Page MenuHomeFreeBSD
Differential D19090 Diff 53949 head/sys/opencrypto/xform_aes_icm.c

Changeset View

Standalone View

View Options

head/sys/opencrypto/xform_aes_icm.c

Show First 20 Lines • Show All 51 Lines • ▼ Show 20 Lines
#include <opencrypto/xform_enc.h> #include <opencrypto/xform_enc.h>
static int aes_icm_setkey(u_int8_t **, u_int8_t *, int); static int aes_icm_setkey(u_int8_t **, u_int8_t *, int);
static void aes_icm_crypt(caddr_t, u_int8_t *); static void aes_icm_crypt(caddr_t, u_int8_t *);
static void aes_icm_zerokey(u_int8_t **); static void aes_icm_zerokey(u_int8_t **);
static void aes_icm_reinit(caddr_t, u_int8_t *); static void aes_icm_reinit(caddr_t, u_int8_t *);
static void aes_gcm_reinit(caddr_t, u_int8_t *); static void aes_gcm_reinit(caddr_t, u_int8_t *);
static void aes_ccm_reinit(caddr_t, u_int8_t *);
/* Encryption instances */ /* Encryption instances */
struct enc_xform enc_xform_aes_icm = { struct enc_xform enc_xform_aes_icm = {
CRYPTO_AES_ICM, "AES-ICM", CRYPTO_AES_ICM, "AES-ICM",
AES_BLOCK_LEN, AES_BLOCK_LEN, AES_MIN_KEY, AES_MAX_KEY, AES_BLOCK_LEN, AES_BLOCK_LEN, AES_MIN_KEY, AES_MAX_KEY,
aes_icm_crypt, aes_icm_crypt,
aes_icm_crypt, aes_icm_crypt,
aes_icm_setkey, aes_icm_setkey,
aes_icm_zerokey, aes_icm_zerokey,
aes_icm_reinit, aes_icm_reinit,
}; };
struct enc_xform enc_xform_aes_nist_gcm = { struct enc_xform enc_xform_aes_nist_gcm = {
CRYPTO_AES_NIST_GCM_16, "AES-GCM", CRYPTO_AES_NIST_GCM_16, "AES-GCM",
AES_ICM_BLOCK_LEN, AES_GCM_IV_LEN, AES_MIN_KEY, AES_MAX_KEY, AES_ICM_BLOCK_LEN, AES_GCM_IV_LEN, AES_MIN_KEY, AES_MAX_KEY,
aes_icm_crypt, aes_icm_crypt,
aes_icm_crypt, aes_icm_crypt,
aes_icm_setkey, aes_icm_setkey,
aes_icm_zerokey, aes_icm_zerokey,
aes_gcm_reinit, aes_gcm_reinit,
}; };
struct enc_xform enc_xform_ccm = {
.type = CRYPTO_AES_CCM_16,
.name = "AES-CCM",
.blocksize = AES_ICM_BLOCK_LEN, .ivsize = AES_CCM_IV_LEN,
.minkey = AES_MIN_KEY, .maxkey = AES_MAX_KEY,
.encrypt = aes_icm_crypt,
.decrypt = aes_icm_crypt,
.setkey = aes_icm_setkey,
.zerokey = aes_icm_zerokey,
.reinit = aes_ccm_reinit,
};
/* /*
* Encryption wrapper routines. * Encryption wrapper routines.
*/ */
static void static void
aes_icm_reinit(caddr_t key, u_int8_t *iv) aes_icm_reinit(caddr_t key, u_int8_t *iv)
{ {
struct aes_icm_ctx *ctx; struct aes_icm_ctx *ctx;
ctx = (struct aes_icm_ctx *)key; ctx = (struct aes_icm_ctx *)key;
bcopy(iv, ctx->ac_block, AESICM_BLOCKSIZE); bcopy(iv, ctx->ac_block, AESICM_BLOCKSIZE);
} }
static void static void
aes_gcm_reinit(caddr_t key, u_int8_t *iv) aes_gcm_reinit(caddr_t key, u_int8_t *iv)
{ {
struct aes_icm_ctx *ctx; struct aes_icm_ctx *ctx;
aes_icm_reinit(key, iv); aes_icm_reinit(key, iv);
ctx = (struct aes_icm_ctx *)key; ctx = (struct aes_icm_ctx *)key;
/* GCM starts with 2 as counter 1 is used for final xor of tag. */ /* GCM starts with 2 as counter 1 is used for final xor of tag. */
bzero(&ctx->ac_block[AESICM_BLOCKSIZE - 4], 4); bzero(&ctx->ac_block[AESICM_BLOCKSIZE - 4], 4);
ctx->ac_block[AESICM_BLOCKSIZE - 1] = 2; ctx->ac_block[AESICM_BLOCKSIZE - 1] = 2;
}
static void
aes_ccm_reinit(caddr_t key, u_int8_t *iv)
{
struct aes_icm_ctx *ctx;
ctx = (struct aes_icm_ctx*)key;
/* CCM has flags, then the IV, then the counter, which starts at 1 */
bzero(ctx->ac_block, sizeof(ctx->ac_block));
/* 3 bytes for length field; this gives a nonce of 12 bytes */
ctx->ac_block[0] = (15 - AES_CCM_IV_LEN) - 1;
bcopy(iv, ctx->ac_block+1, AES_CCM_IV_LEN);
ctx->ac_block[AESICM_BLOCKSIZE - 1] = 1;
} }
static void static void
aes_icm_crypt(caddr_t key, u_int8_t *data) aes_icm_crypt(caddr_t key, u_int8_t *data)
{ {
struct aes_icm_ctx *ctx; struct aes_icm_ctx *ctx;
u_int8_t keystream[AESICM_BLOCKSIZE]; u_int8_t keystream[AESICM_BLOCKSIZE];
int i; int i;
Show All 40 Lines