221 lines
9.3 KiB
C
221 lines
9.3 KiB
C
/*
|
|
Copyright (c) 2015 Anton Titov.
|
|
|
|
Copyright (c) 2015 pCloud Ltd. All rights reserved.
|
|
|
|
Redistribution and use in source and binary forms, with or without
|
|
modification, are permitted provided that the following conditions
|
|
are met: Redistributions of source code must retain the above
|
|
copyright notice, this list of conditions and the following
|
|
disclaimer. Redistributions in binary form must reproduce the
|
|
above copyright notice, this list of conditions and the following
|
|
disclaimer in the documentation and/or other materials provided
|
|
with the distribution. Neither the name of pCloud Ltd nor the
|
|
names of its contributors may be used to endorse or promote
|
|
products derived from this software without specific prior written
|
|
permission.
|
|
|
|
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
|
FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL pCloud
|
|
Ltd BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
|
|
EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
|
PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
|
|
PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
|
|
OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
|
|
USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
|
|
DAMAGE.
|
|
*/
|
|
|
|
#ifndef _PSYNC_MBEDTLS_H
|
|
#define _PSYNC_MBEDTLS_H
|
|
|
|
#include <polarssl/aes.h>
|
|
#include <polarssl/rsa.h>
|
|
#include <polarssl/sha1.h>
|
|
#include <polarssl/sha256.h>
|
|
#include <polarssl/sha512.h>
|
|
|
|
#define PSYNC_INVALID_RSA NULL
|
|
#define PSYNC_INVALID_SYM_KEY NULL
|
|
|
|
#define PSYNC_SHA1_BLOCK_LEN 64
|
|
#define PSYNC_SHA1_DIGEST_LEN 20
|
|
#define PSYNC_SHA1_DIGEST_HEXLEN 40
|
|
#define psync_sha1_ctx sha1_context
|
|
#define psync_sha1(data, datalen, checksum) sha1(data, datalen, checksum)
|
|
#define psync_sha1_init(pctx) sha1_starts(pctx)
|
|
#define psync_sha1_update(pctx, data, datalen) \
|
|
sha1_update(pctx, (const unsigned char *)data, datalen)
|
|
#define psync_sha1_final(checksum, pctx) sha1_finish(pctx, checksum)
|
|
|
|
#define PSYNC_SHA256_BLOCK_LEN 64
|
|
#define PSYNC_SHA256_DIGEST_LEN 32
|
|
#define PSYNC_SHA256_DIGEST_HEXLEN 64
|
|
#define psync_sha256_ctx sha256_context
|
|
#define psync_sha256(data, datalen, checksum) sha256(data, datalen, checksum, 0)
|
|
#define psync_sha256_init(pctx) sha256_starts(pctx, 0)
|
|
#define psync_sha256_update(pctx, data, datalen) \
|
|
sha256_update(pctx, (const unsigned char *)data, datalen)
|
|
#define psync_sha256_final(checksum, pctx) sha256_finish(pctx, checksum)
|
|
|
|
#define PSYNC_SHA512_BLOCK_LEN 128
|
|
#define PSYNC_SHA512_DIGEST_LEN 64
|
|
#define PSYNC_SHA512_DIGEST_HEXLEN 128
|
|
