mirror of
https://github.com/QuasarApp/openssl.git
synced 2025-05-19 12:59:40 +00:00
4b9c750be8
If we call EVP_EncryptUpdate/EVP_DecryptUpdate with length 0 we should be able to handle it. Most importantly we shouldn't get different results if we do this compared to if we don't! An exception is made for CCM mode which has special handling for this in the low level cipher function. Fixes #8675 Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/10530)
320 lines
12 KiB
C
320 lines
12 KiB
C
/*
|
|
* Copyright 2019 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*/
|
|
|
|
/* Dispatch functions for chacha20_poly1305 cipher */
|
|
|
|
#include "cipher_chacha20_poly1305.h"
|
|
#include "prov/implementations.h"
|
|
#include "prov/providercommonerr.h"
|
|
|
|
|
|
#define CHACHA20_POLY1305_KEYLEN CHACHA_KEY_SIZE
|
|
#define CHACHA20_POLY1305_BLKLEN 1
|
|
#define CHACHA20_POLY1305_MAX_IVLEN 12
|
|
#define CHACHA20_POLY1305_MODE 0
|
|
/* TODO(3.0) Figure out what flags are required */
|
|
#define CHACHA20_POLY1305_FLAGS (EVP_CIPH_FLAG_AEAD_CIPHER \
|
|
| EVP_CIPH_ALWAYS_CALL_INIT \
|
|
| EVP_CIPH_CTRL_INIT \
|
|
| EVP_CIPH_CUSTOM_COPY \
|
|
| EVP_CIPH_FLAG_CUSTOM_CIPHER \
|
|
| EVP_CIPH_CUSTOM_IV \
|
|
| EVP_CIPH_CUSTOM_IV_LENGTH)
|
|
|
|
static OSSL_OP_cipher_newctx_fn chacha20_poly1305_newctx;
|
|
static OSSL_OP_cipher_freectx_fn chacha20_poly1305_freectx;
|
|
static OSSL_OP_cipher_encrypt_init_fn chacha20_poly1305_einit;
|
|
static OSSL_OP_cipher_decrypt_init_fn chacha20_poly1305_dinit;
|
|
static OSSL_OP_cipher_get_params_fn chacha20_poly1305_get_params;
|
|
static OSSL_OP_cipher_get_ctx_params_fn chacha20_poly1305_get_ctx_params;
|
|
static OSSL_OP_cipher_set_ctx_params_fn chacha20_poly1305_set_ctx_params;
|
|
static OSSL_OP_cipher_cipher_fn chacha20_poly1305_cipher;
|
|
static OSSL_OP_cipher_final_fn chacha20_poly1305_final;
|
|
static OSSL_OP_cipher_gettable_ctx_params_fn chacha20_poly1305_gettable_ctx_params;
|
|
#define chacha20_poly1305_settable_ctx_params cipher_aead_settable_ctx_params
|
|
#define chacha20_poly1305_gettable_params cipher_generic_gettable_params
|
|
#define chacha20_poly1305_update chacha20_poly1305_cipher
|
|
|
|
static void *chacha20_poly1305_newctx(void *provctx)
|
|
{
|
|
PROV_CHACHA20_POLY1305_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx));
|
|
|
|
if (ctx != NULL) {
|
|
cipher_generic_initkey(&ctx->base, CHACHA20_POLY1305_KEYLEN * 8,
|
|
CHACHA20_POLY1305_BLKLEN * 8,
|
|
CHACHA20_POLY1305_IVLEN * 8,
|
|
CHACHA20_POLY1305_MODE,
|
|
CHACHA20_POLY1305_FLAGS,
|
|
PROV_CIPHER_HW_chacha20_poly1305(
|
|
CHACHA20_POLY1305_KEYLEN * 8),
|
|
NULL);
|
|
ctx->nonce_len = CHACHA20_POLY1305_IVLEN;
|
|
ctx->tls_payload_length = NO_TLS_PAYLOAD_LENGTH;
|
|
chacha20_initctx(&ctx->chacha);
|
|
}
|
|
return ctx;
|
|
}
|
|
|
|
static void chacha20_poly1305_freectx(void *vctx)
|
|
{
|
|
PROV_CHACHA20_POLY1305_CTX *ctx = (PROV_CHACHA20_POLY1305_CTX *)vctx;
|
|
|
|
if (ctx != NULL)
|
|
OPENSSL_clear_free(ctx, sizeof(*ctx));
|
|
}
|
|
|
|
static int chacha20_poly1305_get_params(OSSL_PARAM params[])
|
|
{
|
|
return cipher_generic_get_params(params, 0, CHACHA20_POLY1305_FLAGS,
|
|
CHACHA20_POLY1305_KEYLEN * 8,
|
|
CHACHA20_POLY1305_BLKLEN * 8,
|
|
CHACHA20_POLY1305_IVLEN * 8);
|
|
}
|
|
|
|
static int chacha20_poly1305_get_ctx_params(void *vctx, OSSL_PARAM params[])
|
|
{
|
|
PROV_CHACHA20_POLY1305_CTX *ctx = (PROV_CHACHA20_POLY1305_CTX *)vctx;
|
|
OSSL_PARAM *p;
|
|
|
|
p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_IVLEN);
|
|
if (p != NULL) {
|
|
if (!OSSL_PARAM_set_size_t(p, ctx->nonce_len)) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
|
|
return 0;
|
|
}
|
|
}
|
|
p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_KEYLEN);
|
|
