/src/openssl36/providers/implementations/ciphers/cipher_chacha20_poly1305.c

Source
/*
 * Copyright 2019-2026 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the Apache License 2.0 (the "License").  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
 */
/* clang-format off */

/* clang-format on */

/* Dispatch functions for chacha20_poly1305 cipher */

#include <string.h>
#include <openssl/proverr.h>
#include "cipher_chacha20_poly1305.h"
#include "prov/implementations.h"
#include "prov/providercommon.h"

#define CHACHA20_POLY1305_KEYLEN CHACHA_KEY_SIZE
#define CHACHA20_POLY1305_BLKLEN 1
#define CHACHA20_POLY1305_MAX_IVLEN 12
#define CHACHA20_POLY1305_MODE 0
#define CHACHA20_POLY1305_FLAGS (PROV_CIPHER_FLAG_AEAD \
    | PROV_CIPHER_FLAG_CUSTOM_IV)

static OSSL_FUNC_cipher_newctx_fn chacha20_poly1305_newctx;
static OSSL_FUNC_cipher_freectx_fn chacha20_poly1305_freectx;
static OSSL_FUNC_cipher_dupctx_fn chacha20_poly1305_dupctx;
static OSSL_FUNC_cipher_encrypt_init_fn chacha20_poly1305_einit;
static OSSL_FUNC_cipher_decrypt_init_fn chacha20_poly1305_dinit;
static OSSL_FUNC_cipher_get_params_fn chacha20_poly1305_get_params;
static OSSL_FUNC_cipher_get_ctx_params_fn chacha20_poly1305_get_ctx_params;
static OSSL_FUNC_cipher_set_ctx_params_fn chacha20_poly1305_set_ctx_params;
static OSSL_FUNC_cipher_cipher_fn chacha20_poly1305_cipher;
static OSSL_FUNC_cipher_update_fn chacha20_poly1305_update;
static OSSL_FUNC_cipher_final_fn chacha20_poly1305_final;
static OSSL_FUNC_cipher_gettable_ctx_params_fn chacha20_poly1305_gettable_ctx_params;
static OSSL_FUNC_cipher_settable_ctx_params_fn chacha20_poly1305_settable_ctx_params;
#define chacha20_poly1305_gettable_params ossl_cipher_generic_gettable_params

static void *chacha20_poly1305_newctx(void *provctx)
{
    PROV_CHACHA20_POLY1305_CTX *ctx;

    if (!ossl_prov_is_running())
        return NULL;

    ctx = OPENSSL_zalloc(sizeof(*ctx));
    if (ctx != NULL) {
        ossl_cipher_generic_initkey(&ctx->base, CHACHA20_POLY1305_KEYLEN * 8,
            CHACHA20_POLY1305_BLKLEN * 8,
            CHACHA20_POLY1305_IVLEN * 8,
            CHACHA20_POLY1305_MODE,
            CHACHA20_POLY1305_FLAGS,
            ossl_prov_cipher_hw_chacha20_poly1305(
                CHACHA20_POLY1305_KEYLEN * 8),
            NULL);
        ctx->tls_payload_length = NO_TLS_PAYLOAD_LENGTH;
        ossl_chacha20_initctx(&ctx->chacha);
    }
    return ctx;
}

static void *chacha20_poly1305_dupctx(void *provctx)
{
    PROV_CHACHA20_POLY1305_CTX *ctx = provctx;
    PROV_CHACHA20_POLY1305_CTX *dctx = NULL;

    if (ctx == NULL)
        return NULL;
    dctx = OPENSSL_memdup(ctx, sizeof(*ctx));
    if (dctx != NULL && dctx->base.tlsmac != NULL && dctx->base.alloced) {
        dctx->base.tlsmac = OPENSSL_memdup(dctx->base.tlsmac,
            dctx->base.tlsmacsize);
        if (dctx->base.tlsmac == NULL) {
            OPENSSL_free(dctx);
            dctx = NULL;
        }
    }
    return dctx;
}

static void chacha20_poly1305_freectx(void *vctx)
{
    PROV_CHACHA20_POLY1305_CTX *ctx = (PROV_CHACHA20_POLY1305_CTX *)vctx;

    if (ctx != NULL) {
        ossl_cipher_generic_reset_ctx((PROV_CIPHER_CTX *)vctx);
        OPENSSL_clear_free(ctx, sizeof(*ctx));
    }
}

static int chacha20_poly1305_get_params(OSSL_PARAM params[])
{
    return ossl_cipher_generic_get_params(params, 0, CHACHA20_POLY1305_FLAGS,
        CHACHA20_POLY1305_KEYLEN * 8,
        CHACHA20_POLY1305_BLKLEN * 8,
        CHACHA20_POLY1305_IVLEN * 8);
}

