1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
|
// SPDX-License-Identifier: BSD-2-Clause
/*
* Copyright (C) 2019, Linaro Limited
*/
#include <assert.h>
#include <compiler.h>
#include <crypto/crypto.h>
#include <crypto/crypto_impl.h>
#include <mbedtls/des.h>
#include <stdlib.h>
#include <string.h>
#include <tee_api_types.h>
#include <utee_defines.h>
#include <util.h>
struct mbed_des3_cbc_ctx {
struct crypto_cipher_ctx ctx;
int mbed_mode;
mbedtls_des3_context des3_ctx;
unsigned char iv[TEE_DES_BLOCK_SIZE];
};
static const struct crypto_cipher_ops mbed_des3_cbc_ops;
static struct mbed_des3_cbc_ctx *to_des3_cbc_ctx(struct crypto_cipher_ctx *ctx)
{
assert(ctx && ctx->ops == &mbed_des3_cbc_ops);
return container_of(ctx, struct mbed_des3_cbc_ctx, ctx);
}
static TEE_Result mbed_des3_cbc_init(struct crypto_cipher_ctx *ctx,
TEE_OperationMode mode,
const uint8_t *key1, size_t key1_len,
const uint8_t *key2 __unused,
size_t key2_len __unused,
const uint8_t *iv __unused,
size_t iv_len __unused)
{
struct mbed_des3_cbc_ctx *c = to_des3_cbc_ctx(ctx);
int mbed_res = 0;
if (key1_len != MBEDTLS_DES_KEY_SIZE * 2 &&
key1_len != MBEDTLS_DES_KEY_SIZE * 3)
return TEE_ERROR_BAD_PARAMETERS;
if (iv_len != sizeof(c->iv))
return TEE_ERROR_BAD_PARAMETERS;
memcpy(c->iv, iv, sizeof(c->iv));
mbedtls_des3_init(&c->des3_ctx);
if (mode == TEE_MODE_ENCRYPT) {
c->mbed_mode = MBEDTLS_DES_ENCRYPT;
if (key1_len == MBEDTLS_DES_KEY_SIZE * 3)
mbed_res = mbedtls_des3_set3key_enc(&c->des3_ctx, key1);
else
mbed_res = mbedtls_des3_set2key_enc(&c->des3_ctx, key1);
} else {
c->mbed_mode = MBEDTLS_DES_DECRYPT;
if (key1_len == MBEDTLS_DES_KEY_SIZE * 3)
mbed_res = mbedtls_des3_set3key_dec(&c->des3_ctx, key1);
else
mbed_res = mbedtls_des3_set2key_dec(&c->des3_ctx, key1);
}
if (mbed_res)
return TEE_ERROR_BAD_STATE;
return TEE_SUCCESS;
}
static TEE_Result mbed_des3_cbc_update(struct crypto_cipher_ctx *ctx,
bool last_block __unused,
const uint8_t *data, size_t len,
uint8_t *dst)
{
struct mbed_des3_cbc_ctx *c = to_des3_cbc_ctx(ctx);
if (mbedtls_des3_crypt_cbc(&c->des3_ctx, c->mbed_mode, len, c->iv,
data, dst))
return TEE_ERROR_BAD_STATE;
return TEE_SUCCESS;
}
static void mbed_des3_cbc_final(struct crypto_cipher_ctx *ctx)
{
mbedtls_des3_free(&to_des3_cbc_ctx(ctx)->des3_ctx);
}
static void mbed_des3_cbc_free_ctx(struct crypto_cipher_ctx *ctx)
{
free(to_des3_cbc_ctx(ctx));
}
static void mbed_des3_cbc_copy_state(struct crypto_cipher_ctx *dst_ctx,
struct crypto_cipher_ctx *src_ctx)
{
struct mbed_des3_cbc_ctx *src = to_des3_cbc_ctx(src_ctx);
struct mbed_des3_cbc_ctx *dst = to_des3_cbc_ctx(dst_ctx);
memcpy(dst->iv, src->iv, sizeof(dst->iv));
dst->mbed_mode = src->mbed_mode;
dst->des3_ctx = src->des3_ctx;
}
static const struct crypto_cipher_ops mbed_des3_cbc_ops = {
.init = mbed_des3_cbc_init,
.update = mbed_des3_cbc_update,
.final = mbed_des3_cbc_final,
.free_ctx = mbed_des3_cbc_free_ctx,
.copy_state = mbed_des3_cbc_copy_state,
};
TEE_Result crypto_des3_cbc_alloc_ctx(struct crypto_cipher_ctx **ctx_ret)
{
struct mbed_des3_cbc_ctx *c = NULL;
c = calloc(1, sizeof(*c));
if (!c)
return TEE_ERROR_OUT_OF_MEMORY;
c->ctx.ops = &mbed_des3_cbc_ops;
*ctx_ret = &c->ctx;
return TEE_SUCCESS;
}
|
