypto/cmac/cmac.h | 82 |
4 files changed, 0 insertions, 665 deletions
diff --git a/src/lib/libcrypto/cmac/cm_ameth.c b/src/lib/libcrypto/cmac/cm_ameth.c deleted file mode 100644 index e7e7fe0f80..0000000000 --- a/src/lib/libcrypto/cmac/cm_ameth.c +++ /dev/null | |||
| @@ -1,89 +0,0 @@ | |||
| 1 | /* $OpenBSD: cm_ameth.c,v 1.7 2014/07/12 16:03:37 miod Exp $ */ | ||
| 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | ||
| 3 | * project 2010. | ||
| 4 | */ | ||
| 5 | /* ==================================================================== | ||
| 6 | * Copyright (c) 2010 The OpenSSL Project. All rights reserved. | ||
| 7 | * | ||
| 8 | * Redistribution and use in source and binary forms, with or without | ||
| 9 | * modification, are permitted provided that the following conditions | ||
| 10 | * are met: | ||
| 11 | * | ||
| 12 | * 1. Redistributions of source code must retain the above copyright | ||
| 13 | * notice, this list of conditions and the following disclaimer. | ||
| 14 | * | ||
| 15 | * 2. Redistributions in binary form must reproduce the above copyright | ||
| 16 | * notice, this list of conditions and the following disclaimer in | ||
| 17 | * the documentation and/or other materials provided with the | ||
| 18 | * distribution. | ||
| 19 | * | ||
| 20 | * 3. All advertising materials mentioning features or use of this | ||
| 21 | * software must display the following acknowledgment: | ||
| 22 | * "This product includes software developed by the OpenSSL Project | ||
| 23 | * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | ||
| 24 | * | ||
| 25 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
| 26 | * endorse or promote products derived from this software without | ||
| 27 | * prior written permission. For written permission, please contact | ||
| 28 | * licensing@OpenSSL.org. | ||
| 29 | * | ||
| 30 | * 5. Products derived from this software may not be called "OpenSSL" | ||
| 31 | * nor may "OpenSSL" appear in their names without prior written | ||
| 32 | * permission of the OpenSSL Project. | ||
| 33 | * | ||
| 34 | * 6. Redistributions of any form whatsoever must retain the following | ||
| 35 | * acknowledgment: | ||
| 36 | * "This product includes software developed by the OpenSSL Project | ||
| 37 | * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | ||
| 38 | * | ||
| 39 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
| 40 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
| 41 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
| 42 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
| 43 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
| 44 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
| 45 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
| 46 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
| 47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
| 48 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
| 49 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
| 50 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
| 51 | * ==================================================================== | ||
| 52 | */ | ||
| 53 | |||
| 54 | #include <stdio.h> | ||
| 55 | |||
| 56 | #include <openssl/cmac.h> | ||
| 57 | #include <openssl/evp.h> | ||
| 58 | |||
| 59 | #include "asn1_locl.h" | ||
| 60 | |||
| 61 | /* CMAC "ASN1" method. This is just here to indicate the | ||
