/src/openssl30/providers/implementations/ciphers/cipher_chacha20_poly1305.c

Source (jump to first uncovered line)
/*
 * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the Apache License 2.0 (the "License").  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
 */

/* Dispatch functions for chacha20_poly1305 cipher */

#include <openssl/proverr.h>
#include "cipher_chacha20_poly1305.h"
#include "prov/implementations.h"
#include "prov/providercommon.h"

#define CHACHA20_POLY1305_KEYLEN CHACHA_KEY_SIZE
#define CHACHA20_POLY1305_BLKLEN 1
#define CHACHA20_POLY1305_MAX_IVLEN 12
#define CHACHA20_POLY1305_MODE 0
#define CHACHA20_POLY1305_FLAGS (PROV_CIPHER_FLAG_AEAD                         \
                                 | PROV_CIPHER_FLAG_CUSTOM_IV)

static OSSL_FUNC_cipher_newctx_fn chacha20_poly1305_newctx;
static OSSL_FUNC_cipher_freectx_fn chacha20_poly1305_freectx;
static OSSL_FUNC_cipher_dupctx_fn chacha20_poly1305_dupctx;
static OSSL_FUNC_cipher_encrypt_init_fn chacha20_poly1305_einit;
static OSSL_FUNC_cipher_decrypt_init_fn chacha20_poly1305_dinit;
static OSSL_FUNC_cipher_get_params_fn chacha20_poly1305_get_params;
static OSSL_FUNC_cipher_get_ctx_params_fn chacha20_poly1305_get_ctx_params;
static OSSL_FUNC_cipher_set_ctx_params_fn chacha20_poly1305_set_ctx_params;
static OSSL_FUNC_cipher_cipher_fn chacha20_poly1305_cipher;
static OSSL_FUNC_cipher_final_fn chacha20_poly1305_final;
static OSSL_FUNC_cipher_gettable_ctx_params_fn chacha20_poly1305_gettable_ctx_params;
static OSSL_FUNC_cipher_settable_ctx_params_fn chacha20_poly1305_settable_ctx_params;
#define chacha20_poly1305_gettable_params ossl_cipher_generic_gettable_params
#define chacha20_poly1305_update chacha20_poly1305_cipher

static void *chacha20_poly1305_newctx(void *provctx)
{
    PROV_CHACHA20_POLY1305_CTX *ctx;

    if (!ossl_prov_is_running())
        return NULL;

    ctx = OPENSSL_zalloc(sizeof(*ctx));
    if (ctx != NULL) {
        ossl_cipher_generic_initkey(&ctx->base, CHACHA20_POLY1305_KEYLEN * 8,
                                    CHACHA20_POLY1305_BLKLEN * 8,
                                    CHACHA20_POLY1305_IVLEN * 8,
                                    CHACHA20_POLY1305_MODE,
                                    CHACHA20_POLY1305_FLAGS,
                                    ossl_prov_cipher_hw_chacha20_poly1305(
                                        CHACHA20_POLY1305_KEYLEN * 8),
                                    NULL);
        ctx->tls_payload_length = NO_TLS_PAYLOAD_LENGTH;
        ossl_chacha20_initctx(&ctx->chacha);
    }
    return ctx;
}

static void *chacha20_poly1305_dupctx(void *provctx)
{
    PROV_CHACHA20_POLY1305_CTX *ctx = provctx;
    PROV_CHACHA20_POLY1305_CTX *dctx = NULL;

    if (ctx == NULL)
        return NULL;
    dctx = OPENSSL_memdup(ctx, sizeof(*ctx));
    if (dctx != NULL && dctx->base.tlsmac != NULL && dctx->base.alloced) {
        dctx->base.tlsmac = OPENSSL_memdup(dctx->base.tlsmac,
                                           dctx->base.tlsmacsize);
        if (dctx->base.tlsmac == NULL) {
            OPENSSL_free(dctx);
            dctx = NULL;
        }
    }
    return dctx;
}

static void chacha20_poly1305_freectx(void *vctx)
{
    PROV_CHACHA20_POLY1305_CTX *ctx = (PROV_CHACHA20_POLY1305_CTX *)vctx;

