1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21 /*
22 * Copyright 2009 Sun Microsystems, Inc. All rights reserved.
23 * Use is subject to license terms.
24 */
25
26 #include <sys/types.h>
27 #include <sys/sysmacros.h>
28 #include <modes/modes.h>
29 #include "aes_impl.h"
30 #ifndef _KERNEL
31 #include <stdlib.h>
32 #endif /* !_KERNEL */
33
34
35 /* Copy a 16-byte AES block from "in" to "out" */
36 void
37 aes_copy_block(uint8_t *in, uint8_t *out)
38 {
39 if (IS_P2ALIGNED2(in, out, sizeof (uint32_t))) {
40 /* LINTED: pointer alignment */
41 *(uint32_t *)&out[0] = *(uint32_t *)&in[0];
42 /* LINTED: pointer alignment */
43 *(uint32_t *)&out[4] = *(uint32_t *)&in[4];
44 /* LINTED: pointer alignment */
45 *(uint32_t *)&out[8] = *(uint32_t *)&in[8];
46 /* LINTED: pointer alignment */
47 *(uint32_t *)&out[12] = *(uint32_t *)&in[12];
48 } else {
49 AES_COPY_BLOCK(in, out);
50 }
51 }
52
53
54 /* XOR a 16-byte AES block of data into dst */
55 void
56 aes_xor_block(uint8_t *data, uint8_t *dst)
57 {
58 if (IS_P2ALIGNED2(dst, data, sizeof (uint32_t))) {
59 /* LINTED: pointer alignment */
60 *(uint32_t *)&dst[0] ^= *(uint32_t *)&data[0];
61 /* LINTED: pointer alignment */
62 *(uint32_t *)&dst[4] ^= *(uint32_t *)&data[4];
63 /* LINTED: pointer alignment */
64 *(uint32_t *)&dst[8] ^= *(uint32_t *)&data[8];
65 /* LINTED: pointer alignment */
66 *(uint32_t *)&dst[12] ^= *(uint32_t *)&data[12];
67 } else {
68 AES_XOR_BLOCK(data, dst);
69 }
70 }
71
72
73 /*
74 * Encrypt multiple blocks of data according to mode.
75 */
76 int
77 aes_encrypt_contiguous_blocks(void *ctx, char *data, size_t length,
78 crypto_data_t *out)
79 {
80 aes_ctx_t *aes_ctx = ctx;
81 int rv;
82
83 if (aes_ctx->ac_flags & CTR_MODE) {
84 rv = ctr_mode_contiguous_blocks(ctx, data, length, out,
85 AES_BLOCK_LEN, aes_encrypt_block, aes_xor_block);
86 #ifdef _KERNEL
87 } else if (aes_ctx->ac_flags & CCM_MODE) {
88 rv = ccm_mode_encrypt_contiguous_blocks(ctx, data, length,
89 out, AES_BLOCK_LEN, aes_encrypt_block, aes_copy_block,
90 aes_xor_block);
91 } else if (aes_ctx->ac_flags & (GCM_MODE|GMAC_MODE)) {
92 rv = gcm_mode_encrypt_contiguous_blocks(ctx, data, length,
93 out, AES_BLOCK_LEN, aes_encrypt_block, aes_copy_block,
94 aes_xor_block);
95 #endif
96 } else if (aes_ctx->ac_flags & CBC_MODE) {
97 rv = cbc_encrypt_contiguous_blocks(ctx,
98 data, length, out, AES_BLOCK_LEN, aes_encrypt_block,
99 aes_copy_block, aes_xor_block);
100 } else {
101 rv = ecb_cipher_contiguous_blocks(ctx, data, length, out,
102 AES_BLOCK_LEN, aes_encrypt_block);
103 }
104 return (rv);
105 }
106
107
108 /*
109 * Decrypt multiple blocks of data according to mode.
110 */
111 int
112 aes_decrypt_contiguous_blocks(void *ctx, char *data, size_t length,
113 crypto_data_t *out)
114 {
115 aes_ctx_t *aes_ctx = ctx;
116 int rv;
117
118 if (aes_ctx->ac_flags & CTR_MODE) {
119 rv = ctr_mode_contiguous_blocks(ctx, data, length, out,
120 AES_BLOCK_LEN, aes_encrypt_block, aes_xor_block);
121 if (rv == CRYPTO_DATA_LEN_RANGE)
122 rv = CRYPTO_ENCRYPTED_DATA_LEN_RANGE;
123 #ifdef _KERNEL
124 } else if (aes_ctx->ac_flags & CCM_MODE) {
125 rv = ccm_mode_decrypt_contiguous_blocks(ctx, data, length,
126 out, AES_BLOCK_LEN, aes_encrypt_block, aes_copy_block,
127 aes_xor_block);
128 } else if (aes_ctx->ac_flags & (GCM_MODE|GMAC_MODE)) {
129 rv = gcm_mode_decrypt_contiguous_blocks(ctx, data, length,
130 out, AES_BLOCK_LEN, aes_encrypt_block, aes_copy_block,
131 aes_xor_block);
132 #endif
133 } else if (aes_ctx->ac_flags & CBC_MODE) {
134 rv = cbc_decrypt_contiguous_blocks(ctx, data, length, out,
135 AES_BLOCK_LEN, aes_decrypt_block, aes_copy_block,
136 aes_xor_block);
137 } else {
138 rv = ecb_cipher_contiguous_blocks(ctx, data, length, out,
139 AES_BLOCK_LEN, aes_decrypt_block);
140 if (rv == CRYPTO_DATA_LEN_RANGE)
141 rv = CRYPTO_ENCRYPTED_DATA_LEN_RANGE;
142 }
143 return (rv);
144 }