/* clang-format off */
/* Machine generated by util/perl/OpenSSL/paramnames.pm */
#ifndef chacha20_poly1305_get_ctx_params_list
static ossl_unused const OSSL_PARAM chacha20_poly1305_get_ctx_params_list[] = {
    OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_KEYLEN, NULL),
    OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_IVLEN, NULL),
    OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_AEAD_TAGLEN, NULL),
    OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TAG, NULL, 0),
    OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_AEAD_TLS1_AAD_PAD, NULL),
    OSSL_PARAM_END
};
#endif

#ifndef chacha20_poly1305_get_ctx_params_st
struct chacha20_poly1305_get_ctx_params_st {
    OSSL_PARAM *ivlen;
    OSSL_PARAM *keylen;
    OSSL_PARAM *pad;
    OSSL_PARAM *tag;
    OSSL_PARAM *taglen;
};
#endif

#ifndef chacha20_poly1305_get_ctx_params_decoder
static ossl_unused int chacha20_poly1305_get_ctx_params_decoder
    (const OSSL_PARAM *p, struct chacha20_poly1305_get_ctx_params_st *r)
{
    const char *s;

    memset(r, 0, sizeof(*r));
    if (p != NULL)
        for (; (s = p->key) != NULL; p++)
            switch(s[0]) {
            default:
                break;
            case 'i':
                if (ossl_likely(strcmp("vlen", s + 1) == 0)) {
                    /* OSSL_CIPHER_PARAM_IVLEN */
                    if (ossl_unlikely(r->ivlen != NULL)) {
                        ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
                                       "param %s is repeated", s);
                        return 0;
                    }
                    r->ivlen = (OSSL_PARAM *)p;
                }
                break;
            case 'k':
                if (ossl_likely(strcmp("eylen", s + 1) == 0)) {
                    /* OSSL_CIPHER_PARAM_KEYLEN */
                    if (ossl_unlikely(r->keylen != NULL)) {
                        ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
                                       "param %s is repeated", s);
                        return 0;
                    }
                    r->keylen = (OSSL_PARAM *)p;
                }
                break;
            case 't':
                switch(s[1]) {
                default:
                    break;
                case 'a':
                    switch(s[2]) {
                    default:
                        break;
                    case 'g':
                        switch(s[3]) {
                        default:
                            break;
                        case 'l':
                            if (ossl_likely(strcmp("en", s + 4) == 0)) {
                                /* OSSL_CIPHER_PARAM_AEAD_TAGLEN */
                                if (ossl_unlikely(r->taglen != NULL)) {
                                    ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
                                                   "param %s is repeated", s);
                                    return 0;
                                }
                                r->taglen = (OSSL_PARAM *)p;
                            }
                            break;
                        case '\0':
                            if (ossl_unlikely(r->tag != NULL)) {
                                ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
                                               "param %s is repeated", s);
                                return 0;
                            }
                            r->tag = (OSSL_PARAM *)p;
                        }
                    }
                    break;
                case 'l':
                    if (ossl_likely(strcmp("saadpad", s + 2) == 0)) {
                        /* OSSL_CIPHER_PARAM_AEAD_TLS1_AAD_PAD */
                        if (ossl_unlikely(r->pad != NULL)) {
                            ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
                                           "param %s is repeated", s);
                            return 0;
                        }
                        r->pad = (OSSL_PARAM *)p;
                    }
                }
            }
    return 1;
}
#endif
/* End of machine generated */
/* clang-format on */

static int chacha20_poly1305_get_ctx_params(void *vctx, OSSL_PARAM params[])
{
    PROV_CHACHA20_POLY1305_CTX *ctx = (PROV_CHACHA20_POLY1305_CTX *)vctx;
    struct chacha20_poly1305_get_ctx_params_st p;

    if (ctx == NULL || !chacha20_poly1305_get_ctx_params_decoder(params, &p))
        return 0;

