Implement the AES GCM cipher suites for TLS.

net/third_party/nss/ssl/sslimpl.h

 /*
  * This file is PRIVATE to SSL and should be the first thing included by
  * any SSL implementation file.
  *
  * This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 #ifndef __sslimpl_h_
 #define __sslimpl_h_
@@ skipping 46 matching lines @@
 #define calg_null       ssl_calg_null
 #define calg_rc4        ssl_calg_rc4
 #define calg_rc2        ssl_calg_rc2
 #define calg_des        ssl_calg_des
 #define calg_3des       ssl_calg_3des
 #define calg_idea       ssl_calg_idea
 #define calg_fortezza   ssl_calg_fortezza /* deprecated, must preserve */
 #define calg_aes        ssl_calg_aes
 #define calg_camellia   ssl_calg_camellia
 #define calg_seed       ssl_calg_seed
+#define calg_aes_128_gcm ssl_calg_aes_128_gcm
 
 #define mac_null        ssl_mac_null
 #define mac_md5         ssl_mac_md5
 #define mac_sha         ssl_mac_sha
 #define hmac_md5        ssl_hmac_md5
 #define hmac_sha        ssl_hmac_sha
 #define hmac_sha256     ssl_hmac_sha256
 
 #define SET_ERROR_CODE          /* reminder */
 #define SEND_ALERT              /* reminder */
@@ skipping 206 matching lines @@
     unsigned int    isPresent    :  1;
 #else
     ssl3CipherSuite cipher_suite;
     PRUint8         policy;
     unsigned char   enabled   : 1;
     unsigned char   isPresent : 1;
 #endif
 } ssl3CipherSuiteCfg;
 
 #ifdef NSS_ENABLE_ECC
-#define ssl_V3_SUITES_IMPLEMENTED 57
+#define ssl_V3_SUITES_IMPLEMENTED 60
 #else
-#define ssl_V3_SUITES_IMPLEMENTED 35
+#define ssl_V3_SUITES_IMPLEMENTED 36
 #endif /* NSS_ENABLE_ECC */
 
 #define MAX_DTLS_SRTP_CIPHER_SUITES 4
 
 typedef struct sslOptionsStr {
     /* If SSL_SetNextProtoNego has been called, then this contains the
      * list of supported protocols. */
     SECItem nextProtoNego;
 
     unsigned int useSecurity            : 1;  /*  1 */
@@ skipping 127 matching lines @@
     unsigned int  dtlsPacketOffset;
 };
 
 /* sslGather.state */
 #define GS_INIT         0
 #define GS_HEADER       1
 #define GS_MAC          2
 #define GS_DATA         3
 #define GS_PAD          4
 
-typedef SECStatus (*SSLCipher)(void *               context, 
-                               unsigned char *      out,
-                               int *                outlen, 
-                               int                  maxout, 
-                               const unsigned char *in,
-                               int                  inlen);
-typedef SECStatus (*SSLCompressor)(void *               context,
-                                   unsigned char *      out,
-                                   int *                outlen,
-                                   int                  maxout,
-                                   const unsigned char *in,
-                                   int                  inlen);
-typedef SECStatus (*SSLDestroy)(void *context, PRBool freeit);
-
 #if defined(NSS_PLATFORM_CLIENT_AUTH) && defined(XP_WIN32)
 typedef PCERT_KEY_CONTEXT PlatformKey;
 #elif defined(NSS_PLATFORM_CLIENT_AUTH) && defined(XP_MACOSX)
 typedef SecKeyRef PlatformKey;
 #else
 typedef void *PlatformKey;
 #endif
 
 
 
@@ skipping 11 matching lines @@
     cipher_rc2_40,
     cipher_des, 
     cipher_3des, 
     cipher_des40,
     cipher_idea, 
     cipher_aes_128,
     cipher_aes_256,
     cipher_camellia_128,
     cipher_camellia_256,
     cipher_seed,
+    cipher_aes_128_gcm,
     cipher_missing              /* reserved for no such supported cipher */
     /* This enum must match ssl3_cipherName[] in ssl3con.c.  */
 } SSL3BulkCipher;
 
-typedef enum { type_stream, type_block } CipherType;
+typedef enum { type_stream, type_block, type_aead } CipherType;
 
