|
Packit Service |
31306d |
/*
|
|
Packit Service |
31306d |
* This file is part of the SSH Library
|
|
Packit Service |
31306d |
*
|
|
Packit Service |
31306d |
* Copyright (c) 2017 Sartura d.o.o.
|
|
Packit Service |
31306d |
*
|
|
Packit Service |
31306d |
* Author: Juraj Vijtiuk <juraj.vijtiuk@sartura.hr>
|
|
Packit Service |
31306d |
*
|
|
Packit Service |
31306d |
* The SSH Library is free software; you can redistribute it and/or modify
|
|
Packit Service |
31306d |
* it under the terms of the GNU Lesser General Public License as published by
|
|
Packit Service |
31306d |
* the Free Software Foundation; either version 2.1 of the License, or (at your
|
|
Packit Service |
31306d |
* option) any later version.
|
|
Packit Service |
31306d |
*
|
|
Packit Service |
31306d |
* The SSH Library is distributed in the hope that it will be useful, but
|
|
Packit Service |
31306d |
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
Packit Service |
31306d |
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public
|
|
Packit Service |
31306d |
* License for more details.
|
|
Packit Service |
31306d |
*
|
|
Packit Service |
31306d |
* You should have received a copy of the GNU Lesser General Public License
|
|
Packit Service |
31306d |
* along with the SSH Library; see the file COPYING. If not, write to
|
|
Packit Service |
31306d |
* the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
|
|
Packit Service |
31306d |
* MA 02111-1307, USA.
|
|
Packit Service |
31306d |
*/
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
#include "config.h"
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
#include "libssh/wrapper.h"
|
|
Packit Service |
31306d |
#include "libssh/crypto.h"
|
|
Packit Service |
31306d |
#include "libssh/priv.h"
|
|
Packit Service |
31306d |
#include "libssh/misc.h"
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
#ifdef HAVE_LIBMBEDCRYPTO
|
|
Packit Service |
31306d |
#include <mbedtls/md.h>
|
|
Packit Service |
31306d |
#ifdef MBEDTLS_GCM_C
|
|
Packit Service |
31306d |
#include <mbedtls/gcm.h>
|
|
Packit Service |
31306d |
#endif /* MBEDTLS_GCM_C */
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static mbedtls_entropy_context ssh_mbedtls_entropy;
|
|
Packit Service |
31306d |
static mbedtls_ctr_drbg_context ssh_mbedtls_ctr_drbg;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static int libmbedcrypto_initialized = 0;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void ssh_reseed(void)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_ctr_drbg_reseed(&ssh_mbedtls_ctr_drbg, NULL, 0);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
int ssh_get_random(void *where, int len, int strong)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
return ssh_mbedtls_random(where, len, strong);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
SHACTX sha1_init(void)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
SHACTX ctx = NULL;
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
const mbedtls_md_info_t *md_info =
|
|
Packit Service |
31306d |
mbedtls_md_info_from_type(MBEDTLS_MD_SHA1);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (md_info == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
ctx = malloc(sizeof(mbedtls_md_context_t));
|
|
Packit Service |
31306d |
if (ctx == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_md_init(ctx);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_setup(ctx, md_info, 0);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_starts(ctx);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return ctx;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void sha1_update(SHACTX c, const void *data, unsigned long len)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_md_update(c, data, len);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void sha1_final(unsigned char *md, SHACTX c)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_md_finish(c, md);
|
|
Packit Service |
31306d |
mbedtls_md_free(c);
|
|
Packit Service |
31306d |
SAFE_FREE(c);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void sha1(const unsigned char *digest, int len, unsigned char *hash)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
const mbedtls_md_info_t *md_info =
|
|
Packit Service |
31306d |
mbedtls_md_info_from_type(MBEDTLS_MD_SHA1);
|
|
Packit Service |
31306d |
if (md_info != NULL) {
|
|
Packit Service |
31306d |
mbedtls_md(md_info, digest, len, hash);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static mbedtls_md_type_t nid_to_md_algo(int nid)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
switch (nid) {
|
|
Packit Service |
31306d |
case NID_mbedtls_nistp256:
|
|
Packit Service |
31306d |
return MBEDTLS_MD_SHA256;
|
|
Packit Service |
31306d |
case NID_mbedtls_nistp384:
|
|
Packit Service |
31306d |
return MBEDTLS_MD_SHA384;
|
|
Packit Service |
31306d |
case NID_mbedtls_nistp521:
|
|
Packit Service |
31306d |
return MBEDTLS_MD_SHA512;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
return MBEDTLS_MD_NONE;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void evp(int nid, unsigned char *digest, int len,
|
|
Packit Service |
31306d |
unsigned char *hash, unsigned int *hlen)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_md_type_t algo = nid_to_md_algo(nid);
|
|
Packit Service |
31306d |
const mbedtls_md_info_t *md_info =
|
|