    if (p.ivlen != NULL
        && !OSSL_PARAM_set_size_t(p.ivlen, CHACHA20_POLY1305_IVLEN)) {
        ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
        return 0;
    }

    if (p.keylen != NULL
        && !OSSL_PARAM_set_size_t(p.keylen, CHACHA20_POLY1305_KEYLEN)) {
        ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
        return 0;
    }

    if (p.taglen != NULL
        && !OSSL_PARAM_set_size_t(p.taglen, ctx->tag_len)) {
        ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
        return 0;
    }

    if (p.pad != NULL
        && !OSSL_PARAM_set_size_t(p.pad, ctx->tls_aad_pad_sz)) {
        ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
        return 0;
    }

    if (p.tag != NULL) {
        if (p.tag->data_type != OSSL_PARAM_OCTET_STRING) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
            return 0;
        }
        if (!ctx->base.enc) {
            ERR_raise(ERR_LIB_PROV, PROV_R_TAG_NOT_SET);
            return 0;
        }
        if (p.tag->data_size == 0 || p.tag->data_size > POLY1305_BLOCK_SIZE) {
            ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_TAG_LENGTH);
            return 0;
        }
        memcpy(p.tag->data, ctx->tag, p.tag->data_size);
    }
    return 1;
}

static const OSSL_PARAM *chacha20_poly1305_gettable_ctx_params(ossl_unused void *cctx, ossl_unused void *provctx)
{
    return chacha20_poly1305_get_ctx_params_list;
}

/* clang-format off */
/* Machine generated by util/perl/OpenSSL/paramnames.pm */
#ifndef chacha20_poly1305_set_ctx_params_list
static ossl_unused const OSSL_PARAM chacha20_poly1305_set_ctx_params_list[] = {
    OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_KEYLEN, NULL),
    OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_IVLEN, NULL),
    OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TAG, NULL, 0),
    OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TLS1_AAD, NULL, 0),
    OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TLS1_IV_FIXED, NULL, 0),
    OSSL_PARAM_END
};
#endif

#ifndef chacha20_poly1305_set_ctx_params_st
struct chacha20_poly1305_set_ctx_params_st {
    OSSL_PARAM *aad;
    OSSL_PARAM *fixed;
    OSSL_PARAM *ivlen;
    OSSL_PARAM *keylen;
    OSSL_PARAM *tag;
};
#endif

#ifndef chacha20_poly1305_set_ctx_params_decoder
static ossl_unused int chacha20_poly1305_set_ctx_params_decoder
    (const OSSL_PARAM *p, struct chacha20_poly1305_set_ctx_params_st *r)
{
    const char *s;

    memset(r, 0, sizeof(*r));
    if (p != NULL)
        for (; (s = p->key) != NULL; p++)
            switch(s[0]) {
            default:
                break;
            case 'i':
                if (ossl_likely(strcmp("vlen", s + 1) == 0)) {
                    /* OSSL_CIPHER_PARAM_IVLEN */
                    if (ossl_unlikely(r->ivlen != NULL)) {
                        ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
                                       "param %s is repeated", s);
                        return 0;
                    }
                    r->ivlen = (OSSL_PARAM *)p;
                }
                break;
            case 'k':
                if (ossl_likely(strcmp("eylen", s + 1) == 0)) {
                    /* OSSL_CIPHER_PARAM_KEYLEN */
                    if (ossl_unlikely(r->keylen != NULL)) {
                        ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
                                       "param %s is repeated", s);
                        return 0;
                    }
                    r->keylen = (OSSL_PARAM *)p;
                }
                break;
            case 't':
                switch(s[1]) {
                default:
                    break;
                case 'a':
                    if (ossl_likely(strcmp("g", s + 2) == 0)) {
                        /* OSSL_CIPHER_PARAM_AEAD_TAG */
                        if (ossl_unlikely(r->tag != NULL)) {
                            ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
                                           "param %s is repeated", s);
                            return 0;
                        }
                        r->tag = (OSSL_PARAM *)p;
                    }
                    break;
                case 'l':
                    switch(s[2]) {
                    default:
                        break;
                    case 's':
                        switch(s[3]) {
                        default:
                            break;
                        case 'a':
                            if (ossl_likely(strcmp("ad", s + 4) == 0)) {
                                /* OSSL_CIPHER_PARAM_AEAD_TLS1_AAD */
                                if (ossl_unlikely(r->aad != NULL)) {
                                    ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
                                                   "param %s is repeated", s);
                                    return 0;
                                }
                                r->aad = (OSSL_PARAM *)p;
                            }
                            break;
                        case 'i':
                            if (ossl_likely(strcmp("vfixed", s + 4) == 0)) {
                                /* OSSL_CIPHER_PARAM_AEAD_TLS1_IV_FIXED */
                                if (ossl_unlikely(r->fixed != NULL)) {
                                    ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
                                                   "param %s is repeated", s);
                                    return 0;
                                }
                                r->fixed = (OSSL_PARAM *)p;
                            }
                        }
                    }
                }
            }
    return 1;
}
#endif
/* End of machine generated */
/* clang-format on */

