18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 2a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Wrapper functions for crypto libraries 3a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Copyright (c) 2004-2013, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This file defines the cryptographic functions that need to be implemented 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * for wpa_supplicant and hostapd. When TLS is not used, internal 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * implementation of MD5, SHA1, and AES is used and no external libraries are 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * required. When TLS is enabled (e.g., by enabling EAP-TLS or EAP-PEAP), the 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto library used by the TLS implementation is expected to be used for 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * non-TLS needs, too, in order to save space by not implementing these 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * functions twice. 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Wrapper code for using each crypto library is in its own file (crypto*.c) 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * and one of these files is build and linked in to provide the functions 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * defined here. 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CRYPTO_H 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define CRYPTO_H 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * md4_vector - MD4 hash for data vector 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @num_elem: Number of elements in the data vector 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @addr: Pointers to the data areas 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Lengths of the data blocks 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @mac: Buffer for the hash 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint md4_vector(size_t num_elem, const u8 *addr[], const size_t *len, u8 *mac); 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * md5_vector - MD5 hash for data vector 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @num_elem: Number of elements in the data vector 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @addr: Pointers to the data areas 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Lengths of the data blocks 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @mac: Buffer for the hash 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint md5_vector(size_t num_elem, const u8 *addr[], const size_t *len, u8 *mac); 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * sha1_vector - SHA-1 hash for data vector 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @num_elem: Number of elements in the data vector 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @addr: Pointers to the data areas 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Lengths of the data blocks 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @mac: Buffer for the hash 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint sha1_vector(size_t num_elem, const u8 *addr[], const size_t *len, 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *mac); 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * fips186_2-prf - NIST FIPS Publication 186-2 change notice 1 PRF 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @seed: Seed/key for the PRF 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @seed_len: Seed length in bytes 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @x: Buffer for PRF output 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @xlen: Output length in bytes 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function implements random number generation specified in NIST FIPS 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Publication 186-2 for EAP-SIM. This PRF uses a function that is similar to 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * SHA-1, but has different message padding. 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint __must_check fips186_2_prf(const u8 *seed, size_t seed_len, u8 *x, 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t xlen); 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * sha256_vector - SHA256 hash for data vector 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @num_elem: Number of elements in the data vector 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @addr: Pointers to the data areas 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Lengths of the data blocks 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @mac: Buffer for the hash 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint sha256_vector(size_t num_elem, const u8 *addr[], const size_t *len, 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *mac); 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * des_encrypt - Encrypt one block with DES 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @clear: 8 octets (in) 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: 7 octets (in) (no parity bits included) 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @cypher: 8 octets (out) 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid des_encrypt(const u8 *clear, const u8 *key, u8 *cypher); 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * aes_encrypt_init - Initialize AES for encryption 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: Encryption key 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Key length in bytes (usually 16, i.e., 128 bits) 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to context data or %NULL on failure 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid * aes_encrypt_init(const u8 *key, size_t len); 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * aes_encrypt - Encrypt one AES block 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context pointer from aes_encrypt_init() 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @plain: Plaintext data to be encrypted (16 bytes) 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @crypt: Buffer for the encrypted data (16 bytes) 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid aes_encrypt(void *ctx, const u8 *plain, u8 *crypt); 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * aes_encrypt_deinit - Deinitialize AES encryption 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context pointer from aes_encrypt_init() 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid aes_encrypt_deinit(void *ctx); 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * aes_decrypt_init - Initialize AES for decryption 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: Decryption key 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Key length in bytes (usually 16, i.e., 128 bits) 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to context data or %NULL on failure 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid * aes_decrypt_init(const u8 *key, size_t len); 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * aes_decrypt - Decrypt one AES block 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context pointer from aes_encrypt_init() 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @crypt: Encrypted data (16 bytes) 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @plain: Buffer for the decrypted data (16 bytes) 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid aes_decrypt(void *ctx, const u8 *crypt, u8 *plain); 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * aes_decrypt_deinit - Deinitialize AES decryption 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context pointer from aes_encrypt_init() 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid aes_decrypt_deinit(void *ctx); 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtenum crypto_hash_alg { 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt CRYPTO_HASH_ALG_MD5, CRYPTO_HASH_ALG_SHA1, 1371f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt CRYPTO_HASH_ALG_HMAC_MD5, CRYPTO_HASH_ALG_HMAC_SHA1, 1381f69aa52ea2e0a73ac502565df8c666ee49cab6aDmitry Shmidt CRYPTO_HASH_ALG_SHA256, CRYPTO_HASH_ALG_HMAC_SHA256 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct crypto_hash; 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_hash_init - Initialize hash/HMAC function 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @alg: Hash algorithm 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: Key for keyed hash (e.g., HMAC) or %NULL if not needed 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key_len: Length of the key in bytes 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to hash context to use with other hash functions or %NULL 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * on failure 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct crypto_hash * crypto_hash_init(enum crypto_hash_alg alg, const u8 *key, 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t key_len); 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_hash_update - Add data to hash calculation 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context pointer from crypto_hash_init() 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @data: Data buffer to add 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Length of the buffer 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid crypto_hash_update(struct crypto_hash *ctx, const u8 *data, size_t len); 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_hash_finish - Complete hash calculation 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context pointer from crypto_hash_init() 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @hash: Buffer for hash value or %NULL if caller is just freeing the hash 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * context 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Pointer to length of the buffer or %NULL if caller is just freeing the 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * hash context; on return, this is set to the actual length of the hash value 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 if buffer is too small (len set to needed length), 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * or -2 on other failures (including failed crypto_hash_update() operations) 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function calculates the hash value and frees the context buffer that 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * was used for hash calculation. 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint crypto_hash_finish(struct crypto_hash *ctx, u8 *hash, size_t *len); 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtenum crypto_cipher_alg { 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt CRYPTO_CIPHER_NULL = 0, CRYPTO_CIPHER_ALG_AES, CRYPTO_CIPHER_ALG_3DES, 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt CRYPTO_CIPHER_ALG_DES, CRYPTO_CIPHER_ALG_RC2, CRYPTO_CIPHER_ALG_RC4 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct crypto_cipher; 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_cipher_init - Initialize block/stream cipher function 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @alg: Cipher algorithm 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @iv: Initialization vector for block ciphers or %NULL for stream ciphers 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: Cipher key 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key_len: Length of key in bytes 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to cipher context to use with other cipher functions or 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * %NULL on failure 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct crypto_cipher * crypto_cipher_init(enum crypto_cipher_alg alg, 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *iv, const u8 *key, 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t key_len); 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_cipher_encrypt - Cipher encrypt 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context pointer from crypto_cipher_init() 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @plain: Plaintext to cipher 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @crypt: Resulting ciphertext 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Length of the plaintext 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint __must_check crypto_cipher_encrypt(struct crypto_cipher *ctx, 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *plain, u8 *crypt, size_t len); 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_cipher_decrypt - Cipher decrypt 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context pointer from crypto_cipher_init() 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @crypt: Ciphertext to decrypt 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @plain: Resulting plaintext 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Length of the cipher text 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint __must_check crypto_cipher_decrypt(struct crypto_cipher *ctx, 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *crypt, u8 *plain, size_t len); 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_cipher_decrypt - Free cipher context 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context pointer from crypto_cipher_init() 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid crypto_cipher_deinit(struct crypto_cipher *ctx); 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct crypto_public_key; 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct crypto_private_key; 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_public_key_import - Import an RSA public key 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: Key buffer (DER encoded RSA public key) 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Key buffer length in bytes 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to the public key or %NULL on failure 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function can just return %NULL if the crypto library supports X.509 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * parsing. In that case, crypto_public_key_from_cert() is used to import the 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * public key from a certificate. 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct crypto_public_key * crypto_public_key_import(const u8 *key, size_t len); 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 27450b691dc36a8075e8f594e8bea93cb524fa6b1d2Dmitry Shmidtstruct crypto_public_key * 27550b691dc36a8075e8f594e8bea93cb524fa6b1d2Dmitry Shmidtcrypto_public_key_import_parts(const u8 *n, size_t n_len, 27650b691dc36a8075e8f594e8bea93cb524fa6b1d2Dmitry Shmidt const u8 *e, size_t e_len); 27750b691dc36a8075e8f594e8bea93cb524fa6b1d2Dmitry Shmidt 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_private_key_import - Import an RSA private key 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: Key buffer (DER encoded RSA private key) 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Key buffer length in bytes 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @passwd: Key encryption password or %NULL if key is not encrypted 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to the private key or %NULL on failure 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct crypto_private_key * crypto_private_key_import(const u8 *key, 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len, 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *passwd); 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_public_key_from_cert - Import an RSA public key from a certificate 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @buf: DER encoded X.509 certificate 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @len: Certificate buffer length in bytes 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to public key or %NULL on failure 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function can just return %NULL if the crypto library does not support 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * X.509 parsing. In that case, internal code will be used to parse the 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * certificate and public key is imported using crypto_public_key_import(). 