Packit Service |
31306d |
mbedtls_md_info_from_type(algo);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (md_info != NULL) {
|
|
Packit Service |
31306d |
*hlen = mbedtls_md_get_size(md_info);
|
|
Packit Service |
31306d |
mbedtls_md(md_info, digest, len, hash);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
EVPCTX evp_init(int nid)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
EVPCTX ctx = NULL;
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
mbedtls_md_type_t algo = nid_to_md_algo(nid);
|
|
Packit Service |
31306d |
const mbedtls_md_info_t *md_info =
|
|
Packit Service |
31306d |
mbedtls_md_info_from_type(algo);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (md_info == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
ctx = malloc(sizeof(mbedtls_md_context_t));
|
|
Packit Service |
31306d |
if (ctx == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_md_init(ctx);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_setup(ctx, md_info, 0);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_starts(ctx);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return ctx;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void evp_update(EVPCTX ctx, const void *data, unsigned long len)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_md_update(ctx, data, len);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void evp_final(EVPCTX ctx, unsigned char *md, unsigned int *mdlen)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
*mdlen = mbedtls_md_get_size(ctx->md_info);
|
|
Packit Service |
31306d |
mbedtls_md_finish(ctx, md);
|
|
Packit Service |
31306d |
mbedtls_md_free(ctx);
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
SHA256CTX sha256_init(void)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
SHA256CTX ctx = NULL;
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
const mbedtls_md_info_t *md_info =
|
|
Packit Service |
31306d |
mbedtls_md_info_from_type(MBEDTLS_MD_SHA256);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (md_info == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
ctx = malloc(sizeof(mbedtls_md_context_t));
|
|
Packit Service |
31306d |
if(ctx == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_md_init(ctx);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_setup(ctx, md_info, 0);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_starts(ctx);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return ctx;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void sha256_update(SHA256CTX c, const void *data, unsigned long len)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_md_update(c, data, len);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void sha256_final(unsigned char *md, SHA256CTX c)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_md_finish(c, md);
|
|
Packit Service |
31306d |
mbedtls_md_free(c);
|
|
Packit Service |
31306d |
SAFE_FREE(c);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void sha256(const unsigned char *digest, int len, unsigned char *hash)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
const mbedtls_md_info_t *md_info =
|
|
Packit Service |
31306d |
mbedtls_md_info_from_type(MBEDTLS_MD_SHA256);
|
|
Packit Service |
31306d |
if (md_info != NULL) {
|
|
Packit Service |
31306d |
mbedtls_md(md_info, digest, len, hash);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
SHA384CTX sha384_init(void)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
SHA384CTX ctx = NULL;
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
const mbedtls_md_info_t *md_info =
|
|
Packit Service |
31306d |
mbedtls_md_info_from_type(MBEDTLS_MD_SHA384);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (md_info == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
ctx = malloc(sizeof(mbedtls_md_context_t));
|
|
Packit Service |
31306d |
if (ctx == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_md_init(ctx);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_setup(ctx, md_info, 0);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_starts(ctx);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return ctx;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void sha384_update(SHA384CTX c, const void *data, unsigned long len)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_md_update(c, data, len);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void sha384_final(unsigned char *md, SHA384CTX c)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_md_finish(c, md);
|
|
Packit Service |
31306d |
mbedtls_md_free(c);
|
|
Packit Service |
31306d |
SAFE_FREE(c);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void sha384(const unsigned char *digest, int len, unsigned char *hash)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
const mbedtls_md_info_t *md_info =
|
|
Packit Service |
31306d |
mbedtls_md_info_from_type(MBEDTLS_MD_SHA384);
|
|
Packit Service |
31306d |
if (md_info != NULL) {
|
|
Packit Service |
31306d |
mbedtls_md(md_info, digest, len, hash);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
SHA512CTX sha512_init(void)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
SHA512CTX ctx = NULL;
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
const mbedtls_md_info_t *md_info =
|
|
Packit Service |
31306d |
mbedtls_md_info_from_type(MBEDTLS_MD_SHA512);
|
|
Packit Service |
31306d |
