diff options
Diffstat (limited to 'src/lib/libcrypto/cmac')
-rw-r--r-- | src/lib/libcrypto/cmac/cm_ameth.c | 89 | ||||
-rw-r--r-- | src/lib/libcrypto/cmac/cm_pmeth.c | 213 | ||||
-rw-r--r-- | src/lib/libcrypto/cmac/cmac.c | 281 | ||||
-rw-r--r-- | src/lib/libcrypto/cmac/cmac.h | 82 |
4 files changed, 0 insertions, 665 deletions
diff --git a/src/lib/libcrypto/cmac/cm_ameth.c b/src/lib/libcrypto/cmac/cm_ameth.c deleted file mode 100644 index e7e7fe0f80..0000000000 --- a/src/lib/libcrypto/cmac/cm_ameth.c +++ /dev/null | |||
@@ -1,89 +0,0 @@ | |||
1 | /* $OpenBSD: cm_ameth.c,v 1.7 2014/07/12 16:03:37 miod Exp $ */ | ||
2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | ||
3 | * project 2010. | ||
4 | */ | ||
5 | /* ==================================================================== | ||
6 | * Copyright (c) 2010 The OpenSSL Project. All rights reserved. | ||
7 | * | ||
8 | * Redistribution and use in source and binary forms, with or without | ||
9 | * modification, are permitted provided that the following conditions | ||
10 | * are met: | ||
11 | * | ||
12 | * 1. Redistributions of source code must retain the above copyright | ||
13 | * notice, this list of conditions and the following disclaimer. | ||
14 | * | ||
15 | * 2. Redistributions in binary form must reproduce the above copyright | ||
16 | * notice, this list of conditions and the following disclaimer in | ||
17 | * the documentation and/or other materials provided with the | ||
18 | * distribution. | ||
19 | * | ||
20 | * 3. All advertising materials mentioning features or use of this | ||
21 | * software must display the following acknowledgment: | ||
22 | * "This product includes software developed by the OpenSSL Project | ||
23 | * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | ||
24 | * | ||
25 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
26 | * endorse or promote products derived from this software without | ||
27 | * prior written permission. For written permission, please contact | ||
28 | * licensing@OpenSSL.org. | ||
29 | * | ||
30 | * 5. Products derived from this software may not be called "OpenSSL" | ||
31 | * nor may "OpenSSL" appear in their names without prior written | ||
32 | * permission of the OpenSSL Project. | ||
33 | * | ||
34 | * 6. Redistributions of any form whatsoever must retain the following | ||
35 | * acknowledgment: | ||
36 | * "This product includes software developed by the OpenSSL Project | ||
37 | * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | ||
38 | * | ||
39 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
40 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
41 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
42 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
43 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
44 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
45 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
46 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
48 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
49 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
50 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
51 | * ==================================================================== | ||
52 | */ | ||
53 | |||
54 | #include <stdio.h> | ||
55 | |||
56 | #include <openssl/cmac.h> | ||
57 | #include <openssl/evp.h> | ||
58 | |||
59 | #include "asn1_locl.h" | ||
60 | |||
61 | /* CMAC "ASN1" method. This is just here to indicate the | ||
62 | * maximum CMAC output length and to free up a CMAC | ||
63 | * key. | ||
64 | */ | ||
65 | |||
66 | static int | ||
67 | cmac_size(const EVP_PKEY *pkey) | ||
68 | { | ||
69 | return EVP_MAX_BLOCK_LENGTH; | ||
70 | } | ||
71 | |||