| 62 | * maximum CMAC output length and to free up a CMAC | ||
| 63 | * key. | ||
| 64 | */ | ||
| 65 | |||
| 66 | static int | ||
| 67 | cmac_size(const EVP_PKEY *pkey) | ||
| 68 | { | ||
| 69 | return EVP_MAX_BLOCK_LENGTH; | ||
| 70 | } | ||
| 71 | |||
| 72 | static void | ||
| 73 | cmac_key_free(EVP_PKEY *pkey) | ||
| 74 | { | ||
| 75 | CMAC_CTX *cmctx = (CMAC_CTX *)pkey->pkey.ptr; | ||
| 76 | |||
| 77 | CMAC_CTX_free(cmctx); | ||
| 78 | } | ||
| 79 | |||
| 80 | const EVP_PKEY_ASN1_METHOD cmac_asn1_meth = { | ||
| 81 | .pkey_id = EVP_PKEY_CMAC, | ||
| 82 | .pkey_base_id = EVP_PKEY_CMAC, | ||
| 83 | |||
| 84 | .pem_str = "CMAC", | ||
| 85 | .info = "OpenSSL CMAC method", | ||
| 86 | |||
| 87 | .pkey_size = cmac_size, | ||
| 88 | .pkey_free = cmac_key_free | ||
| 89 | }; | ||
diff --git a/src/lib/libcrypto/cmac/cm_pmeth.c b/src/lib/libcrypto/cmac/cm_pmeth.c deleted file mode 100644 index d9059ca4a8..0000000000 --- a/src/lib/libcrypto/cmac/cm_pmeth.c +++ /dev/null | |||
| @@ -1,213 +0,0 @@ | |||
| 1 | /* $OpenBSD: cm_pmeth.c,v 1.8 2014/07/11 08:44:48 jsing Exp $ */ | ||
| 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | ||
| 3 | * project 2010. | ||
| 4 | */ | ||
| 5 | /* ==================================================================== | ||
| 6 | * Copyright (c) 2010 The OpenSSL Project. All rights reserved. | ||
| 7 | * | ||
| 8 | * Redistribution and use in source and binary forms, with or without | ||
| 9 | * modification, are permitted provided that the following conditions | ||
| 10 | * are met: | ||
| 11 | * | ||
| 12 | * 1. Redistributions of source code must retain the above copyright | ||
| 13 | * notice, this list of conditions and the following disclaimer. | ||
| 14 | * | ||
| 15 | * 2. Redistributions in binary form must reproduce the above copyright | ||
| 16 | * notice, this list of conditions and the following disclaimer in | ||
| 17 | * the documentation and/or other materials provided with the | ||
| 18 | * distribution. | ||
| 19 | * | ||
| 20 | * 3. All advertising materials mentioning features or use of this | ||
| 21 | * software must display the following acknowledgment: | ||
| 22 | * "This product includes software developed by the OpenSSL Project | ||
| 23 | * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | ||
| 24 | * | ||
| 25 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
| 26 | * endorse or promote products derived from this software without | ||
| 27 | * prior written permission. For written permission, please contact | ||
| 28 | * licensing@OpenSSL.org. | ||
| 29 | * | ||
| 30 | * 5. Products derived from this software may not be called "OpenSSL" | ||
| 31 | * nor may "OpenSSL" appear in their names without prior written | ||
| 32 | * permission of the OpenSSL Project. | ||
| 33 | * | ||
| 34 | * 6. Redistributions of any form whatsoever must retain the following | ||
| 35 | * acknowledgment: | ||
| 36 | * "This product includes software developed by the OpenSSL Project | ||
| 37 | * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | ||
| 38 | * | ||
| 39 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
| 40 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
| 41 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
| 42 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
| 43 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
| 44 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