    if (ctx != NULL) {
        ossl_cipher_generic_reset_ctx((PROV_CIPHER_CTX *)vctx);
        OPENSSL_clear_free(ctx, sizeof(*ctx));
    }
}

static int chacha20_poly1305_get_params(OSSL_PARAM params[])
{
    return ossl_cipher_generic_get_params(params, 0, CHACHA20_POLY1305_FLAGS,
                                          CHACHA20_POLY1305_KEYLEN * 8,
                                          CHACHA20_POLY1305_BLKLEN * 8,
                                          CHACHA20_POLY1305_IVLEN * 8);
}

static int chacha20_poly1305_get_ctx_params(void *vctx, OSSL_PARAM params[])
{
    PROV_CHACHA20_POLY1305_CTX *ctx = (PROV_CHACHA20_POLY1305_CTX *)vctx;
    OSSL_PARAM *p;

    p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_IVLEN);
    if (p != NULL) {
        if (!OSSL_PARAM_set_size_t(p, CHACHA20_POLY1305_IVLEN)) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
            return 0;
        }
    }
    p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_KEYLEN);
    if (p != NULL && !OSSL_PARAM_set_size_t(p, CHACHA20_POLY1305_KEYLEN)) {
        ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
        return 0;
    }
    p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_AEAD_TAGLEN);
    if (p != NULL && !OSSL_PARAM_set_size_t(p, ctx->tag_len)) {
        ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
        return 0;
    }
    p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_AEAD_TLS1_AAD_PAD);
    if (p != NULL && !OSSL_PARAM_set_size_t(p, ctx->tls_aad_pad_sz)) {
        ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
        return 0;
    }

    p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_AEAD_TAG);
    if (p != NULL) {
        if (p->data_type != OSSL_PARAM_OCTET_STRING) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
            return 0;
        }
        if (!ctx->base.enc) {
            ERR_raise(ERR_LIB_PROV, PROV_R_TAG_NOT_SET);
            return 0;
        }
        if (p->data_size == 0 || p->data_size > POLY1305_BLOCK_SIZE) {
            ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_TAG_LENGTH);
            return 0;
        }
        memcpy(p->data, ctx->tag, p->data_size);
    }

    return 1;
}

static const OSSL_PARAM chacha20_poly1305_known_gettable_ctx_params[] = {
    OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_KEYLEN, NULL),
    OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_IVLEN, NULL),
    OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_AEAD_TAGLEN, NULL),
    OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TAG, NULL, 0),
    OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_AEAD_TLS1_AAD_PAD, NULL),
    OSSL_PARAM_END
};
static const OSSL_PARAM *chacha20_poly1305_gettable_ctx_params
    (ossl_unused void *cctx, ossl_unused void *provctx)
{
    return chacha20_poly1305_known_gettable_ctx_params;
}

static const OSSL_PARAM chacha20_poly1305_known_settable_ctx_params[] = {
    OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_KEYLEN, NULL),
    OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_IVLEN, NULL),
    OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TAG, NULL, 0),
    OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TLS1_AAD, NULL, 0),
    OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TLS1_IV_FIXED, NULL, 0),
    OSSL_PARAM_END
};
static const OSSL_PARAM *chacha20_poly1305_settable_ctx_params(
        ossl_unused void *cctx, ossl_unused void *provctx
    )
{
    return chacha20_poly1305_known_settable_ctx_params;
}

static int chacha20_poly1305_set_ctx_params(void *vctx,
                                            const OSSL_PARAM params[])
{
    const OSSL_PARAM *p;
    size_t len;
    PROV_CHACHA20_POLY1305_CTX *ctx = (PROV_CHACHA20_POLY1305_CTX *)vctx;
    PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
        (PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->base.hw;

    if (params == NULL)
        return 1;