if (md_info == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
ctx = malloc(sizeof(mbedtls_md_context_t));
|
|
Packit Service |
31306d |
if (ctx == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_md_init(ctx);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_setup(ctx, md_info, 0);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_starts(ctx);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return ctx;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void sha512_update(SHA512CTX c, const void *data, unsigned long len)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_md_update(c, data, len);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void sha512_final(unsigned char *md, SHA512CTX c)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_md_finish(c, md);
|
|
Packit Service |
31306d |
mbedtls_md_free(c);
|
|
Packit Service |
31306d |
SAFE_FREE(c);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void sha512(const unsigned char *digest, int len, unsigned char *hash)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
const mbedtls_md_info_t *md_info =
|
|
Packit Service |
31306d |
mbedtls_md_info_from_type(MBEDTLS_MD_SHA512);
|
|
Packit Service |
31306d |
if (md_info != NULL) {
|
|
Packit Service |
31306d |
mbedtls_md(md_info, digest, len, hash);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
MD5CTX md5_init(void)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
MD5CTX ctx = NULL;
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
const mbedtls_md_info_t *md_info =
|
|
Packit Service |
31306d |
mbedtls_md_info_from_type(MBEDTLS_MD_MD5);
|
|
Packit Service |
31306d |
if (md_info == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
ctx = malloc(sizeof(mbedtls_md_context_t));
|
|
Packit Service |
31306d |
if (ctx == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_md_init(ctx);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_setup(ctx, md_info, 0);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_starts(ctx);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return ctx;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void md5_update(MD5CTX c, const void *data, unsigned long len) {
|
|
Packit Service |
31306d |
mbedtls_md_update(c, data, len);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void md5_final(unsigned char *md, MD5CTX c)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_md_finish(c, md);
|
|
Packit Service |
31306d |
mbedtls_md_free(c);
|
|
Packit Service |
31306d |
SAFE_FREE(c);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
int ssh_kdf(struct ssh_crypto_struct *crypto,
|
|
Packit Service |
31306d |
unsigned char *key, size_t key_len,
|
|
Packit Service |
31306d |
int key_type, unsigned char *output,
|
|
Packit Service |
31306d |
size_t requested_len)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
return sshkdf_derive_key(crypto, key, key_len,
|
|
Packit Service |
31306d |
key_type, output, requested_len);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
HMACCTX hmac_init(const void *key, int len, enum ssh_hmac_e type)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
HMACCTX ctx = NULL;
|
|
Packit Service |
31306d |
const mbedtls_md_info_t *md_info = NULL;
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
ctx = malloc(sizeof(mbedtls_md_context_t));
|
|
Packit Service |
31306d |
if (ctx == NULL) {
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
switch (type) {
|
|
Packit Service |
31306d |
case SSH_HMAC_SHA1:
|
|
Packit Service |
31306d |
md_info = mbedtls_md_info_from_type(MBEDTLS_MD_SHA1);
|
|
Packit Service |
31306d |
break;
|
|
Packit Service |
31306d |
case SSH_HMAC_SHA256:
|
|
Packit Service |
31306d |
md_info = mbedtls_md_info_from_type(MBEDTLS_MD_SHA256);
|
|
Packit Service |
31306d |
break;
|
|
Packit Service |
31306d |
case SSH_HMAC_SHA512:
|
|
Packit Service |
31306d |
md_info = mbedtls_md_info_from_type(MBEDTLS_MD_SHA512);
|
|
Packit Service |
31306d |
break;
|
|
Packit Service |
31306d |
default:
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_md_init(ctx);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (md_info == NULL) {
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_setup(ctx, md_info, 1);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_md_hmac_starts(ctx, key, len);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return ctx;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
error:
|
|
Packit Service |
31306d |
mbedtls_md_free(ctx);
|
|
Packit Service |
31306d |
SAFE_FREE(ctx);
|
|
Packit Service |
31306d |
return NULL;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void hmac_update(HMACCTX c, const void *data, unsigned long len)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_md_hmac_update(c, data, len);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void hmac_final(HMACCTX c, unsigned char *hashmacbuf, unsigned int *len)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
*len = mbedtls_md_get_size(c->md_info);
|
|
Packit Service |
31306d |
mbedtls_md_hmac_finish(c, hashmacbuf);
|
|
Packit Service |
31306d |
mbedtls_md_free(c);
|
|
Packit Service |
31306d |
SAFE_FREE(c);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static int
|
|
Packit Service |
31306d |
cipher_init(struct ssh_cipher_struct *cipher,
|
|
Packit Service |
31306d |
mbedtls_operation_t operation,
|
|
Packit Service |
31306d |