static const OSSL_PARAM *chacha20_poly1305_settable_ctx_params(
    ossl_unused void *cctx, ossl_unused void *provctx)
{
    return chacha20_poly1305_set_ctx_params_list;
}

static int chacha20_poly1305_set_ctx_params(void *vctx,
    const OSSL_PARAM params[])
{
    size_t len;
    PROV_CHACHA20_POLY1305_CTX *ctx = (PROV_CHACHA20_POLY1305_CTX *)vctx;
    PROV_CIPHER_HW_CHACHA20_POLY1305 *hw = (PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->base.hw;
    struct chacha20_poly1305_set_ctx_params_st p;

    if (!chacha20_poly1305_set_ctx_params_decoder(params, &p))
        return 0;

    if (p.keylen != NULL) {
        if (!OSSL_PARAM_get_size_t(p.keylen, &len)) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
            return 0;
        }
        if (len != CHACHA20_POLY1305_KEYLEN) {
            ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_KEY_LENGTH);
            return 0;
        }
    }

    if (p.ivlen != NULL) {
        if (!OSSL_PARAM_get_size_t(p.ivlen, &len)) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
            return 0;
        }
        if (len != CHACHA20_POLY1305_MAX_IVLEN) {
            ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_IV_LENGTH);
            return 0;
        }
    }

    if (p.tag != NULL) {
        if (p.tag->data_type != OSSL_PARAM_OCTET_STRING) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
            return 0;
        }
        if (p.tag->data_size == 0 || p.tag->data_size > POLY1305_BLOCK_SIZE) {
            ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_TAG_LENGTH);
            return 0;
        }
        if (p.tag->data != NULL) {
            if (ctx->base.enc) {
                ERR_raise(ERR_LIB_PROV, PROV_R_TAG_NOT_NEEDED);
                return 0;
            }
            memcpy(ctx->tag, p.tag->data, p.tag->data_size);
        }
        ctx->tag_len = p.tag->data_size;
    }

    if (p.aad != NULL) {
        if (p.aad->data_type != OSSL_PARAM_OCTET_STRING) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
            return 0;
        }
        len = hw->tls_init(&ctx->base, p.aad->data, p.aad->data_size);
        if (len == 0) {
            ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_DATA);
            return 0;
        }
        ctx->tls_aad_pad_sz = len;
    }

    if (p.fixed != NULL) {
        if (p.fixed->data_type != OSSL_PARAM_OCTET_STRING) {
            ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
            return 0;
        }
        if (hw->tls_iv_set_fixed(&ctx->base, p.fixed->data,
                p.fixed->data_size)
            == 0) {
            ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_IV_LENGTH);
            return 0;
        }
    }
    return 1;
}

static int chacha20_poly1305_einit(void *vctx, const unsigned char *key,
    size_t keylen, const unsigned char *iv,
    size_t ivlen, const OSSL_PARAM params[])
{
    int ret;

    /* The generic function checks for ossl_prov_is_running() */
    ret = ossl_cipher_generic_einit(vctx, key, keylen, iv, ivlen, NULL);
    if (ret && iv != NULL) {
        PROV_CIPHER_CTX *ctx = (PROV_CIPHER_CTX *)vctx;
        PROV_CIPHER_HW_CHACHA20_POLY1305 *hw = (PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;

        hw->initiv(ctx);
    }
    if (ret && !chacha20_poly1305_set_ctx_params(vctx, params))
        ret = 0;
    return ret;
}

static int chacha20_poly1305_dinit(void *vctx, const unsigned char *key,
    size_t keylen, const unsigned char *iv,
    size_t ivlen, const OSSL_PARAM params[])
{
    int ret;

