1 // SPDX-License-Identifier: BSD-2-Clause 2 /* 3 * Copyright (C) 2019, Linaro Limited 4 */ 5 6 #include <assert.h> 7 #include <compiler.h> 8 #include <crypto/crypto.h> 9 #include <crypto/crypto_impl.h> 10 #include <mbedtls/des.h> 11 #include <stdlib.h> 12 #include <string.h> 13 #include <tee_api_types.h> 14 #include <utee_defines.h> 15 #include <util.h> 16 17 struct mbed_des3_cbc_ctx { 18 struct crypto_cipher_ctx ctx; 19 int mbed_mode; 20 mbedtls_des3_context des3_ctx; 21 unsigned char iv[TEE_DES_BLOCK_SIZE]; 22 }; 23 24 static const struct crypto_cipher_ops mbed_des3_cbc_ops; 25 26 static struct mbed_des3_cbc_ctx *to_des3_cbc_ctx(struct crypto_cipher_ctx *ctx) 27 { 28 assert(ctx && ctx->ops == &mbed_des3_cbc_ops); 29 30 return container_of(ctx, struct mbed_des3_cbc_ctx, ctx); 31 } 32 33 static TEE_Result mbed_des3_cbc_init(struct crypto_cipher_ctx *ctx, 34 TEE_OperationMode mode, 35 const uint8_t *key1, size_t key1_len, 36 const uint8_t *key2 __unused, 37 size_t key2_len __unused, 38 const uint8_t *iv __unused, 39 size_t iv_len __unused) 40 { 41 struct mbed_des3_cbc_ctx *c = to_des3_cbc_ctx(ctx); 42 int mbed_res = 0; 43 44 if (key1_len != MBEDTLS_DES_KEY_SIZE * 2 && 45 key1_len != MBEDTLS_DES_KEY_SIZE * 3) 46 return TEE_ERROR_BAD_PARAMETERS; 47 if (iv_len != sizeof(c->iv)) 48 return TEE_ERROR_BAD_PARAMETERS; 49 memcpy(c->iv, iv, sizeof(c->iv)); 50 51 mbedtls_des3_init(&c->des3_ctx); 52 53 if (mode == TEE_MODE_ENCRYPT) { 54 c->mbed_mode = MBEDTLS_DES_ENCRYPT; 55 if (key1_len == MBEDTLS_DES_KEY_SIZE * 3) 56 mbed_res = mbedtls_des3_set3key_enc(&c->des3_ctx, key1); 57 else 58 mbed_res = mbedtls_des3_set2key_enc(&c->des3_ctx, key1); 59 } else { 60 c->mbed_mode = MBEDTLS_DES_DECRYPT; 61 if (key1_len == MBEDTLS_DES_KEY_SIZE * 3) 62 mbed_res = mbedtls_des3_set3key_dec(&c->des3_ctx, key1); 63 else 64 mbed_res = mbedtls_des3_set2key_dec(&c->des3_ctx, key1); 65 } 66 67 if (mbed_res) 68 return TEE_ERROR_BAD_STATE; 69 70 return TEE_SUCCESS; 71 } 72 73 static TEE_Result mbed_des3_cbc_update(struct crypto_cipher_ctx *ctx, 74 bool last_block __unused, 75 const uint8_t *data, size_t len, 76 uint8_t *dst) 77 { 78 struct mbed_des3_cbc_ctx *c = to_des3_cbc_ctx(ctx); 79 80 if (mbedtls_des3_crypt_cbc(&c->des3_ctx, c->mbed_mode, len, c->iv, 81 data, dst)) 82 return TEE_ERROR_BAD_STATE; 83 84 return TEE_SUCCESS; 85 } 86 87 static void mbed_des3_cbc_final(struct crypto_cipher_ctx *ctx) 88 { 89 mbedtls_des3_free(&to_des3_cbc_ctx(ctx)->des3_ctx); 90 } 91 92 static void mbed_des3_cbc_free_ctx(struct crypto_cipher_ctx *ctx) 93 { 94 free(to_des3_cbc_ctx(ctx)); 95 } 96 97 static void mbed_des3_cbc_copy_state(struct crypto_cipher_ctx *dst_ctx, 98 struct crypto_cipher_ctx *src_ctx) 99 { 100 struct mbed_des3_cbc_ctx *src = to_des3_cbc_ctx(src_ctx); 101 struct mbed_des3_cbc_ctx *dst = to_des3_cbc_ctx(dst_ctx); 102 103 memcpy(dst->iv, src->iv, sizeof(dst->iv)); 104 dst->mbed_mode = src->mbed_mode; 105 dst->des3_ctx = src->des3_ctx; 106 } 107 108 static const struct crypto_cipher_ops mbed_des3_cbc_ops = { 109 .init = mbed_des3_cbc_init, 110 .update = mbed_des3_cbc_update, 111 .final = mbed_des3_cbc_final, 112 .free_ctx = mbed_des3_cbc_free_ctx, 113 .copy_state = mbed_des3_cbc_copy_state, 114 }; 115 116 TEE_Result crypto_des3_cbc_alloc_ctx(struct crypto_cipher_ctx **ctx_ret) 117 { 118 struct mbed_des3_cbc_ctx *c = NULL; 119 120 c = calloc(1, sizeof(*c)); 121 if (!c) 122 return TEE_ERROR_OUT_OF_MEMORY; 123 124 c->ctx.ops = &mbed_des3_cbc_ops; 125 *ctx_ret = &c->ctx; 126 127 return TEE_SUCCESS; 128 } 129