void *key,
|
|
Packit Service |
31306d |
void *IV)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
const mbedtls_cipher_info_t *cipher_info = NULL;
|
|
Packit Service |
31306d |
mbedtls_cipher_context_t *ctx;
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (operation == MBEDTLS_ENCRYPT) {
|
|
Packit Service |
31306d |
ctx = &cipher->encrypt_ctx;
|
|
Packit Service |
31306d |
} else if (operation == MBEDTLS_DECRYPT) {
|
|
Packit Service |
31306d |
ctx = &cipher->decrypt_ctx;
|
|
Packit Service |
31306d |
} else {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "unknown operation");
|
|
Packit Service |
31306d |
return 1;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_cipher_init(ctx);
|
|
Packit Service |
31306d |
cipher_info = mbedtls_cipher_info_from_type(cipher->type);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_setup(ctx, cipher_info);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_setup failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_setkey(ctx, key,
|
|
Packit Service |
31306d |
cipher_info->key_bitlen,
|
|
Packit Service |
31306d |
operation);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_setkey failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_set_iv(ctx, IV, cipher_info->iv_size);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_set_iv failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return 0;
|
|
Packit Service |
31306d |
error:
|
|
Packit Service |
31306d |
mbedtls_cipher_free(ctx);
|
|
Packit Service |
31306d |
return 1;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static int
|
|
Packit Service |
31306d |
cipher_set_encrypt_key(struct ssh_cipher_struct *cipher,
|
|
Packit Service |
31306d |
void *key,
|
|
Packit Service |
31306d |
void *IV)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = cipher_init(cipher, MBEDTLS_ENCRYPT, key, IV);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "cipher_init failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_reset(&cipher->encrypt_ctx);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_reset failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return SSH_OK;
|
|
Packit Service |
31306d |
error:
|
|
Packit Service |
31306d |
return SSH_ERROR;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static int
|
|
Packit Service |
31306d |
cipher_set_encrypt_key_cbc(struct ssh_cipher_struct *cipher,
|
|
Packit Service |
31306d |
void *key,
|
|
Packit Service |
31306d |
void *IV)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = cipher_init(cipher, MBEDTLS_ENCRYPT, key, IV);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "cipher_init failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
/* libssh only encypts and decrypts packets that are multiples of a block
|
|
Packit Service |
31306d |
* size, and no padding is used */
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_set_padding_mode(&cipher->encrypt_ctx,
|
|
Packit Service |
31306d |
MBEDTLS_PADDING_NONE);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_set_padding_mode failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_reset(&cipher->encrypt_ctx);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_reset failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return SSH_OK;
|
|
Packit Service |
31306d |
error:
|
|
Packit Service |
31306d |
mbedtls_cipher_free(&cipher->encrypt_ctx);
|
|
Packit Service |
31306d |
return SSH_ERROR;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
#ifdef MBEDTLS_GCM_C
|
|
Packit Service |
31306d |
static int
|
|
Packit Service |
31306d |
cipher_set_key_gcm(struct ssh_cipher_struct *cipher,
|
|
Packit Service |
31306d |
void *key,
|
|
Packit Service |
31306d |
void *IV)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
const mbedtls_cipher_info_t *cipher_info = NULL;
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_gcm_init(&cipher->gcm_ctx);
|
|
Packit Service |
31306d |
cipher_info = mbedtls_cipher_info_from_type(cipher->type);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_gcm_setkey(&cipher->gcm_ctx,
|
|
Packit Service |
31306d |
MBEDTLS_CIPHER_ID_AES,
|
|
Packit Service |
31306d |
key,
|
|
Packit Service |
31306d |
cipher_info->key_bitlen);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_gcm_setkey failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
/* Store the IV so we can increment the packet counter later */
|
|
Packit Service |
31306d |
memcpy(cipher->last_iv, IV, AES_GCM_IVLEN);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return 0;
|
|
Packit Service |
31306d |
error:
|
|
Packit Service |
31306d |
mbedtls_gcm_free(&cipher->gcm_ctx);
|
|
Packit Service |
31306d |
return 1;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
#endif /* MBEDTLS_GCM_C */
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static int
|
|
Packit Service |
31306d |
cipher_set_decrypt_key(struct ssh_cipher_struct *cipher,
|
|
Packit Service |
31306d |
void *key,
|
|
Packit Service |
31306d |
void *IV)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = cipher_init(cipher, MBEDTLS_DECRYPT, key, IV);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "cipher_init failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_cipher_reset(&cipher->decrypt_ctx);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_reset failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return SSH_OK;
