lkn
/
pcloudcc-lneely
mirror of https://github.com/lneely/pcloudcc-lneely.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
pcloudcc-lneely/lib/pclsync/pssl-mbedtls.c

977 lines
30 KiB
C
Raw Blame History

/*
Copyright (c) 2015 Anton Titov.
Copyright (c) 2015 pCloud Ltd. All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met: Redistributions of source code must retain the above
copyright notice, this list of conditions and the following
disclaimer. Redistributions in binary form must reproduce the
above copyright notice, this list of conditions and the following
disclaimer in the documentation and/or other materials provided
with the distribution. Neither the name of pCloud Ltd nor the
names of its contributors may be used to endorse or promote
products derived from this software without specific prior written
permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL pCloud
Ltd BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
DAMAGE.
*/
#include "plibs.h"
#include "pssl.h"
#include "psynclib.h"
#include "psslcerts.h"
#include "psettings.h"
#include "pcache.h"
#include "ptimer.h"
#include "pmemlock.h"
#include <pthread.h>
#include <ctype.h>
#include <polarssl/ctr_drbg.h>
#include <polarssl/entropy.h>
#include <polarssl/ssl.h>
#include <polarssl/pkcs5.h>
#include <polarssl/debug.h>
#if defined(PSYNC_AES_HW_MSC)
#include <intrin.h>
#include <wmmintrin.h>
#endif
static const int psync_mbed_ciphersuite[]={
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,
0
};
typedef struct {
ctr_drbg_context rnd;
pthread_mutex_t mutex;
} ctr_drbg_context_locked;
typedef struct {
ssl_context ssl;
psync_socket_t sock;
int isbroken;
char cachekey[];
} ssl_connection_t;
static ctr_drbg_context_locked psync_mbed_rng;
static entropy_context psync_mbed_entropy;
static x509_crt psync_mbed_trusted_certs_x509;
PSYNC_THREAD int psync_ssl_errno;
#if defined(PSYNC_AES_HW)
int psync_ssl_hw_aes;
#endif
static psync_ssl_debug_callback_t debug_cb=NULL;
static void *debug_ctx=NULL;
void psync_ssl_set_log_threshold(int threshold){
debug_set_threshold(threshold);
}
void psync_ssl_set_debug_callback(psync_ssl_debug_callback_t cb, void *ctx){
debug_cb=cb;
debug_ctx=ctx;
}
int ctr_drbg_random_locked(void *p_rng, unsigned char *output, size_t output_len){
ctr_drbg_context_locked *rng;
int ret;
rng=(ctr_drbg_context_locked *)p_rng;
pthread_mutex_lock(&rng->mutex);
ret=ctr_drbg_random(&rng->rnd, output, output_len);
pthread_mutex_unlock(&rng->mutex);
return ret;
}
#if defined(PSYNC_AES_HW_GCC)
static int psync_ssl_detect_aes_hw(){
uint32_t eax, ecx;
eax=1;
__asm__("cpuid"
: "=c"(ecx)
: "a"(eax)
: "%ebx", "%edx");
ecx=(ecx>>25)&1;
if (ecx)
debug(D_NOTICE, "hardware AES support detected");
else
debug(D_NOTICE, "hardware AES support not detected");
return ecx;
}
#elif defined(PSYNC_AES_HW_MSC)
static int psync_ssl_detect_aes_hw(){
int info[4];
int ret;
__cpuid(info, 1);
ret=(info[2]>>25)&1;
if (ret)
debug(D_NOTICE, "hardware AES support detected");
else
debug(D_NOTICE, "hardware AES support not detected");
return ret;
}
#endif
int psync_ssl_init(){
unsigned char seed[PSYNC_LHASH_DIGEST_LEN];
psync_uint_t i;
#if defined(PSYNC_AES_HW)
psync_ssl_hw_aes=psync_ssl_detect_aes_hw();
#else
debug(D_NOTICE, "hardware AES is not supported for this compiler");
#endif
if (pthread_mutex_init(&psync_mbed_rng.mutex, NULL))
return PRINT_RETURN(-1);
entropy_init(&psync_mbed_entropy);