| 45 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
| 46 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
| 47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
| 48 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
| 49 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
| 50 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
| 51 | * ==================================================================== | ||
| 52 | */ | ||
| 53 | |||
| 54 | #include <stdio.h> | ||
| 55 | #include <string.h> | ||
| 56 | |||
| 57 | #include <openssl/cmac.h> | ||
| 58 | #include <openssl/evp.h> | ||
| 59 | #include <openssl/x509.h> | ||
| 60 | #include <openssl/x509v3.h> | ||
| 61 | |||
| 62 | #include "evp_locl.h" | ||
| 63 | |||
| 64 | /* The context structure and "key" is simply a CMAC_CTX */ | ||
| 65 | |||
| 66 | static int | ||
| 67 | pkey_cmac_init(EVP_PKEY_CTX *ctx) | ||
| 68 | { | ||
| 69 | ctx->data = CMAC_CTX_new(); | ||
| 70 | if (!ctx->data) | ||
| 71 | return 0; | ||
| 72 | ctx->keygen_info_count = 0; | ||
| 73 | return 1; | ||
| 74 | } | ||
| 75 | |||
| 76 | static int | ||
| 77 | pkey_cmac_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src) | ||
| 78 | { | ||
| 79 | if (!pkey_cmac_init(dst)) | ||
| 80 | return 0; | ||
| 81 | if (!CMAC_CTX_copy(dst->data, src->data)) | ||
| 82 | return 0; | ||
| 83 | return 1; | ||
| 84 | } | ||
| 85 | |||
| 86 | static void | ||
| 87 | pkey_cmac_cleanup(EVP_PKEY_CTX *ctx) | ||
| 88 | { | ||
| 89 | CMAC_CTX_free(ctx->data); | ||
| 90 | } | ||
| 91 | |||
| 92 | static int | ||
| 93 | pkey_cmac_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey) | ||
| 94 | { | ||
| 95 | CMAC_CTX *cmkey = CMAC_CTX_new(); | ||
| 96 | CMAC_CTX *cmctx = ctx->data; | ||
| 97 | |||
| 98 | if (!cmkey) | ||
| 99 | return 0; | ||
| 100 | if (!CMAC_CTX_copy(cmkey, cmctx)) { | ||
| 101 | CMAC_CTX_free(cmkey); | ||
| 102 | return 0; | ||
| 103 | } | ||
| 104 | EVP_PKEY_assign(pkey, EVP_PKEY_CMAC, cmkey); | ||
| 105 | |||
| 106 | return 1; | ||
| 107 | } | ||
| 108 | |||
| 109 | static int | ||
| 110 | int_update(EVP_MD_CTX *ctx, const void *data, size_t count) | ||
| 111 | { | ||
| 112 | if (!CMAC_Update(ctx->pctx->data, data, count)) | ||
| 113 | return 0; | ||
| 114 | return 1; | ||
| 115 | } | ||
| 116 | |||
| 117 | static int | ||
| 118 | cmac_signctx_init(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx) | ||
| 119 | { | ||
| 120 | EVP_MD_CTX_set_flags(mctx, EVP_MD_CTX_FLAG_NO_INIT); | ||
| 121 | mctx->update = int_update; | ||
| 122 | return 1; | ||
| 123 | } | ||
| 124 | |||
| 125 | static int | ||
| 126 | cmac_signctx(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen, | ||
| 127 | EVP_MD_CTX *mctx) | ||
| 128 | { | ||
| 129 | return CMAC_Final(ctx->data, sig, siglen); | ||
| 130 | } | ||
| 131 | |||
| 132 | static int | ||
| 133 | pkey_cmac_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2) | ||
| 134 | { | ||
| 135 | CMAC_CTX *cmctx = ctx->data; | ||
| 136 | |||
| 137 | switch (type) { | ||
| 138 | case EVP_PKEY_CTRL_SET_MAC_KEY: | ||
| 139 | if (!p2 || p1 < 0) | ||
| 140 | return 0; | ||
| 141 | if (!CMAC_Init(cmctx, p2, p1, NULL, NULL)) | ||
| 142 | return 0; | ||
| 143 | break; | ||
| 144 | |||
| 145 | case EVP_PKEY_CTRL_CIPHER: | ||
| 146 | if (!CMAC_Init(cmctx, NULL, 0, p2, ctx->engine)) | ||
| 147 | return 0; | ||
| 148 | break; | ||
| 149 | |||
| 150 | case EVP_PKEY_CTRL_MD: | ||
| 151 | if (ctx->pkey && !CMAC_CTX_copy(ctx->data, | ||