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct crypto_public_key * crypto_public_key_from_cert(const u8 *buf, 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len); 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_public_key_encrypt_pkcs1_v15 - Public key encryption (PKCS #1 v1.5) 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: Public key 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @in: Plaintext buffer 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @inlen: Length of plaintext buffer in bytes 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @out: Output buffer for encrypted data 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @outlen: Length of output buffer in bytes; set to used length on success 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint __must_check crypto_public_key_encrypt_pkcs1_v15( 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct crypto_public_key *key, const u8 *in, size_t inlen, 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *out, size_t *outlen); 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_private_key_decrypt_pkcs1_v15 - Private key decryption (PKCS #1 v1.5) 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: Private key 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @in: Encrypted buffer 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @inlen: Length of encrypted buffer in bytes 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @out: Output buffer for encrypted data 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @outlen: Length of output buffer in bytes; set to used length on success 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint __must_check crypto_private_key_decrypt_pkcs1_v15( 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct crypto_private_key *key, const u8 *in, size_t inlen, 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *out, size_t *outlen); 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_private_key_sign_pkcs1 - Sign with private key (PKCS #1) 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: Private key from crypto_private_key_import() 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @in: Plaintext buffer 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @inlen: Length of plaintext buffer in bytes 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @out: Output buffer for encrypted (signed) data 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @outlen: Length of output buffer in bytes; set to used length on success 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint __must_check crypto_private_key_sign_pkcs1(struct crypto_private_key *key, 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *in, size_t inlen, 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *out, size_t *outlen); 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_public_key_free - Free public key 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: Public key 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid crypto_public_key_free(struct crypto_public_key *key); 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_private_key_free - Free private key 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: Private key from crypto_private_key_import() 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid crypto_private_key_free(struct crypto_private_key *key); 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_public_key_decrypt_pkcs1 - Decrypt PKCS #1 signature 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: Public key 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @crypt: Encrypted signature data (using the private key) 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @crypt_len: Encrypted signature data length 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @plain: Buffer for plaintext (at least crypt_len bytes) 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @plain_len: Plaintext length (max buffer size on input, real len on output); 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint __must_check crypto_public_key_decrypt_pkcs1( 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct crypto_public_key *key, const u8 *crypt, size_t crypt_len, 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *plain, size_t *plain_len); 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_global_init - Initialize crypto wrapper 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint __must_check crypto_global_init(void); 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_global_deinit - Deinitialize crypto wrapper 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid crypto_global_deinit(void); 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * crypto_mod_exp - Modular exponentiation of large integers 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @base: Base integer (big endian byte array) 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @base_len: Length of base integer in bytes 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @power: Power integer (big endian byte array) 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @power_len: Length of power integer in bytes 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @modulus: Modulus integer (big endian byte array) 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @modulus_len: Length of modulus integer in bytes 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @result: Buffer for the result 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @result_len: Result length (max buffer size on input, real len on output) 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function calculates result = base ^ power mod modulus. modules_len is 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * used as the maximum size of modulus buffer. It is set to the used size on 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * success. 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function is only used with internal TLSv1 implementation 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * (CONFIG_TLS=internal). If that is not used, the crypto wrapper does not need 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * to implement this. 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint __must_check crypto_mod_exp(const u8 *base, size_t base_len, 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *power, size_t power_len, 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *modulus, size_t modulus_len, 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *result, size_t *result_len); 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * rc4_skip - XOR RC4 stream to given data with skip-stream-start 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @key: RC4 key 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @keylen: RC4 key length 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @skip: number of bytes to skip from the beginning of the RC4 stream 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @data: data to be XOR'ed with RC4 stream 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @data_len: buf length 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: 0 on success, -1 on failure 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Generate RC4 pseudo random stream for the given key, skip beginning of the 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * stream, and XOR the end result with the data buffer to perform RC4 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * encryption/decryption. 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint rc4_skip(const u8 *key, size_t keylen, size_t skip, 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *data, size_t data_len); 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 45361d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt/** 45461d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt * crypto_get_random - Generate cryptographically strong pseudy-random bytes 45561d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt * @buf: Buffer for data 45661d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt * @len: Number of bytes to generate 45761d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt * Returns: 0 on success, -1 on failure 45861d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt * 45961d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt * If the PRNG does not have enough entropy to ensure unpredictable byte 46061d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt * sequence, this functions must return -1. 