/src/openssl/crypto/modes/cbc128.c
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * Copyright 2008-2021 The OpenSSL Project Authors. All Rights Reserved. |
3 | | * |
4 | | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | | * this file except in compliance with the License. You can obtain a copy |
6 | | * in the file LICENSE in the source distribution or at |
7 | | * https://www.openssl.org/source/license.html |
8 | | */ |
9 | | |
10 | | #include <string.h> |
11 | | #include <openssl/crypto.h> |
12 | | #include "crypto/modes.h" |
13 | | |
14 | | #if !defined(STRICT_ALIGNMENT) && !defined(PEDANTIC) |
15 | | # define STRICT_ALIGNMENT 0 |
16 | | #endif |
17 | | |
18 | | #if defined(__GNUC__) && !STRICT_ALIGNMENT |
19 | | typedef size_t size_t_aX __attribute((__aligned__(1))); |
20 | | #else |
21 | | typedef size_t size_t_aX; |
22 | | #endif |
23 | | |
24 | | void CRYPTO_cbc128_encrypt(const unsigned char *in, unsigned char *out, |
25 | | size_t len, const void *key, |
26 | | unsigned char ivec[16], block128_f block) |
27 | 0 | { |
28 | 0 | size_t n; |
29 | 0 | const unsigned char *iv = ivec; |
30 | |
|
31 | 0 | if (len == 0) |
32 | 0 | return; |
33 | | |
34 | 0 | #if !defined(OPENSSL_SMALL_FOOTPRINT) |
35 | 0 | if (STRICT_ALIGNMENT && |
36 | 0 | ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) { |
37 | 0 | while (len >= 16) { |
38 | 0 | for (n = 0; n < 16; ++n) |
39 | 0 | out[n] = in[n] ^ iv[n]; |
40 | 0 | (*block) (out, out, key); |
41 | 0 | iv = out; |
42 | 0 | len -= 16; |
43 | 0 | in += 16; |
44 | 0 | out += 16; |
45 | 0 | } |
46 | 0 | } else { |
47 | 0 | while (len >= 16) { |
48 | 0 | for (n = 0; n < 16; n += sizeof(size_t)) |
49 | 0 | *(size_t_aX *)(out + n) = |
50 | 0 | *(size_t_aX *)(in + n) ^ *(size_t_aX *)(iv + n); |
51 | 0 | (*block) (out, out, key); |
52 | 0 | iv = out; |
53 | 0 | len -= 16; |
54 | 0 | in += 16; |
55 | 0 | out += 16; |
56 | 0 | } |
57 | 0 | } |
58 | 0 | #endif |
59 | 0 | while (len) { |
60 | 0 | for (n = 0; n < 16 && n < len; ++n) |
61 | 0 | out[n] = in[n] ^ iv[n]; |
62 | 0 | for (; n < 16; ++n) |
63 | 0 | out[n] = iv[n]; |
64 | 0 | (*block) (out, out, key); |
65 | 0 | iv = out; |
66 | 0 | if (len <= 16) |
67 | 0 | break; |
68 | 0 | len -= 16; |
69 | 0 | in += 16; |
70 | 0 | out += 16; |
71 | 0 | } |
72 | 0 | if (ivec != iv) |
73 | 0 | memcpy(ivec, iv, 16); |
74 | 0 | } |
75 | | |
76 | | void CRYPTO_cbc128_decrypt(const unsigned char *in, unsigned char *out, |
77 | | size_t len, const void *key, |
78 | | unsigned char ivec[16], block128_f block) |
79 | 0 | { |
80 | 0 | size_t n; |
81 | 0 | union { |
82 | 0 | size_t t[16 / sizeof(size_t)]; |