72 | static void | ||
73 | cmac_key_free(EVP_PKEY *pkey) | ||
74 | { | ||
75 | CMAC_CTX *cmctx = (CMAC_CTX *)pkey->pkey.ptr; | ||
76 | |||
77 | CMAC_CTX_free(cmctx); | ||
78 | } | ||
79 | |||
80 | const EVP_PKEY_ASN1_METHOD cmac_asn1_meth = { | ||
81 | .pkey_id = EVP_PKEY_CMAC, | ||
82 | .pkey_base_id = EVP_PKEY_CMAC, | ||
83 | |||
84 | .pem_str = "CMAC", | ||
85 | .info = "OpenSSL CMAC method", | ||
86 | |||
87 | .pkey_size = cmac_size, | ||
88 | .pkey_free = cmac_key_free | ||
89 | }; | ||
diff --git a/src/lib/libcrypto/cmac/cm_pmeth.c b/src/lib/libcrypto/cmac/cm_pmeth.c deleted file mode 100644 index d9059ca4a8..0000000000 --- a/src/lib/libcrypto/cmac/cm_pmeth.c +++ /dev/null | |||
@@ -1,213 +0,0 @@ | |||
1 | /* $OpenBSD: cm_pmeth.c,v 1.8 2014/07/11 08:44:48 jsing Exp $ */ | ||
2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | ||
3 | * project 2010. | ||
4 | */ | ||
5 | /* ==================================================================== | ||
6 | * Copyright (c) 2010 The OpenSSL Project. All rights reserved. | ||
7 | * | ||
8 | * Redistribution and use in source and binary forms, with or without | ||
9 | * modification, are permitted provided that the following conditions | ||
10 | * are met: | ||
11 | * | ||
12 | * 1. Redistributions of source code must retain the above copyright | ||
13 | * notice, this list of conditions and the following disclaimer. | ||
14 | * | ||
15 | * 2. Redistributions in binary form must reproduce the above copyright | ||
16 | * notice, this list of conditions and the following disclaimer in | ||
17 | * the documentation and/or other materials provided with the | ||
18 | * distribution. | ||
19 | * | ||
20 | * 3. All advertising materials mentioning features or use of this | ||
21 | * software must display the following acknowledgment: | ||
22 | * "This product includes software developed by the OpenSSL Project | ||
23 | * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | ||
24 | * | ||
25 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
26 | * endorse or promote products derived from this software without | ||
27 | * prior written permission. For written permission, please contact | ||
28 | * licensing@OpenSSL.org. | ||
29 | * | ||
30 | * 5. Products derived from this software may not be called "OpenSSL" | ||
31 | * nor may "OpenSSL" appear in their names without prior written | ||
32 | * permission of the OpenSSL Project. | ||
33 | * | ||
34 | * 6. Redistributions of any form whatsoever must retain the following | ||
35 | * acknowledgment: | ||
36 | * "This product includes software developed by the OpenSSL Project | ||
37 | * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | ||
38 | * | ||
39 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
40 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
41 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
42 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
43 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
44 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
45 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
46 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
48 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
49 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
50 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
51 | * ==================================================================== | ||
52 | */ | ||
53 | |||
54 | #include <stdio.h> | ||
55 | #include <string.h> | ||
56 | |||
57 | #include <openssl/cmac.h> | ||
58 | #include <openssl/evp.h> | ||
59 | #include <openssl/x509.h> | ||
60 | #include <openssl/x509v3.h> | ||
61 | |||
62 | #include "evp_locl.h" | ||
63 | |||