|
|
Packit Service |
31306d |
error:
|
|
Packit Service |
31306d |
mbedtls_cipher_free(&cipher->decrypt_ctx);
|
|
Packit Service |
31306d |
return SSH_ERROR;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static int
|
|
Packit Service |
31306d |
cipher_set_decrypt_key_cbc(struct ssh_cipher_struct *cipher,
|
|
Packit Service |
31306d |
void *key,
|
|
Packit Service |
31306d |
void *IV)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = cipher_init(cipher, MBEDTLS_DECRYPT, key, IV);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "cipher_init failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_set_padding_mode(&cipher->decrypt_ctx,
|
|
Packit Service |
31306d |
MBEDTLS_PADDING_NONE);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_set_padding_mode failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_cipher_reset(&cipher->decrypt_ctx);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_reset failed");
|
|
Packit Service |
31306d |
goto error;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return SSH_OK;
|
|
Packit Service |
31306d |
error:
|
|
Packit Service |
31306d |
mbedtls_cipher_free(&cipher->decrypt_ctx);
|
|
Packit Service |
31306d |
return SSH_ERROR;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static void cipher_encrypt(struct ssh_cipher_struct *cipher,
|
|
Packit Service |
31306d |
void *in,
|
|
Packit Service |
31306d |
void *out,
|
|
Packit Service |
31306d |
size_t len)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
size_t outlen = 0;
|
|
Packit Service |
31306d |
size_t total_len = 0;
|
|
Packit Service |
31306d |
int rc = 0;
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_update(&cipher->encrypt_ctx, in, len, out, &outlen);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_update failed during encryption");
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
total_len += outlen;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (total_len == len) {
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_finish(&cipher->encrypt_ctx, (unsigned char *) out + outlen,
|
|
Packit Service |
31306d |
&outlen);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
total_len += outlen;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_finish failed during encryption");
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (total_len != len) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_update: output size %zu for %zu",
|
|
Packit Service |
31306d |
outlen, len);
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static void cipher_encrypt_cbc(struct ssh_cipher_struct *cipher, void *in, void *out,
|
|
Packit Service |
31306d |
unsigned long len)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
size_t outlen = 0;
|
|
Packit Service |
31306d |
int rc = 0;
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_update(&cipher->encrypt_ctx, in, len, out, &outlen);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_update failed during encryption");
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (outlen != len) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_update: output size %zu for %zu",
|
|
Packit Service |
31306d |
outlen, len);
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static void cipher_decrypt(struct ssh_cipher_struct *cipher,
|
|
Packit Service |
31306d |
void *in,
|
|
Packit Service |
31306d |
void *out,
|
|
Packit Service |
31306d |
size_t len)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
size_t outlen = 0;
|
|
Packit Service |
31306d |
int rc = 0;
|
|
Packit Service |
31306d |
size_t total_len = 0;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_update(&cipher->decrypt_ctx, in, len, out, &outlen);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_update failed during decryption");
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
total_len += outlen;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (total_len == len) {
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_finish(&cipher->decrypt_ctx, (unsigned char *) out +
|
|
Packit Service |
31306d |
outlen, &outlen);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_reset failed during decryption");
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
total_len += outlen;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (total_len != len) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_update: output size %zu for %zu",
|
|
Packit Service |
31306d |
outlen, len);
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static void cipher_decrypt_cbc(struct ssh_cipher_struct *cipher, void *in, void *out,
|
|
Packit Service |
31306d |
unsigned long len)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
size_t outlen = 0;
|
|
Packit Service |
31306d |
int rc = 0;
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_update(&cipher->decrypt_ctx, in, len, out, &outlen);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_update failed during decryption");
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
/* MbedTLS caches the last block when decrypting with cbc.
|
|
Packit Service |
31306d |
* By calling finish the block is flushed to out, however the unprocessed
|
|
Packit Service |
31306d |
* data counter is not reset.
|
|
Packit Service |
31306d |
* Calling mbedtls_cipher_reset resets the unprocessed data counter.
|
|
Packit Service |
31306d |
*/
|
|
Packit Service |