if (p != NULL && !OSSL_PARAM_set_size_t(p, CHACHA20_POLY1305_KEYLEN)) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
|
|
return 0;
|
|
}
|
|
p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_AEAD_TAGLEN);
|
|
if (p != NULL && !OSSL_PARAM_set_size_t(p, ctx->tag_len)) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
|
|
return 0;
|
|
}
|
|
p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_AEAD_TLS1_AAD_PAD);
|
|
if (p != NULL && !OSSL_PARAM_set_size_t(p, ctx->tls_aad_pad_sz)) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
|
|
return 0;
|
|
}
|
|
|
|
p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_AEAD_TAG);
|
|
if (p != NULL) {
|
|
if (p->data_type != OSSL_PARAM_OCTET_STRING) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
|
|
return 0;
|
|
}
|
|
if (!ctx->base.enc) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_TAG_NOTSET);
|
|
return 0;
|
|
}
|
|
if (p->data_size == 0 || p->data_size > POLY1305_BLOCK_SIZE) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_TAGLEN);
|
|
return 0;
|
|
}
|
|
memcpy(p->data, ctx->tag, p->data_size);
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
static const OSSL_PARAM chacha20_poly1305_known_gettable_ctx_params[] = {
|
|
OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_KEYLEN, NULL),
|
|
OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_IVLEN, NULL),
|
|
OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_AEAD_TAGLEN, NULL),
|
|
OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TAG, NULL, 0),
|
|
OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_AEAD_TLS1_AAD_PAD, NULL),
|
|
OSSL_PARAM_END
|
|
};
|
|
static const OSSL_PARAM *chacha20_poly1305_gettable_ctx_params(void)
|
|
{
|
|
return chacha20_poly1305_known_gettable_ctx_params;
|
|
}
|
|
|
|
static int chacha20_poly1305_set_ctx_params(void *vctx,
|
|
const OSSL_PARAM params[])
|
|
{
|
|
const OSSL_PARAM *p;
|
|
size_t len;
|
|
PROV_CHACHA20_POLY1305_CTX *ctx = (PROV_CHACHA20_POLY1305_CTX *)vctx;
|
|
PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
|
|
(PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->base.hw;
|
|
|
|
p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_KEYLEN);
|
|
if (p != NULL) {
|
|
if (!OSSL_PARAM_get_size_t(p, &len)) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
|
|
return 0;
|
|
}
|
|
if (len != CHACHA20_POLY1305_KEYLEN) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_KEY_LENGTH);
|
|
return 0;
|
|
}
|
|
}
|
|
p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_IVLEN);
|
|
if (p != NULL) {
|
|
if (!OSSL_PARAM_get_size_t(p, &len)) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
|
|
return 0;
|
|
}
|
|
if (len == 0 || len > CHACHA20_POLY1305_MAX_IVLEN) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_IV_LENGTH);
|
|
return 0;
|
|
}
|
|
ctx->nonce_len = len;
|
|
}
|
|
|
|
p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_AEAD_TAG);
|
|
if (p != NULL) {
|
|
if (p->data_type != OSSL_PARAM_OCTET_STRING) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
|
|
return 0;
|
|
}
|
|
if (p->data_size == 0 || p->data_size > POLY1305_BLOCK_SIZE) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_TAGLEN);
|
|
return 0;
|
|
}
|
|
if (p->data != NULL) {
|
|
if (ctx->base.enc) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_TAG_NOT_NEEDED);
|
|
return 0;
|
|
}
|
|
memcpy(ctx->tag, p->data, p->data_size);
|
|
}
|
|
ctx->tag_len = p->data_size;
|
|
}
|
|
|
|
p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_AEAD_TLS1_AAD);
|
|
if (p != NULL) {
|
|
if (p->data_type != OSSL_PARAM_OCTET_STRING) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
|
|
return 0;
|
|
}
|
|
len = hw->tls_init(&ctx->base, p->data, p->data_size);
|
|
if (len == 0) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_DATA);
|
|
