/src/boringssl/crypto/fipsmodule/aes/aes.c.inc
Line | Count | Source (jump to first uncovered line) |
1 | | /* ==================================================================== |
2 | | * Copyright (c) 2002-2006 The OpenSSL Project. All rights reserved. |
3 | | * |
4 | | * Redistribution and use in source and binary forms, with or without |
5 | | * modification, are permitted provided that the following conditions |
6 | | * are met: |
7 | | * |
8 | | * 1. Redistributions of source code must retain the above copyright |
9 | | * notice, this list of conditions and the following disclaimer. |
10 | | * |
11 | | * 2. Redistributions in binary form must reproduce the above copyright |
12 | | * notice, this list of conditions and the following disclaimer in |
13 | | * the documentation and/or other materials provided with the |
14 | | * distribution. |
15 | | * |
16 | | * 3. All advertising materials mentioning features or use of this |
17 | | * software must display the following acknowledgment: |
18 | | * "This product includes software developed by the OpenSSL Project |
19 | | * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" |
20 | | * |
21 | | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to |
22 | | * endorse or promote products derived from this software without |
23 | | * prior written permission. For written permission, please contact |
24 | | * openssl-core@openssl.org. |
25 | | * |
26 | | * 5. Products derived from this software may not be called "OpenSSL" |
27 | | * nor may "OpenSSL" appear in their names without prior written |
28 | | * permission of the OpenSSL Project. |
29 | | * |
30 | | * 6. Redistributions of any form whatsoever must retain the following |
31 | | * acknowledgment: |
32 | | * "This product includes software developed by the OpenSSL Project |
33 | | * for use in the OpenSSL Toolkit (http://www.openssl.org/)" |
34 | | * |
35 | | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY |
36 | | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
37 | | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR |
38 | | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR |
39 | | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
40 | | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT |
41 | | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; |
42 | | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
43 | | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, |
44 | | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) |
45 | | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED |
46 | | * OF THE POSSIBILITY OF SUCH DAMAGE. |
47 | | * ==================================================================== */ |
48 | | |
49 | | #include <openssl/aes.h> |
50 | | |
51 | | #include <assert.h> |
52 | | |
53 | | #include "internal.h" |
54 | | #include "../modes/internal.h" |
55 | | |
56 | | |
57 | | // Be aware that different sets of AES functions use incompatible key |
58 | | // representations, varying in format of the key schedule, the |AES_KEY.rounds| |
59 | | // value, or both. Therefore they cannot mix. Also, on AArch64, the plain-C |
60 | | // code, above, is incompatible with the |aes_hw_*| functions. |
61 | | |
62 | 0 | void AES_encrypt(const uint8_t *in, uint8_t *out, const AES_KEY *key) { |
63 | 0 | if (hwaes_capable()) { |
64 | 0 | aes_hw_encrypt(in, out, key); |
65 | 0 | } else if (vpaes_capable()) { |
66 | 0 | vpaes_encrypt(in, out, key); |
67 | 0 | } else { |
68 | 0 | aes_nohw_encrypt(in, out, key); |
69 | 0 | } |
70 | 0 | } |
71 | | |
72 | 0 | void AES_decrypt(const uint8_t *in, uint8_t *out, const AES_KEY *key) { |
73 | 0 | if (hwaes_capable()) { |
74 | 0 | aes_hw_decrypt(in, out, key); |
75 | 0 | } else if (vpaes_capable()) { |
76 | 0 | vpaes_decrypt(in, out, key); |
77 | 0 | } else { |
78 | 0 | aes_nohw_decrypt(in, out, key); |
79 | 0 | } |
80 | 0 | } |
81 | | |
82 | 0 | int AES_set_encrypt_key(const uint8_t *key, unsigned bits, AES_KEY *aeskey) { |
83 | 0 | if (bits != 128 && bits != 192 && bits != 256) { |
84 | 0 | return -2; |
85 | 0 | } |
86 | 0 | if (hwaes_capable()) { |
87 | 0 | return aes_hw_set_encrypt_key(key, bits, aeskey); |
88 | 0 | } else if (vpaes_capable()) { |
89 | 0 | return vpaes_set_encrypt_key(key, bits, aeskey); |
90 | 0 | } else { |
91 | 0 | return aes_nohw_set_encrypt_key(key, bits, aeskey); |
92 | 0 | } |
93 | 0 | } |
94 | | |
95 | 0 | int AES_set_decrypt_key(const uint8_t *key, unsigned bits, AES_KEY *aeskey) { |
96 | 0 | if (bits != 128 && bits != 192 && bits != 256) { |
97 | 0 | return -2; |
98 | 0 | } |
99 | 0 | if (hwaes_capable()) { |
100 | 0 | return aes_hw_set_decrypt_key(key, bits, aeskey); |
101 | 0 | } else if (vpaes_capable()) { |
102 | 0 | return vpaes_set_decrypt_key(key, bits, aeskey); |
103 | 0 | } else { |
104 | 0 | return aes_nohw_set_decrypt_key(key, bits, aeskey); |
105 | 0 | } |
106 | 0 | } |
107 | | |
108 | | #if defined(HWAES) && (defined(OPENSSL_X86) || defined(OPENSSL_X86_64)) |
109 | | // On x86 and x86_64, |aes_hw_set_decrypt_key|, we implement |
110 | | // |aes_hw_encrypt_key_to_decrypt_key| in assembly and rely on C code to combine |
111 | | // the operations. |
112 | 0 | int aes_hw_set_decrypt_key(const uint8_t *user_key, int bits, AES_KEY *key) { |
113 | 0 | int ret = aes_hw_set_encrypt_key(user_key, bits, key); |
114 | 0 | if (ret == 0) { |
115 | 0 | aes_hw_encrypt_key_to_decrypt_key(key); |
116 | 0 | } |
117 | 0 | return ret; |
118 | 0 | } |
119 | | |
120 | 39.7k | int aes_hw_set_encrypt_key(const uint8_t *user_key, int bits, AES_KEY *key) { |
121 | 39.7k | if (aes_hw_set_encrypt_key_alt_preferred()) { |
122 | 39.7k | return aes_hw_set_encrypt_key_alt(user_key, bits, key); |
123 | 39.7k | } else { |
124 | 0 | return aes_hw_set_encrypt_key_base(user_key, bits, key); |
125 | 0 | } |
126 | 39.7k | } |
127 | | #endif |