#define psync_sha512_ctx sha512_context
|
|
#define psync_sha512(data, datalen, checksum) sha512(data, datalen, checksum, 0)
|
|
#define psync_sha512_init(pctx) sha512_starts(pctx, 0)
|
|
#define psync_sha512_update(pctx, data, datalen) \
|
|
sha512_update(pctx, (const unsigned char *)data, datalen)
|
|
#define psync_sha512_final(checksum, pctx) sha512_finish(pctx, checksum)
|
|
|
|
typedef rsa_context *psync_rsa_t;
|
|
typedef rsa_context *psync_rsa_publickey_t;
|
|
typedef rsa_context *psync_rsa_privatekey_t;
|
|
|
|
typedef struct {
|
|
size_t keylen;
|
|
unsigned char key[];
|
|
} psync_symmetric_key_struct_t, *psync_symmetric_key_t;
|
|
|
|
typedef aes_context *psync_aes256_encoder;
|
|
typedef aes_context *psync_aes256_decoder;
|
|
|
|
typedef void (*psync_ssl_debug_callback_t)(void *ctx, int level,
|
|
const char *message);
|
|
void psync_ssl_set_log_threshold(int threshold);
|
|
void psync_ssl_set_debug_callback(psync_ssl_debug_callback_t cb, void *ctx);
|
|
|
|
#if defined(__GNUC__) && \
|
|
(defined(__amd64__) || defined(__x86_64__) || defined(__i386__))
|
|
#define PSYNC_AES_HW
|
|
#define PSYNC_AES_HW_GCC
|
|
#elif defined(_MSC_VER)
|
|
#define PSYNC_AES_HW
|
|
#define PSYNC_AES_HW_MSC
|
|
#endif
|
|
|
|
#if defined(PSYNC_AES_HW)
|
|
extern int psync_ssl_hw_aes;
|
|
|
|
void psync_aes256_encode_block_hw(psync_aes256_encoder enc,
|
|
const unsigned char *src, unsigned char *dst);
|
|
void psync_aes256_decode_block_hw(psync_aes256_decoder enc,
|
|
const unsigned char *src, unsigned char *dst);
|
|
void psync_aes256_encode_2blocks_consec_hw(psync_aes256_encoder enc,
|
|
const unsigned char *src,
|
|
unsigned char *dst);
|
|
void psync_aes256_decode_2blocks_consec_hw(psync_aes256_decoder enc,
|
|
const unsigned char *src,
|
|
unsigned char *dst);
|
|
void psync_aes256_decode_4blocks_consec_xor_hw(psync_aes256_decoder enc,
|
|
const unsigned char *src,
|
|
unsigned char *dst,
|
|
unsigned char *bxor);
|
|
void psync_aes256_decode_4blocks_consec_xor_sw(psync_aes256_decoder enc,
|
|
const unsigned char *src,
|
|
unsigned char *dst,
|
|
unsigned char *bxor);
|
|
|
|
static inline void psync_aes256_encode_block(psync_aes256_encoder enc,
|
|
const unsigned char *src,
|
|
unsigned char *dst) {
|
|
if (likely(psync_ssl_hw_aes))
|
|
psync_aes256_encode_block_hw(enc, src, dst);
|
|
else
|
|
aes_crypt_ecb(enc, AES_ENCRYPT, src, dst);
|
|
}
|
|
|
|
static inline void psync_aes256_decode_block(psync_aes256_decoder enc,
|
|
const unsigned char *src,
|
|
unsigned char *dst) {
|
|
if (likely(psync_ssl_hw_aes))
|
|
psync_aes256_decode_block_hw(enc, src, dst);
|
|
else
|
|
aes_crypt_ecb(enc, AES_DECRYPT, src, dst);
|
|
}
|
|
|
|
static inline void psync_aes256_encode_2blocks_consec(psync_aes256_decoder enc,
|
|
const unsigned char *src,
|
|
