167 lines
7.7 KiB
C
167 lines
7.7 KiB
C
/*
|
|
Copyright (c) 2013-2014 Anton Titov.
|
|
|
|
Copyright (c) 2013-2014 pCloud Ltd. All rights reserved.
|
|
|
|
Redistribution and use in source and binary forms, with or without
|
|
modification, are permitted provided that the following conditions
|
|
are met: Redistributions of source code must retain the above
|
|
copyright notice, this list of conditions and the following
|
|
disclaimer. Redistributions in binary form must reproduce the
|
|
above copyright notice, this list of conditions and the following
|
|
disclaimer in the documentation and/or other materials provided
|
|
with the distribution. Neither the name of pCloud Ltd nor the
|
|
names of its contributors may be used to endorse or promote
|
|
products derived from this software without specific prior written
|
|
permission.
|
|
|
|
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
|
FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL pCloud
|
|
Ltd BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
|
|
EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
|
PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
|
|
PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
|
|
OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
|
|
USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
|
|
DAMAGE.
|
|
*/
|
|
|
|
#ifndef _PSYNC_SSL_H
|
|
#define _PSYNC_SSL_H
|
|
|
|
#include <mbedtls/aes.h>
|
|
#include <mbedtls/rsa.h>
|
|
#include <mbedtls/sha1.h>
|
|
#include <mbedtls/sha256.h>
|
|
#include <mbedtls/sha512.h>
|
|
|
|
#include "pcompiler.h"
|
|
|
|
// AES256
|
|
#define PSYNC_AES256_BLOCK_SIZE 16
|
|
#define PSYNC_AES256_KEY_SIZE 32
|
|
|
|
// SHA1
|
|
#define PSYNC_SHA1_BLOCK_LEN 64
|
|
#define PSYNC_SHA1_DIGEST_LEN 20
|
|
#define PSYNC_SHA1_DIGEST_HEXLEN 40
|
|
#define psync_sha1_ctx mbedtls_sha1_context
|
|
#define psync_sha1(data, datalen, checksum) \
|
|
mbedtls_sha1(data, datalen, checksum)
|
|
#define psync_sha1_init(pctx) mbedtls_sha1_starts(pctx)
|
|
#define psync_sha1_update(pctx, data, datalen) \
|
|
mbedtls_sha1_update(pctx, (const unsigned char *)data, datalen)
|
|
#define psync_sha1_final(checksum, pctx) mbedtls_sha1_finish(pctx, checksum)
|
|
|
|
// SHA256
|
|
#define PSYNC_SHA256_BLOCK_LEN 64
|
|
#define PSYNC_SHA256_DIGEST_LEN 32
|
|
#define PSYNC_SHA256_DIGEST_HEXLEN 64
|
|
#define psync_sha256_ctx mbedtls_sha256_context
|
|
#define psync_sha256(data, datalen, checksum) \
|
|
mbedtls_sha256(data, datalen, checksum, 0)
|
|
#define psync_sha256_init(pctx) mbedtls_sha256_starts(pctx, 0)
|
|
#define psync_sha256_update(pctx, data, datalen) \
|
|
mbedtls_sha256_update(pctx, (const unsigned char *)data, datalen)
|
|
#define psync_sha256_final(checksum, pctx) mbedtls_sha256_finish(pctx, checksum)
|
|
|
|
// SHA512
|
|
#define PSYNC_SHA512_BLOCK_LEN 128
|
|
#define PSYNC_SHA512_DIGEST_LEN 64
|
|
#define PSYNC_SHA512_DIGEST_HEXLEN 128
|
|
#define psync_sha512_ctx mbedtls_sha512_context
|
|
#define psync_sha512(data, datalen, checksum) \
|
|
mbedtls_sha512(data, datalen, checksum, 0)
|
|
#define psync_sha512_init(pctx) mbedtls_sha512_starts(pctx, 0)
|
|
#define psync_sha512_update(pctx, data, datalen) \
|
|
mbedtls_sha512_update(pctx, (const unsigned char *)data, datalen)
|
|
#define psync_sha512_final(checksum, pctx) mbedtls_sha512_finish(pctx, checksum)
|
|
|
|
// externs
|
|
extern PSYNC_THREAD int psync_ssl_errno;
|
|
|
|
#define PSYNC_INVALID_RSA NULL
|
|
#define PSYNC_INVALID_SYM_KEY NULL
|
|
#define PSYNC_INVALID_ENC_SYM_KEY NULL
|
|
#define PSYNC_INVALID_ENCODER NULL
|
|
#define PSYNC_INVALID_BIN_RSA NULL
|
|
#define PSYNC_SSL_ERR_WANT_READ 1
|
|
#define PSYNC_SSL_ERR_WANT_WRITE 2
|
|
#define PSYNC_SSL_ERR_UNKNOWN 3
|
|
#define PSYNC_SSL_NEED_FINISH -2
|
|
#define PSYNC_SSL_FAIL -1
|
|
#define PSYNC_SSL_SUCCESS 0
|
|
|
|
#define psync_ssl_alloc_binary_rsa pssl_alloc_symkey
|
|
|
|
typedef struct {
|
|
size_t datalen;
|
|
unsigned char data[];
|
|
