1*ade6f848SJerome Forissier // SPDX-License-Identifier: BSD-2-Clause
2*ade6f848SJerome Forissier /*
3*ade6f848SJerome Forissier * Copyright (c) 2019 Huawei Technologies Co., Ltd
4*ade6f848SJerome Forissier */
5*ade6f848SJerome Forissier
6*ade6f848SJerome Forissier #include <assert.h>
7*ade6f848SJerome Forissier #include <crypto/crypto.h>
8*ade6f848SJerome Forissier #include <crypto/crypto_impl.h>
9*ade6f848SJerome Forissier #include <stdlib.h>
10*ade6f848SJerome Forissier #include <string.h>
11*ade6f848SJerome Forissier #include <string_ext.h>
12*ade6f848SJerome Forissier #include <tee_api_types.h>
13*ade6f848SJerome Forissier #include <util.h>
14*ade6f848SJerome Forissier
15*ade6f848SJerome Forissier #include "sm4.h"
16*ade6f848SJerome Forissier
17*ade6f848SJerome Forissier struct sm4_ctr_ctx {
18*ade6f848SJerome Forissier struct crypto_cipher_ctx ctx;
19*ade6f848SJerome Forissier struct sm4_context state;
20*ade6f848SJerome Forissier uint8_t ctr[16];
21*ade6f848SJerome Forissier };
22*ade6f848SJerome Forissier
23*ade6f848SJerome Forissier static const struct crypto_cipher_ops sm4_ctr_ops;
24*ade6f848SJerome Forissier
to_sm4_ctr_ctx(struct crypto_cipher_ctx * ctx)25*ade6f848SJerome Forissier static struct sm4_ctr_ctx *to_sm4_ctr_ctx(struct crypto_cipher_ctx *ctx)
26*ade6f848SJerome Forissier {
27*ade6f848SJerome Forissier assert(ctx && ctx->ops == &sm4_ctr_ops);
28*ade6f848SJerome Forissier
29*ade6f848SJerome Forissier return container_of(ctx, struct sm4_ctr_ctx, ctx);
30*ade6f848SJerome Forissier }
31*ade6f848SJerome Forissier
sm4_ctr_init(struct crypto_cipher_ctx * ctx,TEE_OperationMode mode __unused,const uint8_t * key1,size_t key1_len,const uint8_t * key2 __unused,size_t key2_len __unused,const uint8_t * iv,size_t iv_len)32*ade6f848SJerome Forissier static TEE_Result sm4_ctr_init(struct crypto_cipher_ctx *ctx,
33*ade6f848SJerome Forissier TEE_OperationMode mode __unused,
34*ade6f848SJerome Forissier const uint8_t *key1, size_t key1_len,
35*ade6f848SJerome Forissier const uint8_t *key2 __unused,
36*ade6f848SJerome Forissier size_t key2_len __unused,
37*ade6f848SJerome Forissier const uint8_t *iv, size_t iv_len)
38*ade6f848SJerome Forissier {
39*ade6f848SJerome Forissier struct sm4_ctr_ctx *c = to_sm4_ctr_ctx(ctx);
40*ade6f848SJerome Forissier
41*ade6f848SJerome Forissier if (key1_len != 16 || iv_len != sizeof(c->ctr))
42*ade6f848SJerome Forissier return TEE_ERROR_BAD_PARAMETERS;
43*ade6f848SJerome Forissier
44*ade6f848SJerome Forissier sm4_setkey_enc(&c->state, key1);
45*ade6f848SJerome Forissier memcpy(c->ctr, iv, sizeof(c->ctr));
46*ade6f848SJerome Forissier
47*ade6f848SJerome Forissier return TEE_SUCCESS;
48*ade6f848SJerome Forissier }
49*ade6f848SJerome Forissier
sm4_ctr_update(struct crypto_cipher_ctx * ctx,bool last_block __unused,const uint8_t * data,size_t len,uint8_t * dst)50*ade6f848SJerome Forissier static TEE_Result sm4_ctr_update(struct crypto_cipher_ctx *ctx,
51*ade6f848SJerome Forissier bool last_block __unused,