    p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_KEYLEN);
    if (p != NULL) {
        if (!OSSL_PARAM_get_size_t(p, &len)) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
            return 0;
        }
        if (len != CHACHA20_POLY1305_KEYLEN) {
            ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_KEY_LENGTH);
            return 0;
        }
    }
    p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_IVLEN);
    if (p != NULL) {
        if (!OSSL_PARAM_get_size_t(p, &len)) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
            return 0;
        }
        if (len != CHACHA20_POLY1305_MAX_IVLEN) {
            ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_IV_LENGTH);
            return 0;
        }
    }

    p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_AEAD_TAG);
    if (p != NULL) {
        if (p->data_type != OSSL_PARAM_OCTET_STRING) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
            return 0;
        }
        if (p->data_size == 0 || p->data_size > POLY1305_BLOCK_SIZE) {
            ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_TAG_LENGTH);
            return 0;
        }
        if (p->data != NULL) {
            if (ctx->base.enc) {
                ERR_raise(ERR_LIB_PROV, PROV_R_TAG_NOT_NEEDED);
                return 0;
            }
            memcpy(ctx->tag, p->data, p->data_size);
        }
        ctx->tag_len = p->data_size;
    }

    p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_AEAD_TLS1_AAD);
    if (p != NULL) {
        if (p->data_type != OSSL_PARAM_OCTET_STRING) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
            return 0;
        }
        len = hw->tls_init(&ctx->base, p->data, p->data_size);
        if (len == 0) {
            ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_DATA);
            return 0;
        }
        ctx->tls_aad_pad_sz = len;
    }

    p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_AEAD_TLS1_IV_FIXED);
    if (p != NULL) {
        if (p->data_type != OSSL_PARAM_OCTET_STRING) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
            return 0;
        }
        if (hw->tls_iv_set_fixed(&ctx->base, p->data, p->data_size) == 0) {
            ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_IV_LENGTH);
            return 0;
        }
    }
    return 1;
}

static int chacha20_poly1305_einit(void *vctx, const unsigned char *key,
                                  size_t keylen, const unsigned char *iv,
                                  size_t ivlen, const OSSL_PARAM params[])
{
    int ret;

    /* The generic function checks for ossl_prov_is_running() */
    ret = ossl_cipher_generic_einit(vctx, key, keylen, iv, ivlen, NULL);
    if (ret && iv != NULL) {
        PROV_CIPHER_CTX *ctx = (PROV_CIPHER_CTX *)vctx;
        PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
            (PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;

        hw->initiv(ctx);
    }
    if (ret && !chacha20_poly1305_set_ctx_params(vctx, params))
        ret = 0;
    return ret;
}

static int chacha20_poly1305_dinit(void *vctx, const unsigned char *key,
                                  size_t keylen, const unsigned char *iv,
                                  size_t ivlen, const OSSL_PARAM params[])
{
    int ret;

    /* The generic function checks for ossl_prov_is_running() */
    ret = ossl_cipher_generic_dinit(vctx, key, keylen, iv, ivlen, NULL);
    if (ret && iv != NULL) {
        PROV_CIPHER_CTX *ctx = (PROV_CIPHER_CTX *)vctx;
        PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
            (PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;

        hw->initiv(ctx);
    }
    if (ret && !chacha20_poly1305_set_ctx_params(vctx, params))
        ret = 0;
    return ret;
}

static int chacha20_poly1305_cipher(void *vctx, unsigned char *out,
                                    size_t *outl, size_t outsize,
                                    const unsigned char *in, size_t inl)
{
    PROV_CIPHER_CTX *ctx = (PROV_CIPHER_CTX *)vctx;
    PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
        (PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;

    if (!ossl_prov_is_running())
        return 0;

    if (inl == 0) {
        *outl = 0;
        return 1;
    }

    if (outsize < inl) {
        ERR_raise(ERR_LIB_PROV, PROV_R_OUTPUT_BUFFER_TOO_SMALL);
        return 0;
    }

    if (!hw->aead_cipher(ctx, out, outl, in, inl))
        return 0;

    return 1;
}

static int chacha20_poly1305_final(void *vctx, unsigned char *out, size_t *outl,
                                   size_t outsize)
{
    PROV_CIPHER_CTX *ctx = (PROV_CIPHER_CTX *)vctx;
    PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
        (PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;

    if (!ossl_prov_is_running())
        return 0;

    if (hw->aead_cipher(ctx, out, outl, NULL, 0) <= 0)
        return 0;