psync_get_random_seed(seed, seed, sizeof(seed), 0);
entropy_update_manual(&psync_mbed_entropy, seed, sizeof(seed));
if (ctr_drbg_init(&psync_mbed_rng.rnd, entropy_func, &psync_mbed_entropy, NULL, 0))
return PRINT_RETURN(-1);
x509_crt_init(&psync_mbed_trusted_certs_x509);
for (i=0; i<ARRAY_SIZE(psync_ssl_trusted_certs); i++)
if (x509_crt_parse(&psync_mbed_trusted_certs_x509, (const unsigned char *)psync_ssl_trusted_certs[i], strlen(psync_ssl_trusted_certs[i])))
debug(D_ERROR, "failed to load certificate %lu", (unsigned long)i);
return 0;
}
void psync_ssl_memclean(void *ptr, size_t len){
volatile unsigned char *p=ptr;
while (len--)
*p++=0;
}
static ssl_connection_t *psync_ssl_alloc_conn(const char *hostname){
ssl_connection_t *conn;
size_t len;
len=strlen(hostname)+1;
conn=(ssl_connection_t *)psync_malloc(offsetof(ssl_connection_t, cachekey)+len+4);
conn->isbroken=0;
memcpy(conn->cachekey, "SSLS", 4);
memcpy(conn->cachekey+4, hostname, len);
return conn;
}
static void psync_set_ssl_error(ssl_connection_t *conn, int err){
if (err==POLARSSL_ERR_NET_WANT_READ)
psync_ssl_errno=PSYNC_SSL_ERR_WANT_READ;
else if (err==POLARSSL_ERR_NET_WANT_WRITE)
psync_ssl_errno=PSYNC_SSL_ERR_WANT_WRITE;
else{
psync_ssl_errno=PSYNC_SSL_ERR_UNKNOWN;
conn->isbroken=1;
if (err==POLARSSL_ERR_NET_RECV_FAILED)
debug(D_NOTICE, "got POLARSSL_ERR_NET_RECV_FAILED");
else if (err==POLARSSL_ERR_NET_SEND_FAILED)
debug(D_NOTICE, "got POLARSSL_ERR_NET_SEND_FAILED");
else
debug(D_NOTICE, "got error %d", err);
}
}
static int psync_mbed_read(void *ptr, unsigned char *buf, size_t len){
ssl_connection_t *conn;
ssize_t ret;
int err;
conn=(ssl_connection_t *)ptr;
ret=psync_read_socket(conn->sock, buf, len);
if (ret==-1){
err=psync_sock_err();
if (err==P_WOULDBLOCK || err==P_AGAIN || err==P_INTR)
return POLARSSL_ERR_NET_WANT_READ;
else
return POLARSSL_ERR_NET_RECV_FAILED;
}
else
return (int)ret;
}
static int psync_mbed_write(void *ptr, const unsigned char *buf, size_t len){
ssl_connection_t *conn;
ssize_t ret;
int err;
conn=(ssl_connection_t *)ptr;
ret=psync_write_socket(conn->sock, buf, len);
if (ret==-1){
err=psync_sock_err();
if (err==P_WOULDBLOCK || err==P_AGAIN || err==P_INTR)
return POLARSSL_ERR_NET_WANT_WRITE;
else
return POLARSSL_ERR_NET_SEND_FAILED;
}
else
return (int)ret;
}
static void psync_ssl_free_session(void *ptr){
ssl_session_free((ssl_session *)ptr);
psync_free(ptr);
}
static void psync_ssl_save_session(ssl_connection_t *conn){
ssl_session *sess;
sess=psync_new(ssl_session);
// ssl_get_session seems to copy all elements, instead of referencing them, therefore it is thread safe to add session upon connect
memset(sess, 0, sizeof(ssl_session));
if (ssl_get_session(&conn->ssl, sess))
psync_free(sess);
else
psync_cache_add(conn->cachekey, sess, PSYNC_SSL_SESSION_CACHE_TIMEOUT, psync_ssl_free_session, PSYNC_MAX_SSL_SESSIONS_PER_DOMAIN);
}
static int psync_ssl_check_peer_public_key(ssl_connection_t *conn){
const x509_crt *cert;
unsigned char buff[1024], sigbin[32];
char sighex[66];
int i;
cert=ssl_get_peer_cert(&conn->ssl);
if (!cert){
debug(D_WARNING, "ssl_get_peer_cert returned NULL");
return -1;
}
if (pk_get_type(&cert->pk)!=POLARSSL_PK_RSA){
debug(D_WARNING, "public key is not RSA");
return -1;
}
i=pk_write_pubkey_der((pk_context *)&cert->pk, buff, sizeof(buff));
if (i<=0){
debug(D_WARNING, "pk_write_pubkey_der returned error %d", i);
return -1;
}
sha256(buff+sizeof(buff)-i, i, sigbin, 0);
psync_binhex(sighex, sigbin, 32);