64 | /* The context structure and "key" is simply a CMAC_CTX */ | ||
65 | |||
66 | static int | ||
67 | pkey_cmac_init(EVP_PKEY_CTX *ctx) | ||
68 | { | ||
69 | ctx->data = CMAC_CTX_new(); | ||
70 | if (!ctx->data) | ||
71 | return 0; | ||
72 | ctx->keygen_info_count = 0; | ||
73 | return 1; | ||
74 | } | ||
75 | |||
76 | static int | ||
77 | pkey_cmac_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src) | ||
78 | { | ||
79 | if (!pkey_cmac_init(dst)) | ||
80 | return 0; | ||
81 | if (!CMAC_CTX_copy(dst->data, src->data)) | ||
82 | return 0; | ||
83 | return 1; | ||
84 | } | ||
85 | |||
86 | static void | ||
87 | pkey_cmac_cleanup(EVP_PKEY_CTX *ctx) | ||
88 | { | ||
89 | CMAC_CTX_free(ctx->data); | ||
90 | } | ||
91 | |||
92 | static int | ||
93 | pkey_cmac_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey) | ||
94 | { | ||
95 | CMAC_CTX *cmkey = CMAC_CTX_new(); | ||
96 | CMAC_CTX *cmctx = ctx->data; | ||
97 | |||
98 | if (!cmkey) | ||
99 | return 0; | ||
100 | if (!CMAC_CTX_copy(cmkey, cmctx)) { | ||
101 | CMAC_CTX_free(cmkey); | ||
102 | return 0; | ||
103 | } | ||
104 | EVP_PKEY_assign(pkey, EVP_PKEY_CMAC, cmkey); | ||
105 | |||
106 | return 1; | ||
107 | } | ||
108 | |||
109 | static int | ||
110 | int_update(EVP_MD_CTX *ctx, const void *data, size_t count) | ||
111 | { | ||
112 | if (!CMAC_Update(ctx->pctx->data, data, count)) | ||
113 | return 0; | ||
114 | return 1; | ||
115 | } | ||
116 | |||
117 | static int | ||
118 | cmac_signctx_init(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx) | ||
119 | { | ||
120 | EVP_MD_CTX_set_flags(mctx, EVP_MD_CTX_FLAG_NO_INIT); | ||
121 | mctx->update = int_update; | ||
122 | return 1; | ||
123 | } | ||
124 | |||
125 | static int | ||
126 | cmac_signctx(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen, | ||
127 | EVP_MD_CTX *mctx) | ||
128 | { | ||
129 | return CMAC_Final(ctx->data, sig, siglen); | ||
130 | } | ||
131 | |||
132 | static int | ||
133 | pkey_cmac_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2) | ||
134 | { | ||
135 | CMAC_CTX *cmctx = ctx->data; | ||
136 | |||
137 | switch (type) { | ||
138 | case EVP_PKEY_CTRL_SET_MAC_KEY: | ||
139 | if (!p2 || p1 < 0) | ||
140 | return 0; | ||
141 | if (!CMAC_Init(cmctx, p2, p1, NULL, NULL)) | ||
142 | return 0; | ||
143 | break; | ||
144 | |||
145 | case EVP_PKEY_CTRL_CIPHER: | ||
146 | if (!CMAC_Init(cmctx, NULL, 0, p2, ctx->engine)) | ||
147 | return 0; | ||
148 | break; | ||
149 | |||
150 | case EVP_PKEY_CTRL_MD: | ||
151 | if (ctx->pkey && !CMAC_CTX_copy(ctx->data, | ||
152 | (CMAC_CTX *)ctx->pkey->pkey.ptr)) | ||
153 | return 0; | ||
154 | if (!CMAC_Init(cmctx, NULL, 0, NULL, NULL)) | ||
155 | return 0; | ||
156 | break; | ||
157 | |||
158 | default: | ||
159 | return -2; | ||
160 | } | ||
161 | return 1; | ||
162 | } | ||
163 | |||
164 | static int | ||
165 | pkey_cmac_ctrl_str(EVP_PKEY_CTX *ctx, const char *type, const char *value) | ||
166 | { | ||
167 | if (!value) | ||
168 | return 0; | ||
169 | if (!strcmp(type, "key")) { | ||
170 | void *p = (void *)value; | ||
171 | return pkey_cmac_ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, | ||
172 | strlen(p), p); | ||
173 | } | ||
174 | if (!strcmp(type, "cipher")) { | ||
175 | const EVP_CIPHER *c; | ||
176 | |||
177 | c = EVP_get_cipherbyname(value); | ||
178 | if (!c) | ||
179 | return 0; | ||
180 | return pkey_cmac_ctrl(ctx, EVP_PKEY_CTRL_CIPHER, -1, (void *)c); | ||
181 | } | ||
182 | if (!strcmp(type, "hexkey")) { | ||
183 | unsigned char *key; | ||
184 | int r; | ||
185 | long keylen; | ||
186 | |||
187 | key = string_to_hex(value, &keylen); | ||
188 | if (!key) | ||
189 | return 0; | ||
190 | r = pkey_cmac_ctrl(ctx, EVP_PKEY_CTRL_SET_MAC_KEY, keylen, key); | ||
191 | free(key); | ||