    *outl = 0;
    return 1;
}

/* ossl_chacha20_ossl_poly1305_functions */
const OSSL_DISPATCH ossl_chacha20_ossl_poly1305_functions[] = {
    { OSSL_FUNC_CIPHER_NEWCTX, (void (*)(void))chacha20_poly1305_newctx },
    { OSSL_FUNC_CIPHER_FREECTX, (void (*)(void))chacha20_poly1305_freectx },
    { OSSL_FUNC_CIPHER_DUPCTX, (void (*)(void))chacha20_poly1305_dupctx },
    { OSSL_FUNC_CIPHER_ENCRYPT_INIT, (void (*)(void))chacha20_poly1305_einit },
    { OSSL_FUNC_CIPHER_DECRYPT_INIT, (void (*)(void))chacha20_poly1305_dinit },
    { OSSL_FUNC_CIPHER_UPDATE, (void (*)(void))chacha20_poly1305_update },
    { OSSL_FUNC_CIPHER_FINAL, (void (*)(void))chacha20_poly1305_final },
    { OSSL_FUNC_CIPHER_CIPHER, (void (*)(void))chacha20_poly1305_cipher },
    { OSSL_FUNC_CIPHER_GET_PARAMS,
        (void (*)(void))chacha20_poly1305_get_params },
    { OSSL_FUNC_CIPHER_GETTABLE_PARAMS,
        (void (*)(void))chacha20_poly1305_gettable_params },
    { OSSL_FUNC_CIPHER_GET_CTX_PARAMS,
         (void (*)(void))chacha20_poly1305_get_ctx_params },
    { OSSL_FUNC_CIPHER_GETTABLE_CTX_PARAMS,
        (void (*)(void))chacha20_poly1305_gettable_ctx_params },
    { OSSL_FUNC_CIPHER_SET_CTX_PARAMS,
        (void (*)(void))chacha20_poly1305_set_ctx_params },
    { OSSL_FUNC_CIPHER_SETTABLE_CTX_PARAMS,
        (void (*)(void))chacha20_poly1305_settable_ctx_params },
    { 0, NULL }
};


