1 /*
2 * This file and its contents are supplied under the terms of the
3 * Common Development and Distribution License ("CDDL"), version 1.0.
4 * You may only use this file in accordance with the terms of version
5 * 1.0 of the CDDL.
6 *
7 * A full copy of the text of the CDDL should have accompanied this
8 * source. A copy of the CDDL is also available via the Internet at
9 * http://www.illumos.org/license/CDDL.
10 */
11
12 /*
13 * Copyright 2017 Nexenta Systems, Inc. All rights reserved.
14 * Copyright 2020 RackTop Systems, Inc.
15 */
16
17 #ifndef _SMB_KCRYPT_H_
18 #define _SMB_KCRYPT_H_
19
20 /*
21 * SMB signing routines used in {smb,smb2}_signing.c
22 * Two implementations of these (kernel/user) in:
23 * uts/common/fs/smbsrv/smb_sign_kcf.c
24 * lib/smbsrv/libfksmbsrv/common/fksmb_sign_pkcs.c
25 */
26
27 #ifdef _KERNEL
28 #include <sys/crypto/api.h>
29 #else
30 #include <security/cryptoki.h>
31 #include <security/pkcs11.h>
32 #endif
33
34 #ifdef __cplusplus
35 extern "C" {
36 #endif
37
38 #define MD5_DIGEST_LENGTH 16 /* MD5 digest length in bytes */
39 #define SHA256_DIGEST_LENGTH 32 /* SHA256 digest length in bytes */
40 #define SHA512_DIGEST_LENGTH 64 /* SHA512 digest length in bytes */
41 #define SMB2_SIG_SIZE 16
42 #define SMB2_KEYLEN 16
43 #define SMB3_KEYLEN 16 /* AES-128 keys */
44
45 #ifdef _KERNEL
46 /* KCF variant */
47 typedef crypto_mechanism_t smb_crypto_mech_t;
48 typedef crypto_context_t smb_sign_ctx_t;
49 typedef struct smb3_enc_ctx {
50 crypto_context_t ctx;
51 crypto_data_t output;
52 size_t len;
53 } smb3_enc_ctx_t;
54
55 typedef union {
56 CK_AES_CCM_PARAMS ccm;
57 CK_AES_GCM_PARAMS gcm;
58 } smb3_crypto_param_t;
59
60 #else /* _KERNEL */
61 /* PKCS11 variant */
62 typedef CK_MECHANISM smb_crypto_mech_t;
63 typedef CK_SESSION_HANDLE smb_sign_ctx_t;
64 typedef struct smb_enc_ctx {
65 CK_SESSION_HANDLE ctx;
66 uint8_t *output;
67 CK_ULONG len;
68 } smb3_enc_ctx_t;
69 /*
70 * CCM in PKCS has not been implemented.
71 * We just need an opaque type with space to refer to.
72 */
73 typedef struct pkcs_ccm_param {
74 uint8_t buf[100];
75 } smb3_crypto_param_t;
76 #endif /* _KERNEL */
77
78 /*
79 * SMB signing routines used in smb_signing.c
80 */
81 int smb_md5_getmech(smb_crypto_mech_t *);
82 int smb_md5_init(smb_sign_ctx_t *, smb_crypto_mech_t *);
83 int smb_md5_update(smb_sign_ctx_t, void *, size_t);
84 int smb_md5_final(smb_sign_ctx_t, uint8_t *);
85
86 /*
87 * SMB2/3 signing routines used in smb2_signing.c
88 * Two implementations of these (kernel/user) in:
89 * uts/common/fs/smbsrv/smb2_sign_kcf.c
90 * lib/smbsrv/libfksmbsrv/common/fksmb_sign_pkcs.c
91 */
92
93 int smb2_hmac_getmech(smb_crypto_mech_t *);
94 int smb2_hmac_init(smb_sign_ctx_t *, smb_crypto_mech_t *, uint8_t *, size_t);
95 int smb2_hmac_update(smb_sign_ctx_t, uint8_t *, size_t);
96 int smb2_hmac_final(smb_sign_ctx_t, uint8_t *);
97
98 int smb3_cmac_getmech(smb_crypto_mech_t *);
99 int smb3_cmac_init(smb_sign_ctx_t *, smb_crypto_mech_t *, uint8_t *, size_t);
100 int smb3_cmac_update(smb_sign_ctx_t, uint8_t *, size_t);
101 int smb3_cmac_final(smb_sign_ctx_t, uint8_t *);
102
103 int smb3_kdf(uint8_t *outbuf, uint8_t *key, size_t key_len,
104 uint8_t *label, size_t label_len,
105 uint8_t *context, size_t context_len);
106
107 int smb3_aes_ccm_getmech(smb_crypto_mech_t *);
108 int smb3_aes_gcm_getmech(smb_crypto_mech_t *);
109 void smb3_crypto_init_ccm_param(smb3_crypto_param_t *, uint8_t *, size_t,
110 uint8_t *, size_t, size_t);
111 void smb3_crypto_init_gcm_param(smb3_crypto_param_t *, uint8_t *, size_t,
112 uint8_t *, size_t);
113
114 int smb3_encrypt_init(smb3_enc_ctx_t *, smb_crypto_mech_t *,
115 smb3_crypto_param_t *, uint8_t *, size_t, uint8_t *, size_t);
116 int smb3_encrypt_update(smb3_enc_ctx_t *, uint8_t *, size_t);
117 int smb3_encrypt_final(smb3_enc_ctx_t *, uint8_t *);
118 void smb3_encrypt_cancel(smb3_enc_ctx_t *);
119
120 int smb3_decrypt_init(smb3_enc_ctx_t *, smb_crypto_mech_t *,
121 smb3_crypto_param_t *, uint8_t *, size_t);
122 int smb3_decrypt_update(smb3_enc_ctx_t *, uint8_t *, size_t);
123 int smb3_decrypt_final(smb3_enc_ctx_t *, uint8_t *, size_t);
124
125 #ifdef __cplusplus
126 }
127 #endif
128
129 #endif /* _SMB_KCRYPT_H_ */