| 152 | (CMAC_CTX *)ctx->pkey->pkey.ptr)) | ||
| 153 | return 0; | ||
| 154 | if (!CMAC_Init(cmctx, NULL, 0, NULL, NULL)) | ||
| 155 | return 0; | ||
| 156 | break; | ||
| 157 | |||
| 158 | default: | ||
| 159 | return -2; | ||
| 160 | } | ||
| 161 | return 1; | ||
| 162 | } | ||
| 163 | |||
| 164 | static int | ||
| 165 | pkey_cmac_ctrl_str(EVP_PKEY_CTX *ctx, const char *type, const char *value) | ||
| 166 | { | ||
| 167 | if (!value) | ||
| 168 | return 0; | ||
| 169 | if (!strcmp(type, "key")) { | ||
| 170 | void *p = (void *)value; | ||
| 171 | return pkey_cmac_ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, | ||
| 172 | strlen(p), p); | ||
| 173 | } | ||
| 174 | if (!strcmp(type, "cipher")) { | ||
| 175 | const EVP_CIPHER *c; | ||
| 176 | |||
| 177 | c = EVP_get_cipherbyname(value); | ||
| 178 | if (!c) | ||
| 179 | return 0; | ||
| 180 | return pkey_cmac_ctrl(ctx, EVP_PKEY_CTRL_CIPHER, -1, (void *)c); | ||
| 181 | } | ||
| 182 | if (!strcmp(type, "hexkey")) { | ||
| 183 | unsigned char *key; | ||
| 184 | int r; | ||
| 185 | long keylen; | ||
| 186 | |||
| 187 | key = string_to_hex(value, &keylen); | ||
| 188 | if (!key) | ||
| 189 | return 0; | ||
| 190 | r = pkey_cmac_ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, keylen, key); | ||
| 191 | free(key); | ||
| 192 | return r; | ||
| 193 | } | ||
| 194 | |||
| 195 | return -2; | ||
| 196 | } | ||
| 197 | |||
| 198 | const EVP_PKEY_METHOD cmac_pkey_meth = { | ||
| 199 | .pkey_id = EVP_PKEY_CMAC, | ||
| 200 | .flags = EVP_PKEY_FLAG_SIGCTX_CUSTOM, | ||
| 201 | |||
| 202 | .init = pkey_cmac_init, | ||
| 203 | .copy = pkey_cmac_copy, | ||
| 204 | .cleanup = pkey_cmac_cleanup, | ||
| 205 | |||
| 206 | .keygen = pkey_cmac_keygen, | ||
| 207 | |||
| 208 | .signctx_init = cmac_signctx_init, | ||
| 209 | .signctx = cmac_signctx, | ||
| 210 | |||
| 211 | .ctrl = pkey_cmac_ctrl, | ||
| 212 | .ctrl_str = pkey_cmac_ctrl_str | ||
| 213 | }; | ||
diff --git a/src/lib/libcrypto/cmac/cmac.c b/src/lib/libcrypto/cmac/cmac.c deleted file mode 100644 index 18635b942a..0000000000 --- a/src/lib/libcrypto/cmac/cmac.c +++ /dev/null | |||
| @@ -1,281 +0,0 @@ | |||
| 1 | /* $OpenBSD: cmac.c,v 1.9 2014/07/12 14:58:32 miod Exp $ */ | ||
| 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | ||
| 3 | * project. | ||
| 4 | */ | ||
| 5 | /* ==================================================================== | ||
| 6 | * Copyright (c) 2010 The OpenSSL Project. All rights reserved. | ||
| 7 | * | ||
| 8 | * Redistribution and use in source and binary forms, with or without | ||
| 9 | * modification, are permitted provided that the following conditions | ||
| 10 | * are met: | ||
| 11 | * | ||
| 12 | * 1. Redistributions of source code must retain the above copyright | ||
| 13 | * notice, this list of conditions and the following disclaimer. | ||
| 14 | * | ||
| 15 | * 2. Redistributions in binary form must reproduce the above copyright | ||
| 16 | * notice, this list of conditions and the following disclaimer in | ||
| 17 | * the documentation and/or other materials provided with the | ||
| 18 | * distribution. | ||
| 19 | * | ||
| 20 | * 3. All advertising materials mentioning features or use of this | ||
| 21 | * software must display the following acknowledgment: | ||
| 22 | * "This product includes software developed by the OpenSSL Project | ||
| 23 | * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | ||
