| OLD | NEW |
| (Empty) |
| 1 /* This Source Code Form is subject to the terms of the Mozilla Public | |
| 2 * License, v. 2.0. If a copy of the MPL was not distributed with this | |
| 3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ | |
| 4 | |
| 5 #ifdef FREEBL_NO_DEPEND | |
| 6 #include "stubs.h" | |
| 7 #endif | |
| 8 #include "prtypes.h" | |
| 9 #include "blapit.h" | |
| 10 #include "blapii.h" | |
| 11 #include "ctr.h" | |
| 12 #include "pkcs11t.h" | |
| 13 #include "secerr.h" | |
| 14 | |
| 15 SECStatus | |
| 16 CTR_InitContext(CTRContext *ctr, void *context, freeblCipherFunc cipher, | |
| 17 const unsigned char *param, unsigned int blocksize) | |
| 18 { | |
| 19 const CK_AES_CTR_PARAMS *ctrParams = (const CK_AES_CTR_PARAMS *)param; | |
| 20 | |
| 21 if (ctrParams->ulCounterBits == 0 || | |
| 22 ctrParams->ulCounterBits > blocksize * PR_BITS_PER_BYTE) { | |
| 23 PORT_SetError(SEC_ERROR_INVALID_ARGS); | |
| 24 return SECFailure; | |
| 25 } | |
| 26 | |
| 27 /* Invariant: 0 < ctr->bufPtr <= blocksize */ | |
| 28 ctr->bufPtr = blocksize; /* no unused data in the buffer */ | |
| 29 ctr->cipher = cipher; | |
| 30 ctr->context = context; | |
| 31 ctr->counterBits = ctrParams->ulCounterBits; | |
| 32 if (blocksize > sizeof(ctr->counter) || | |
| 33 blocksize > sizeof(ctrParams->cb)) { | |
| 34 PORT_SetError(SEC_ERROR_LIBRARY_FAILURE); | |
| 35 return SECFailure; | |
| 36 } | |
| 37 PORT_Memcpy(ctr->counter, ctrParams->cb, blocksize); | |
| 38 return SECSuccess; | |
| 39 } | |
| 40 | |
| 41 CTRContext * | |
| 42 CTR_CreateContext(void *context, freeblCipherFunc cipher, | |
| 43 const unsigned char *param, unsigned int blocksize) | |
| 44 { | |
| 45 CTRContext *ctr; | |
| 46 SECStatus rv; | |
| 47 | |
| 48 /* first fill in the Counter context */ | |
| 49 ctr = PORT_ZNew(CTRContext); | |
| 50 if (ctr == NULL) { | |
| 51 return NULL; | |
| 52 } | |
| 53 rv = CTR_InitContext(ctr, context, cipher, param, blocksize); | |
| 54 if (rv != SECSuccess) { | |
| 55 CTR_DestroyContext(ctr, PR_TRUE); | |
| 56 ctr = NULL; | |
| 57 } | |
| 58 return ctr; | |
| 59 } | |
| 60 | |
| 61 void | |
| 62 CTR_DestroyContext(CTRContext *ctr, PRBool freeit) | |
| 63 { | |
| 64 PORT_Memset(ctr, 0, sizeof(CTRContext)); | |
| 65 if (freeit) { | |
| 66 PORT_Free(ctr); | |
| 67 } | |
| 68 } | |
| 69 | |
| 70 /* | |
| 71 * Used by counter mode. Increment the counter block. Not all bits in the | |
| 72 * counter block are part of the counter, counterBits tells how many bits | |
| 73 * are part of the counter. The counter block is blocksize long. It's a | |
| 74 * big endian value. | |
| 75 * | |
| 76 * XXX Does not handle counter rollover. | |
| 77 */ | |
| 78 static void | |
| 79 ctr_GetNextCtr(unsigned char *counter, unsigned int counterBits, | |
| 80 unsigned int blocksize) | |
| 81 { | |