sighex[64]=0;
for (i=0; i<ARRAY_SIZE(psync_ssl_trusted_pk_sha256); i++)
if (!strcmp(sighex, psync_ssl_trusted_pk_sha256[i]))
return 0;
debug(D_ERROR, "got sha256hex of public key %s that does not match any approved fingerprint", sighex);
return -1;
}
int psync_ssl_connect(psync_socket_t sock, void **sslconn, const char *hostname){
ssl_connection_t *conn;
ssl_session *sess;
int ret;
conn=psync_ssl_alloc_conn(hostname);
if (unlikely(ssl_init(&conn->ssl)))
goto err0;
conn->sock=sock;
ssl_set_endpoint(&conn->ssl, SSL_IS_CLIENT);
ssl_set_dbg(&conn->ssl, debug_cb, debug_ctx);
ssl_set_authmode(&conn->ssl, SSL_VERIFY_REQUIRED);
ssl_set_min_version(&conn->ssl, SSL_MAJOR_VERSION_3, SSL_MINOR_VERSION_3);
ssl_set_ca_chain(&conn->ssl, &psync_mbed_trusted_certs_x509, NULL, hostname);
ssl_set_ciphersuites(&conn->ssl, psync_mbed_ciphersuite);
ssl_set_rng(&conn->ssl, ctr_drbg_random_locked, &psync_mbed_rng);
ssl_set_bio(&conn->ssl, psync_mbed_read, conn, psync_mbed_write, conn);
ssl_set_hostname(&conn->ssl, hostname); // we do not need SNI, but should not hurt in general to support
if ((sess=(ssl_session *)psync_cache_get(conn->cachekey))){
debug(D_NOTICE, "reusing cached session for %s", hostname);
if (ssl_set_session(&conn->ssl, sess))
debug(D_WARNING, "ssl_set_session failed");
ssl_session_free(sess);
psync_free(sess);
}
ret=ssl_handshake(&conn->ssl);
if (ret==0){
if (psync_ssl_check_peer_public_key(conn))
goto err1;
*sslconn=conn;
psync_ssl_save_session(conn);
return PSYNC_SSL_SUCCESS;
}
psync_set_ssl_error(conn, ret);
if (likely_log(ret==POLARSSL_ERR_NET_WANT_READ || ret==POLARSSL_ERR_NET_WANT_WRITE)){
*sslconn=conn;
return PSYNC_SSL_NEED_FINISH;
}
err1:
ssl_free(&conn->ssl);
err0:
psync_free(conn);
return PRINT_RETURN_CONST(PSYNC_SSL_FAIL);
}
int psync_ssl_connect_finish(void *sslconn, const char *hostname){
ssl_connection_t *conn;
int ret;
conn=(ssl_connection_t *)sslconn;
ret=ssl_handshake(&conn->ssl);
if (ret==0){
if (psync_ssl_check_peer_public_key(conn))
goto fail;
psync_ssl_save_session(conn);
return PSYNC_SSL_SUCCESS;
}
psync_set_ssl_error(conn, ret);
if (likely_log(ret==POLARSSL_ERR_NET_WANT_READ || ret==POLARSSL_ERR_NET_WANT_WRITE))
return PSYNC_SSL_NEED_FINISH;
fail:
ssl_free(&conn->ssl);
psync_free(conn);
return PRINT_RETURN_CONST(PSYNC_SSL_FAIL);
}
int psync_ssl_shutdown(void *sslconn){
ssl_connection_t *conn;
int ret;
conn=(ssl_connection_t *)sslconn;
if (conn->isbroken)
goto noshutdown;
ret=ssl_close_notify(&conn->ssl);
if (ret==0)
goto noshutdown;
psync_set_ssl_error(conn, ret);
if (likely_log(ret==POLARSSL_ERR_NET_WANT_READ || ret==POLARSSL_ERR_NET_WANT_WRITE))
return PSYNC_SSL_NEED_FINISH;
noshutdown:
ssl_free(&conn->ssl);
psync_free(conn);
return PSYNC_SSL_SUCCESS;
}
void psync_ssl_free(void *sslconn){
ssl_connection_t *conn;
conn=(ssl_connection_t *)sslconn;
ssl_free(&conn->ssl);
psync_free(conn);
}
int psync_ssl_pendingdata(void *sslconn){
return ssl_get_bytes_avail(&((ssl_connection_t *)sslconn)->ssl);
}
int psync_ssl_read(void *sslconn, void *buf, int num){
ssl_connection_t *conn;
int res;
conn=(ssl_connection_t *)sslconn;
res=ssl_read(&conn->ssl, (unsigned char *)buf, num);
if (res>=0)
return res;
psync_set_ssl_error(conn, res);
return PSYNC_SSL_FAIL;
}
int psync_ssl_write(void *sslconn, const void *buf, int num){
ssl_connection_t *conn;
int res;
conn=(ssl_connection_t *)sslconn;
res=ssl_write(&conn->ssl, (const unsigned char *)buf, num);