| 24 | * | ||
| 25 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
| 26 | * endorse or promote products derived from this software without | ||
| 27 | * prior written permission. For written permission, please contact | ||
| 28 | * licensing@OpenSSL.org. | ||
| 29 | * | ||
| 30 | * 5. Products derived from this software may not be called "OpenSSL" | ||
| 31 | * nor may "OpenSSL" appear in their names without prior written | ||
| 32 | * permission of the OpenSSL Project. | ||
| 33 | * | ||
| 34 | * 6. Redistributions of any form whatsoever must retain the following | ||
| 35 | * acknowledgment: | ||
| 36 | * "This product includes software developed by the OpenSSL Project | ||
| 37 | * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | ||
| 38 | * | ||
| 39 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
| 40 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
| 41 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
| 42 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
| 43 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
| 44 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
| 45 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
| 46 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
| 47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
| 48 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
| 49 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
| 50 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
| 51 | * ==================================================================== | ||
| 52 | */ | ||
| 53 | |||
| 54 | #include <stdio.h> | ||
| 55 | #include <stdlib.h> | ||
| 56 | #include <string.h> | ||
| 57 | |||
| 58 | #include <openssl/cmac.h> | ||
| 59 | |||
| 60 | struct CMAC_CTX_st { | ||
| 61 | /* Cipher context to use */ | ||
| 62 | EVP_CIPHER_CTX cctx; | ||
| 63 | /* Keys k1 and k2 */ | ||
| 64 | unsigned char k1[EVP_MAX_BLOCK_LENGTH]; | ||
| 65 | unsigned char k2[EVP_MAX_BLOCK_LENGTH]; | ||
| 66 | /* Temporary block */ | ||
| 67 | unsigned char tbl[EVP_MAX_BLOCK_LENGTH]; | ||
| 68 | /* Last (possibly partial) block */ | ||
| 69 | unsigned char last_block[EVP_MAX_BLOCK_LENGTH]; | ||
| 70 | /* Number of bytes in last block: -1 means context not initialised */ | ||
| 71 | int nlast_block; | ||
| 72 | }; | ||
| 73 | |||
| 74 | |||
| 75 | /* Make temporary keys K1 and K2 */ | ||
| 76 | |||
| 77 | static void | ||
| 78 | make_kn(unsigned char *k1, unsigned char *l, int bl) | ||
| 79 | { | ||
| 80 | int i; | ||
| 81 | |||
| 82 | /* Shift block to left, including carry */ | ||
| 83 | for (i = 0; i < bl; i++) { | ||
| 84 | k1[i] = l[i] << 1; | ||
| 85 | if (i < bl - 1 && l[i + 1] & 0x80) | ||
| 86 | k1[i] |= 1; | ||
| 87 | } | ||
| 88 | /* If MSB set fixup with R */ | ||
| 89 | if (l[0] & 0x80) | ||
| 90 | k1[bl - 1] ^= bl == 16 ? 0x87 : 0x1b; | ||
| 91 | } | ||
| 92 | |||
| 93 | CMAC_CTX * | ||
| 94 | CMAC_CTX_new(void) | ||
| 95 | { | ||
| 96 | CMAC_CTX *ctx; | ||
| 97 | |||
| 98 | ctx = malloc(sizeof(CMAC_CTX)); | ||
| 99 | if (!ctx) | ||
| 100 | return NULL; | ||
| 101 | EVP_CIPHER_CTX_init(&ctx->cctx); | ||
| 102 | ctx->nlast_block = -1; | ||
| 103 | return ctx; | ||
| 104 | } | ||
| 105 | |||
| 106 | void | ||
| 107 | CMAC_CTX_cleanup(CMAC_CTX *ctx) | ||
| 108 | { | ||
| 109 | EVP_CIPHER_CTX_cleanup(&ctx->cctx); | ||
| 110 | OPENSSL_cleanse(ctx->tbl, EVP_MAX_BLOCK_LENGTH); | ||
