xref: /external/tpm2/RSA_Encrypt.c

// This file was extracted from the TCG Published
// Trusted Platform Module Library
// Part 3: Commands
// Family "2.0"
// Level 00 Revision 01.16
// October 30, 2014

#include "InternalRoutines.h"
#include "RSA_Encrypt_fp.h"
#ifdef TPM_ALG_RSA
//
//
//     Error Returns                     Meaning
//
//     TPM_RC_ATTRIBUTES                 decrypt attribute is not SET in key referenced by keyHandle
//     TPM_RC_KEY                        keyHandle does not reference an RSA key
//     TPM_RC_SCHEME                     incorrect input scheme, or the chosen scheme is not a valid RSA
//                                       decrypt scheme
//     TPM_RC_VALUE                      the numeric value of message is greater than the public modulus of
//                                       the key referenced by keyHandle, or label is not a null-terminated
//                                       string
//
TPM_RC
TPM2_RSA_Encrypt(
   RSA_Encrypt_In        *in,                 // IN: input parameter list
   RSA_Encrypt_Out       *out                 // OUT: output parameter list
   )
{
   TPM_RC                    result;
   OBJECT                    *rsaKey;
   TPMT_RSA_DECRYPT          *scheme;
   char                      *label = NULL;

// Input Validation

   rsaKey = ObjectGet(in->keyHandle);

   // selected key must be an RSA key
   if(rsaKey->publicArea.type != TPM_ALG_RSA)
       return TPM_RC_KEY + RC_RSA_Encrypt_keyHandle;

   // selected key must have the decryption attribute
   if(rsaKey->publicArea.objectAttributes.decrypt != SET)
       return TPM_RC_ATTRIBUTES + RC_RSA_Encrypt_keyHandle;

   // Is there a label?
   if(in->label.t.size > 0)
   {
       // label is present, so make sure that is it NULL-terminated
       if(in->label.t.buffer[in->label.t.size - 1] != 0)
           return TPM_RC_VALUE + RC_RSA_Encrypt_label;
       label = (char *)in->label.t.buffer;
   }

// Command Output

   // Select a scheme for encryption
   scheme = CryptSelectRSAScheme(in->keyHandle, &in->inScheme);
   if(scheme == NULL)
       return TPM_RC_SCHEME + RC_RSA_Encrypt_inScheme;

   // Encryption. TPM_RC_VALUE, or TPM_RC_SCHEME errors my be returned buy
   // CryptEncyptRSA. Note: It can also return TPM_RC_ATTRIBUTES if the key does
   // not have the decrypt attribute but that was checked above.
   out->outData.t.size = sizeof(out->outData.t.buffer);
   result = CryptEncryptRSA(&out->outData.t.size, out->outData.t.buffer, rsaKey,
                          scheme, in->message.t.size, in->message.t.buffer,
                          label);
   return result;
}
#endif