31306d |
if (outlen == 0) {
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_finish(&cipher->decrypt_ctx, out, &outlen);
|
|
Packit Service |
31306d |
} else if (outlen == len) {
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
} else {
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_finish(&cipher->decrypt_ctx, (unsigned char *) out +
|
|
Packit Service |
31306d |
outlen , &outlen);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_finish failed during decryption");
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_cipher_reset(&cipher->decrypt_ctx);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_reset failed during decryption");
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (outlen != len) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_cipher_update: output size %zu for %zu",
|
|
Packit Service |
31306d |
outlen, len);
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
#ifdef MBEDTLS_GCM_C
|
|
Packit Service |
31306d |
static int
|
|
Packit Service |
31306d |
cipher_gcm_get_length(struct ssh_cipher_struct *cipher,
|
|
Packit Service |
31306d |
void *in,
|
|
Packit Service |
31306d |
uint8_t *out,
|
|
Packit Service |
31306d |
size_t len,
|
|
Packit Service |
31306d |
uint64_t seq)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
(void)cipher;
|
|
Packit Service |
31306d |
(void)seq;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
/* The length is not encrypted: Copy it to the result buffer */
|
|
Packit Service |
31306d |
memcpy(out, in, len);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return SSH_OK;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static void
|
|
Packit Service |
31306d |
cipher_encrypt_gcm(struct ssh_cipher_struct *cipher,
|
|
Packit Service |
31306d |
void *in,
|
|
Packit Service |
31306d |
void *out,
|
|
Packit Service |
31306d |
size_t len,
|
|
Packit Service |
31306d |
uint8_t *tag,
|
|
Packit Service |
31306d |
uint64_t seq)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
size_t authlen, aadlen;
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
(void) seq;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
aadlen = cipher->lenfield_blocksize;
|
|
Packit Service |
31306d |
authlen = cipher->tag_size;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
/* The length is not encrypted */
|
|
Packit Service |
31306d |
memcpy(out, in, aadlen);
|
|
Packit Service |
31306d |
rc = mbedtls_gcm_crypt_and_tag(&cipher->gcm_ctx,
|
|
Packit Service |
31306d |
MBEDTLS_GCM_ENCRYPT,
|
|
Packit Service |
31306d |
len - aadlen, /* encrypted data len */
|
|
Packit Service |
31306d |
cipher->last_iv, /* IV */
|
|
Packit Service |
31306d |
AES_GCM_IVLEN,
|
|
Packit Service |
31306d |
in, /* aad */
|
|
Packit Service |
31306d |
aadlen,
|
|
Packit Service |
31306d |
(const unsigned char *)in + aadlen, /* input */
|
|
Packit Service |
31306d |
(unsigned char *)out + aadlen, /* output */
|
|
Packit Service |
31306d |
authlen,
|
|
Packit Service |
31306d |
tag); /* tag */
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_gcm_crypt_and_tag failed");
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
/* Increment the IV for the next invocation */
|
|
Packit Service |
31306d |
uint64_inc(cipher->last_iv + 4);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static int
|
|
Packit Service |
31306d |
cipher_decrypt_gcm(struct ssh_cipher_struct *cipher,
|
|
Packit Service |
31306d |
void *complete_packet,
|
|
Packit Service |
31306d |
uint8_t *out,
|
|
Packit Service |
31306d |
size_t encrypted_size,
|
|
Packit Service |
31306d |
uint64_t seq)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
size_t authlen, aadlen;
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
(void) seq;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
aadlen = cipher->lenfield_blocksize;
|
|
Packit Service |
31306d |
authlen = cipher->tag_size;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_gcm_auth_decrypt(&cipher->gcm_ctx,
|
|
Packit Service |
31306d |
encrypted_size, /* encrypted data len */
|
|
Packit Service |
31306d |
cipher->last_iv, /* IV */
|
|
Packit Service |
31306d |
AES_GCM_IVLEN,
|
|
Packit Service |
31306d |
complete_packet, /* aad */
|
|
Packit Service |
31306d |
aadlen,
|
|
Packit Service |
31306d |
(const uint8_t *)complete_packet + aadlen + encrypted_size, /* tag */
|
|
Packit Service |
31306d |
authlen,
|
|
Packit Service |
31306d |
(const uint8_t *)complete_packet + aadlen, /* input */
|
|
Packit Service |
31306d |
(unsigned char *)out); /* output */
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
SSH_LOG(SSH_LOG_WARNING, "mbedtls_gcm_auth_decrypt failed");
|
|
Packit Service |
31306d |
return SSH_ERROR;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
/* Increment the IV for the next invocation */
|
|
Packit Service |
31306d |
uint64_inc(cipher->last_iv + 4);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return SSH_OK;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
#endif /* MBEDTLS_GCM_C */
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static void cipher_cleanup(struct ssh_cipher_struct *cipher)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
mbedtls_cipher_free(&cipher->encrypt_ctx);
|
|
Packit Service |
31306d |
mbedtls_cipher_free(&cipher->decrypt_ctx);
|
|
Packit Service |
31306d |
#ifdef MBEDTLS_GCM_C
|
|
Packit Service |