if (res>=0)
return res;
psync_set_ssl_error(conn, res);
return PSYNC_SSL_FAIL;
}
void psync_ssl_rand_strong(unsigned char *buf, int num){
if (unlikely(ctr_drbg_random_locked(&psync_mbed_rng, buf, num))){
debug(D_CRITICAL, "could not generate %d random bytes, exiting", num);
abort();
}
}
void psync_ssl_rand_weak(unsigned char *buf, int num){
psync_ssl_rand_strong(buf, num);
}
psync_rsa_t psync_ssl_gen_rsa(int bits){
rsa_context *ctx;
ctx=psync_new(rsa_context);
rsa_init(ctx, RSA_PKCS_V21, POLARSSL_MD_SHA1);
if (rsa_gen_key(ctx, ctr_drbg_random_locked, &psync_mbed_rng, bits, 65537)){
rsa_free(ctx);
psync_free(ctx);
return PSYNC_INVALID_RSA;
}
else
return ctx;
}
void psync_ssl_free_rsa(psync_rsa_t rsa){
rsa_free(rsa);
psync_free(rsa);
}
psync_rsa_publickey_t psync_ssl_rsa_get_public(psync_rsa_t rsa){
psync_binary_rsa_key_t bin;
psync_rsa_publickey_t ret;
bin=psync_ssl_rsa_public_to_binary(rsa);
if (bin==PSYNC_INVALID_BIN_RSA)
return PSYNC_INVALID_RSA;
ret=psync_ssl_rsa_binary_to_public(bin);
psync_ssl_rsa_free_binary(bin);
return ret;
}
void psync_ssl_rsa_free_public(psync_rsa_publickey_t key){
psync_ssl_free_rsa(key);
}
psync_rsa_privatekey_t psync_ssl_rsa_get_private(psync_rsa_t rsa){
rsa_context *ctx;
ctx=psync_new(rsa_context);
rsa_init(ctx, RSA_PKCS_V21, POLARSSL_MD_SHA1);
if (unlikely(rsa_copy(ctx, rsa))){
rsa_free(ctx);
psync_free(ctx);
return PSYNC_INVALID_RSA;
}
else
return ctx;
}
void psync_ssl_rsa_free_private(psync_rsa_privatekey_t key){
psync_ssl_free_rsa(key);
}
psync_binary_rsa_key_t psync_ssl_rsa_public_to_binary(psync_rsa_publickey_t rsa){
unsigned char buff[4096], *p;
pk_context ctx;
psync_binary_rsa_key_t ret;
int len;
pk_init(&ctx);
if (pk_init_ctx(&ctx, pk_info_from_type(POLARSSL_PK_RSA)) || rsa_copy(pk_rsa(ctx), rsa))
return PSYNC_INVALID_BIN_RSA;
p=buff+sizeof(buff);
len=pk_write_pubkey(&p, buff, &ctx);
pk_free(&ctx);
if (len<=0)
return PSYNC_INVALID_BIN_RSA;
ret=psync_locked_malloc(offsetof(psync_encrypted_data_struct_t, data)+len);
ret->datalen=len;
memcpy(ret->data, buff+sizeof(buff)-len, len);
return ret;
}
psync_binary_rsa_key_t psync_ssl_rsa_private_to_binary(psync_rsa_privatekey_t rsa){
unsigned char buff[4096];
pk_context ctx;
psync_binary_rsa_key_t ret;
int len;
pk_init(&ctx);
if (pk_init_ctx(&ctx, pk_info_from_type(POLARSSL_PK_RSA)) || rsa_copy(pk_rsa(ctx), rsa))
return PSYNC_INVALID_BIN_RSA;
len=pk_write_key_der(&ctx, buff, sizeof(buff));
pk_free(&ctx);
if (len<=0)
return PSYNC_INVALID_BIN_RSA;
ret=psync_locked_malloc(offsetof(psync_encrypted_data_struct_t, data)+len);
ret->datalen=len;
memcpy(ret->data, buff+sizeof(buff)-len, len);
psync_ssl_memclean(buff+sizeof(buff)-len, len);
return ret;
}
psync_rsa_publickey_t psync_ssl_rsa_load_public(const unsigned char *keydata, size_t keylen){
pk_context ctx;
rsa_context *rsa;
int ret;
pk_init(&ctx);
if (unlikely(ret=pk_parse_public_key(&ctx, keydata, keylen))){
debug(D_WARNING, "pk_parse_public_key failed with code %d", ret);
return PSYNC_INVALID_RSA;
}
rsa=psync_new(rsa_context);
rsa_init(rsa, RSA_PKCS_V21, POLARSSL_MD_SHA1);
ret=rsa_copy(rsa, pk_rsa(ctx));
pk_free(&ctx);
if (unlikely(ret)){
rsa_free(rsa);
psync_free(rsa);
return PSYNC_INVALID_RSA;
}
else{
rsa_set_padding(rsa, RSA_PKCS_V21, POLARSSL_MD_SHA1);
return rsa;
}
}
psync_rsa_privatekey_t psync_ssl_rsa_load_private(const unsigned char *keydata, size_t keylen){
pk_context ctx;
rsa_context *rsa;
int ret;
pk_init(&ctx);