83 | 0 | unsigned char c[16]; |
84 | 0 | } tmp; |
85 | |
|
86 | 0 | if (len == 0) |
87 | 0 | return; |
88 | | |
89 | 0 | #if !defined(OPENSSL_SMALL_FOOTPRINT) |
90 | 0 | if (in != out) { |
91 | 0 | const unsigned char *iv = ivec; |
92 | |
|
93 | 0 | if (STRICT_ALIGNMENT && |
94 | 0 | ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) { |
95 | 0 | while (len >= 16) { |
96 | 0 | (*block) (in, out, key); |
97 | 0 | for (n = 0; n < 16; ++n) |
98 | 0 | out[n] ^= iv[n]; |
99 | 0 | iv = in; |
100 | 0 | len -= 16; |
101 | 0 | in += 16; |
102 | 0 | out += 16; |
103 | 0 | } |
104 | 0 | } else if (16 % sizeof(size_t) == 0) { /* always true */ |
105 | 0 | while (len >= 16) { |
106 | 0 | size_t_aX *out_t = (size_t_aX *)out; |
107 | 0 | size_t_aX *iv_t = (size_t_aX *)iv; |
108 | |
|
109 | 0 | (*block) (in, out, key); |
110 | 0 | for (n = 0; n < 16 / sizeof(size_t); n++) |
111 | 0 | out_t[n] ^= iv_t[n]; |
112 | 0 | iv = in; |
113 | 0 | len -= 16; |
114 | 0 | in += 16; |
115 | 0 | out += 16; |
116 | 0 | } |
117 | 0 | } |
118 | 0 | if (ivec != iv) |
119 | 0 | memcpy(ivec, iv, 16); |
120 | 0 | } else { |
121 | 0 | if (STRICT_ALIGNMENT && |
122 | 0 | ((size_t)in | (size_t)out | (size_t)ivec) % sizeof(size_t) != 0) { |
123 | 0 | unsigned char c; |
124 | 0 | while (len >= 16) { |
125 | 0 | (*block) (in, tmp.c, key); |
126 | 0 | for (n = 0; n < 16; ++n) { |
127 | 0 | c = in[n]; |
128 | 0 | out[n] = tmp.c[n] ^ ivec[n]; |
129 | 0 | ivec[n] = c; |
130 | 0 | } |
131 | 0 | len -= 16; |
132 | 0 | in += 16; |
133 | 0 | out += 16; |
134 | 0 | } |
135 | 0 | } else if (16 % sizeof(size_t) == 0) { /* always true */ |
136 | 0 | while (len >= 16) { |
137 | 0 | size_t c; |
138 | 0 | size_t_aX *out_t = (size_t_aX *)out; |
139 | 0 | size_t_aX *ivec_t = (size_t_aX *)ivec; |
140 | 0 | const size_t_aX *in_t = (const size_t_aX *)in; |
141 | |
|
142 | 0 | (*block) (in, tmp.c, key); |
143 | 0 | for (n = 0; n < 16 / sizeof(size_t); n++) { |
144 | 0 | c = in_t[n]; |
145 | 0 | out_t[n] = tmp.t[n] ^ ivec_t[n]; |
146 | 0 | ivec_t[n] = c; |
147 | 0 | } |
148 | 0 | len -= 16; |
149 | 0 | in += 16; |
150 | 0 | out += 16; |
151 | 0 | } |
152 | 0 | } |
153 | 0 | } |
154 | 0 | #endif |
155 | 0 | while (len) { |
156 | 0 | unsigned char c; |
157 | 0 | (*block) (in, tmp.c, key); |
158 | 0 | for (n = 0; n < 16 && n < len; ++n) { |
159 | 0 | c = in[n]; |
160 | 0 | out[n] = tmp.c[n] ^ ivec[n]; |
161 | 0 | ivec[n] = c; |
162 | 0 | } |
163 | 0 | if (len <= 16) { |
164 | 0 | for (; n < 16; ++n) |
165 | 0 | ivec[n] = in[n]; |
166 | 0 | break; |
167 | 0 | } |
168 | 0 | len -= 16; |
169 | 0 | in += 16; |
170 | 0 | out += 16; |
171 | 0 | } |
172 | 0 | } |