| 82 unsigned char *counterPtr = counter + blocksize - 1; | |
| 83 unsigned char mask, count; | |
| 84 | |
| 85 PORT_Assert(counterBits <= blocksize*PR_BITS_PER_BYTE); | |
| 86 while (counterBits >= PR_BITS_PER_BYTE) { | |
| 87 if (++(*(counterPtr--))) { | |
| 88 return; | |
| 89 } | |
| 90 counterBits -= PR_BITS_PER_BYTE; | |
| 91 } | |
| 92 if (counterBits == 0) { | |
| 93 return; | |
| 94 } | |
| 95 /* increment the final partial byte */ | |
| 96 mask = (1 << counterBits)-1; | |
| 97 count = ++(*counterPtr) & mask; | |
| 98 *counterPtr = ((*counterPtr) & ~mask) | count; | |
| 99 return; | |
| 100 } | |
| 101 | |
| 102 static void | |
| 103 ctr_xor(unsigned char *target, const unsigned char *x, | |
| 104 const unsigned char *y, unsigned int count) | |
| 105 { | |
| 106 unsigned int i; | |
| 107 for (i=0; i < count; i++) { | |
| 108 *target++ = *x++ ^ *y++; | |
| 109 } | |
| 110 } | |
| 111 | |
| 112 SECStatus | |
| 113 CTR_Update(CTRContext *ctr, unsigned char *outbuf, | |
| 114 unsigned int *outlen, unsigned int maxout, | |
| 115 const unsigned char *inbuf, unsigned int inlen, | |
| 116 unsigned int blocksize) | |
| 117 { | |
| 118 unsigned int tmp; | |
| 119 SECStatus rv; | |
| 120 | |
| 121 if (maxout < inlen) { | |
| 122 *outlen = inlen; | |
| 123 PORT_SetError(SEC_ERROR_OUTPUT_LEN); | |
| 124 return SECFailure; | |
| 125 } | |
| 126 *outlen = 0; | |
| 127 if (ctr->bufPtr != blocksize) { | |
| 128 unsigned int needed = PR_MIN(blocksize-ctr->bufPtr, inlen); | |
| 129 ctr_xor(outbuf, inbuf, ctr->buffer+ctr->bufPtr, needed); | |
| 130 ctr->bufPtr += needed; | |
| 131 outbuf += needed; | |
| 132 inbuf += needed; | |
| 133 *outlen += needed; | |
| 134 inlen -= needed; | |
| 135 if (inlen == 0) { | |
| 136 return SECSuccess; | |
| 137 } | |
| 138 PORT_Assert(ctr->bufPtr == blocksize); | |
| 139 } | |
| 140 | |
| 141 while (inlen >= blocksize) { | |
| 142 rv = (*ctr->cipher)(ctr->context, ctr->buffer, &tmp, blocksize, | |
| 143 ctr->counter, blocksize, blocksize); | |
| 144 ctr_GetNextCtr(ctr->counter, ctr->counterBits, blocksize); | |
| 145 if (rv != SECSuccess) { | |
| 146 return SECFailure; | |
| 147 } | |
| 148 ctr_xor(outbuf, inbuf, ctr->buffer, blocksize); | |
| 149 outbuf += blocksize; | |
| 150 inbuf += blocksize; | |
| 151 *outlen += blocksize; | |
| 152 inlen -= blocksize; | |
| 153 } | |
| 154 if (inlen == 0) { | |
| 155 return SECSuccess; | |
| 156 } | |
| 157 rv = (*ctr->cipher)(ctr->context, ctr->buffer, &tmp, blocksize, | |
| 158 ctr->counter, blocksize, blocksize); | |
| 159 ctr_GetNextCtr(ctr->counter, ctr->counterBits, blocksize); | |
| 160 if (rv != SECSuccess) { | |
| 161 return SECFailure; | |
| 162 } | |
| 163 ctr_xor(outbuf, inbuf, ctr->buffer, inlen); | |
| 164 ctr->bufPtr = inlen; | |
| 165 *outlen += inlen; | |
| 166 return SECSuccess; | |
| 167 } | |
| OLD | NEW |