} psync_encrypted_data_struct_t, *psync_encrypted_data_t;
|
|
|
|
typedef struct {
|
|
size_t keylen;
|
|
unsigned char key[];
|
|
} psync_symmetric_key_struct_t, *psync_symmetric_key_t;
|
|
|
|
typedef mbedtls_rsa_context *psync_rsa_t;
|
|
typedef mbedtls_rsa_context *psync_rsa_publickey_t;
|
|
typedef mbedtls_rsa_context *psync_rsa_privatekey_t;
|
|
typedef mbedtls_aes_context *psync_aes256_encoder;
|
|
typedef mbedtls_aes_context *psync_aes256_decoder;
|
|
typedef psync_encrypted_data_t psync_encrypted_symmetric_key_t;
|
|
typedef psync_encrypted_data_t psync_binary_rsa_key_t;
|
|
typedef psync_encrypted_data_t psync_rsa_signature_t;
|
|
|
|
typedef void (*psync_ssl_debug_callback_t)(void *ctx, int level, const char *msg, int, const char *);
|
|
|
|
void pssl_set_log_threshold(int threshold);
|
|
void pssl_set_debug_cb(psync_ssl_debug_callback_t cb, void *ctx);
|
|
int pssl_init();
|
|
void pssl_memclean(void *ptr, size_t len);
|
|
int pssl_connect(int sock, void **sslconn, const char *hostname);
|
|
int pssl_connect_finish(void *sslconn, const char *hostname);
|
|
void pssl_free(void *sslconn);
|
|
int pssl_shutdown(void *sslconn);
|
|
int pssl_pending(void *sslconn);
|
|
int pssl_read(void *sslconn, void *buf, int num);
|
|
int pssl_write(void *sslconn, const void *buf, int num);
|
|
void pssl_rand_strong(unsigned char *buf, int num);
|
|
void pssl_rand_weak(unsigned char *buf, int num);
|
|
psync_rsa_t pssl_rsa_gen(int bits);
|
|
void pssl_rsa_free(psync_rsa_t rsa);
|
|
psync_rsa_publickey_t pssl_rsa_get_pub(psync_rsa_t rsa);
|
|
void pssl_rsa_free_pub(psync_rsa_publickey_t key);
|
|
psync_rsa_privatekey_t pssl_rsa_get_priv(psync_rsa_t rsa);
|
|
void pssl_rsa_free_priv(psync_rsa_privatekey_t key);
|
|
psync_binary_rsa_key_t pssl_rsa_bin_pub(psync_rsa_publickey_t rsa);
|
|
psync_binary_rsa_key_t pssl_rsa_priv_bin(psync_rsa_privatekey_t rsa);
|
|
psync_rsa_publickey_t pssl_rsa_load_pub(const unsigned char *keydata, size_t keylen);
|
|
psync_rsa_privatekey_t pssl_rsa_load_priv(const unsigned char *keydata, size_t keylen);
|
|
void pssl_rsa_bin_free(psync_binary_rsa_key_t bin);
|
|
psync_symmetric_key_t pssl_gen_symkey_pass(const char *password, size_t keylen, const unsigned char *salt, size_t saltlen, size_t iterations);
|
|
char *pssl_derive_pwd(const char *username, const char *passphrase);
|
|
psync_encrypted_symmetric_key_t pssl_alloc_symkey(size_t len);
|
|
psync_encrypted_symmetric_key_t pssl_symkey_copy(psync_encrypted_symmetric_key_t src);
|
|
void pssl_symkey_free(psync_symmetric_key_t key);
|
|
psync_encrypted_symmetric_key_t pssl_rsa_encrypt(psync_rsa_publickey_t rsa, const unsigned char *data, size_t datalen);
|
|
psync_symmetric_key_t pssl_rsa_decrypt(psync_rsa_privatekey_t rsa, const unsigned char *data, size_t datalen);
|
|
psync_encrypted_symmetric_key_t pssl_symkey_encrypt(psync_rsa_publickey_t rsa, const psync_symmetric_key_t key);
|
|
psync_symmetric_key_t pssl_symkey_decrypt(psync_rsa_privatekey_t rsa, const psync_encrypted_symmetric_key_t enckey);
|
|
psync_aes256_encoder pssl_enc_create(psync_symmetric_key_t key);
|
|
void pssl_enc_free(psync_aes256_encoder aes);
|
|
psync_aes256_encoder pssl_dec_create(psync_symmetric_key_t key);
|
|
void pssl_dec_free(psync_aes256_encoder aes);
|
|
psync_rsa_signature_t pssl_sha256_sign(psync_rsa_privatekey_t rsa, const unsigned char *data);
|
|
psync_symmetric_key_t pssl_symkey_decrypt_lock(psync_rsa_privatekey_t *rsa, const psync_encrypted_symmetric_key_t *enckey);
|
|
void pssl_enc_blk(psync_aes256_encoder enc, const unsigned char *src, unsigned char *dst);
|
|
void pssl_dec_blk(psync_aes256_decoder enc, const unsigned char *src, unsigned char *dst);
|
|
void pssl_enc_2blk(psync_aes256_decoder enc, const unsigned char *src, unsigned char *dst);
|
|
void pssl_dec_2blk(psync_aes256_decoder enc, const unsigned char *src, unsigned char *dst);
|
|
void pssl_dec_4blk_xor(psync_aes256_decoder enc, const unsigned char *src, unsigned char *dst, unsigned char *bxor);
|
|
|
|
#endif
|