    /* The generic function checks for ossl_prov_is_running() */
    ret = ossl_cipher_generic_dinit(vctx, key, keylen, iv, ivlen, NULL);
    if (ret && iv != NULL) {
        PROV_CIPHER_CTX *ctx = (PROV_CIPHER_CTX *)vctx;
        PROV_CIPHER_HW_CHACHA20_POLY1305 *hw = (PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;

        hw->initiv(ctx);
    }
    if (ret && !chacha20_poly1305_set_ctx_params(vctx, params))
        ret = 0;
    return ret;
}

static int chacha20_poly1305_cipher(void *vctx, unsigned char *out,
    size_t *outl, size_t outsize,
    const unsigned char *in, size_t inl)
{
    PROV_CIPHER_CTX *ctx = (PROV_CIPHER_CTX *)vctx;
    PROV_CIPHER_HW_CHACHA20_POLY1305 *hw = (PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;

    if (!ossl_prov_is_running())
        return 0;

    if (outsize < inl) {
        ERR_raise(ERR_LIB_PROV, PROV_R_OUTPUT_BUFFER_TOO_SMALL);
        return 0;
    }

    if (!hw->aead_cipher(ctx, out, outl, in, inl))
        return 0;

    return 1;
}

static int chacha20_poly1305_update(void *vctx, unsigned char *out,
    size_t *outl, size_t outsize,
    const unsigned char *in, size_t inl)
{
    /*
     * A zero-length update is a no-op. Only EVP_Cipher() and Final produce or
     * check the authentication tag.
     */
    if (inl == 0) {
        if (!ossl_prov_is_running())
            return 0;
        *outl = 0;
        return 1;
    }

    return chacha20_poly1305_cipher(vctx, out, outl, outsize, in, inl);
}

static int chacha20_poly1305_final(void *vctx, unsigned char *out, size_t *outl,
    size_t outsize)
{
    PROV_CIPHER_CTX *ctx = (PROV_CIPHER_CTX *)vctx;
    PROV_CIPHER_HW_CHACHA20_POLY1305 *hw = (PROV_CIPHER_HW_CHACHA20_POLY1305 *)ctx->hw;

    if (!ossl_prov_is_running())
        return 0;

    if (hw->aead_cipher(ctx, out, outl, NULL, 0) <= 0)
        return 0;

    *outl = 0;
    return 1;
}

/* ossl_chacha20_ossl_poly1305_functions */
const OSSL_DISPATCH ossl_chacha20_ossl_poly1305_functions[] = {
    { OSSL_FUNC_CIPHER_NEWCTX, (void (*)(void))chacha20_poly1305_newctx },
    { OSSL_FUNC_CIPHER_FREECTX, (void (*)(void))chacha20_poly1305_freectx },
    { OSSL_FUNC_CIPHER_DUPCTX, (void (*)(void))chacha20_poly1305_dupctx },
    { OSSL_FUNC_CIPHER_ENCRYPT_INIT, (void (*)(void))chacha20_poly1305_einit },
    { OSSL_FUNC_CIPHER_DECRYPT_INIT, (void (*)(void))chacha20_poly1305_dinit },
    { OSSL_FUNC_CIPHER_UPDATE, (void (*)(void))chacha20_poly1305_update },
    { OSSL_FUNC_CIPHER_FINAL, (void (*)(void))chacha20_poly1305_final },
    { OSSL_FUNC_CIPHER_CIPHER, (void (*)(void))chacha20_poly1305_cipher },
    { OSSL_FUNC_CIPHER_GET_PARAMS,
        (void (*)(void))chacha20_poly1305_get_params },
    { OSSL_FUNC_CIPHER_GETTABLE_PARAMS,
        (void (*)(void))chacha20_poly1305_gettable_params },
    { OSSL_FUNC_CIPHER_GET_CTX_PARAMS,
        (void (*)(void))chacha20_poly1305_get_ctx_params },
    { OSSL_FUNC_CIPHER_GETTABLE_CTX_PARAMS,
        (void (*)(void))chacha20_poly1305_gettable_ctx_params },
    { OSSL_FUNC_CIPHER_SET_CTX_PARAMS,
        (void (*)(void))chacha20_poly1305_set_ctx_params },
    { OSSL_FUNC_CIPHER_SETTABLE_CTX_PARAMS,
        (void (*)(void))chacha20_poly1305_settable_ctx_params },
    OSSL_DISPATCH_END
};