31306d |
mbedtls_gcm_free(&cipher->gcm_ctx);
|
|
Packit Service |
31306d |
#endif /* MBEDTLS_GCM_C */
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
static struct ssh_cipher_struct ssh_ciphertab[] = {
|
|
Packit Service |
31306d |
#ifdef WITH_BLOWFISH_CIPHER
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
.name = "blowfish-cbc",
|
|
Packit Service |
31306d |
.blocksize = 8,
|
|
Packit Service |
31306d |
.keysize = 128,
|
|
Packit Service |
31306d |
.type = MBEDTLS_CIPHER_BLOWFISH_CBC,
|
|
Packit Service |
31306d |
.set_encrypt_key = cipher_set_encrypt_key_cbc,
|
|
Packit Service |
31306d |
.set_decrypt_key = cipher_set_decrypt_key_cbc,
|
|
Packit Service |
31306d |
.encrypt = cipher_encrypt_cbc,
|
|
Packit Service |
31306d |
.decrypt = cipher_decrypt_cbc,
|
|
Packit Service |
31306d |
.cleanup = cipher_cleanup
|
|
Packit Service |
31306d |
},
|
|
Packit Service |
31306d |
#endif /* WITH_BLOWFISH_CIPHER */
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
.name = "aes128-ctr",
|
|
Packit Service |
31306d |
.blocksize = 16,
|
|
Packit Service |
31306d |
.keysize = 128,
|
|
Packit Service |
31306d |
.type = MBEDTLS_CIPHER_AES_128_CTR,
|
|
Packit Service |
31306d |
.set_encrypt_key = cipher_set_encrypt_key,
|
|
Packit Service |
31306d |
.set_decrypt_key = cipher_set_decrypt_key,
|
|
Packit Service |
31306d |
.encrypt = cipher_encrypt,
|
|
Packit Service |
31306d |
.decrypt = cipher_decrypt,
|
|
Packit Service |
31306d |
.cleanup = cipher_cleanup
|
|
Packit Service |
31306d |
},
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
.name = "aes192-ctr",
|
|
Packit Service |
31306d |
.blocksize = 16,
|
|
Packit Service |
31306d |
.keysize = 192,
|
|
Packit Service |
31306d |
.type = MBEDTLS_CIPHER_AES_192_CTR,
|
|
Packit Service |
31306d |
.set_encrypt_key = cipher_set_encrypt_key,
|
|
Packit Service |
31306d |
.set_decrypt_key = cipher_set_decrypt_key,
|
|
Packit Service |
31306d |
.encrypt = cipher_encrypt,
|
|
Packit Service |
31306d |
.decrypt = cipher_decrypt,
|
|
Packit Service |
31306d |
.cleanup = cipher_cleanup
|
|
Packit Service |
31306d |
},
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
.name = "aes256-ctr",
|
|
Packit Service |
31306d |
.blocksize = 16,
|
|
Packit Service |
31306d |
.keysize = 256,
|
|
Packit Service |
31306d |
.type = MBEDTLS_CIPHER_AES_256_CTR,
|
|
Packit Service |
31306d |
.set_encrypt_key = cipher_set_encrypt_key,
|
|
Packit Service |
31306d |
.set_decrypt_key = cipher_set_decrypt_key,
|
|
Packit Service |
31306d |
.encrypt = cipher_encrypt,
|
|
Packit Service |
31306d |
.decrypt = cipher_decrypt,
|
|
Packit Service |
31306d |
.cleanup = cipher_cleanup
|
|
Packit Service |
31306d |
},
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
.name = "aes128-cbc",
|
|
Packit Service |
31306d |
.blocksize = 16,
|
|
Packit Service |
31306d |
.keysize = 128,
|
|
Packit Service |
31306d |
.type = MBEDTLS_CIPHER_AES_128_CBC,
|
|
Packit Service |
31306d |
.set_encrypt_key = cipher_set_encrypt_key_cbc,
|
|
Packit Service |
31306d |
.set_decrypt_key = cipher_set_decrypt_key_cbc,
|
|
Packit Service |
31306d |
.encrypt = cipher_encrypt_cbc,
|
|
Packit Service |
31306d |
.decrypt = cipher_decrypt_cbc,
|
|
Packit Service |
31306d |
.cleanup = cipher_cleanup
|
|
Packit Service |
31306d |
},
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
.name = "aes192-cbc",
|
|
Packit Service |
31306d |
.blocksize = 16,
|
|
Packit Service |
31306d |
.keysize = 192,
|
|
Packit Service |
31306d |
.type = MBEDTLS_CIPHER_AES_192_CBC,
|
|
Packit Service |
31306d |
.set_encrypt_key = cipher_set_encrypt_key_cbc,
|
|
Packit Service |
31306d |
.set_decrypt_key = cipher_set_decrypt_key_cbc,
|
|
Packit Service |
31306d |
.encrypt = cipher_encrypt_cbc,
|
|
Packit Service |
31306d |
.decrypt = cipher_decrypt_cbc,
|
|
Packit Service |
31306d |
.cleanup = cipher_cleanup
|
|
Packit Service |
31306d |
},
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
.name = "aes256-cbc",
|
|
Packit Service |
31306d |
.blocksize = 16,
|
|
Packit Service |
31306d |
.keysize = 256,
|
|
Packit Service |
31306d |
.type = MBEDTLS_CIPHER_AES_256_CBC,
|
|
Packit Service |
31306d |
.set_encrypt_key = cipher_set_encrypt_key_cbc,
|
|
Packit Service |
31306d |
.set_decrypt_key = cipher_set_decrypt_key_cbc,
|
|
Packit Service |
31306d |
.encrypt = cipher_encrypt_cbc,
|
|
Packit Service |
31306d |
.decrypt = cipher_decrypt_cbc,
|
|
Packit Service |
31306d |
.cleanup = cipher_cleanup
|
|
Packit Service |
31306d |
},
|
|
Packit Service |
31306d |
#ifdef MBEDTLS_GCM_C
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
.name = "aes128-gcm@openssh.com",
|
|
Packit Service |
31306d |
.blocksize = 16,
|
|
Packit Service |
31306d |
.lenfield_blocksize = 4, /* not encrypted, but authenticated */
|
|
Packit Service |
31306d |
.keysize = 128,
|
|
Packit Service |
31306d |
.tag_size = AES_GCM_TAGLEN,
|
|
Packit Service |
31306d |
.type = MBEDTLS_CIPHER_AES_128_GCM,
|
|
Packit Service |
31306d |
.set_encrypt_key = cipher_set_key_gcm,
|
|
Packit Service |
31306d |
.set_decrypt_key = cipher_set_key_gcm,
|
|
Packit Service |
31306d |
.aead_encrypt = cipher_encrypt_gcm,
|
|
Packit Service |
31306d |
.aead_decrypt_length = cipher_gcm_get_length,
|
|
Packit Service |
31306d |
.aead_decrypt = cipher_decrypt_gcm,
|
|
Packit Service |
31306d |
.cleanup = cipher_cleanup
|
|
Packit Service |