if (unlikely(ret=pk_parse_key(&ctx, keydata, keylen, NULL, 0))){
debug(D_WARNING, "pk_parse_key failed with code %d", ret);
return PSYNC_INVALID_RSA;
}
rsa=psync_new(rsa_context);
rsa_init(rsa, RSA_PKCS_V21, POLARSSL_MD_SHA1);
ret=rsa_copy(rsa, pk_rsa(ctx));
pk_free(&ctx);
if (unlikely(ret)){
debug(D_WARNING, "rsa_copy failed with code %d", ret);
rsa_free(rsa);
psync_free(rsa);
return PSYNC_INVALID_RSA;
}
else{
rsa_set_padding(rsa, RSA_PKCS_V21, POLARSSL_MD_SHA1);
return rsa;
}
}
psync_rsa_publickey_t psync_ssl_rsa_binary_to_public(psync_binary_rsa_key_t bin){
return psync_ssl_rsa_load_public(bin->data, bin->datalen);
}
psync_rsa_privatekey_t psync_ssl_rsa_binary_to_private(psync_binary_rsa_key_t bin){
return psync_ssl_rsa_load_private(bin->data, bin->datalen);
}
psync_symmetric_key_t psync_ssl_gen_symmetric_key_from_pass(const char *password, size_t keylen, const unsigned char *salt, size_t saltlen, size_t iterations){
psync_symmetric_key_t key=(psync_symmetric_key_t)psync_locked_malloc(keylen+offsetof(psync_symmetric_key_struct_t, key));
md_context_t ctx;
md_init_ctx(&ctx, md_info_from_type(POLARSSL_MD_SHA512));
key->keylen=keylen;
pkcs5_pbkdf2_hmac(&ctx, (const unsigned char *)password, strlen(password), salt, saltlen, iterations, keylen, key->key);
md_free_ctx(&ctx);
return key;
}
char *psync_ssl_derive_password_from_passphrase(const char *username, const char *passphrase){
unsigned char *usercopy;
unsigned char usersha512[PSYNC_SHA512_DIGEST_LEN], passwordbin[32];
md_context_t ctx;
size_t userlen, i;
userlen=strlen(username);
usercopy=psync_new_cnt(unsigned char, userlen);
for (i=0; i<userlen; i++)
if ((unsigned char)username[i]<=127)
usercopy[i]=tolower((unsigned char)username[i]);
else
usercopy[i]='*';
psync_sha512(usercopy, userlen, usersha512);
psync_free(usercopy);
md_init_ctx(&ctx, md_info_from_type(POLARSSL_MD_SHA512));
pkcs5_pbkdf2_hmac(&ctx, (const unsigned char *)passphrase, strlen(passphrase), usersha512, PSYNC_SHA512_DIGEST_LEN, 5000, sizeof(passwordbin), passwordbin);
md_free_ctx(&ctx);
usercopy=psync_base64_encode(passwordbin, sizeof(passwordbin), &userlen);
return (char *)usercopy;
}
psync_encrypted_symmetric_key_t psync_ssl_rsa_encrypt_data(psync_rsa_publickey_t rsa, const unsigned char *data, size_t datalen){
psync_encrypted_symmetric_key_t ret;
int code;
ret=(psync_encrypted_symmetric_key_t)psync_malloc(offsetof(psync_encrypted_data_struct_t, data)+rsa->len);
if ((code=rsa_rsaes_oaep_encrypt(rsa, ctr_drbg_random_locked, &psync_mbed_rng, RSA_PUBLIC, NULL, 0, datalen, data, ret->data))){
psync_free(ret);
debug(D_WARNING, "rsa_rsaes_oaep_encrypt failed with error=%d, datalen=%lu, rsasize=%d", code, (unsigned long)datalen, (int)rsa->len);
return PSYNC_INVALID_ENC_SYM_KEY;
}
ret->datalen=rsa->len;
debug(D_NOTICE, "datalen=%lu", (unsigned long)ret->datalen);
return ret;
}
psync_symmetric_key_t psync_ssl_rsa_decrypt_data(psync_rsa_privatekey_t rsa, const unsigned char *data, size_t datalen){
unsigned char buff[2048];
psync_symmetric_key_t ret;
size_t len;
if (rsa_rsaes_oaep_decrypt(rsa, ctr_drbg_random_locked, &psync_mbed_rng, RSA_PRIVATE, NULL, 0, &len, data, buff, sizeof(buff)))
return PSYNC_INVALID_SYM_KEY;
ret=(psync_symmetric_key_t)psync_locked_malloc(offsetof(psync_symmetric_key_struct_t, key)+len);
ret->keylen=len;
memcpy(ret->key, buff, len);
psync_ssl_memclean(buff, len);
return ret;
}