unsigned char *dst) {
|
|
if (likely(psync_ssl_hw_aes))
|
|
psync_aes256_encode_2blocks_consec_hw(enc, src, dst);
|
|
else {
|
|
aes_crypt_ecb(enc, AES_ENCRYPT, src, dst);
|
|
aes_crypt_ecb(enc, AES_ENCRYPT, src + PSYNC_AES256_BLOCK_SIZE,
|
|
dst + PSYNC_AES256_BLOCK_SIZE);
|
|
}
|
|
}
|
|
|
|
static inline void psync_aes256_decode_2blocks_consec(psync_aes256_decoder enc,
|
|
const unsigned char *src,
|
|
unsigned char *dst) {
|
|
if (likely(psync_ssl_hw_aes))
|
|
psync_aes256_decode_2blocks_consec_hw(enc, src, dst);
|
|
else {
|
|
aes_crypt_ecb(enc, AES_DECRYPT, src, dst);
|
|
aes_crypt_ecb(enc, AES_DECRYPT, src + PSYNC_AES256_BLOCK_SIZE,
|
|
dst + PSYNC_AES256_BLOCK_SIZE);
|
|
}
|
|
}
|
|
|
|
static inline void psync_aes256_decode_4blocks_consec_xor(
|
|
psync_aes256_decoder enc, const unsigned char *src, unsigned char *dst,
|
|
unsigned char *bxor) {
|
|
if (psync_ssl_hw_aes)
|
|
psync_aes256_decode_4blocks_consec_xor_hw(enc, src, dst, bxor);
|
|
else
|
|
psync_aes256_decode_4blocks_consec_xor_sw(enc, src, dst, bxor);
|
|
}
|
|
|
|
#else
|
|
|
|
static inline void psync_aes256_encode_block(psync_aes256_encoder enc,
|
|
const unsigned char *src,
|
|
unsigned char *dst) {
|
|
aes_crypt_ecb(enc, AES_ENCRYPT, src, dst);
|
|
}
|
|
|
|
static inline void psync_aes256_decode_block(psync_aes256_decoder enc,
|
|
const unsigned char *src,
|
|
unsigned char *dst) {
|
|
aes_crypt_ecb(enc, AES_DECRYPT, src, dst);
|
|
}
|
|
|
|
static inline void psync_aes256_encode_2blocks_consec(psync_aes256_decoder enc,
|
|
const unsigned char *src,
|
|
unsigned char *dst) {
|
|
aes_crypt_ecb(enc, AES_ENCRYPT, src, dst);
|
|
aes_crypt_ecb(enc, AES_ENCRYPT, src + PSYNC_AES256_BLOCK_SIZE,
|
|
dst + PSYNC_AES256_BLOCK_SIZE);
|
|
}
|
|
|
|
static inline void psync_aes256_decode_2blocks_consec(psync_aes256_decoder enc,
|
|
const unsigned char *src,
|
|
unsigned char *dst) {
|
|
aes_crypt_ecb(enc, AES_DECRYPT, src, dst);
|
|
aes_crypt_ecb(enc, AES_DECRYPT, src + PSYNC_AES256_BLOCK_SIZE,
|
|
dst + PSYNC_AES256_BLOCK_SIZE);
|
|
}
|
|
|
|
static inline void psync_aes256_decode_4blocks_consec_xor(
|
|
psync_aes256_decoder enc, const unsigned char *src, unsigned char *dst,
|
|
unsigned char *bxor) {
|
|
unsigned long i;
|
|
aes_crypt_ecb(enc, AES_DECRYPT, src, dst);
|
|
aes_crypt_ecb(enc, AES_DECRYPT, src + PSYNC_AES256_BLOCK_SIZE,
|
|
dst + PSYNC_AES256_BLOCK_SIZE);
|
|
aes_crypt_ecb(enc, AES_DECRYPT, src + PSYNC_AES256_BLOCK_SIZE * 2,
|
|
dst + PSYNC_AES256_BLOCK_SIZE * 2);
|
|
aes_crypt_ecb(enc, AES_DECRYPT, src + PSYNC_AES256_BLOCK_SIZE * 3,
|
|
dst + PSYNC_AES256_BLOCK_SIZE * 3);
|
|
for (i = 0; i < PSYNC_AES256_BLOCK_SIZE * 4 / sizeof(unsigned long); i++)
|
|
((unsigned long *)dst)[i] ^= ((unsigned long *)bxor)[i];
|
|
}
|
|
|
|
#endif
|
|
|
|
#endif
|