| // SPDX-License-Identifier: BSD-2-Clause |
| /* |
| * Copyright (c) 2014-2019, Linaro Limited |
| */ |
| |
| #include <assert.h> |
| #include <crypto/crypto.h> |
| #include <crypto/crypto_impl.h> |
| #include <stdlib.h> |
| #include <tee_api_types.h> |
| #include <tomcrypt_private.h> |
| #include <util.h> |
| |
| #include "des2_key.h" |
| |
| struct ltc_cbc_ctx { |
| struct crypto_cipher_ctx ctx; |
| int cipher_idx; |
| bool des3; |
| int (*update)(const unsigned char *src, unsigned char *dst, |
| unsigned long len, symmetric_CBC *cbc); |
| symmetric_CBC state; |
| }; |
| |
| static const struct crypto_cipher_ops ltc_cbc_ops; |
| |
| static struct ltc_cbc_ctx *to_cbc_ctx(struct crypto_cipher_ctx *ctx) |
| { |
| assert(ctx && ctx->ops == <c_cbc_ops); |
| |
| return container_of(ctx, struct ltc_cbc_ctx, ctx); |
| } |
| |
| static TEE_Result ltc_cbc_init(struct crypto_cipher_ctx *ctx, |
| TEE_OperationMode mode, const uint8_t *key1, |
| size_t key1_len, const uint8_t *key2 __unused, |
| size_t key2_len __unused, |
| const uint8_t *iv, size_t iv_len) |
| { |
| struct ltc_cbc_ctx *c = to_cbc_ctx(ctx); |
| uint8_t tmp[24] = { 0 }; |
| const uint8_t *k = key1; |
| size_t kl = key1_len; |
| |
| if ((int)iv_len != cipher_descriptor[c->cipher_idx]->block_length) |
| return TEE_ERROR_BAD_PARAMETERS; |
| |
| if (mode == TEE_MODE_ENCRYPT) |
| c->update = cbc_encrypt; |
| else |
| c->update = cbc_decrypt; |
| |
| if (c->des3) |
| get_des2_key(&k, &kl, tmp); |
| |
| if (cbc_start(c->cipher_idx, iv, k, kl, 0, &c->state) == CRYPT_OK) |
| return TEE_SUCCESS; |
| else |
| return TEE_ERROR_BAD_STATE; |
| } |
| |
| static TEE_Result ltc_cbc_update(struct crypto_cipher_ctx *ctx, |
| bool last_block __unused, |
| const uint8_t *data, size_t len, uint8_t *dst) |
| { |
| struct ltc_cbc_ctx *c = to_cbc_ctx(ctx); |
| |
| if (c->update && c->update(data, dst, len, &c->state) == CRYPT_OK) |
| return TEE_SUCCESS; |
| else |
| return TEE_ERROR_BAD_STATE; |
| } |
| |
| static void ltc_cbc_final(struct crypto_cipher_ctx *ctx) |
| { |
| cbc_done(&to_cbc_ctx(ctx)->state); |
| } |
| |
| static void ltc_cbc_free_ctx(struct crypto_cipher_ctx *ctx) |
| { |
| free(to_cbc_ctx(ctx)); |
| } |
| |
| static void ltc_cbc_copy_state(struct crypto_cipher_ctx *dst_ctx, |
| struct crypto_cipher_ctx *src_ctx) |
| { |
| struct ltc_cbc_ctx *src = to_cbc_ctx(src_ctx); |
| struct ltc_cbc_ctx *dst = to_cbc_ctx(dst_ctx); |
| |
| assert(src->cipher_idx == dst->cipher_idx); |
| dst->update = src->update; |
| dst->state = src->state; |
| } |
| |
| static const struct crypto_cipher_ops ltc_cbc_ops = { |
| .init = ltc_cbc_init, |
| .update = ltc_cbc_update, |
| .final = ltc_cbc_final, |
| .free_ctx = ltc_cbc_free_ctx, |
| .copy_state = ltc_cbc_copy_state, |
| }; |
| |
| static TEE_Result ltc_cbc_alloc_ctx(struct crypto_cipher_ctx **ctx_ret, |
| int cipher_idx, bool des3) |
| { |
| struct ltc_cbc_ctx *c = NULL; |
| |
| if (cipher_idx < 0) |
| return TEE_ERROR_NOT_SUPPORTED; |
| |
| c = calloc(1, sizeof(*c)); |
| if (!c) |
| return TEE_ERROR_OUT_OF_MEMORY; |
| |
| c->ctx.ops = <c_cbc_ops; |
| c->cipher_idx = cipher_idx; |
| c->des3 = des3; |
| *ctx_ret = &c->ctx; |
| |
| return TEE_SUCCESS; |
| } |
| |
| #if defined(_CFG_CORE_LTC_AES) |
| TEE_Result crypto_aes_cbc_alloc_ctx(struct crypto_cipher_ctx **ctx) |
| { |
| return ltc_cbc_alloc_ctx(ctx, find_cipher("aes"), false); |
| } |
| #endif |
| |
| #if defined(_CFG_CORE_LTC_DES) |
| TEE_Result crypto_des_cbc_alloc_ctx(struct crypto_cipher_ctx **ctx) |
| { |
| return ltc_cbc_alloc_ctx(ctx, find_cipher("des"), false); |
| } |
| |
| TEE_Result crypto_des3_cbc_alloc_ctx(struct crypto_cipher_ctx **ctx) |
| { |
| return ltc_cbc_alloc_ctx(ctx, find_cipher("3des"), true); |
| } |
| #endif |