/** * \file * \author Egor Tensin * \date 2015 * \copyright This file is licensed under the terms of the MIT License. * See LICENSE.txt for details. */ #include #include #include static const AES_BoxAlgorithmInterface* aes_box_algorithms[] = { &aes_box_algorithm_aes128, &aes_box_algorithm_aes192, &aes_box_algorithm_aes256, }; AES_StatusCode aes_box_init( AES_Box* box, AES_Algorithm algorithm, const AES_BoxKey* box_key, AES_Mode mode, const AES_BoxBlock* iv, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; box->algorithm = aes_box_algorithms[algorithm]; if (aes_is_error(status = box->algorithm->calc_round_keys( box_key, &box->encryption_keys, &box->decryption_keys, err_details))) return status; box->mode = mode; if (iv != NULL) box->iv = *iv; return status; } static AES_StatusCode aes_box_encrypt_block_ecb( AES_Box* box, const AES_BoxBlock* input, AES_BoxBlock* output, AES_ErrorDetails* err_details) { return box->algorithm->encrypt_block( input, &box->encryption_keys, output, err_details); } static AES_StatusCode aes_box_encrypt_block_cbc( AES_Box* box, const AES_BoxBlock* input, AES_BoxBlock* output, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; AES_BoxBlock xored_input = *input; if (aes_is_error(status = box->algorithm->xor_block( &xored_input, &box->iv, err_details))) return status; if (aes_is_error(status = box->algorithm->encrypt_block( &xored_input, &box->encryption_keys, output, err_details))) return status; box->iv = *output; return status; } static AES_StatusCode aes_box_encrypt_block_cfb( AES_Box* box, const AES_BoxBlock* input, AES_BoxBlock* output, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; if (aes_is_error(status = box->algorithm->encrypt_block( &box->iv, &box->encryption_keys, output, err_details))) return status; if (aes_is_error(status = box->algorithm->xor_block( output, input, err_details))) return status; box->iv = *output; return status; } static AES_StatusCode aes_box_encrypt_block_ofb( AES_Box* box, const AES_BoxBlock* input, AES_BoxBlock* output, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; if (aes_is_error(status = box->algorithm->encrypt_block( &box->iv, &box->encryption_keys, &box->iv, err_details))) return status; *output = box->iv; if (aes_is_error(status = box->algorithm->xor_block( output, input, err_details))) return status; return status; } static AES_StatusCode aes_box_encrypt_block_ctr( AES_Box* box, const AES_BoxBlock* input, AES_BoxBlock* output, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; if (aes_is_error(status = box->algorithm->encrypt_block( &box->iv, &box->encryption_keys, output, err_details))) return status; if (aes_is_error(status = box->algorithm->xor_block( output, input, err_details))) return status; if (aes_is_error(status = box->algorithm->inc_block( &box->iv, err_details))) return status; return status; } typedef AES_StatusCode (*AES_BoxEncryptBlockInMode)( AES_Box*, const AES_BoxBlock*, AES_BoxBlock*, AES_ErrorDetails*); static AES_BoxEncryptBlockInMode aes_box_encrypt_block_in_mode[] = { &aes_box_encrypt_block_ecb, &aes_box_encrypt_block_cbc, &aes_box_encrypt_block_cfb, &aes_box_encrypt_block_ofb, &aes_box_encrypt_block_ctr, }; AES_StatusCode aes_box_encrypt_block( AES_Box* box, const AES_BoxBlock* input, AES_BoxBlock* output, AES_ErrorDetails* err_details) { return aes_box_encrypt_block_in_mode[box->mode]( box, input, output, err_details); } static AES_StatusCode aes_box_decrypt_block_ecb( AES_Box* box, const AES_BoxBlock* input, AES_BoxBlock* output, AES_ErrorDetails* err_details) { return box->algorithm->decrypt_block( input, &box->decryption_keys, output, err_details); } static AES_StatusCode aes_box_decrypt_block_cbc( AES_Box* box, const AES_BoxBlock* input, AES_BoxBlock* output, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; if (aes_is_error(status = box->algorithm->decrypt_block( input, &box->decryption_keys, output, err_details))) return status; if (aes_is_error(status = box->algorithm->xor_block( output, &box->iv, err_details))) return status; box->iv = *input; return status; } static AES_StatusCode aes_box_decrypt_block_cfb( AES_Box* box, const AES_BoxBlock* input, AES_BoxBlock* output, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; if (aes_is_error(status = box->algorithm->encrypt_block( &box->iv, &box->encryption_keys, output, err_details))) return status; if (aes_is_error(status = box->algorithm->xor_block( output, input, err_details))) return status; box->iv = *input; return status; } typedef AES_BoxEncryptBlockInMode AES_BoxDecryptBlockInMode; static AES_BoxDecryptBlockInMode aes_box_decrypt_block_in_mode[] = { &aes_box_decrypt_block_ecb, &aes_box_decrypt_block_cbc, &aes_box_decrypt_block_cfb, &aes_box_encrypt_block_ofb, &aes_box_encrypt_block_ctr, }; AES_StatusCode