| // SPDX-License-Identifier: BSD-2-Clause |
| /* |
| * Copyright (C) 2018, ARM Limited |
| * Copyright (C) 2019, Linaro Limited |
| */ |
| |
| #include <assert.h> |
| #include <compiler.h> |
| #include <crypto/crypto.h> |
| #include <crypto/crypto_impl.h> |
| #include <kernel/panic.h> |
| #include <mbedtls/md.h> |
| #include <mbedtls/sha256.h> |
| #include <stdlib.h> |
| #include <string_ext.h> |
| #include <string.h> |
| #include <tee_api_types.h> |
| #include <utee_defines.h> |
| #include <util.h> |
| |
| struct mbed_hash_ctx { |
| struct crypto_hash_ctx hash_ctx; |
| mbedtls_md_context_t md_ctx; |
| }; |
| |
| static const struct crypto_hash_ops mbed_hash_ops; |
| |
| static struct mbed_hash_ctx *to_hash_ctx(struct crypto_hash_ctx *ctx) |
| { |
| assert(ctx && ctx->ops == &mbed_hash_ops); |
| |
| return container_of(ctx, struct mbed_hash_ctx, hash_ctx); |
| } |
| |
| static TEE_Result mbed_hash_init(struct crypto_hash_ctx *ctx) |
| { |
| if (mbedtls_md_starts(&to_hash_ctx(ctx)->md_ctx)) |
| return TEE_ERROR_BAD_STATE; |
| |
| return TEE_SUCCESS; |
| } |
| |
| static TEE_Result mbed_hash_update(struct crypto_hash_ctx *ctx, |
| const uint8_t *data, size_t len) |
| { |
| if (mbedtls_md_update(&to_hash_ctx(ctx)->md_ctx, data, len)) |
| return TEE_ERROR_BAD_STATE; |
| |
| return TEE_SUCCESS; |
| } |
| |
| static TEE_Result mbed_hash_final(struct crypto_hash_ctx *ctx, uint8_t *digest, |
| size_t len) |
| { |
| struct mbed_hash_ctx *hc = to_hash_ctx(ctx); |
| size_t hash_size = mbedtls_md_get_size(hc->md_ctx.md_info); |
| uint8_t block_digest[TEE_MAX_HASH_SIZE] = { 0 }; |
| uint8_t *tmp_digest = NULL; |
| |
| if (len == 0) |
| return TEE_ERROR_BAD_PARAMETERS; |
| |
| if (hash_size > len) { |
| if (hash_size > sizeof(block_digest)) |
| return TEE_ERROR_BAD_STATE; |
| tmp_digest = block_digest; /* use a tempory buffer */ |
| } else { |
| tmp_digest = digest; |
| } |
| |
| if (mbedtls_md_finish(&hc->md_ctx, tmp_digest)) |
| return TEE_ERROR_BAD_STATE; |
| |
| if (hash_size > len) |
| memcpy(digest, tmp_digest, len); |
| |
| return TEE_SUCCESS; |
| } |
| |
| static void mbed_hash_free_ctx(struct crypto_hash_ctx *ctx) |
| { |
| struct mbed_hash_ctx *hc = to_hash_ctx(ctx); |
| |
| mbedtls_md_free(&hc->md_ctx); |
| free(hc); |
| } |
| |
| static void mbed_hash_copy_state(struct crypto_hash_ctx *dst_ctx, |
| struct crypto_hash_ctx *src_ctx) |
| { |
| struct mbed_hash_ctx *src = to_hash_ctx(src_ctx); |
| struct mbed_hash_ctx *dst = to_hash_ctx(dst_ctx); |
| |
| if (mbedtls_md_clone(&dst->md_ctx, &src->md_ctx)) |
| panic(); |
| } |
| |
| static const struct crypto_hash_ops mbed_hash_ops = { |