Coverage Report

Created: 2025-06-13 06:58

Line	Count	Source (jump to first uncovered line)
1		/*
2		* Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
3		*
4		* Licensed under the Apache License 2.0 (the "License"). You may not use
5		* this file except in compliance with the License. You can obtain a copy
6		* in the file LICENSE in the source distribution or at
7		* https://www.openssl.org/source/license.html
8		*/
9
10		/* Dispatch functions for chacha20_poly1305 cipher */
11
12		#include <openssl/proverr.h>
13		#include "cipher_chacha20_poly1305.h"
14		#include "prov/implementations.h"
15		#include "prov/providercommon.h"
16
17	43.7k	#define CHACHA20_POLY1305_KEYLEN CHACHA_KEY_SIZE
18	35.8k	#define CHACHA20_POLY1305_BLKLEN 1
19	2.18k	#define CHACHA20_POLY1305_MAX_IVLEN 12
20	4.78k	#define CHACHA20_POLY1305_MODE 0
21	35.8k	#define CHACHA20_POLY1305_FLAGS (PROV_CIPHER_FLAG_AEAD \
22	35.8k	\| PROV_CIPHER_FLAG_CUSTOM_IV)
23
24		static OSSL_FUNC_cipher_newctx_fn chacha20_poly1305_newctx;
25		static OSSL_FUNC_cipher_freectx_fn chacha20_poly1305_freectx;
26		static OSSL_FUNC_cipher_dupctx_fn chacha20_poly1305_dupctx;
27		static OSSL_FUNC_cipher_encrypt_init_fn chacha20_poly1305_einit;
28		static OSSL_FUNC_cipher_decrypt_init_fn chacha20_poly1305_dinit;
29		static OSSL_FUNC_cipher_get_params_fn chacha20_poly1305_get_params;
30		static OSSL_FUNC_cipher_get_ctx_params_fn chacha20_poly1305_get_ctx_params;
31		static OSSL_FUNC_cipher_set_ctx_params_fn chacha20_poly1305_set_ctx_params;
32		static OSSL_FUNC_cipher_cipher_fn chacha20_poly1305_cipher;
33		static OSSL_FUNC_cipher_final_fn chacha20_poly1305_final;
34		static OSSL_FUNC_cipher_gettable_ctx_params_fn chacha20_poly1305_gettable_ctx_params;
35		static OSSL_FUNC_cipher_settable_ctx_params_fn chacha20_poly1305_settable_ctx_params;
36		#define chacha20_poly1305_gettable_params ossl_cipher_generic_gettable_params
37		#define chacha20_poly1305_update chacha20_poly1305_cipher
38
39		static void chacha20_poly1305_newctx(void provctx)
40	4.78k	{
41	4.78k	PROV_CHACHA20_POLY1305_CTX *ctx;
42
43	4.78k	if (!ossl_prov_is_running())
44	0	return NULL;
45
46	4.78k	ctx = OPENSSL_zalloc(sizeof(*ctx));
47	4.78k	if (ctx != NULL) {
48	4.78k	ossl_cipher_generic_initkey(&ctx->base, CHACHA20_POLY1305_KEYLEN * 8,
49	4.78k	CHACHA20_POLY1305_BLKLEN * 8,
50	4.78k	CHACHA20_POLY1305_IVLEN * 8,
51	4.78k	CHACHA20_POLY1305_MODE,
52	4.78k	CHACHA20_POLY1305_FLAGS,
53	4.78k	ossl_prov_cipher_hw_chacha20_poly1305(
54	4.78k	CHACHA20_POLY1305_KEYLEN * 8),
55	4.78k	NULL);
56	4.78k	ctx->tls_payload_length = NO_TLS_PAYLOAD_LENGTH;
57	4.78k	ossl_chacha20_initctx(&ctx->chacha);
58	4.78k	}
59	4.78k	return ctx;
60	4.78k	}
61
62		static void chacha20_poly1305_dupctx(void provctx)
63	0	{
64	0	PROV_CHACHA20_POLY1305_CTX *ctx = provctx;
65	0	PROV_CHACHA20_POLY1305_CTX *dctx = NULL;
66
67	0	if (ctx == NULL)
68	0	return NULL;
69	0	dctx = OPENSSL_memdup(ctx, sizeof(*ctx));
70	0	if (dctx != NULL && dctx->base.tlsmac != NULL && dctx->base.alloced) {
71	0	dctx->base.tlsmac = OPENSSL_memdup(dctx->base.tlsmac,
72	0	dctx->base.tlsmacsize);
73	0	if (dctx->base.tlsmac == NULL) {
74	0	OPENSSL_free(dctx);
75	0	dctx = NULL;
76	0	}
77	0	}
78	0	return dctx;
79	0	}
80
81		static void chacha20_poly1305_freectx(void *vctx)
82	4.78k	{
83	4.78k	PROV_CHACHA20_POLY1305_CTX ctx = (PROV_CHACHA20_POLY1305_CTX )vctx;
84
85	4.78k	if (ctx != NULL) {
86	4.78k	ossl_cipher_generic_reset_ctx((PROV_CIPHER_CTX *)vctx);