192 | return r; | ||
193 | } | ||
194 | |||
195 | return -2; | ||
196 | } | ||
197 | |||
198 | const EVP_PKEY_METHOD cmac_pkey_meth = { | ||
199 | .pkey_id = EVP_PKEY_CMAC, | ||
200 | .flags = EVP_PKEY_FLAG_SIGCTX_CUSTOM, | ||
201 | |||
202 | .init = pkey_cmac_init, | ||
203 | .copy = pkey_cmac_copy, | ||
204 | .cleanup = pkey_cmac_cleanup, | ||
205 | |||
206 | .keygen = pkey_cmac_keygen, | ||
207 | |||
208 | .signctx_init = cmac_signctx_init, | ||
209 | .signctx = cmac_signctx, | ||
210 | |||
211 | .ctrl = pkey_cmac_ctrl, | ||
212 | .ctrl_str = pkey_cmac_ctrl_str | ||
213 | }; | ||
diff --git a/src/lib/libcrypto/cmac/cmac.c b/src/lib/libcrypto/cmac/cmac.c deleted file mode 100644 index d01ae0f3ae..0000000000 --- a/src/lib/libcrypto/cmac/cmac.c +++ /dev/null | |||
@@ -1,281 +0,0 @@ | |||
1 | /* $OpenBSD: cmac.c,v 1.10 2015/09/10 15:56:25 jsing Exp $ */ | ||
2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | ||
3 | * project. | ||
4 | */ | ||
5 | /* ==================================================================== | ||
6 | * Copyright (c) 2010 The OpenSSL Project. All rights reserved. | ||
7 | * | ||
8 | * Redistribution and use in source and binary forms, with or without | ||
9 | * modification, are permitted provided that the following conditions | ||
10 | * are met: | ||
11 | * | ||
12 | * 1. Redistributions of source code must retain the above copyright | ||
13 | * notice, this list of conditions and the following disclaimer. | ||
14 | * | ||
15 | * 2. Redistributions in binary form must reproduce the above copyright | ||
16 | * notice, this list of conditions and the following disclaimer in | ||
17 | * the documentation and/or other materials provided with the | ||
18 | * distribution. | ||
19 | * | ||
20 | * 3. All advertising materials mentioning features or use of this | ||
21 | * software must display the following acknowledgment: | ||
22 | * "This product includes software developed by the OpenSSL Project | ||
23 | * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | ||
24 | * | ||
25 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
26 | * endorse or promote products derived from this software without | ||
27 | * prior written permission. For written permission, please contact | ||
28 | * licensing@OpenSSL.org. | ||
29 | * | ||
30 | * 5. Products derived from this software may not be called "OpenSSL" | ||
31 | * nor may "OpenSSL" appear in their names without prior written | ||
32 | * permission of the OpenSSL Project. | ||
33 | * | ||
34 | * 6. Redistributions of any form whatsoever must retain the following | ||
35 | * acknowledgment: | ||
36 | * "This product includes software developed by the OpenSSL Project | ||
37 | * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | ||
38 | * | ||
39 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
40 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
41 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
42 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
43 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
44 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
45 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
46 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
48 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
49 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
50 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
51 | * ==================================================================== | ||
52 | */ | ||
53 | |||
54 | #include <stdio.h> | ||
55 | #include <stdlib.h> | ||
56 | #include <string.h> | ||
57 | |||
58 | #include <openssl/cmac.h> | ||
59 | |||
60 | struct CMAC_CTX_st { | ||
61 | /* Cipher context to use */ | ||
62 | EVP_CIPHER_CTX cctx; | ||