aes_box_decrypt_block( AES_Box* box, const AES_BoxBlock* input, AES_BoxBlock* output, AES_ErrorDetails* err_details) { return aes_box_decrypt_block_in_mode[box->mode]( box, input, output, err_details); } static AES_StatusCode aes_box_get_encrypted_buffer_size( AES_Box* box, size_t src_size, size_t* dest_size, size_t* padding_size, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; switch (box->mode) { case AES_ECB: case AES_CBC: { size_t block_size; if (aes_is_error(status = box->algorithm->get_block_size( &block_size, err_details))) return status; *padding_size = block_size - src_size % block_size; *dest_size = src_size + *padding_size; return status; } case AES_CFB: case AES_OFB: case AES_CTR: *dest_size = src_size; *padding_size = 0; return status; default: return aes_error_not_implemented( err_details, "unsupported mode of operation"); } } static AES_StatusCode aes_box_encrypt_buffer_block( AES_Box* box, const void* src, void* dest, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; AES_BoxBlock plaintext; if (aes_is_error(status = box->algorithm->load_block( &plaintext, src, err_details))) return status; AES_BoxBlock ciphertext; if (aes_is_error(status = aes_box_encrypt_block( box, &plaintext, &ciphertext, err_details))) return status; if (aes_is_error(status = box->algorithm->store_block( dest, &ciphertext, err_details))) return status; return status; } static AES_StatusCode aes_box_encrypt_buffer_partial_block_with_padding( AES_Box* box, const void* src, size_t src_size, void* dest, size_t padding_size, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; size_t block_size; if (aes_is_error(status = box->algorithm->get_block_size( &block_size, err_details))) return status; void* plaintext_buf = malloc(block_size); if (plaintext_buf == NULL) return status = aes_error_memory_allocation(err_details); memcpy(plaintext_buf, src, src_size); if (aes_is_error(status = aes_fill_with_padding( AES_PADDING_PKCS7, (char*) plaintext_buf + src_size, padding_size, err_details))) goto FREE_PLAINTEXT_BUF; if (aes_is_error(status = aes_box_encrypt_buffer_block( box, plaintext_buf, dest, err_details))) goto FREE_PLAINTEXT_BUF; FREE_PLAINTEXT_BUF: free(plaintext_buf); return status; } static AES_StatusCode aes_box_encrypt_buffer_partial_block( AES_Box* box, const void* src, size_t src_size, void* dest, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; if (src_size == 0) return status; size_t block_size; if (aes_is_error(status = box->algorithm->get_block_size( &block_size, err_details))) return status; void* plaintext_buf = malloc(block_size); if (plaintext_buf == NULL) return status = aes_error_memory_allocation(err_details); memset(plaintext_buf, 0x00, block_size); memcpy(plaintext_buf, src, src_size); void* ciphertext_buf = malloc(block_size); if (ciphertext_buf == NULL) { status = aes_error_memory_allocation(err_details); goto FREE_PLAINTEXT_BUF; } if (aes_is_error(status = aes_box_encrypt_buffer_block( box, plaintext_buf, ciphertext_buf, err_details))) goto FREE_CIPHERTEXT_BUF; memcpy(dest, ciphertext_buf, src_size); FREE_CIPHERTEXT_BUF: free(ciphertext_buf); FREE_PLAINTEXT_BUF: free(plaintext_buf); return status; } AES_StatusCode aes_box_encrypt_buffer( AES_Box* box, const void* src, size_t src_size, void* dest, size_t* dest_size, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; if (box == NULL) return aes_error_null_argument(err_details, "box"); if (dest_size == NULL) return aes_error_null_argument(err_details, "dest_size"); size_t padding_size = 0; if (aes_is_error(status = aes_box_get_encrypted_buffer_size( box, src_size, dest_size, &padding_size, err_details))) return status; if (dest == NULL) return AES_SUCCESS; if (src == NULL && src_size != 0) return aes_error_null_argument(err_details, "src"); size_t block_size; if (aes_is_error(status = box->algorithm->get_block_size( &block_size, err_details))) return status; const size_t src_len = src_size / block_size; for (size_t i = 0; i < src_len; ++i) { if (aes_is_error(status = aes_box_encrypt_buffer_block( box, src, dest, err_details))) return status; (char*) src += block_size, (char*) dest += block_size; } if (padding_size == 0) return aes_box_encrypt_buffer_partial_block( box, src, src_size % block_size, dest, err_details); else return aes_box_encrypt_buffer_partial_block_with_padding( box, src, src_size % block_size, dest, padding_size, err_details); } static AES_StatusCode aes_box_get_decrypted_buffer_size( AES_Box* box, size_t src_size, size_t* dest_size, size_t* max_padding_size, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; switch (box->mode) { case AES_ECB: case AES_CBC: { size_t block_size; if (aes_is_error(status = box->algorithm->get_block_size( &block_size, err_details))) return status; if (src_size == 0 || src_size % block_size != 0) return aes_error_missing_padding(err_details); *dest_size = src_size; *max_padding_size = block_size; return status; } case AES_CFB: case AES_OFB: case AES_CTR: *dest_size = src_size; *max_padding_size = 0; return status; default: return aes_error_not_implemented( err_details, "unsupported mode of operation"); } } static AES_StatusCode aes_box_decrypt_buffer_block( AES_Box* box, const void* src, void* dest, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; AES_BoxBlock ciphertext; if (aes_is_error(status = box->algorithm->load_block( &ciphertext, src, err_details))) return status; AES_BoxBlock plaintext; if (aes_is_error(status = aes_box_decrypt_block( box, &ciphertext, &plaintext, err_details))) return status; if (aes_is_error(status = box->algorithm->store_block( dest, &plaintext, err_details))) return status; return status; } static AES_StatusCode aes_box_decrypt_buffer_partial_block( AES_Box* box, const void* src, size_t src_size, void* dest, AES_ErrorDetails* err_details) { AES_StatusCode status = AES_SUCCESS; if (src_size == 0) return status; size_t block_size; if (aes_is_error(status = box->algorithm->get_block_size( &block_size, err_details))) return status; void* ciphertext_buf = malloc(block_size); if (ciphertext_buf == NULL) return status = aes_error_memory_allocation(err_details); memset(ciphertext_buf, 0x00, block_size); memcpy(ciphertext_buf, src, src_size); void* plaintext_buf = malloc(block_size); if (plaintext_buf == NULL) { status = aes_error_memory_allocation(err_details); goto FREE_CIPHERTEXT_BUF; } if (aes_is_error(status = aes_box_decrypt_buffer_block( box, ciphertext_buf, plaintext_buf, err_details))) goto FREE_PLAINTEXT_BUF; memcpy(dest, plaintext_buf, src_size); FREE_PLAINTEXT_BUF: free(plaintext_buf); FREE_CIPHERTEXT_BUF: free(ciphertext_buf); return status; } AES_StatusCode aes_box_decrypt_buffer( AES_Box* box, const void* src, size_t src_size, void* dest, size_t* dest_size, AES_ErrorDetails* err_details) { if (box == NULL) return aes_error_null_argument(err_details, "box"); if (dest_size == NULL) return aes_error_null_argument(err_details, "dest_size"); AES_StatusCode status = AES_SUCCESS; size_t max_padding_size = 0; if (aes_is_error(status = aes_box_get_decrypted_buffer_size( box, src_size, dest_size, &max_padding_size, err_details))) return status; if (dest == NULL) return AES_SUCCESS; if (src == NULL) return aes_error_null_argument(err_details, "src"); size_t block_size; if (aes_is_error(status = box->algorithm->get_block_size( &block_size, err_details))) return status; const size_t src_len = src_size / block_size; for (size_t i = 0; i < src_len; ++i) { if (aes_is_error(status = aes_box_decrypt_buffer_block( box, src, dest, err_details))) return status; (char*) src += block_size, (char*) dest += block_size; } if (max_padding_size == 0) { return aes_box_decrypt_buffer_partial_block( box, src, src_size % block_size, dest, err_details); } else { size_t padding_size; if (aes_is_error(status = aes_extract_padding_size( AES_PADDING_PKCS7, (char*) dest - block_size, block_size, &padding_size, err_details))) return status; *dest_size -= padding_size; return status; } } AES_StatusCode aes_box_parse_block( AES_BoxBlock* dest, AES_Algorithm algorithm, const char* src, AES_ErrorDetails* err_details) { if (dest == NULL) return aes_error_null_argument(err_details, "dest"); if (src == NULL) return aes_error_null_argument(err_details, "src"); return aes_box_algorithms[algorithm]->parse_block( dest, src, err_details); } AES_StatusCode aes_box_parse_key( AES_BoxKey* dest, AES_Algorithm algorithm, const char* src, AES_ErrorDetails* err_details) { if (dest == NULL) return aes_error_null_argument(err_details, "dest"); if (src == NULL) return aes_error_null_argument(err_details, "src"); return aes_box_algorithms[algorithm]->parse_key( dest, src, err_details); } AES_StatusCode aes_box_format_block( AES_BoxBlockString* dest, AES_Algorithm algorithm, const AES_BoxBlock* src, AES_ErrorDetails* err_details) { if (dest == NULL) return aes_error_null_argument(err_details, "dest"); if (src == NULL) return aes_error_null_argument(err_details, "src"); return aes_box_algorithms[algorithm]->format_block( dest, src, err_details); } AES_StatusCode aes_box_format_key( AES_BoxKeyString* dest, AES_Algorithm algorithm, const AES_BoxKey* src, AES_ErrorDetails* err_details) { if (dest == NULL) return aes_error_null_argument(err_details, "dest"); if (src == NULL) return aes_error_null_argument(err_details, "src"); return aes_box_algorithms[algorithm]->format_key( dest, src, err_details); }