| 111 | OPENSSL_cleanse(ctx->k1, EVP_MAX_BLOCK_LENGTH); | ||
| 112 | OPENSSL_cleanse(ctx->k2, EVP_MAX_BLOCK_LENGTH); | ||
| 113 | OPENSSL_cleanse(ctx->last_block, EVP_MAX_BLOCK_LENGTH); | ||
| 114 | ctx->nlast_block = -1; | ||
| 115 | } | ||
| 116 | |||
| 117 | EVP_CIPHER_CTX * | ||
| 118 | CMAC_CTX_get0_cipher_ctx(CMAC_CTX *ctx) | ||
| 119 | { | ||
| 120 | return &ctx->cctx; | ||
| 121 | } | ||
| 122 | |||
| 123 | void | ||
| 124 | CMAC_CTX_free(CMAC_CTX *ctx) | ||
| 125 | { | ||
| 126 | if (ctx == NULL) | ||
| 127 | return; | ||
| 128 | |||
| 129 | CMAC_CTX_cleanup(ctx); | ||
| 130 | free(ctx); | ||
| 131 | } | ||
| 132 | |||
| 133 | int | ||
| 134 | CMAC_CTX_copy(CMAC_CTX *out, const CMAC_CTX *in) | ||
| 135 | { | ||
| 136 | int bl; | ||
| 137 | |||
| 138 | if (in->nlast_block == -1) | ||
| 139 | return 0; | ||
| 140 | if (!EVP_CIPHER_CTX_copy(&out->cctx, &in->cctx)) | ||
| 141 | return 0; | ||
| 142 | bl = EVP_CIPHER_CTX_block_size(&in->cctx); | ||
| 143 | memcpy(out->k1, in->k1, bl); | ||
| 144 | memcpy(out->k2, in->k2, bl); | ||
| 145 | memcpy(out->tbl, in->tbl, bl); | ||
| 146 | memcpy(out->last_block, in->last_block, bl); | ||
| 147 | out->nlast_block = in->nlast_block; | ||
| 148 | return 1; | ||
| 149 | } | ||
| 150 | |||
| 151 | int | ||
| 152 | CMAC_Init(CMAC_CTX *ctx, const void *key, size_t keylen, | ||
| 153 | const EVP_CIPHER *cipher, ENGINE *impl) | ||
| 154 | { | ||
| 155 | static unsigned char zero_iv[EVP_MAX_BLOCK_LENGTH]; | ||
| 156 | |||
| 157 | /* All zeros means restart */ | ||
| 158 | if (!key && !cipher && !impl && keylen == 0) { | ||
| 159 | /* Not initialised */ | ||
| 160 | if (ctx->nlast_block == -1) | ||
| 161 | return 0; | ||
| 162 | if (!EVP_EncryptInit_ex(&ctx->cctx, NULL, NULL, NULL, zero_iv)) | ||
| 163 | return 0; | ||
| 164 | memset(ctx->tbl, 0, EVP_CIPHER_CTX_block_size(&ctx->cctx)); | ||
| 165 | ctx->nlast_block = 0; | ||
| 166 | return 1; | ||
| 167 | } | ||
| 168 | /* Initialiase context */ | ||
| 169 | if (cipher && !EVP_EncryptInit_ex(&ctx->cctx, cipher, impl, NULL, NULL)) | ||
| 170 | return 0; | ||
| 171 | /* Non-NULL key means initialisation complete */ | ||
| 172 | if (key) { | ||
| 173 | int bl; | ||
| 174 | |||
| 175 | if (!EVP_CIPHER_CTX_cipher(&ctx->cctx)) | ||
| 176 | return 0; | ||
| 177 | if (!EVP_CIPHER_CTX_set_key_length(&ctx->cctx, keylen)) | ||
| 178 | return 0; | ||
| 179 | if (!EVP_EncryptInit_ex(&ctx->cctx, NULL, NULL, key, zero_iv)) | ||
| 180 | return 0; | ||
| 181 | bl = EVP_CIPHER_CTX_block_size(&ctx->cctx); | ||
| 182 | if (!EVP_Cipher(&ctx->cctx, ctx->tbl, zero_iv, bl)) | ||
| 183 | return 0; | ||
| 184 | make_kn(ctx->k1, ctx->tbl, bl); | ||
| 185 | make_kn(ctx->k2, ctx->k1, bl); | ||
| 186 | OPENSSL_cleanse(ctx->tbl, bl); | ||
| 187 | /* Reset context again ready for first data block */ | ||
| 188 | if (!EVP_EncryptInit_ex(&ctx->cctx, NULL, NULL, NULL, zero_iv)) | ||
| 189 | return 0; | ||
| 190 | /* Zero tbl so resume works */ | ||
| 191 | memset(ctx->tbl, 0, bl); | ||
| 192 | ctx->nlast_block = 0; | ||
| 193 | } | ||
| 194 | return 1; | ||
| 195 | } | ||
| 196 | |||
| 197 | int | ||
| 198 | CMAC_Update(CMAC_CTX *ctx, const void *in, size_t dlen) | ||
| 199 | { | ||
| 200 | const unsigned char *data = in; | ||
| 201 | size_t bl; | ||
| 202 | |||
| 203 | if (ctx->nlast_block == -1) | ||
| 204 | return 0; | ||
| 205 | if (dlen == 0) | ||
| 206 | return 1; | ||