52*ade6f848SJerome Forissier const uint8_t *data, size_t len, uint8_t *dst)
53*ade6f848SJerome Forissier {
54*ade6f848SJerome Forissier struct sm4_ctr_ctx *c = to_sm4_ctr_ctx(ctx);
55*ade6f848SJerome Forissier
56*ade6f848SJerome Forissier sm4_crypt_ctr(&c->state, len, c->ctr, data, dst);
57*ade6f848SJerome Forissier
58*ade6f848SJerome Forissier return TEE_SUCCESS;
59*ade6f848SJerome Forissier }
60*ade6f848SJerome Forissier
sm4_ctr_final(struct crypto_cipher_ctx * ctx)61*ade6f848SJerome Forissier static void sm4_ctr_final(struct crypto_cipher_ctx *ctx)
62*ade6f848SJerome Forissier {
63*ade6f848SJerome Forissier struct sm4_ctr_ctx *c = to_sm4_ctr_ctx(ctx);
64*ade6f848SJerome Forissier
65*ade6f848SJerome Forissier memzero_explicit(&c->state, sizeof(c->state));
66*ade6f848SJerome Forissier memzero_explicit(&c->ctr, sizeof(c->ctr));
67*ade6f848SJerome Forissier }
68*ade6f848SJerome Forissier
sm4_ctr_free_ctx(struct crypto_cipher_ctx * ctx)69*ade6f848SJerome Forissier static void sm4_ctr_free_ctx(struct crypto_cipher_ctx *ctx)
70*ade6f848SJerome Forissier {
71*ade6f848SJerome Forissier free(to_sm4_ctr_ctx(ctx));
72*ade6f848SJerome Forissier }
73*ade6f848SJerome Forissier
sm4_ctr_copy_state(struct crypto_cipher_ctx * dst_ctx,struct crypto_cipher_ctx * src_ctx)74*ade6f848SJerome Forissier static void sm4_ctr_copy_state(struct crypto_cipher_ctx *dst_ctx,
75*ade6f848SJerome Forissier struct crypto_cipher_ctx *src_ctx)
76*ade6f848SJerome Forissier {
77*ade6f848SJerome Forissier struct sm4_ctr_ctx *src = to_sm4_ctr_ctx(src_ctx);
78*ade6f848SJerome Forissier struct sm4_ctr_ctx *dst = to_sm4_ctr_ctx(dst_ctx);
79*ade6f848SJerome Forissier
80*ade6f848SJerome Forissier dst->state = src->state;
81*ade6f848SJerome Forissier memcpy(dst->ctr, src->ctr, sizeof(src->ctr));
82*ade6f848SJerome Forissier }
83*ade6f848SJerome Forissier
84*ade6f848SJerome Forissier static const struct crypto_cipher_ops sm4_ctr_ops = {
85*ade6f848SJerome Forissier .init = sm4_ctr_init,
86*ade6f848SJerome Forissier .update = sm4_ctr_update,
87*ade6f848SJerome Forissier .final = sm4_ctr_final,
88*ade6f848SJerome Forissier .free_ctx = sm4_ctr_free_ctx,
89*ade6f848SJerome Forissier .copy_state = sm4_ctr_copy_state,
90*ade6f848SJerome Forissier };
91*ade6f848SJerome Forissier
crypto_sm4_ctr_alloc_ctx(struct crypto_cipher_ctx ** ctx_ret)92*ade6f848SJerome Forissier TEE_Result crypto_sm4_ctr_alloc_ctx(struct crypto_cipher_ctx **ctx_ret)
93*ade6f848SJerome Forissier {
94*ade6f848SJerome Forissier struct sm4_ctr_ctx *c = NULL;
95*ade6f848SJerome Forissier
96*ade6f848SJerome Forissier c = calloc(1, sizeof(*c));
97*ade6f848SJerome Forissier if (!c)
98*ade6f848SJerome Forissier return TEE_ERROR_OUT_OF_MEMORY;
99*ade6f848SJerome Forissier
100*ade6f848SJerome Forissier c->ctx.ops = &sm4_ctr_ops;
101*ade6f848SJerome Forissier *ctx_ret = &c->ctx;
102*ade6f848SJerome Forissier
103*ade6f848SJerome Forissier return TEE_SUCCESS;
104*ade6f848SJerome Forissier }
105