usr/src/common/crypto/aes/aes_modes.c

   1 /*
   2  * CDDL HEADER START
   3  *
   4  * The contents of this file are subject to the terms of the
   5  * Common Development and Distribution License (the "License").
   6  * You may not use this file except in compliance with the License.
   7  *
   8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   9  * or http://www.opensolaris.org/os/licensing.
  10  * See the License for the specific language governing permissions
  11  * and limitations under the License.
  12  *
  13  * When distributing Covered Code, include this CDDL HEADER in each
  14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  15  * If applicable, add the following below this CDDL HEADER, with the
  16  * fields enclosed by brackets "[]" replaced with your own identifying
  17  * information: Portions Copyright [yyyy] [name of copyright owner]
  18  *
  19  * CDDL HEADER END
  20  */
  21 /*
  22  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
  23  * Use is subject to license terms.
  24  */
  25
  26 #include <sys/types.h>
  27 #include <sys/sysmacros.h>
  28 #include <modes/modes.h>
  29 #include "aes_impl.h"
  30 #ifndef _KERNEL
  31 #include <stdlib.h>
  32 #endif  /* !_KERNEL */
  33
  34
  35 /* Copy a 16-byte AES block from "in" to "out" */
  36 void
  37 aes_copy_block(uint8_t *in, uint8_t *out)
  38 {
  39         if (IS_P2ALIGNED2(in, out, sizeof (uint32_t))) {
  40                 /* LINTED: pointer alignment */
  41                 *(uint32_t *)&out[0] = *(uint32_t *)&in[0];
  42                 /* LINTED: pointer alignment */
  43                 *(uint32_t *)&out[4] = *(uint32_t *)&in[4];
  44                 /* LINTED: pointer alignment */
  45                 *(uint32_t *)&out[8] = *(uint32_t *)&in[8];
  46                 /* LINTED: pointer alignment */
  47                 *(uint32_t *)&out[12] = *(uint32_t *)&in[12];
  48         } else {
  49                 AES_COPY_BLOCK(in, out);
  50         }
  51 }
  52
  53
  54 /* XOR a 16-byte AES block of data into dst */
  55 void
  56 aes_xor_block(uint8_t *data, uint8_t *dst)
  57 {
  58         if (IS_P2ALIGNED2(dst, data, sizeof (uint32_t))) {
  59                 /* LINTED: pointer alignment */
  60                 *(uint32_t *)&dst[0] ^= *(uint32_t *)&data[0];
  61                 /* LINTED: pointer alignment */
  62                 *(uint32_t *)&dst[4] ^= *(uint32_t *)&data[4];
  63                 /* LINTED: pointer alignment */
  64                 *(uint32_t *)&dst[8] ^= *(uint32_t *)&data[8];
  65                 /* LINTED: pointer alignment */
  66                 *(uint32_t *)&dst[12] ^= *(uint32_t *)&data[12];
  67         } else {
  68                 AES_XOR_BLOCK(data, dst);
  69         }
  70 }
  71
  72
  73 /*
  74  * Encrypt multiple blocks of data according to mode.
  75  */
  76 int
  77 aes_encrypt_contiguous_blocks(void *ctx, char *data, size_t length,
  78     crypto_data_t *out)
  79 {
  80         aes_ctx_t *aes_ctx = ctx;
  81         int rv;
  82
  83         if (aes_ctx->ac_flags & CTR_MODE) {
  84                 rv = ctr_mode_contiguous_blocks(ctx, data, length, out,
  85                     AES_BLOCK_LEN, aes_encrypt_block, aes_xor_block);
  86 #ifdef _KERNEL
  87         } else if (aes_ctx->ac_flags & CCM_MODE) {
  88                 rv = ccm_mode_encrypt_contiguous_blocks(ctx, data, length,
  89                     out, AES_BLOCK_LEN, aes_encrypt_block, aes_copy_block,
  90                     aes_xor_block);
  91         } else if (aes_ctx->ac_flags & (GCM_MODE|GMAC_MODE)) {
  92                 rv = gcm_mode_encrypt_contiguous_blocks(ctx, data, length,
  93                     out, AES_BLOCK_LEN, aes_encrypt_block, aes_copy_block,
  94                     aes_xor_block);
  95 #endif
  96         } else if (aes_ctx->ac_flags & (CBC_MODE|CMAC_MODE)) {
  97                 rv = cbc_encrypt_contiguous_blocks(ctx,
  98                     data, length, out, AES_BLOCK_LEN, aes_encrypt_block,
  99                     aes_copy_block, aes_xor_block);
 100         } else {
 101                 rv = ecb_cipher_contiguous_blocks(ctx, data, length, out,
 102                     AES_BLOCK_LEN, aes_encrypt_block);
 103         }
 104         return (rv);
 105 }
 106
 107
 108 /*
 109  * Decrypt multiple blocks of data according to mode.
 110  */
 111 int
 112 aes_decrypt_contiguous_blocks(void *ctx, char *data, size_t length,
 113     crypto_data_t *out)
 114 {
 115         aes_ctx_t *aes_ctx = ctx;
 116         int rv;
 117
 118         if (aes_ctx->ac_flags & CTR_MODE) {
 119                 rv = ctr_mode_contiguous_blocks(ctx, data, length, out,
 120                     AES_BLOCK_LEN, aes_encrypt_block, aes_xor_block);
 121                 if (rv == CRYPTO_DATA_LEN_RANGE)
 122                         rv = CRYPTO_ENCRYPTED_DATA_LEN_RANGE;
 123 #ifdef _KERNEL
 124         } else if (aes_ctx->ac_flags & CCM_MODE) {
 125                 rv = ccm_mode_decrypt_contiguous_blocks(ctx, data, length,
 126                     out, AES_BLOCK_LEN, aes_encrypt_block, aes_copy_block,
 127                     aes_xor_block);
 128         } else if (aes_ctx->ac_flags & (GCM_MODE|GMAC_MODE)) {
 129                 rv = gcm_mode_decrypt_contiguous_blocks(ctx, data, length,
 130                     out, AES_BLOCK_LEN, aes_encrypt_block, aes_copy_block,
 131                     aes_xor_block);
 132 #endif
 133         } else if (aes_ctx->ac_flags & CBC_MODE) {
 134                 rv = cbc_decrypt_contiguous_blocks(ctx, data, length, out,
 135                     AES_BLOCK_LEN, aes_decrypt_block, aes_copy_block,
 136                     aes_xor_block);
 137         } else {
 138                 rv = ecb_cipher_contiguous_blocks(ctx, data, length, out,
 139                     AES_BLOCK_LEN, aes_decrypt_block);
 140                 if (rv == CRYPTO_DATA_LEN_RANGE)
 141                         rv = CRYPTO_ENCRYPTED_DATA_LEN_RANGE;
 142         }
 143         return (rv);
 144 }