| 207 | bl = EVP_CIPHER_CTX_block_size(&ctx->cctx); | ||
| 208 | /* Copy into partial block if we need to */ | ||
| 209 | if (ctx->nlast_block > 0) { | ||
| 210 | size_t nleft; | ||
| 211 | |||
| 212 | nleft = bl - ctx->nlast_block; | ||
| 213 | if (dlen < nleft) | ||
| 214 | nleft = dlen; | ||
| 215 | memcpy(ctx->last_block + ctx->nlast_block, data, nleft); | ||
| 216 | dlen -= nleft; | ||
| 217 | ctx->nlast_block += nleft; | ||
| 218 | /* If no more to process return */ | ||
| 219 | if (dlen == 0) | ||
| 220 | return 1; | ||
| 221 | data += nleft; | ||
| 222 | /* Else not final block so encrypt it */ | ||
| 223 | if (!EVP_Cipher(&ctx->cctx, ctx->tbl, ctx->last_block, bl)) | ||
| 224 | return 0; | ||
| 225 | } | ||
| 226 | /* Encrypt all but one of the complete blocks left */ | ||
| 227 | while (dlen > bl) { | ||
| 228 | if (!EVP_Cipher(&ctx->cctx, ctx->tbl, data, bl)) | ||
| 229 | return 0; | ||
| 230 | dlen -= bl; | ||
| 231 | data += bl; | ||
| 232 | } | ||
| 233 | /* Copy any data left to last block buffer */ | ||
| 234 | memcpy(ctx->last_block, data, dlen); | ||
| 235 | ctx->nlast_block = dlen; | ||
| 236 | return 1; | ||
| 237 | } | ||
| 238 | |||
| 239 | int | ||
| 240 | CMAC_Final(CMAC_CTX *ctx, unsigned char *out, size_t *poutlen) | ||
| 241 | { | ||
| 242 | int i, bl, lb; | ||
| 243 | |||
| 244 | if (ctx->nlast_block == -1) | ||
| 245 | return 0; | ||
| 246 | bl = EVP_CIPHER_CTX_block_size(&ctx->cctx); | ||
| 247 | *poutlen = (size_t)bl; | ||
| 248 | if (!out) | ||
| 249 | return 1; | ||
| 250 | lb = ctx->nlast_block; | ||
| 251 | /* Is last block complete? */ | ||
| 252 | if (lb == bl) { | ||
| 253 | for (i = 0; i < bl; i++) | ||
| 254 | out[i] = ctx->last_block[i] ^ ctx->k1[i]; | ||
| 255 | } else { | ||
| 256 | ctx->last_block[lb] = 0x80; | ||
| 257 | if (bl - lb > 1) | ||
| 258 | memset(ctx->last_block + lb + 1, 0, bl - lb - 1); | ||
| 259 | for (i = 0; i < bl; i++) | ||
| 260 | out[i] = ctx->last_block[i] ^ ctx->k2[i]; | ||
| 261 | } | ||
| 262 | if (!EVP_Cipher(&ctx->cctx, out, out, bl)) { | ||
| 263 | OPENSSL_cleanse(out, bl); | ||
| 264 | return 0; | ||
| 265 | } | ||
| 266 | return 1; | ||
| 267 | } | ||
| 268 | |||
| 269 | int | ||
| 270 | CMAC_resume(CMAC_CTX *ctx) | ||
| 271 | { | ||
| 272 | if (ctx->nlast_block == -1) | ||
| 273 | return 0; | ||
| 274 | /* The buffer "tbl" containes the last fully encrypted block | ||
| 275 | * which is the last IV (or all zeroes if no last encrypted block). | ||
| 276 | * The last block has not been modified since CMAC_final(). | ||
| 277 | * So reinitialising using the last decrypted block will allow | ||
| 278 | * CMAC to continue after calling CMAC_Final(). | ||
| 279 | */ | ||
| 280 | return EVP_EncryptInit_ex(&ctx->cctx, NULL, NULL, NULL, ctx->tbl); | ||
| 281 | } | ||
diff --git a/src/lib/libcrypto/cmac/cmac.h b/src/lib/libcrypto/cmac/cmac.h deleted file mode 100644 index cb6d64b02f..0000000000 --- a/src/lib/libcrypto/cmac/cmac.h +++ /dev/null | |||
| @@ -1,82 +0,0 @@ | |||
| 1 | /* $OpenBSD: cmac.h,v 1.3 2014/06/21 13:42:14 jsing Exp $ */ | ||
| 2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | ||
| 3 | * project. | ||
| 4 | */ | ||
| 5 | /* ==================================================================== | ||
| 6 | * Copyright (c) 2010 The OpenSSL Project. All rights reserved. | ||
| 7 | * | ||
| 8 | * Redistribution and use in source and binary forms, with or without | ||