46161d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt */ 46261d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidtint crypto_get_random(void *buf, size_t len); 46361d9df3e62aaa0e87ad05452fcb95142159a17b6Dmitry Shmidt 464a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 465a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 466a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * struct crypto_bignum - bignum 467a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * 468a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Internal data structure for bignum implementation. The contents is specific 469a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * to the used crypto library. 470a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 471a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtstruct crypto_bignum; 472a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 473a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 474a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_init - Allocate memory for bignum 475a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: Pointer to allocated bignum or %NULL on failure 476a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 477a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtstruct crypto_bignum * crypto_bignum_init(void); 478a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 479a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 480a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_init_set - Allocate memory for bignum and set the value 481a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @buf: Buffer with unsigned binary value 482a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @len: Length of buf in octets 483a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: Pointer to allocated bignum or %NULL on failure 484a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 485a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtstruct crypto_bignum * crypto_bignum_init_set(const u8 *buf, size_t len); 486a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 487a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 488a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_deinit - Free bignum 489a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @n: Bignum from crypto_bignum_init() or crypto_bignum_init_set() 490a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @clear: Whether to clear the value from memory 491a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 492a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtvoid crypto_bignum_deinit(struct crypto_bignum *n, int clear); 493a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 494a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 495a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_to_bin - Set binary buffer to unsigned bignum 496a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum 497a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @buf: Buffer for the binary number 498a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @len: Length of @buf in octets 499a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @padlen: Length in octets to pad the result to or 0 to indicate no padding 500a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: Number of octets written on success, -1 on failure 501a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 502a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_bignum_to_bin(const struct crypto_bignum *a, 503a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt u8 *buf, size_t buflen, size_t padlen); 504a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 505a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 506a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_add - c = a + b 507a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum 508a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @b: Bignum 509a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @c: Bignum; used to store the result of a + b 510a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 0 on success, -1 on failure 511a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 512a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_bignum_add(const struct crypto_bignum *a, 513a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_bignum *b, 514a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt struct crypto_bignum *c); 515a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 516a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 517a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_mod - c = a % b 518a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum 519a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @b: Bignum 520a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @c: Bignum; used to store the result of a % b 521a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 0 on success, -1 on failure 522a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 523a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_bignum_mod(const struct crypto_bignum *a, 524a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_bignum *b, 525a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt struct crypto_bignum *c); 526a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 527a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 528a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_exptmod - Modular exponentiation: d = a^b (mod c) 529a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum; base 530a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @b: Bignum; exponent 531a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @c: Bignum; modulus 532a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @d: Bignum; used to store the result of a^b (mod c) 533a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 0 on success, -1 on failure 534a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 535a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_bignum_exptmod(const struct crypto_bignum *a, 536a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_bignum *b, 537a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_bignum *c, 538a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt struct crypto_bignum *d); 539a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 540a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 541a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_inverse - Inverse a bignum so that a * c = 1 (mod b) 542a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum 543a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @b: Bignum 544a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @c: Bignum; used to store the result 545a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 0 on success, -1 on failure 546a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 547a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_bignum_inverse(const struct crypto_bignum *a, 548a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_bignum *b, 549a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt struct crypto_bignum *c); 550a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 551a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 552a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_sub - c = a - b 553a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum 554a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @b: Bignum 555a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @c: Bignum; used to store the result of a - b 556a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 0 on success, -1 on failure 557a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 558a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_bignum_sub(const struct crypto_bignum *a, 559a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_bignum *b, 560a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt struct crypto_bignum *c); 561a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 562a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 563a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_div - c = a / b 564a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum 565a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @b: Bignum 566a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @c: Bignum; used to store the result of a / b 567a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 0 on success, -1 on failure 568a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 569a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_bignum_div(const struct crypto_bignum *a, 570a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_bignum *b, 571a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt struct crypto_bignum *c); 572a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 573a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 574a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_mulmod - d = a * b (mod c) 575a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum 576a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @b: Bignum 577a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @c: Bignum 578a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @d: Bignum; used to store the result of (a * b) % c 579a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 0 on success, -1 on failure 580a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 581a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_bignum_mulmod(const struct crypto_bignum *a, 582a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_bignum *b, 583a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_bignum *c, 584a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt struct crypto_bignum *d); 585a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 586a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 587a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_cmp - Compare two bignums 588a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum 589a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @b: Bignum 590a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: -1 if a < b, 0 if a == b, or 1 if a > b 591a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 592a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_bignum_cmp(const struct crypto_bignum *a, 593a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_bignum *b); 594a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 595a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 596a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_bits - Get size of a bignum in bits 597a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum 598a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: Number of bits in the bignum 599a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 600a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_bignum_bits(const struct crypto_bignum *a); 601a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 602a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 603a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_is_zero - Is the given bignum zero 604a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum 605a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 1 if @a is zero or 0 if not 606a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 607a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_bignum_is_zero(const struct crypto_bignum *a); 608a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 609a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 610a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_is_one - Is the given bignum one 611a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum 612a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 1 if @a is one or 0 if not 613a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 614a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_bignum_is_one(const struct crypto_bignum *a); 615a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 616a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 617a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * struct crypto_ec - Elliptic curve context 618a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * 619a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Internal data structure for EC implementation. The contents is specific 620a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * to the used crypto library. 621a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 622a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtstruct crypto_ec; 623a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 624a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 625a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_init - Initialize elliptic curve context 626a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @group: Identifying number for the ECC group (IANA "Group Description" 627a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * attribute registrty for RFC 2409) 628a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: Pointer to EC context or %NULL on failure 629a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 630a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtstruct crypto_ec * crypto_ec_init(int group); 631a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 632a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 633a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_deinit - Deinitialize elliptic curve context 634a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 635a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 636a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtvoid crypto_ec_deinit(struct crypto_ec *e); 637a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 638a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 639a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_prime_len - Get length of the prime in octets 640a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 641a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: Length of the prime defining the group 642a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 643a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtsize_t crypto_ec_prime_len(struct crypto_ec *e); 644a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 645a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 646a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_prime_len_bits - Get length of the prime in bits 647a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 648a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: Length of the prime defining the group in bits 649a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 650a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtsize_t crypto_ec_prime_len_bits(struct crypto_ec *e); 651a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 652a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 653a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_get_prime - Get prime defining an EC group 654a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 655a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: Prime (bignum) defining the group 656a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 657a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtconst struct crypto_bignum * crypto_ec_get_prime(struct crypto_ec *e); 658a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 659a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 660a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_get_order - Get order of an EC group 661a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 662a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: Order (bignum) of the group 663a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 664a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtconst struct crypto_bignum * crypto_ec_get_order(struct crypto_ec *e); 665a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 666a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 667a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * struct crypto_ec_point - Elliptic curve point 668a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * 669a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Internal data structure for EC implementation to represent a point. The 670a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * contents is specific to the used crypto library. 