87	4.78k	OPENSSL_clear_free(ctx, sizeof(*ctx));
88	4.78k	}
89	4.78k	}
90
91		static int chacha20_poly1305_get_params(OSSL_PARAM params[])
92	31.0k	{
93	31.0k	return ossl_cipher_generic_get_params(params, 0, CHACHA20_POLY1305_FLAGS,
94	31.0k	CHACHA20_POLY1305_KEYLEN * 8,
95	31.0k	CHACHA20_POLY1305_BLKLEN * 8,
96	31.0k	CHACHA20_POLY1305_IVLEN * 8);
97	31.0k	}
98
99		static int chacha20_poly1305_get_ctx_params(void *vctx, OSSL_PARAM params[])
100	41.7k	{
101	41.7k	PROV_CHACHA20_POLY1305_CTX ctx = (PROV_CHACHA20_POLY1305_CTX )vctx;
102	41.7k	OSSL_PARAM *p;
103
104	41.7k	p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_IVLEN);
105	41.7k	if (p != NULL) {
106	21.6k	if (!OSSL_PARAM_set_size_t(p, CHACHA20_POLY1305_IVLEN)) {
107	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
108	0	return 0;
109	0	}
110	21.6k	}
111	41.7k	p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_KEYLEN);
112	41.7k	if (p != NULL && !OSSL_PARAM_set_size_t(p, CHACHA20_POLY1305_KEYLEN)) {
113	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
114	0	return 0;
115	0	}
116	41.7k	p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_AEAD_TAGLEN);
117	41.7k	if (p != NULL && !OSSL_PARAM_set_size_t(p, ctx->tag_len)) {
118	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
119	0	return 0;
120	0	}
121	41.7k	p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_AEAD_TLS1_AAD_PAD);
122	41.7k	if (p != NULL && !OSSL_PARAM_set_size_t(p, ctx->tls_aad_pad_sz)) {
123	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
124	0	return 0;
125	0	}
126
127	41.7k	p = OSSL_PARAM_locate(params, OSSL_CIPHER_PARAM_AEAD_TAG);
128	41.7k	if (p != NULL) {
129	16.9k	if (p->data_type != OSSL_PARAM_OCTET_STRING) {
130	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
131	0	return 0;
132	0	}
133	16.9k	if (!ctx->base.enc) {
134	0	ERR_raise(ERR_LIB_PROV, PROV_R_TAG_NOT_SET);
135	0	return 0;
136	0	}
137	16.9k	if (p->data_size == 0 \|\| p->data_size > POLY1305_BLOCK_SIZE) {
138	0	ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_TAG_LENGTH);
139	0	return 0;
140	0	}
141	16.9k	memcpy(p->data, ctx->tag, p->data_size);
142	16.9k	}
143
144	41.7k	return 1;
145	41.7k	}
146
147		static const OSSL_PARAM chacha20_poly1305_known_gettable_ctx_params[] = {
148		OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_KEYLEN, NULL),
149		OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_IVLEN, NULL),
150		OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_AEAD_TAGLEN, NULL),
151		OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TAG, NULL, 0),
152		OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_AEAD_TLS1_AAD_PAD, NULL),
153		OSSL_PARAM_END
154		};
155		static const OSSL_PARAM *chacha20_poly1305_gettable_ctx_params
156		(ossl_unused void cctx, ossl_unused void provctx)
157	25	{
158	25	return chacha20_poly1305_known_gettable_ctx_params;
159	25	}
160
161		static const OSSL_PARAM chacha20_poly1305_known_settable_ctx_params[] = {
162		OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_KEYLEN, NULL),
163		OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_IVLEN, NULL),
164		OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TAG, NULL, 0),
165		OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TLS1_AAD, NULL, 0),
166		OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TLS1_IV_FIXED, NULL, 0),
167		OSSL_PARAM_END
168		};
169		static const OSSL_PARAM *chacha20_poly1305_settable_ctx_params(
170		ossl_unused void cctx, ossl_unused void provctx