| 9 | * modification, are permitted provided that the following conditions | ||
| 10 | * are met: | ||
| 11 | * | ||
| 12 | * 1. Redistributions of source code must retain the above copyright | ||
| 13 | * notice, this list of conditions and the following disclaimer. | ||
| 14 | * | ||
| 15 | * 2. Redistributions in binary form must reproduce the above copyright | ||
| 16 | * notice, this list of conditions and the following disclaimer in | ||
| 17 | * the documentation and/or other materials provided with the | ||
| 18 | * distribution. | ||
| 19 | * | ||
| 20 | * 3. All advertising materials mentioning features or use of this | ||
| 21 | * software must display the following acknowledgment: | ||
| 22 | * "This product includes software developed by the OpenSSL Project | ||
| 23 | * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | ||
| 24 | * | ||
| 25 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
| 26 | * endorse or promote products derived from this software without | ||
| 27 | * prior written permission. For written permission, please contact | ||
| 28 | * licensing@OpenSSL.org. | ||
| 29 | * | ||
| 30 | * 5. Products derived from this software may not be called "OpenSSL" | ||
| 31 | * nor may "OpenSSL" appear in their names without prior written | ||
| 32 | * permission of the OpenSSL Project. | ||
| 33 | * | ||
| 34 | * 6. Redistributions of any form whatsoever must retain the following | ||
| 35 | * acknowledgment: | ||
| 36 | * "This product includes software developed by the OpenSSL Project | ||
| 37 | * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | ||
| 38 | * | ||
| 39 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
| 40 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
| 41 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
| 42 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
| 43 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
| 44 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
| 45 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
| 46 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
| 47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
| 48 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
| 49 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
| 50 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
| 51 | * ==================================================================== | ||
| 52 | */ | ||
| 53 | |||
| 54 | |||
| 55 | #ifndef HEADER_CMAC_H | ||
| 56 | #define HEADER_CMAC_H | ||
| 57 | |||
| 58 | #ifdef __cplusplus | ||
| 59 | extern "C" { | ||
| 60 | #endif | ||
| 61 | |||
| 62 | #include <openssl/evp.h> | ||
| 63 | |||
| 64 | /* Opaque */ | ||
| 65 | typedef struct CMAC_CTX_st CMAC_CTX; | ||
| 66 | |||
| 67 | CMAC_CTX *CMAC_CTX_new(void); | ||
| 68 | void CMAC_CTX_cleanup(CMAC_CTX *ctx); | ||
| 69 | void CMAC_CTX_free(CMAC_CTX *ctx); | ||
| 70 | EVP_CIPHER_CTX *CMAC_CTX_get0_cipher_ctx(CMAC_CTX *ctx); | ||
| 71 | int CMAC_CTX_copy(CMAC_CTX *out, const CMAC_CTX *in); | ||
| 72 | |||
| 73 | int CMAC_Init(CMAC_CTX *ctx, const void *key, size_t keylen, | ||
| 74 | const EVP_CIPHER *cipher, ENGINE *impl); | ||
| 75 | int CMAC_Update(CMAC_CTX *ctx, const void *data, size_t dlen); | ||
| 76 | int CMAC_Final(CMAC_CTX *ctx, unsigned char *out, size_t *poutlen); | ||
| 77 | int CMAC_resume(CMAC_CTX *ctx); | ||
| 78 | |||
| 79 | #ifdef __cplusplus | ||
| 80 | } | ||
| 81 | #endif | ||
| 82 | #endif | ||