psync_encrypted_symmetric_key_t psync_ssl_rsa_encrypt_symmetric_key(psync_rsa_publickey_t rsa, const psync_symmetric_key_t key){
return psync_ssl_rsa_encrypt_data(rsa, key->key, key->keylen);
}
psync_symmetric_key_t psync_ssl_rsa_decrypt_symmetric_key(psync_rsa_privatekey_t rsa, const psync_encrypted_symmetric_key_t enckey){
return psync_ssl_rsa_decrypt_data(rsa, enckey->data, enckey->datalen);
}
psync_aes256_encoder psync_ssl_aes256_create_encoder(psync_symmetric_key_t key){
aes_context *aes;
assert(key->keylen>=PSYNC_AES256_KEY_SIZE);
aes=psync_new(aes_context);
aes_setkey_enc(aes, key->key, 256);
return aes;
}
void psync_ssl_aes256_free_encoder(psync_aes256_encoder aes){
psync_ssl_memclean(aes, sizeof(aes_context));
psync_free(aes);
}
psync_aes256_encoder psync_ssl_aes256_create_decoder(psync_symmetric_key_t key){
aes_context *aes;
assert(key->keylen>=PSYNC_AES256_KEY_SIZE);
aes=psync_new(aes_context);
aes_setkey_dec(aes, key->key, 256);
return aes;
}
void psync_ssl_aes256_free_decoder(psync_aes256_encoder aes){
psync_ssl_memclean(aes, sizeof(aes_context));
psync_free(aes);
}
psync_rsa_signature_t psync_ssl_rsa_sign_sha256_hash(psync_rsa_privatekey_t rsa, const unsigned char *data){
psync_rsa_signature_t ret;
int padding, hash_id;
ret=(psync_rsa_signature_t)psync_malloc(offsetof(psync_symmetric_key_struct_t, key)+rsa->len);
if (!ret)
return (psync_rsa_signature_t)(void *)PERROR_NO_MEMORY;
ret->datalen=rsa->len;
padding=rsa->padding;
hash_id=rsa->hash_id;
rsa_set_padding(rsa, RSA_PKCS_V21, POLARSSL_MD_SHA256);
if (rsa_rsassa_pss_sign(rsa, ctr_drbg_random_locked, &psync_mbed_rng, RSA_PRIVATE, POLARSSL_MD_SHA256, PSYNC_SHA256_DIGEST_LEN, data, ret->data)){
free(ret);
rsa_set_padding(rsa, padding, hash_id);
return (psync_rsa_signature_t)(void *)PSYNC_CRYPTO_NOT_STARTED;
}
rsa_set_padding(rsa, padding, hash_id);
return ret;
}
#if defined(PSYNC_AES_HW_GCC)
#define SSE2FUNC __attribute__((__target__("sse2")))
#define AESDEC ".byte 0x66,0x0F,0x38,0xDE,"
#define AESDECLAST ".byte 0x66,0x0F,0x38,0xDF,"
#define AESENC ".byte 0x66,0x0F,0x38,0xDC,"
#define AESENCLAST ".byte 0x66,0x0F,0x38,0xDD,"
#define xmm0_xmm1 "0xC8"
#define xmm0_xmm2 "0xD0"
#define xmm0_xmm3 "0xD8"
#define xmm0_xmm4 "0xE0"
#define xmm0_xmm5 "0xE8"
#define xmm1_xmm0 "0xC1"
#define xmm1_xmm2 "0xD1"
#define xmm1_xmm3 "0xD9"
#define xmm1_xmm4 "0xE1"
#define xmm1_xmm5 "0xE9"
SSE2FUNC void psync_aes256_encode_block_hw(psync_aes256_encoder enc, const unsigned char *src, unsigned char *dst){
asm("movdqu (%0), %%xmm0\n"
"lea 16(%0), %0\n"
"movdqa (%1), %%xmm1\n"
"dec %3\n"
"pxor %%xmm0, %%xmm1\n"
"movdqu (%0), %%xmm0\n"
"1:\n"
"lea 16(%0), %0\n"
"dec %3\n"
AESENC xmm0_xmm1 "\n"
"movdqu (%0), %%xmm0\n"
"jnz 1b\n"
AESENCLAST xmm0_xmm1 "\n"
"movdqa %%xmm1, (%2)\n"
:
: "r" (enc->rk), "r" (src), "r" (dst), "r" (enc->nr)
: "memory", "cc", "xmm0", "xmm1"
);
}
SSE2FUNC void psync_aes256_decode_block_hw(psync_aes256_decoder enc, const unsigned char *src, unsigned char *dst){
asm("movdqu (%0), %%xmm0\n"
"lea 16(%0), %0\n"
"movdqa (%1), %%xmm1\n"
"dec %3\n"
"pxor %%xmm0, %%xmm1\n"
"movdqu (%0), %%xmm0\n"
"1:\n"
"lea 16(%0), %0\n"
"dec %3\n"
AESDEC xmm0_xmm1 "\n"
"movdqu (%0), %%xmm0\n"
"jnz 1b\n"
AESDECLAST xmm0_xmm1 "\n"
"movdqa %%xmm1, (%2)\n"
:
: "r" (enc->rk), "r" (src), "r" (dst), "r" (enc->nr)
: "memory", "cc", "xmm0", "xmm1"
);
}
SSE2FUNC void psync_aes256_encode_2blocks_consec_hw(psync_aes256_encoder enc, const unsigned char *src, unsigned char *dst){