| .init = mbed_hash_init, |
| .update = mbed_hash_update, |
| .final = mbed_hash_final, |
| .free_ctx = mbed_hash_free_ctx, |
| .copy_state = mbed_hash_copy_state, |
| }; |
| |
| static TEE_Result mbed_hash_alloc_ctx(struct crypto_hash_ctx **ctx_ret, |
| mbedtls_md_type_t md_type) |
| { |
| int mbed_res = 0; |
| struct mbed_hash_ctx *hc = NULL; |
| const mbedtls_md_info_t *md_info = mbedtls_md_info_from_type(md_type); |
| |
| if (!md_info) |
| return TEE_ERROR_NOT_SUPPORTED; |
| |
| hc = calloc(1, sizeof(*hc)); |
| if (!hc) |
| return TEE_ERROR_OUT_OF_MEMORY; |
| |
| hc->hash_ctx.ops = &mbed_hash_ops; |
| mbed_res = mbedtls_md_setup(&hc->md_ctx, md_info, 0); |
| if (mbed_res) { |
| free(hc); |
| if (mbed_res == MBEDTLS_ERR_MD_ALLOC_FAILED) |
| return TEE_ERROR_OUT_OF_MEMORY; |
| return TEE_ERROR_NOT_SUPPORTED; |
| } |
| |
| *ctx_ret = &hc->hash_ctx; |
| |
| return TEE_SUCCESS; |
| } |
| |
| #if defined(CFG_CRYPTO_MD5) |
| TEE_Result crypto_md5_alloc_ctx(struct crypto_hash_ctx **ctx) |
| { |
| return mbed_hash_alloc_ctx(ctx, MBEDTLS_MD_MD5); |
| } |
| #endif |
| |
| #if defined(CFG_CRYPTO_SHA1) |
| TEE_Result crypto_sha1_alloc_ctx(struct crypto_hash_ctx **ctx) |
| { |
| return mbed_hash_alloc_ctx(ctx, MBEDTLS_MD_SHA1); |
| } |
| #endif |
| |
| #if defined(CFG_CRYPTO_SHA224) |
| TEE_Result crypto_sha224_alloc_ctx(struct crypto_hash_ctx **ctx) |
| { |
| return mbed_hash_alloc_ctx(ctx, MBEDTLS_MD_SHA224); |
| } |
| #endif |
| |
| #if defined(CFG_CRYPTO_SHA256) |
| TEE_Result crypto_sha256_alloc_ctx(struct crypto_hash_ctx **ctx) |
| { |
| return mbed_hash_alloc_ctx(ctx, MBEDTLS_MD_SHA256); |
| } |
| #endif |
| |
| #if defined(CFG_CRYPTO_SHA384) |
| TEE_Result crypto_sha384_alloc_ctx(struct crypto_hash_ctx **ctx) |
| { |
| return mbed_hash_alloc_ctx(ctx, MBEDTLS_MD_SHA384); |
| } |
| #endif |
| |
| #if defined(CFG_CRYPTO_SHA512) |
| TEE_Result crypto_sha512_alloc_ctx(struct crypto_hash_ctx **ctx) |
| { |
| return mbed_hash_alloc_ctx(ctx, MBEDTLS_MD_SHA512); |
| } |
| #endif |
| |
| #if defined(CFG_CRYPTO_SHA256) |
| TEE_Result hash_sha256_check(const uint8_t *hash, const uint8_t *data, |
| size_t data_size) |
| { |
| mbedtls_sha256_context hs; |
| uint8_t digest[TEE_SHA256_HASH_SIZE] = { 0 }; |
| |
| memset(&hs, 0, sizeof(hs)); |
| mbedtls_sha256_init(&hs); |
| mbedtls_sha256_starts(&hs, 0); |
| mbedtls_sha256_update(&hs, data, data_size); |
| mbedtls_sha256_finish(&hs, digest); |
| mbedtls_sha256_free(&hs); |
| |
| if (consttime_memcmp(digest, hash, sizeof(digest))) |
| return TEE_ERROR_SECURITY; |
| return TEE_SUCCESS; |
| } |
| #endif |