1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
|
#ifndef AWS_CAL_SYMMETRIC_CIPHER_PRIV_H
#define AWS_CAL_SYMMETRIC_CIPHER_PRIV_H
/**
* Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
* SPDX-License-Identifier: Apache-2.0.
*/
#include <aws/cal/symmetric_cipher.h>
struct aws_symmetric_cipher;
struct aws_symmetric_cipher_vtable {
const char *alg_name;
const char *provider;
void (*destroy)(struct aws_symmetric_cipher *cipher);
/* reset the cipher to being able to start another encrypt or decrypt operation.
The original IV, Key, Tag etc... will be restored to the current cipher. */
int (*reset)(struct aws_symmetric_cipher *cipher);
int (*encrypt)(struct aws_symmetric_cipher *cipher, struct aws_byte_cursor to_encrypt, struct aws_byte_buf *out);
int (*decrypt)(struct aws_symmetric_cipher *cipher, struct aws_byte_cursor to_decrypt, struct aws_byte_buf *out);
int (*finalize_encryption)(struct aws_symmetric_cipher *cipher, struct aws_byte_buf *out);
int (*finalize_decryption)(struct aws_symmetric_cipher *cipher, struct aws_byte_buf *out);
};
struct aws_symmetric_cipher {
struct aws_allocator *allocator;
struct aws_symmetric_cipher_vtable *vtable;
struct aws_byte_buf iv;
struct aws_byte_buf key;
struct aws_byte_buf aad;
struct aws_byte_buf tag;
size_t block_size;
size_t key_length_bits;
bool good;
void *impl;
};
AWS_EXTERN_C_BEGIN
/**
* Generates a secure random initialization vector of length len_bytes. If is_counter_mode is set, the final 4 bytes
* will be reserved as a counter and initialized to 1 in big-endian byte-order.
*/
AWS_CAL_API void aws_symmetric_cipher_generate_initialization_vector(
size_t len_bytes,
bool is_counter_mode,
struct aws_byte_buf *out);
/**
* Generates a secure random symmetric key of length len_bytes.
*/
AWS_CAL_API void aws_symmetric_cipher_generate_key(size_t len_bytes, struct aws_byte_buf *out);
AWS_EXTERN_C_END
/* Don't let this one get exported as it should never be used outside of this library (including tests). */
int aws_symmetric_cipher_try_ensure_sufficient_buffer_space(struct aws_byte_buf *buf, size_t size);
#endif /* AWS_CAL_SYMMETRIC_CIPHER_PRIV_H */
|
