507281e55e
This commit essentially has three parts: * Add the AES-CCM encryption hooks. This is in and of itself fairly small, as there is only a small difference between CCM and the other ICM-based algorithms. * Hook the code into the OpenCrypto framework. This is the bulk of the changes, as the algorithm type has to be checked for, and the differences between it and GCM dealt with. * Update the cryptocheck tool to be aware of it. This is invaluable for confirming that the code works. This is a software-only implementation, meaning that the performance is very low. Sponsored by: iXsystems Inc. Differential Revision: https://reviews.freebsd.org/D19090
103 lines
3.3 KiB
C
103 lines
3.3 KiB
C
/* $FreeBSD$ */
|
|
/* $OpenBSD: xform.h,v 1.8 2001/08/28 12:20:43 ben Exp $ */
|
|
|
|
/*-
|
|
* The author of this code is Angelos D. Keromytis (angelos@cis.upenn.edu)
|
|
*
|
|
* This code was written by Angelos D. Keromytis in Athens, Greece, in
|
|
* February 2000. Network Security Technologies Inc. (NSTI) kindly
|
|
* supported the development of this code.
|
|
*
|
|
* Copyright (c) 2000 Angelos D. Keromytis
|
|
* Copyright (c) 2014 The FreeBSD Foundation
|
|
* All rights reserved.
|
|
*
|
|
* Portions of this software were developed by John-Mark Gurney
|
|
* under sponsorship of the FreeBSD Foundation and
|
|
* Rubicon Communications, LLC (Netgate).
|
|
*
|
|
* Permission to use, copy, and modify this software without fee
|
|
* is hereby granted, provided that this entire notice is included in
|
|
* all source code copies of any software which is or includes a copy or
|
|
* modification of this software.
|
|
*
|
|
* THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR
|
|
* IMPLIED WARRANTY. IN PARTICULAR, NONE OF THE AUTHORS MAKES ANY
|
|
* REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE
|
|
* MERCHANTABILITY OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR
|
|
* PURPOSE.
|
|
*/
|
|
|
|
#ifndef _CRYPTO_XFORM_ENC_H_
|
|
#define _CRYPTO_XFORM_ENC_H_
|
|
|
|
#include <sys/malloc.h>
|
|
#include <sys/errno.h>
|
|
#include <crypto/blowfish/blowfish.h>
|
|
#include <crypto/des/des.h>
|
|
#include <crypto/rijndael/rijndael.h>
|
|
#include <crypto/camellia/camellia.h>
|
|
#include <opencrypto/cast.h>
|
|
#include <opencrypto/skipjack.h>
|
|
#include <opencrypto/cryptodev.h>
|
|
#include <opencrypto/xform_userland.h>
|
|
|
|
#define AESICM_BLOCKSIZE AES_BLOCK_LEN
|
|
#define AES_XTS_BLOCKSIZE 16
|
|
#define AES_XTS_IVSIZE 8
|
|
#define AES_XTS_ALPHA 0x87 /* GF(2^128) generator polynomial */
|
|
|
|
/* Declarations */
|
|
struct enc_xform {
|
|
int type;
|
|
char *name;
|
|
u_int16_t blocksize; /* Required input block size -- 1 for stream ciphers. */
|
|
u_int16_t ivsize;
|
|
u_int16_t minkey, maxkey;
|
|
void (*encrypt) (caddr_t, u_int8_t *);
|
|
void (*decrypt) (caddr_t, u_int8_t *);
|
|
int (*setkey) (u_int8_t **, u_int8_t *, int len);
|
|
void (*zerokey) (u_int8_t **);
|
|
void (*reinit) (caddr_t, u_int8_t *);
|
|
/*
|
|
* Encrypt/decrypt 1+ blocks of input -- total size is 'len' bytes.
|
|
* Len is guaranteed to be a multiple of the defined 'blocksize'.
|
|
* Optional interface -- most useful for stream ciphers with a small
|
|
* blocksize (1).
|
|
*/
|
|
void (*encrypt_multi) (void *, uint8_t *, size_t len);
|
|
void (*decrypt_multi) (void *, uint8_t *, size_t len);
|
|
};
|
|
|
|
|
|
extern struct enc_xform enc_xform_null;
|
|
extern struct enc_xform enc_xform_des;
|
|
extern struct enc_xform enc_xform_3des;
|
|
extern struct enc_xform enc_xform_blf;
|
|
extern struct enc_xform enc_xform_cast5;
|
|
extern struct enc_xform enc_xform_skipjack;
|
|
extern struct enc_xform enc_xform_rijndael128;
|
|
extern struct enc_xform enc_xform_aes_icm;
|
|
extern struct enc_xform enc_xform_aes_nist_gcm;
|
|
extern struct enc_xform enc_xform_aes_nist_gmac;
|
|
extern struct enc_xform enc_xform_aes_xts;
|
|
extern struct enc_xform enc_xform_arc4;
|
|
extern struct enc_xform enc_xform_camellia;
|
|
extern struct enc_xform enc_xform_chacha20;
|
|
extern struct enc_xform enc_xform_ccm;
|
|
|
|
struct aes_icm_ctx {
|
|
u_int32_t ac_ek[4*(RIJNDAEL_MAXNR + 1)];
|
|
/* ac_block is initalized to IV */
|
|
u_int8_t ac_block[AESICM_BLOCKSIZE];
|
|
int ac_nr;
|
|
};
|
|
|
|
struct aes_xts_ctx {
|
|
rijndael_ctx key1;
|
|
rijndael_ctx key2;
|
|
u_int8_t tweak[AES_XTS_BLOCKSIZE];
|
|
};
|
|
|
|
#endif /* _CRYPTO_XFORM_ENC_H_ */
|