asm("movdqu (%0), %%xmm0\n"
"movdqa (%1), %%xmm1\n"
"dec %3\n"
"movdqa 16(%1), %%xmm2\n"
"lea 16(%0), %0\n"
"xorps %%xmm0, %%xmm1\n"
"pxor %%xmm0, %%xmm2\n"
"movdqu (%0), %%xmm0\n"
"1:\n"
"lea 16(%0), %0\n"
AESENC xmm0_xmm1 "\n"
"dec %3\n"
AESENC xmm0_xmm2 "\n"
"movdqu (%0), %%xmm0\n"
"jnz 1b\n"
AESENCLAST xmm0_xmm1 "\n"
AESENCLAST xmm0_xmm2 "\n"
"movdqa %%xmm1, (%2)\n"
"movdqa %%xmm2, 16(%2)\n"
:
: "r" (enc->rk), "r" (src), "r" (dst), "r" (enc->nr)
: "memory", "cc", "xmm0", "xmm1", "xmm2"
);
}
SSE2FUNC void psync_aes256_decode_2blocks_consec_hw(psync_aes256_decoder enc, const unsigned char *src, unsigned char *dst){
asm("movdqu (%0), %%xmm0\n"
"movdqa (%1), %%xmm1\n"
"dec %3\n"
"movdqa 16(%1), %%xmm2\n"
"lea 16(%0), %0\n"
"xorps %%xmm0, %%xmm1\n"
"pxor %%xmm0, %%xmm2\n"
"movdqu (%0), %%xmm0\n"
"1:\n"
"lea 16(%0), %0\n"
AESDEC xmm0_xmm1 "\n"
"dec %3\n"
AESDEC xmm0_xmm2 "\n"
"movdqu (%0), %%xmm0\n"
"jnz 1b\n"
AESDECLAST xmm0_xmm1 "\n"
AESDECLAST xmm0_xmm2 "\n"
"movdqa %%xmm1, (%2)\n"
"movdqa %%xmm2, 16(%2)\n"
:
: "r" (enc->rk), "r" (src), "r" (dst), "r" (enc->nr)
: "memory", "cc", "xmm0", "xmm1", "xmm2"
);
}
SSE2FUNC void psync_aes256_decode_4blocks_consec_xor_hw(psync_aes256_decoder enc, const unsigned char *src, unsigned char *dst, unsigned char *bxor){
asm("movdqu (%0), %%xmm0\n"
"shr %4\n"
"movdqa (%1), %%xmm2\n"
"dec %4\n"
"movdqa 16(%1), %%xmm3\n"
"xorps %%xmm0, %%xmm2\n"
"movdqa 32(%1), %%xmm4\n"
"xorps %%xmm0, %%xmm3\n"
"movdqa 48(%1), %%xmm5\n"
"pxor %%xmm0, %%xmm4\n"
"movdqu 16(%0), %%xmm1\n"
"pxor %%xmm0, %%xmm5\n"
"1:\n"
"lea 32(%0), %0\n"
"dec %4\n"
AESDEC xmm1_xmm2 "\n"
"movdqu (%0), %%xmm0\n"
AESDEC xmm1_xmm3 "\n"
AESDEC xmm1_xmm4 "\n"
AESDEC xmm1_xmm5 "\n"
AESDEC xmm0_xmm2 "\n"
"movdqu 16(%0), %%xmm1\n"
AESDEC xmm0_xmm3 "\n"
AESDEC xmm0_xmm4 "\n"
AESDEC xmm0_xmm5 "\n"
"jnz 1b\n"
AESDEC xmm1_xmm2 "\n"
"movdqu 32(%0), %%xmm0\n"
AESDEC xmm1_xmm3 "\n"
AESDEC xmm1_xmm4 "\n"
AESDEC xmm1_xmm5 "\n"
AESDECLAST xmm0_xmm2 "\n"
AESDECLAST xmm0_xmm3 "\n"
AESDECLAST xmm0_xmm4 "\n"
"pxor (%3), %%xmm2\n"
AESDECLAST xmm0_xmm5 "\n"
"pxor 16(%3), %%xmm3\n"
"movdqa %%xmm2, (%2)\n"
"pxor 32(%3), %%xmm4\n"
"movdqa %%xmm3, 16(%2)\n"
"pxor 48(%3), %%xmm5\n"
"movdqa %%xmm4, 32(%2)\n"
"movdqa %%xmm5, 48(%2)\n"
:
: "r" (enc->rk), "r" (src), "r" (dst), "r" (bxor), "r" (enc->nr)
: "memory", "cc", "xmm0", "xmm1", "xmm2", "xmm3", "xmm4", "xmm5"
);
}
#elif defined(PSYNC_AES_HW_MSC)
void psync_aes256_encode_block_hw(psync_aes256_encoder enc, const unsigned char *src, unsigned char *dst){
__m128i r0, r1;
unsigned char *key;
unsigned cnt;
key=(unsigned char *)enc->rk;
r0=_mm_loadu_si128((__m128i *)key);
r1=_mm_load_si128((__m128i *)src);
cnt=enc->nr-1;
key+=16;
r1=_mm_xor_si128(r0, r1);
r0=_mm_loadu_si128((__m128i *)key);
do{
key+=16;
r1=_mm_aesenc_si128(r1, r0);
r0=_mm_loadu_si128((__m128i *)key);
} while (--cnt);
r1=_mm_aesenclast_si128(r1, r0);
_mm_store_si128((__m128i *)dst, r1);
}
void psync_aes256_decode_block_hw(psync_aes256_encoder enc, const unsigned char *src, unsigned char *dst){
__m128i r0, r1;
unsigned char *key;
unsigned cnt;
key=(unsigned char *)enc->rk;
r0=_mm_loadu_si128((__m128i *)key);
r1=_mm_load_si128((__m128i *)src);
cnt=enc->nr-1;
key+=16;
r1=_mm_xor_si128(r0, r1);
r0=_mm_loadu_si128((__m128i *)key);
do{
key+=16;
r1=_mm_aesdec_si128(r1, r0);
r0=_mm_loadu_si128((__m128i *)key);
} while (--cnt);
r1=_mm_aesdeclast_si128(r1, r0);
_mm_store_si128((__m128i *)dst, r1);