63 | /* Keys k1 and k2 */ | ||
64 | unsigned char k1[EVP_MAX_BLOCK_LENGTH]; | ||
65 | unsigned char k2[EVP_MAX_BLOCK_LENGTH]; | ||
66 | /* Temporary block */ | ||
67 | unsigned char tbl[EVP_MAX_BLOCK_LENGTH]; | ||
68 | /* Last (possibly partial) block */ | ||
69 | unsigned char last_block[EVP_MAX_BLOCK_LENGTH]; | ||
70 | /* Number of bytes in last block: -1 means context not initialised */ | ||
71 | int nlast_block; | ||
72 | }; | ||
73 | |||
74 | |||
75 | /* Make temporary keys K1 and K2 */ | ||
76 | |||
77 | static void | ||
78 | make_kn(unsigned char *k1, unsigned char *l, int bl) | ||
79 | { | ||
80 | int i; | ||
81 | |||
82 | /* Shift block to left, including carry */ | ||
83 | for (i = 0; i < bl; i++) { | ||
84 | k1[i] = l[i] << 1; | ||
85 | if (i < bl - 1 && l[i + 1] & 0x80) | ||
86 | k1[i] |= 1; | ||
87 | } | ||
88 | /* If MSB set fixup with R */ | ||
89 | if (l[0] & 0x80) | ||
90 | k1[bl - 1] ^= bl == 16 ? 0x87 : 0x1b; | ||
91 | } | ||
92 | |||
93 | CMAC_CTX * | ||
94 | CMAC_CTX_new(void) | ||
95 | { | ||
96 | CMAC_CTX *ctx; | ||
97 | |||
98 | ctx = malloc(sizeof(CMAC_CTX)); | ||
99 | if (!ctx) | ||
100 | return NULL; | ||
101 | EVP_CIPHER_CTX_init(&ctx->cctx); | ||
102 | ctx->nlast_block = -1; | ||
103 | return ctx; | ||
104 | } | ||
105 | |||
106 | void | ||
107 | CMAC_CTX_cleanup(CMAC_CTX *ctx) | ||
108 | { | ||
109 | EVP_CIPHER_CTX_cleanup(&ctx->cctx); | ||
110 | explicit_bzero(ctx->tbl, EVP_MAX_BLOCK_LENGTH); | ||
111 | explicit_bzero(ctx->k1, EVP_MAX_BLOCK_LENGTH); | ||
112 | explicit_bzero(ctx->k2, EVP_MAX_BLOCK_LENGTH); | ||
113 | explicit_bzero(ctx->last_block, EVP_MAX_BLOCK_LENGTH); | ||
114 | ctx->nlast_block = -1; | ||
115 | } | ||
116 | |||
117 | EVP_CIPHER_CTX * | ||
118 | CMAC_CTX_get0_cipher_ctx(CMAC_CTX *ctx) | ||
119 | { | ||
120 | return &ctx->cctx; | ||
121 | } | ||
122 | |||
123 | void | ||
124 | CMAC_CTX_free(CMAC_CTX *ctx) | ||
125 | { | ||
126 | if (ctx == NULL) | ||
127 | return; | ||
128 | |||
129 | CMAC_CTX_cleanup(ctx); | ||
130 | free(ctx); | ||
131 | } | ||
132 | |||
133 | int | ||
134 | CMAC_CTX_copy(CMAC_CTX *out, const CMAC_CTX *in) | ||
135 | { | ||
136 | int bl; | ||
137 | |||
138 | if (in->nlast_block == -1) | ||
139 | return 0; | ||
140 | if (!EVP_CIPHER_CTX_copy(&out->cctx, &in->cctx)) | ||
141 | return 0; | ||
142 | bl = EVP_CIPHER_CTX_block_size(&in->cctx); | ||
143 | memcpy(out->k1, in->k1, bl); | ||
144 | memcpy(out->k2, in->k2, bl); | ||
145 | memcpy(out->tbl, in->tbl, bl); | ||
146 | memcpy(out->last_block, in->last_block, bl); | ||
147 | out->nlast_block = in->nlast_block; | ||
148 | return 1; | ||
149 | } | ||
150 | |||
151 | int | ||
152 | CMAC_Init(CMAC_CTX *ctx, const void *key, size_t keylen, | ||
153 | const EVP_CIPHER *cipher, ENGINE *impl) | ||
154 | { | ||
155 | static unsigned char zero_iv[EVP_MAX_BLOCK_LENGTH]; | ||
156 | |||
157 | /* All zeros means restart */ | ||
158 | if (!key && !cipher && !impl && keylen == 0) { | ||
159 | /* Not initialised */ | ||
160 | if (ctx->nlast_block == -1) | ||
161 | return 0; | ||
162 | if (!EVP_EncryptInit_ex(&ctx->cctx, NULL, NULL, NULL, zero_iv)) | ||
163 | return 0; | ||
164 | memset(ctx->tbl, 0, EVP_CIPHER_CTX_block_size(&ctx->cctx)); | ||
165 | ctx->nlast_block = 0; | ||
166 | return 1; | ||
167 | } | ||
168 | /* Initialiase context */ | ||
169 | if (cipher && !EVP_EncryptInit_ex(&ctx->cctx, cipher, impl, NULL, NULL)) | ||
170 | return 0; | ||
171 | /* Non-NULL key means initialisation complete */ | ||
172 | if (key) { | ||
173 | int bl; | ||
174 | |||
175 | if (!EVP_CIPHER_CTX_cipher(&ctx->cctx)) | ||
176 | return 0; | ||
177 | if (!EVP_CIPHER_CTX_set_key_length(&ctx->cctx, keylen)) | ||
178 | return 0; | ||