31306d |
},
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
.name = "aes256-gcm@openssh.com",
|
|
Packit Service |
31306d |
.blocksize = 16,
|
|
Packit Service |
31306d |
.lenfield_blocksize = 4, /* not encrypted, but authenticated */
|
|
Packit Service |
31306d |
.keysize = 256,
|
|
Packit Service |
31306d |
.tag_size = AES_GCM_TAGLEN,
|
|
Packit Service |
31306d |
.type = MBEDTLS_CIPHER_AES_256_GCM,
|
|
Packit Service |
31306d |
.set_encrypt_key = cipher_set_key_gcm,
|
|
Packit Service |
31306d |
.set_decrypt_key = cipher_set_key_gcm,
|
|
Packit Service |
31306d |
.aead_encrypt = cipher_encrypt_gcm,
|
|
Packit Service |
31306d |
.aead_decrypt_length = cipher_gcm_get_length,
|
|
Packit Service |
31306d |
.aead_decrypt = cipher_decrypt_gcm,
|
|
Packit Service |
31306d |
.cleanup = cipher_cleanup
|
|
Packit Service |
31306d |
},
|
|
Packit Service |
31306d |
#endif /* MBEDTLS_GCM_C */
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
.name = "3des-cbc",
|
|
Packit Service |
31306d |
.blocksize = 8,
|
|
Packit Service |
31306d |
.keysize = 192,
|
|
Packit Service |
31306d |
.type = MBEDTLS_CIPHER_DES_EDE3_CBC,
|
|
Packit Service |
31306d |
.set_encrypt_key = cipher_set_encrypt_key_cbc,
|
|
Packit Service |
31306d |
.set_decrypt_key = cipher_set_decrypt_key_cbc,
|
|
Packit Service |
31306d |
.encrypt = cipher_encrypt_cbc,
|
|
Packit Service |
31306d |
.decrypt = cipher_decrypt_cbc,
|
|
Packit Service |
31306d |
.cleanup = cipher_cleanup
|
|
Packit Service |
31306d |
},
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
.name = "chacha20-poly1305@openssh.com"
|
|
Packit Service |
31306d |
},
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
.name = NULL,
|
|
Packit Service |
31306d |
.blocksize = 0,
|
|
Packit Service |
31306d |
.keysize = 0,
|
|
Packit Service |
31306d |
.set_encrypt_key = NULL,
|
|
Packit Service |
31306d |
.set_decrypt_key = NULL,
|
|
Packit Service |
31306d |
.encrypt = NULL,
|
|
Packit Service |
31306d |
.decrypt = NULL,
|
|
Packit Service |
31306d |
.cleanup = NULL
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
};
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
struct ssh_cipher_struct *ssh_get_ciphertab(void)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
return ssh_ciphertab;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
int ssh_crypto_init(void)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
size_t i;
|
|
Packit Service |
31306d |
int rc;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
if (libmbedcrypto_initialized) {
|
|
Packit Service |
31306d |
return SSH_OK;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_entropy_init(&ssh_mbedtls_entropy);
|
|
Packit Service |
31306d |
mbedtls_ctr_drbg_init(&ssh_mbedtls_ctr_drbg);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
rc = mbedtls_ctr_drbg_seed(&ssh_mbedtls_ctr_drbg, mbedtls_entropy_func,
|
|
Packit Service |
31306d |
&ssh_mbedtls_entropy, NULL, 0);
|
|
Packit Service |
31306d |
if (rc != 0) {
|
|
Packit Service |
31306d |
mbedtls_ctr_drbg_free(&ssh_mbedtls_ctr_drbg);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
for (i = 0; ssh_ciphertab[i].name != NULL; i++) {
|
|
Packit Service |
31306d |
int cmp;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
cmp = strcmp(ssh_ciphertab[i].name, "chacha20-poly1305@openssh.com");
|
|
Packit Service |
31306d |
if (cmp == 0) {
|
|
Packit Service |
31306d |
memcpy(&ssh_ciphertab[i],
|
|
Packit Service |
31306d |
ssh_get_chacha20poly1305_cipher(),
|
|
Packit Service |
31306d |
sizeof(struct ssh_cipher_struct));
|
|
Packit Service |
31306d |
break;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
libmbedcrypto_initialized = 1;
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return SSH_OK;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
int ssh_mbedtls_random(void *where, int len, int strong)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
int rc = 0;
|
|
Packit Service |
31306d |
if (strong) {
|
|
Packit Service |
31306d |
mbedtls_ctr_drbg_set_prediction_resistance(&ssh_mbedtls_ctr_drbg,
|
|
Packit Service |
31306d |
MBEDTLS_CTR_DRBG_PR_ON);
|
|
Packit Service |
31306d |
rc = mbedtls_ctr_drbg_random(&ssh_mbedtls_ctr_drbg, where, len);
|
|
Packit Service |
31306d |
mbedtls_ctr_drbg_set_prediction_resistance(&ssh_mbedtls_ctr_drbg,
|
|
Packit Service |
31306d |
MBEDTLS_CTR_DRBG_PR_OFF);
|
|
Packit Service |
31306d |
} else {
|
|
Packit Service |
31306d |
rc = mbedtls_ctr_drbg_random(&ssh_mbedtls_ctr_drbg, where, len);
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
return !rc;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_ctr_drbg_context *ssh_get_mbedtls_ctr_drbg_context(void)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
return &ssh_mbedtls_ctr_drbg;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
void ssh_crypto_finalize(void)
|
|
Packit Service |
31306d |
{
|
|
Packit Service |
31306d |
if (!libmbedcrypto_initialized) {
|
|
Packit Service |
31306d |
return;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
mbedtls_ctr_drbg_free(&ssh_mbedtls_ctr_drbg);
|
|
Packit Service |
31306d |
mbedtls_entropy_free(&ssh_mbedtls_entropy);
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
libmbedcrypto_initialized = 0;
|
|
Packit Service |
31306d |
}
|
|
Packit Service |
31306d |
|
|
Packit Service |
31306d |
#endif /* HAVE_LIBMBEDCRYPTO */
|