123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134 |
- /* Copyright (C) 2014 Stony Brook University
- This file is part of Graphene Library OS.
- Graphene Library OS is free software: you can redistribute it and/or
- modify it under the terms of the GNU Lesser General Public License
- as published by the Free Software Foundation, either version 3 of the
- License, or (at your option) any later version.
- Graphene Library OS is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- GNU Lesser General Public License for more details.
- You should have received a copy of the GNU Lesser General Public License
- along with this program. If not, see <http://www.gnu.org/licenses/>. */
- /*
- * Cryptographic primitive abstractions. This layer provides a way to
- * change the crypto library without changing the rest of Graphene code
- * by providing a small crypto library adaptor implementing these methods.
- */
- #ifndef PAL_CRYPTO_H
- #define PAL_CRYPTO_H
- #define SHA256_DIGEST_LEN 32
- #define AES_CMAC_KEY_LEN 16
- #define AES_CMAC_DIGEST_LEN 32
- #ifdef CRYPTO_USE_WOLFSSL
- #define CRYPTO_PROVIDER_SPECIFIED
- #include "crypto/wolfssl/cmac.h"
- #include "crypto/wolfssl/aes.h"
- #include "crypto/wolfssl/sha256.h"
- #include "crypto/wolfssl/dh.h"
- #include "crypto/wolfssl/rsa.h"
- typedef SHA256 LIB_SHA256_CONTEXT;
- #define DH_SIZE 128
- typedef struct {
- uint8_t priv[DH_SIZE];
- uint32_t priv_size;
- DhKey key;
- } LIB_DH_CONTEXT __attribute__((aligned(DH_SIZE)));
- typedef struct RSAKey LIB_RSA_KEY;
- #endif /* CRYPTO_USE_WOLFSSL */
- #ifdef CRYPTO_USE_MBEDTLS
- #define CRYPTO_PROVIDER_SPECIFIED
- #include "crypto/mbedtls/mbedtls/cmac.h"
- typedef struct AES LIB_AES_CONTEXT;
- #include "crypto/mbedtls/mbedtls/dhm.h"
- #include "crypto/mbedtls/mbedtls/rsa.h"
- #include "crypto/mbedtls/mbedtls/sha256.h"
- typedef mbedtls_sha256_context LIB_SHA256_CONTEXT;
- /* DH_SIZE is tied to the choice of parameters in mbedtls_dh.c. */
- #define DH_SIZE 256
- #include "crypto/mbedtls/mbedtls/dhm.h"
- typedef mbedtls_dhm_context LIB_DH_CONTEXT;
- typedef mbedtls_rsa_context LIB_RSA_KEY;
- typedef struct {
- mbedtls_cipher_type_t cipher;
- mbedtls_cipher_context_t ctx;
- } LIB_AESCMAC_CONTEXT;
- #endif /* CRYPTO_USE_MBEDTLS */
- #ifndef CRYPTO_PROVIDER_SPECIFIED
- # error "Unknown crypto provider. Set CRYPTO_PROVIDER in Makefile"
- #endif
- /* SHA256 */
- int lib_SHA256Init(LIB_SHA256_CONTEXT *context);
- int lib_SHA256Update(LIB_SHA256_CONTEXT *context, const uint8_t *data,
- uint64_t len);
- int lib_SHA256Final(LIB_SHA256_CONTEXT *context, uint8_t *output);
- /* Diffie-Hellman Key Exchange */
- int lib_DhInit(LIB_DH_CONTEXT *context);
- int lib_DhCreatePublic(LIB_DH_CONTEXT *context, uint8_t *public,
- uint64_t *public_size);
- int lib_DhCalcSecret(LIB_DH_CONTEXT *context, uint8_t *peer, uint64_t peer_size,
- uint8_t *secret, uint64_t *secret_size);
- void lib_DhFinal(LIB_DH_CONTEXT *context);
- /* AES-CMAC */
- int lib_AESCMAC(const uint8_t *key, uint64_t key_len, const uint8_t *input,
- uint64_t input_len, uint8_t *mac, uint64_t mac_len);
- /* note: 'lib_AESCMAC' is the combination of 'lib_AESCMACInit',
- * 'lib_AESCMACUpdate', and 'lib_AESCMACFinish'. */
- int lib_AESCMACInit(LIB_AESCMAC_CONTEXT * context,
- const uint8_t *key, uint64_t key_len);
- int lib_AESCMACUpdate(LIB_AESCMAC_CONTEXT * context, const uint8_t * input,
- uint64_t input_len);
- int lib_AESCMACFinish(LIB_AESCMAC_CONTEXT * context, uint8_t * mac,
- uint64_t mac_len);
- /* RSA. Limited functionality. */
- // Initializes the key structure
- int lib_RSAInitKey(LIB_RSA_KEY *key);
- // Must call lib_RSAInitKey first
- int lib_RSAGenerateKey(LIB_RSA_KEY *key, uint64_t length_in_bits,
- uint64_t exponent);
- int lib_RSAExportPublicKey(LIB_RSA_KEY *key, uint8_t *e, uint64_t *e_size,
- uint8_t *n, uint64_t *n_size);
- int lib_RSAImportPublicKey(LIB_RSA_KEY *key, const uint8_t *e, uint64_t e_size,
- const uint8_t *n, uint64_t n_size);
- // Sign and verify signatures.
- // This function must implement RSA signature verification using PKCS#1 v1.5
- // padding, with SHA256 as the hash mechanism. These signatures are generated
- // by the Graphene filesystem build (so outside of a running Graphene
- // application), but are verified within the Graphene application.
- int lib_RSAVerifySHA256(LIB_RSA_KEY *key, const uint8_t *signature,
- uint64_t signature_len, uint8_t *signed_data_out,
- uint64_t signed_data_out_len);
- // Frees memory allocated in lib_RSAInitKey.
- int lib_RSAFreeKey(LIB_RSA_KEY *key);
- #endif
|