return 0;
|
|
}
|
|
ctx->tls_aad_pad_sz = len;
|
|
}
|
|
|
|
p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_AEAD_TLS1_IV_FIXED);
|
|
if (p != NULL) {
|
|
if (p->data_type != OSSL_PARAM_OCTET_STRING) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
|
|
return 0;
|
|
}
|
|
if (hw->tls_iv_set_fixed(&ctx->base, p->data, p->data_size) == 0) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_IVLEN);
|
|
return 0;
|
|
}
|
|
}
|
|
/* ignore OSSL_CIPHER_PARAM_AEAD_MAC_KEY */
|
|
return 1;
|
|
}
|
|
|
|
static int chacha20_poly1305_einit(void *vctx, const unsigned char *key,
|
|
size_t keylen, const unsigned char *iv,
|
|
size_t ivlen)
|
|
{
|
|
int ret;
|
|
|
|
ret = cipher_generic_einit(vctx, key, keylen, iv, ivlen);
|
|
if (ret && iv != NULL) {
|
|
PROV_CIPHER_CTX *ctx = (PROV_CIPHER_CTX *)vctx;
|
|
PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
|
|
(PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;
|
|
|
|
hw->initiv(ctx);
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
static int chacha20_poly1305_dinit(void *vctx, const unsigned char *key,
|
|
size_t keylen, const unsigned char *iv,
|
|
size_t ivlen)
|
|
{
|
|
int ret;
|
|
|
|
ret = cipher_generic_dinit(vctx, key, keylen, iv, ivlen);
|
|
if (ret && iv != NULL) {
|
|
PROV_CIPHER_CTX *ctx = (PROV_CIPHER_CTX *)vctx;
|
|
PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
|
|
(PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;
|
|
|
|
hw->initiv(ctx);
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
static int chacha20_poly1305_cipher(void *vctx, unsigned char *out,
|
|
size_t *outl, size_t outsize,
|
|
const unsigned char *in, size_t inl)
|
|
{
|
|
PROV_CIPHER_CTX *ctx = (PROV_CIPHER_CTX *)vctx;
|
|
PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
|
|
(PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;
|
|
|
|
if (inl == 0) {
|
|
*outl = 0;
|
|
return 1;
|
|
}
|
|
|
|
if (outsize < inl) {
|
|
ERR_raise(ERR_LIB_PROV, PROV_R_OUTPUT_BUFFER_TOO_SMALL);
|
|
return 0;
|
|
}
|
|
|
|
if (!hw->aead_cipher(ctx, out, outl, in, inl))
|
|
return 0;
|
|
|
|
*outl = inl;
|
|
return 1;
|
|
}
|
|
|
|
static int chacha20_poly1305_final(void *vctx, unsigned char *out, size_t *outl,
|
|
size_t outsize)
|
|
{
|
|
PROV_CIPHER_CTX *ctx = (PROV_CIPHER_CTX *)vctx;
|
|
PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
|
|
(PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;
|
|
|
|
if (hw->aead_cipher(ctx, out, outl, NULL, 0) <= 0)
|
|
return 0;
|
|
|
|
*outl = 0;
|
|
return 1;
|
|
}
|
|
|
|
/* chacha20_poly1305_functions */
|
|
const OSSL_DISPATCH chacha20_poly1305_functions[] = {
|
|
{ OSSL_FUNC_CIPHER_NEWCTX, (void (*)(void))chacha20_poly1305_newctx },
|
|
{ OSSL_FUNC_CIPHER_FREECTX, (void (*)(void))chacha20_poly1305_freectx },
|
|
{ OSSL_FUNC_CIPHER_ENCRYPT_INIT, (void (*)(void))chacha20_poly1305_einit },
|
|
{ OSSL_FUNC_CIPHER_DECRYPT_INIT, (void (*)(void))chacha20_poly1305_dinit },
|
|
{ OSSL_FUNC_CIPHER_UPDATE, (void (*)(void))chacha20_poly1305_update },
|
|
{ OSSL_FUNC_CIPHER_FINAL, (void (*)(void))chacha20_poly1305_final },
|
|
{ OSSL_FUNC_CIPHER_CIPHER, (void (*)(void))chacha20_poly1305_cipher },
|
|
{ OSSL_FUNC_CIPHER_GET_PARAMS,
|
|
(void (*)(void))chacha20_poly1305_get_params },
|
|
{ OSSL_FUNC_CIPHER_GETTABLE_PARAMS,
|
|
(void (*)(void))chacha20_poly1305_gettable_params },
|
|
{ OSSL_FUNC_CIPHER_GET_CTX_PARAMS,
|
|
(void (*)(void))chacha20_poly1305_get_ctx_params },
|
|
{ OSSL_FUNC_CIPHER_GETTABLE_CTX_PARAMS,
|
|
(void (*)(void))chacha20_poly1305_gettable_ctx_params },
|
|
{ OSSL_FUNC_CIPHER_SET_CTX_PARAMS,
|
|
(void (*)(void))chacha20_poly1305_set_ctx_params },
|
|
{ OSSL_FUNC_CIPHER_SETTABLE_CTX_PARAMS,
|
|
(void (*)(void))chacha20_poly1305_settable_ctx_params },
|
|
{ 0, NULL }
|
|
};
|
|
|