179 | if (!EVP_EncryptInit_ex(&ctx->cctx, NULL, NULL, key, zero_iv)) | ||
180 | return 0; | ||
181 | bl = EVP_CIPHER_CTX_block_size(&ctx->cctx); | ||
182 | if (!EVP_Cipher(&ctx->cctx, ctx->tbl, zero_iv, bl)) | ||
183 | return 0; | ||
184 | make_kn(ctx->k1, ctx->tbl, bl); | ||
185 | make_kn(ctx->k2, ctx->k1, bl); | ||
186 | explicit_bzero(ctx->tbl, bl); | ||
187 | /* Reset context again ready for first data block */ | ||
188 | if (!EVP_EncryptInit_ex(&ctx->cctx, NULL, NULL, NULL, zero_iv)) | ||
189 | return 0; | ||
190 | /* Zero tbl so resume works */ | ||
191 | memset(ctx->tbl, 0, bl); | ||
192 | ctx->nlast_block = 0; | ||
193 | } | ||
194 | return 1; | ||
195 | } | ||
196 | |||
197 | int | ||
198 | CMAC_Update(CMAC_CTX *ctx, const void *in, size_t dlen) | ||
199 | { | ||
200 | const unsigned char *data = in; | ||
201 | size_t bl; | ||
202 | |||
203 | if (ctx->nlast_block == -1) | ||
204 | return 0; | ||
205 | if (dlen == 0) | ||
206 | return 1; | ||
207 | bl = EVP_CIPHER_CTX_block_size(&ctx->cctx); | ||
208 | /* Copy into partial block if we need to */ | ||
209 | if (ctx->nlast_block > 0) { | ||
210 | size_t nleft; | ||
211 | |||
212 | nleft = bl - ctx->nlast_block; | ||
213 | if (dlen < nleft) | ||
214 | nleft = dlen; | ||
215 | memcpy(ctx->last_block + ctx->nlast_block, data, nleft); | ||
216 | dlen -= nleft; | ||
217 | ctx->nlast_block += nleft; | ||
218 | /* If no more to process return */ | ||
219 | if (dlen == 0) | ||
220 | return 1; | ||
221 | data += nleft; | ||
222 | /* Else not final block so encrypt it */ | ||
223 | if (!EVP_Cipher(&ctx->cctx, ctx->tbl, ctx->last_block, bl)) | ||
224 | return 0; | ||
225 | } | ||
226 | /* Encrypt all but one of the complete blocks left */ | ||
227 | while (dlen > bl) { | ||
228 | if (!EVP_Cipher(&ctx->cctx, ctx->tbl, data, bl)) | ||
229 | return 0; | ||
230 | dlen -= bl; | ||
231 | data += bl; | ||
232 | } | ||
233 | /* Copy any data left to last block buffer */ | ||
234 | memcpy(ctx->last_block, data, dlen); | ||
235 | ctx->nlast_block = dlen; | ||
236 | return 1; | ||
237 | } | ||
238 | |||
239 | int | ||
240 | CMAC_Final(CMAC_CTX *ctx, unsigned char *out, size_t *poutlen) | ||
241 | { | ||
242 | int i, bl, lb; | ||
243 | |||
244 | if (ctx->nlast_block == -1) | ||
245 | return 0; | ||
246 | bl = EVP_CIPHER_CTX_block_size(&ctx->cctx); | ||
247 | *poutlen = (size_t)bl; | ||
248 | if (!out) | ||
249 | return 1; | ||
250 | lb = ctx->nlast_block; | ||
251 | /* Is last block complete? */ | ||
252 | if (lb == bl) { | ||
253 | for (i = 0; i < bl; i++) | ||
254 | out[i] = ctx->last_block[i] ^ ctx->k1[i]; | ||
255 | } else { | ||
256 | ctx->last_block[lb] = 0x80; | ||
257 | if (bl - lb > 1) | ||
258 | memset(ctx->last_block + lb + 1, 0, bl - lb - 1); | ||
259 | for (i = 0; i < bl; i++) | ||
260 | out[i] = ctx->last_block[i] ^ ctx->k2[i]; | ||
261 | } | ||
262 | if (!EVP_Cipher(&ctx->cctx, out, out, bl)) { | ||
263 | explicit_bzero(out, bl); | ||
264 | return 0; | ||
265 | } | ||
266 | return 1; | ||
267 | } | ||
268 | |||
269 | int | ||
270 | CMAC_resume(CMAC_CTX *ctx) | ||
271 | { | ||
272 | if (ctx->nlast_block == -1) | ||
273 | return 0; | ||
274 | /* The buffer "tbl" containes the last fully encrypted block | ||
275 | * which is the last IV (or all zeroes if no last encrypted block). | ||
276 | * The last block has not been modified since CMAC_final(). | ||
277 | * So reinitialising using the last decrypted block will allow | ||
278 | * CMAC to continue after calling CMAC_Final(). | ||
279 | */ | ||
280 | return EVP_EncryptInit_ex(&ctx->cctx, NULL, NULL, NULL, ctx->tbl); | ||
281 | } | ||
diff --git a/src/lib/libcrypto/cmac/cmac.h b/src/lib/libcrypto/cmac/cmac.h deleted file mode 100644 index cb6d64b02f..0000000000 --- a/src/lib/libcrypto/cmac/cmac.h +++ /dev/null | |||