 #define MAX_IV_LENGTH 24
 
 /*
  * Do not depend upon 64 bit arithmetic in the underlying machine. 
  */
 typedef struct {
     PRUint32         high;
     PRUint32         low;
 } SSL3SequenceNumber;
@@ skipping 21 matching lines @@
     PK11SymKey  *write_key;
     PK11SymKey  *write_mac_key;
     PK11Context *write_mac_context;
     SECItem     write_key_item;
     SECItem     write_iv_item;
     SECItem     write_mac_key_item;
     SSL3Opaque  write_iv[MAX_IV_LENGTH];
     PRUint64    cipher_context[MAX_CIPHER_CONTEXT_LLONGS];
 } ssl3KeyMaterial;
 
+typedef SECStatus (*SSLCipher)(void *               context, 
+                               unsigned char *      out,
+                               int *                outlen, 
+                               int                  maxout, 
+                               const unsigned char *in,
+                               int                  inlen);
+typedef SECStatus (*SSLAEADCipher)(
+                               ssl3KeyMaterial *    keys,
+                               PRBool               doDecrypt,
+                               unsigned char *      out,
+                               int *                outlen,
+                               int                  maxout,
+                               const unsigned char *in,
+                               int                  inlen,
+                               const unsigned char *explicit_nonce,
+                               int                  explicit_nonce_len,
+                               SSL3ContentType      type,
+                               SSL3ProtocolVersion  version,
+                               SSL3SequenceNumber   seqnum);
+typedef SECStatus (*SSLCompressor)(void *               context,
+                                   unsigned char *      out,
+                                   int *                outlen,
+                                   int                  maxout,
+                                   const unsigned char *in,
+                                   int                  inlen);
+typedef SECStatus (*SSLDestroy)(void *context, PRBool freeit);
+
 /* The DTLS anti-replay window. Defined here because we need it in
  * the cipher spec. Note that this is a ring buffer but left and
  * right represent the true window, with modular arithmetic used to
  * map them onto the buffer.
  */
 #define DTLS_RECVD_RECORDS_WINDOW 1024 /* Packets; approximate
                                         * Must be divisible by 8
                                         */
 typedef struct DTLSRecvdRecordsStr {
     unsigned char data[DTLS_RECVD_RECORDS_WINDOW/8];
     PRUint64 left;
     PRUint64 right;
 } DTLSRecvdRecords;
 
 /*
 ** These are the "specs" in the "ssl3" struct.
 ** Access to the pointers to these specs, and all the specs' contents
 ** (direct and indirect) is protected by the reader/writer lock ss->specLock.
 */
 typedef struct {
     const ssl3BulkCipherDef *cipher_def;
     const ssl3MACDef * mac_def;
     SSLCompressionMethod compression_method;
     int                mac_size;
     SSLCipher          encode;
     SSLCipher          decode;
+    SSLAEADCipher      aead;
     SSLDestroy         destroy;
     void *             encodeContext;
     void *             decodeContext;
     SSLCompressor      compressor;    /* Don't name these fields compress */
     SSLCompressor      decompressor;  /* and uncompress because zconf.h   */
                                       /* may define them as macros.       */ 
     SSLDestroy         destroyCompressContext;
     void *             compressContext;
     SSLDestroy         destroyDecompressContext;
     void *             decompressContext;
@@ skipping 142 matching lines @@
 ** There are tables of these, all const.
 */
 struct ssl3BulkCipherDefStr {
     SSL3BulkCipher  cipher;
     SSLCipherAlgorithm calg;
     int             key_size;
     int             secret_key_size;
     CipherType      type;
     int             iv_size;
     int             block_size;
-    SSL3KeyGenMode  keygen_mode;
+    int             tag_size;  /* authentication tag size for AEAD ciphers. */
+    int             explicit_nonce_size;               /* for AEAD ciphers. */
 };
 
 /*
 ** There are tables of these, all const.
 */
 struct ssl3MACDefStr {
     SSL3MACAlgorithm mac;
     CK_MECHANISM_TYPE mmech;
     int              pad_size;
     int              mac_size;
@@ skipping 1186 matching lines @@
 #if defined(XP_UNIX) || defined(XP_OS2) || defined(XP_BEOS)
 #define SSL_GETPID getpid
 #elif defined(WIN32)
 extern int __cdecl _getpid(void);
 #define SSL_GETPID _getpid
 #else
 #define SSL_GETPID() 0
 #endif
 
 #endif /* __sslimpl_h_ */