171		)
172	1	{
173	1	return chacha20_poly1305_known_settable_ctx_params;
174	1	}
175
176		static int chacha20_poly1305_set_ctx_params(void *vctx,
177		const OSSL_PARAM params[])
178	159k	{
179	159k	const OSSL_PARAM *p;
180	159k	size_t len;
181	159k	PROV_CHACHA20_POLY1305_CTX ctx = (PROV_CHACHA20_POLY1305_CTX )vctx;
182	159k	PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
183	159k	(PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->base.hw;
184
185	159k	if (params == NULL)
186	89.7k	return 1;
187
188	69.9k	p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_KEYLEN);
189	69.9k	if (p != NULL) {
190	0	if (!OSSL_PARAM_get_size_t(p, &len)) {
191	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
192	0	return 0;
193	0	}
194	0	if (len != CHACHA20_POLY1305_KEYLEN) {
195	0	ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_KEY_LENGTH);
196	0	return 0;
197	0	}
198	0	}
199	69.9k	p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_IVLEN);
200	69.9k	if (p != NULL) {
201	2.18k	if (!OSSL_PARAM_get_size_t(p, &len)) {
202	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
203	0	return 0;
204	0	}
205	2.18k	if (len != CHACHA20_POLY1305_MAX_IVLEN) {
206	0	ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_IV_LENGTH);
207	0	return 0;
208	0	}
209	2.18k	}
210
211	69.9k	p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_AEAD_TAG);
212	69.9k	if (p != NULL) {
213	67.5k	if (p->data_type != OSSL_PARAM_OCTET_STRING) {
214	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
215	0	return 0;
216	0	}
217	67.5k	if (p->data_size == 0 \|\| p->data_size > POLY1305_BLOCK_SIZE) {
218	0	ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_TAG_LENGTH);
219	0	return 0;
220	0	}
221	67.5k	if (p->data != NULL) {
222	67.5k	if (ctx->base.enc) {
223	0	ERR_raise(ERR_LIB_PROV, PROV_R_TAG_NOT_NEEDED);
224	0	return 0;
225	0	}
226	67.5k	memcpy(ctx->tag, p->data, p->data_size);
227	67.5k	}
228	67.5k	ctx->tag_len = p->data_size;
229	67.5k	}
230
231	69.9k	p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_AEAD_TLS1_AAD);
232	69.9k	if (p != NULL) {
233	98	if (p->data_type != OSSL_PARAM_OCTET_STRING) {
234	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
235	0	return 0;
236	0	}
237	98	len = hw->tls_init(&ctx->base, p->data, p->data_size);
238	98	if (len == 0) {
239	10	ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_DATA);
240	10	return 0;
241	10	}
242	88	ctx->tls_aad_pad_sz = len;
243	88	}
244
245	69.9k	p = OSSL_PARAM_locate_const(params, OSSL_CIPHER_PARAM_AEAD_TLS1_IV_FIXED);
246	69.9k	if (p != NULL) {
247	0	if (p->data_type != OSSL_PARAM_OCTET_STRING) {
248	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
249	0	return 0;
250	0	}
251	0	if (hw->tls_iv_set_fixed(&ctx->base, p->data, p->data_size) == 0) {
252	0	ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_IV_LENGTH);
253	0	return 0;
254	0	}
255	0	}
256	69.9k	return 1;
257	69.9k	}
258
259		static int chacha20_poly1305_einit(void vctx, const unsigned char key,
260		size_t keylen, const unsigned char *iv,
261		size_t ivlen, const OSSL_PARAM params[])
262	49.8k	{
263	49.8k	int ret;
264
265		/* The generic function checks for ossl_prov_is_running() */
266	49.8k	ret = ossl_cipher_generic_einit(vctx, key, keylen, iv, ivlen, NULL);
267	49.8k	if (ret && iv != NULL) {
268	46.2k	PROV_CIPHER_CTX ctx = (PROV_CIPHER_CTX )vctx;
269	46.2k	PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
270	46.2k	(PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;