@@ -1,82 +0,0 @@ | |||
1 | /* $OpenBSD: cmac.h,v 1.3 2014/06/21 13:42:14 jsing Exp $ */ | ||
2 | /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | ||
3 | * project. | ||
4 | */ | ||
5 | /* ==================================================================== | ||
6 | * Copyright (c) 2010 The OpenSSL Project. All rights reserved. | ||
7 | * | ||
8 | * Redistribution and use in source and binary forms, with or without | ||
9 | * modification, are permitted provided that the following conditions | ||
10 | * are met: | ||
11 | * | ||
12 | * 1. Redistributions of source code must retain the above copyright | ||
13 | * notice, this list of conditions and the following disclaimer. | ||
14 | * | ||
15 | * 2. Redistributions in binary form must reproduce the above copyright | ||
16 | * notice, this list of conditions and the following disclaimer in | ||
17 | * the documentation and/or other materials provided with the | ||
18 | * distribution. | ||
19 | * | ||
20 | * 3. All advertising materials mentioning features or use of this | ||
21 | * software must display the following acknowledgment: | ||
22 | * "This product includes software developed by the OpenSSL Project | ||
23 | * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | ||
24 | * | ||
25 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
26 | * endorse or promote products derived from this software without | ||
27 | * prior written permission. For written permission, please contact | ||
28 | * licensing@OpenSSL.org. | ||
29 | * | ||
30 | * 5. Products derived from this software may not be called "OpenSSL" | ||
31 | * nor may "OpenSSL" appear in their names without prior written | ||
32 | * permission of the OpenSSL Project. | ||
33 | * | ||
34 | * 6. Redistributions of any form whatsoever must retain the following | ||
35 | * acknowledgment: | ||
36 | * "This product includes software developed by the OpenSSL Project | ||
37 | * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | ||
38 | * | ||
39 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
40 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
41 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
42 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
43 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
44 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
45 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
46 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
48 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
49 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
50 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
51 | * ==================================================================== | ||
52 | */ | ||
53 | |||
54 | |||
55 | #ifndef HEADER_CMAC_H | ||
56 | #define HEADER_CMAC_H | ||
57 | |||
58 | #ifdef __cplusplus | ||
59 | extern "C" { | ||
60 | #endif | ||
61 | |||
62 | #include <openssl/evp.h> | ||
63 | |||
64 | /* Opaque */ | ||
65 | typedef struct CMAC_CTX_st CMAC_CTX; | ||
66 | |||
67 | CMAC_CTX *CMAC_CTX_new(void); | ||
68 | void CMAC_CTX_cleanup(CMAC_CTX *ctx); | ||
69 | void CMAC_CTX_free(CMAC_CTX *ctx); | ||
70 | EVP_CIPHER_CTX *CMAC_CTX_get0_cipher_ctx(CMAC_CTX *ctx); | ||
71 | int CMAC_CTX_copy(CMAC_CTX *out, const CMAC_CTX *in); | ||
72 | |||
73 | int CMAC_Init(CMAC_CTX *ctx, const void *key, size_t keylen, | ||
74 | const EVP_CIPHER *cipher, ENGINE *impl); | ||
75 | int CMAC_Update(CMAC_CTX *ctx, const void *data, size_t dlen); | ||
76 | int CMAC_Final(CMAC_CTX *ctx, unsigned char *out, size_t *poutlen); | ||
77 | int CMAC_resume(CMAC_CTX *ctx); | ||
78 | |||
79 | #ifdef __cplusplus | ||
80 | } | ||
81 | #endif | ||
82 | #endif | ||