}
void psync_aes256_encode_2blocks_consec_hw(psync_aes256_encoder enc, const unsigned char *src, unsigned char *dst){
__m128i r0, r1, r2;
unsigned char *key;
unsigned cnt;
key=(unsigned char *)enc->rk;
r0=_mm_loadu_si128((__m128i *)key);
r1=_mm_load_si128((__m128i *)src);
r2=_mm_load_si128((__m128i *)(src+16));
cnt=enc->nr-1;
key+=16;
r1=_mm_xor_si128(r0, r1);
r2=_mm_xor_si128(r0, r2);
r0=_mm_loadu_si128((__m128i *)key);
do{
key+=16;
r1=_mm_aesenc_si128(r1, r0);
r2=_mm_aesenc_si128(r2, r0);
r0=_mm_loadu_si128((__m128i *)key);
} while (--cnt);
r1=_mm_aesenclast_si128(r1, r0);
r2=_mm_aesenclast_si128(r2, r0);
_mm_store_si128((__m128i *)dst, r1);
_mm_store_si128((__m128i *)(dst+16), r2);
}
void psync_aes256_decode_2blocks_consec_hw(psync_aes256_decoder enc, const unsigned char *src, unsigned char *dst){
__m128i r0, r1, r2;
unsigned char *key;
unsigned cnt;
key=(unsigned char *)enc->rk;
r0=_mm_loadu_si128((__m128i *)key);
r1=_mm_load_si128((__m128i *)src);
r2=_mm_load_si128((__m128i *)(src+16));
cnt=enc->nr-1;
key+=16;
r1=_mm_xor_si128(r0, r1);
r2=_mm_xor_si128(r0, r2);
r0=_mm_loadu_si128((__m128i *)key);
do{
key+=16;
r1=_mm_aesdec_si128(r1, r0);
r2=_mm_aesdec_si128(r2, r0);
r0=_mm_loadu_si128((__m128i *)key);
} while (--cnt);
r1=_mm_aesdeclast_si128(r1, r0);
r2=_mm_aesdeclast_si128(r2, r0);
_mm_store_si128((__m128i *)dst, r1);
_mm_store_si128((__m128i *)(dst+16), r2);
}
void psync_aes256_decode_4blocks_consec_xor_hw(psync_aes256_decoder enc, const unsigned char *src, unsigned char *dst, unsigned char *bxor){
__m128i r0, r1, r2, r3, r4;
unsigned char *key;
unsigned cnt;
key=(unsigned char *)enc->rk;
r0=_mm_loadu_si128((__m128i *)key);
r1=_mm_load_si128((__m128i *)src);
r2=_mm_load_si128((__m128i *)(src+16));
r3=_mm_load_si128((__m128i *)(src+32));
r4=_mm_load_si128((__m128i *)(src+48));
cnt=enc->nr-1;
key+=16;
r1=_mm_xor_si128(r0, r1);
r2=_mm_xor_si128(r0, r2);
r3=_mm_xor_si128(r0, r3);
r4=_mm_xor_si128(r0, r4);
r0=_mm_loadu_si128((__m128i *)key);
do{
key+=16;
r1=_mm_aesdec_si128(r1, r0);
r2=_mm_aesdec_si128(r2, r0);
r3=_mm_aesdec_si128(r3, r0);
r4=_mm_aesdec_si128(r4, r0);
r0=_mm_loadu_si128((__m128i *)key);
} while (--cnt);
r1=_mm_aesdeclast_si128(r1, r0);
r2=_mm_aesdeclast_si128(r2, r0);
r3=_mm_aesdeclast_si128(r3, r0);
r4=_mm_aesdeclast_si128(r4, r0);
r0=_mm_load_si128((__m128i *)bxor);
r1=_mm_xor_si128(r0, r1);
r0=_mm_load_si128((__m128i *)(bxor+16));
_mm_store_si128((__m128i *)dst, r1);
r2=_mm_xor_si128(r0, r2);
r0=_mm_load_si128((__m128i *)(bxor+32));
_mm_store_si128((__m128i *)(dst+16), r2);
r3=_mm_xor_si128(r0, r3);
r0=_mm_load_si128((__m128i *)(bxor+48));
_mm_store_si128((__m128i *)(dst+32), r3);
r4=_mm_xor_si128(r0, r4);
_mm_store_si128((__m128i *)(dst+48), r4);
}
#endif
#if defined(PSYNC_AES_HW)
void psync_aes256_decode_4blocks_consec_xor_sw(psync_aes256_decoder enc, const unsigned char *src, unsigned char *dst, unsigned char *bxor){
unsigned long i;
aes_crypt_ecb(enc, AES_DECRYPT, src, dst);
aes_crypt_ecb(enc, AES_DECRYPT, src+PSYNC_AES256_BLOCK_SIZE, dst+PSYNC_AES256_BLOCK_SIZE);
aes_crypt_ecb(enc, AES_DECRYPT, src+PSYNC_AES256_BLOCK_SIZE*2, dst+PSYNC_AES256_BLOCK_SIZE*2);
aes_crypt_ecb(enc, AES_DECRYPT, src+PSYNC_AES256_BLOCK_SIZE*3, dst+PSYNC_AES256_BLOCK_SIZE*3);
for (i=0; i<PSYNC_AES256_BLOCK_SIZE*4/sizeof(unsigned long); i++)
((unsigned long *)dst)[i]^=((unsigned long *)bxor)[i];
}
#endif
Reference in New Issue View Git Blame Copy Permalink