271
272	46.2k	hw->initiv(ctx);
273	46.2k	}
274	49.8k	if (ret && !chacha20_poly1305_set_ctx_params(vctx, params))
275	0	ret = 0;
276	49.8k	return ret;
277	49.8k	}
278
279		static int chacha20_poly1305_dinit(void vctx, const unsigned char key,
280		size_t keylen, const unsigned char *iv,
281		size_t ivlen, const OSSL_PARAM params[])
282	80.5k	{
283	80.5k	int ret;
284
285		/* The generic function checks for ossl_prov_is_running() */
286	80.5k	ret = ossl_cipher_generic_dinit(vctx, key, keylen, iv, ivlen, NULL);
287	80.5k	if (ret && iv != NULL) {
288	78.4k	PROV_CIPHER_CTX ctx = (PROV_CIPHER_CTX )vctx;
289	78.4k	PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
290	78.4k	(PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;
291
292	78.4k	hw->initiv(ctx);
293	78.4k	}
294	80.5k	if (ret && !chacha20_poly1305_set_ctx_params(vctx, params))
295	0	ret = 0;
296	80.5k	return ret;
297	80.5k	}
298
299		static int chacha20_poly1305_cipher(void vctx, unsigned char out,
300		size_t *outl, size_t outsize,
301		const unsigned char *in, size_t inl)
302	248k	{
303	248k	PROV_CIPHER_CTX ctx = (PROV_CIPHER_CTX )vctx;
304	248k	PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
305	248k	(PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;
306
307	248k	if (!ossl_prov_is_running())
308	0	return 0;
309
310	248k	if (inl == 0) {
311	0	*outl = 0;
312	0	return 1;
313	0	}
314
315	248k	if (outsize < inl) {
316	0	ERR_raise(ERR_LIB_PROV, PROV_R_OUTPUT_BUFFER_TOO_SMALL);
317	0	return 0;
318	0	}
319
320	248k	if (!hw->aead_cipher(ctx, out, outl, in, inl))
321	2.91k	return 0;
322
323	245k	return 1;
324	248k	}
325
326		static int chacha20_poly1305_final(void vctx, unsigned char out, size_t *outl,
327		size_t outsize)
328	122k	{
329	122k	PROV_CIPHER_CTX ctx = (PROV_CIPHER_CTX )vctx;
330	122k	PROV_CIPHER_HW_CHACHA20_POLY1305 *hw =
331	122k	(PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;
332
333	122k	if (!ossl_prov_is_running())
334	0	return 0;
335
336	122k	if (hw->aead_cipher(ctx, out, outl, NULL, 0) <= 0)
337	75.5k	return 0;
338
339	47.2k	*outl = 0;
340	47.2k	return 1;
341	122k	}
342
343		/* ossl_chacha20_ossl_poly1305_functions */
344		const OSSL_DISPATCH ossl_chacha20_ossl_poly1305_functions[] = {
345		{ OSSL_FUNC_CIPHER_NEWCTX, (void (*)(void))chacha20_poly1305_newctx },
346		{ OSSL_FUNC_CIPHER_FREECTX, (void (*)(void))chacha20_poly1305_freectx },
347		{ OSSL_FUNC_CIPHER_DUPCTX, (void (*)(void))chacha20_poly1305_dupctx },
348		{ OSSL_FUNC_CIPHER_ENCRYPT_INIT, (void (*)(void))chacha20_poly1305_einit },
349		{ OSSL_FUNC_CIPHER_DECRYPT_INIT, (void (*)(void))chacha20_poly1305_dinit },
350		{ OSSL_FUNC_CIPHER_UPDATE, (void (*)(void))chacha20_poly1305_update },
351		{ OSSL_FUNC_CIPHER_FINAL, (void (*)(void))chacha20_poly1305_final },
352		{ OSSL_FUNC_CIPHER_CIPHER, (void (*)(void))chacha20_poly1305_cipher },
353		{ OSSL_FUNC_CIPHER_GET_PARAMS,
354		(void (*)(void))chacha20_poly1305_get_params },
355		{ OSSL_FUNC_CIPHER_GETTABLE_PARAMS,
356		(void (*)(void))chacha20_poly1305_gettable_params },
357		{ OSSL_FUNC_CIPHER_GET_CTX_PARAMS,
358		(void (*)(void))chacha20_poly1305_get_ctx_params },
359		{ OSSL_FUNC_CIPHER_GETTABLE_CTX_PARAMS,
360		(void (*)(void))chacha20_poly1305_gettable_ctx_params },
361		{ OSSL_FUNC_CIPHER_SET_CTX_PARAMS,
362		(void (*)(void))chacha20_poly1305_set_ctx_params },
363		{ OSSL_FUNC_CIPHER_SETTABLE_CTX_PARAMS,
364		(void (*)(void))chacha20_poly1305_settable_ctx_params },
365		{ 0, NULL }
366		};
367