1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
#ifndef _IPXE_CBC_H
#define _IPXE_CBC_H
/** @file
*
* Cipher-block chaining
*
*/
FILE_LICENCE ( GPL2_OR_LATER );
#include <ipxe/crypto.h>
/**
* Set key
*
* @v ctx Context
* @v key Key
* @v keylen Key length
* @v raw_cipher Underlying cipher algorithm
* @v cbc_ctx CBC context
* @ret rc Return status code
*/
static inline int cbc_setkey ( void *ctx, const void *key, size_t keylen,
struct cipher_algorithm *raw_cipher,
void *cbc_ctx __unused ) {
return cipher_setkey ( raw_cipher, ctx, key, keylen );
}
/**
* Set initialisation vector
*
* @v ctx Context
* @v iv Initialisation vector
* @v raw_cipher Underlying cipher algorithm
* @v cbc_ctx CBC context
*/
static inline void cbc_setiv ( void *ctx __unused, const void *iv,
struct cipher_algorithm *raw_cipher,
void *cbc_ctx ) {
memcpy ( cbc_ctx, iv, raw_cipher->blocksize );
}
extern void cbc_encrypt ( void *ctx, const void *src, void *dst,
size_t len, struct cipher_algorithm *raw_cipher,
void *cbc_ctx );
extern void cbc_decrypt ( void *ctx, const void *src, void *dst,
size_t len, struct cipher_algorithm *raw_cipher,
void *cbc_ctx );
/**
* Create a cipher-block chaining mode of behaviour of an existing cipher
*
* @v _cbc_name Name for the new CBC cipher
* @v _cbc_cipher New cipher algorithm
* @v _raw_cipher Underlying cipher algorithm
* @v _raw_context Context structure for the underlying cipher
* @v _blocksize Cipher block size
*/
#define CBC_CIPHER( _cbc_name, _cbc_cipher, _raw_cipher, _raw_context, \
_blocksize ) \
struct _cbc_name ## _context { \
_raw_context raw_ctx; \
uint8_t cbc_ctx[_blocksize]; \
}; \
static int _cbc_name ## _setkey ( void *ctx, const void *key, \
size_t keylen ) { \
struct _cbc_name ## _context * _cbc_name ## _ctx = ctx; \
return cbc_setkey ( &_cbc_name ## _ctx->raw_ctx, key, keylen, \
&_raw_cipher, &_cbc_name ## _ctx->cbc_ctx );\
} \
static void _cbc_name ## _setiv ( void *ctx, const void *iv ) { \
struct _cbc_name ## _context * _cbc_name ## _ctx = ctx; \
cbc_setiv ( &_cbc_name ## _ctx->raw_ctx, iv, \
&_raw_cipher, &aes_cbc_ctx->cbc_ctx ); \
} \
static void _cbc_name ## _encrypt ( void *ctx, const void *src, \
void *dst, size_t len ) { \
struct _cbc_name ## _context * _cbc_name ## _ctx = ctx; \
cbc_encrypt ( &_cbc_name ## _ctx->raw_ctx, src, dst, len, \
&_raw_cipher, &aes_cbc_ctx->cbc_ctx ); \
} \
static void _cbc_name ## _decrypt ( void *ctx, const void *src, \
void *dst, size_t len ) { \
struct _cbc_name ## _context * _cbc_name ## _ctx = ctx; \
cbc_decrypt ( &_cbc_name ## _ctx->raw_ctx, src, dst, len, \
&_raw_cipher, &aes_cbc_ctx->cbc_ctx ); \
} \
struct cipher_algorithm _cbc_cipher = { \
.name = #_cbc_name, \
.ctxsize = sizeof ( struct _cbc_name ## _context ), \
.blocksize = _blocksize, \
.setkey = _cbc_name ## _setkey, \
.setiv = _cbc_name ## _setiv, \
.encrypt = _cbc_name ## _encrypt, \
.decrypt = _cbc_name ## _decrypt, \
};
#endif /* _IPXE_CBC_H */
|
