2 * Copyright (c) 1997 - 2008 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
13 * 2. Redistributions in binary form must reproduce the above copyright
14 * notice, this list of conditions and the following disclaimer in the
15 * documentation and/or other materials provided with the distribution.
17 * 3. Neither the name of the Institute nor the names of its contributors
18 * may be used to endorse or promote products derived from this software
19 * without specific prior written permission.
21 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
34 #include "krb5_locl.h"
40 static struct _krb5_key_type keytype_aes128
= {
41 KRB5_ENCTYPE_AES128_CTS_HMAC_SHA1_96
,
45 sizeof(struct _krb5_evp_schedule
),
54 static struct _krb5_key_type keytype_aes256
= {
55 KRB5_ENCTYPE_AES256_CTS_HMAC_SHA1_96
,
59 sizeof(struct _krb5_evp_schedule
),
68 struct _krb5_checksum_type _krb5_checksum_hmac_sha1_aes128
= {
69 CKSUMTYPE_HMAC_SHA1_96_AES_128
,
70 "hmac-sha1-96-aes128",
73 F_KEYED
| F_CPROOF
| F_DERIVED
,
74 _krb5_SP_HMAC_SHA1_checksum
,
78 struct _krb5_checksum_type _krb5_checksum_hmac_sha1_aes256
= {
79 CKSUMTYPE_HMAC_SHA1_96_AES_256
,
80 "hmac-sha1-96-aes256",
83 F_KEYED
| F_CPROOF
| F_DERIVED
,
84 _krb5_SP_HMAC_SHA1_checksum
,
88 static krb5_error_code
89 AES_PRF(krb5_context context
,
94 struct _krb5_checksum_type
*ct
= crypto
->et
->checksum
;
97 krb5_keyblock
*derived
;
99 result
.cksumtype
= ct
->type
;
100 ret
= krb5_data_alloc(&result
.checksum
, ct
->checksumsize
);
102 krb5_set_error_message(context
, ret
, N_("malloc: out memory", ""));
106 ret
= (*ct
->checksum
)(context
, NULL
, in
->data
, in
->length
, 0, &result
);
108 krb5_data_free(&result
.checksum
);
112 if (result
.checksum
.length
< crypto
->et
->blocksize
)
113 krb5_abortx(context
, "internal prf error");
116 ret
= krb5_derive_key(context
, crypto
->key
.key
,
117 crypto
->et
->type
, "prf", 3, &derived
);
119 krb5_abortx(context
, "krb5_derive_key");
121 ret
= krb5_data_alloc(out
, crypto
->et
->blocksize
);
123 krb5_abortx(context
, "malloc failed");
126 const EVP_CIPHER
*c
= (*crypto
->et
->keytype
->evp
)();
129 EVP_CIPHER_CTX_init(&ctx
); /* ivec all zero */
130 EVP_CipherInit_ex(&ctx
, c
, NULL
, derived
->keyvalue
.data
, NULL
, 1);
131 EVP_Cipher(&ctx
, out
->data
, result
.checksum
.data
,
132 crypto
->et
->blocksize
);
133 EVP_CIPHER_CTX_cleanup(&ctx
);
136 krb5_data_free(&result
.checksum
);
137 krb5_free_keyblock(context
, derived
);
142 struct _krb5_encryption_type _krb5_enctype_aes128_cts_hmac_sha1
= {
143 ETYPE_AES128_CTS_HMAC_SHA1_96
,
144 "aes128-cts-hmac-sha1-96",
150 &_krb5_checksum_sha1
,
151 &_krb5_checksum_hmac_sha1_aes128
,
153 _krb5_evp_encrypt_cts
,
158 struct _krb5_encryption_type _krb5_enctype_aes256_cts_hmac_sha1
= {
159 ETYPE_AES256_CTS_HMAC_SHA1_96
,
160 "aes256-cts-hmac-sha1-96",
166 &_krb5_checksum_sha1
,
167 &_krb5_checksum_hmac_sha1_aes256
,
169 _krb5_evp_encrypt_cts
,