671a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 672a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtstruct crypto_ec_point; 673a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 674a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 675a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_point_init - Initialize data for an EC point 676a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 677a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: Pointer to EC point data or %NULL on failure 678a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 679a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtstruct crypto_ec_point * crypto_ec_point_init(struct crypto_ec *e); 680a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 681a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 682a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_point_deinit - Deinitialize EC point data 683a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @p: EC point data from crypto_ec_point_init() 684a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @clear: Whether to clear the EC point value from memory 685a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 686a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtvoid crypto_ec_point_deinit(struct crypto_ec_point *p, int clear); 687a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 688a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 689a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_point_to_bin - Write EC point value as binary data 690a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 691a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @p: EC point data from crypto_ec_point_init() 692a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @x: Buffer for writing the binary data for x coordinate or %NULL if not used 693a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @y: Buffer for writing the binary data for y coordinate or %NULL if not used 694a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 0 on success, -1 on failure 695a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * 696a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * This function can be used to write an EC point as binary data in a format 697a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * that has the x and y coordinates in big endian byte order fields padded to 698a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * the length of the prime defining the group. 699a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 700a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_ec_point_to_bin(struct crypto_ec *e, 701a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_ec_point *point, u8 *x, u8 *y); 702a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 703a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 704a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_point_from_bin - Create EC point from binary data 705a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 706a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @val: Binary data to read the EC point from 707a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: Pointer to EC point data or %NULL on failure 708a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * 709a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * This function readers x and y coordinates of the EC point from the provided 710a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * buffer assuming the values are in big endian byte order with fields padded to 711a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * the length of the prime defining the group. 712a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 713a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtstruct crypto_ec_point * crypto_ec_point_from_bin(struct crypto_ec *e, 714a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const u8 *val); 715a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 716a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 717a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_add - c = a + b 718a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 719a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @a: Bignum 720a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @b: Bignum 721a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @c: Bignum; used to store the result of a + b 722a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 0 on success, -1 on failure 723a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 724a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_ec_point_add(struct crypto_ec *e, const struct crypto_ec_point *a, 725a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_ec_point *b, 726a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt struct crypto_ec_point *c); 727a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 728a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 729a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_bignum_mul - res = b * p 730a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 731a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @p: EC point 732a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @b: Bignum 733a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @res: EC point; used to store the result of b * p 734a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 0 on success, -1 on failure 735a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 736a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_ec_point_mul(struct crypto_ec *e, const struct crypto_ec_point *p, 737a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_bignum *b, 738a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt struct crypto_ec_point *res); 739a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 740a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 741a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_point_invert - Compute inverse of an EC point 742a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 743a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @p: EC point to invert (and result of the operation) 744a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 0 on success, -1 on failure 745a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 746a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_ec_point_invert(struct crypto_ec *e, struct crypto_ec_point *p); 747a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 748a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 749a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_point_solve_y_coord - Solve y coordinate for an x coordinate 750a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 751a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @p: EC point to use for the returning the result 752a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @x: x coordinate 753a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @y_bit: y-bit (0 or 1) for selecting the y value to use 754a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 0 on success, -1 on failure 755a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 756a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_ec_point_solve_y_coord(struct crypto_ec *e, 757a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt struct crypto_ec_point *p, 758a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_bignum *x, int y_bit); 759a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 760a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 761a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_point_is_at_infinity - Check whether EC point is neutral element 762a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 763a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @p: EC point 764a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 1 if the specified EC point is the neutral element of the group or 765a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * 0 if not 766a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 767a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_ec_point_is_at_infinity(struct crypto_ec *e, 768a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_ec_point *p); 769a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 770a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt/** 771a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * crypto_ec_point_is_on_curve - Check whether EC point is on curve 772a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @e: EC context from crypto_ec_init() 773a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * @p: EC point 774a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt * Returns: 1 if the specified EC point is on the curve or 0 if not 775a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt */ 776a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidtint crypto_ec_point_is_on_curve(struct crypto_ec *e, 777a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt const struct crypto_ec_point *p); 778a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt 7798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CRYPTO_H */ 780