Coverage Report

Created: 2026-10-28 06:28

Line	Count	Source
1		/*
2		* Copyright 2019-2026 The OpenSSL Project Authors. All Rights Reserved.
3		*
4		* Licensed under the Apache License 2.0 (the "License"). You may not use
5		* this file except in compliance with the License. You can obtain a copy
6		* in the file LICENSE in the source distribution or at
7		* https://www.openssl.org/source/license.html
8		*/
9		/* clang-format off */
10
11		/* clang-format on */
12
13		/* Dispatch functions for chacha20_poly1305 cipher */
14
15		#include <string.h>
16		#include <openssl/proverr.h>
17		#include "cipher_chacha20_poly1305.h"
18		#include "prov/implementations.h"
19		#include "prov/providercommon.h"
20
21	196k	#define CHACHA20_POLY1305_KEYLEN CHACHA_KEY_SIZE
22	182k	#define CHACHA20_POLY1305_BLKLEN 1
23	3.10k	#define CHACHA20_POLY1305_MAX_IVLEN 12
24	9.38k	#define CHACHA20_POLY1305_MODE 0
25	182k	#define CHACHA20_POLY1305_FLAGS (PROV_CIPHER_FLAG_AEAD \
26	182k	\| PROV_CIPHER_FLAG_CUSTOM_IV)
27
28		static OSSL_FUNC_cipher_newctx_fn chacha20_poly1305_newctx;
29		static OSSL_FUNC_cipher_freectx_fn chacha20_poly1305_freectx;
30		static OSSL_FUNC_cipher_dupctx_fn chacha20_poly1305_dupctx;
31		static OSSL_FUNC_cipher_encrypt_init_fn chacha20_poly1305_einit;
32		static OSSL_FUNC_cipher_decrypt_init_fn chacha20_poly1305_dinit;
33		static OSSL_FUNC_cipher_get_params_fn chacha20_poly1305_get_params;
34		static OSSL_FUNC_cipher_get_ctx_params_fn chacha20_poly1305_get_ctx_params;
35		static OSSL_FUNC_cipher_set_ctx_params_fn chacha20_poly1305_set_ctx_params;
36		static OSSL_FUNC_cipher_cipher_fn chacha20_poly1305_cipher;
37		static OSSL_FUNC_cipher_update_fn chacha20_poly1305_update;
38		static OSSL_FUNC_cipher_final_fn chacha20_poly1305_final;
39		static OSSL_FUNC_cipher_gettable_ctx_params_fn chacha20_poly1305_gettable_ctx_params;
40		static OSSL_FUNC_cipher_settable_ctx_params_fn chacha20_poly1305_settable_ctx_params;
41		#define chacha20_poly1305_gettable_params ossl_cipher_generic_gettable_params
42
43		static void chacha20_poly1305_newctx(void provctx)
44	9.38k	{
45	9.38k	PROV_CHACHA20_POLY1305_CTX *ctx;
46
47	9.38k	if (!ossl_prov_is_running())
48	0	return NULL;
49
50	9.38k	ctx = OPENSSL_zalloc(sizeof(*ctx));
51	9.38k	if (ctx != NULL) {
52	9.38k	ossl_cipher_generic_initkey(&ctx->base, CHACHA20_POLY1305_KEYLEN * 8,
53	9.38k	CHACHA20_POLY1305_BLKLEN * 8,
54	9.38k	CHACHA20_POLY1305_IVLEN * 8,
55	9.38k	CHACHA20_POLY1305_MODE,
56	9.38k	CHACHA20_POLY1305_FLAGS,
57	9.38k	ossl_prov_cipher_hw_chacha20_poly1305(
58	9.38k	CHACHA20_POLY1305_KEYLEN * 8),
59	9.38k	NULL);
60	9.38k	ctx->tls_payload_length = NO_TLS_PAYLOAD_LENGTH;
61	9.38k	ossl_chacha20_initctx(&ctx->chacha);
62	9.38k	}
63	9.38k	return ctx;
64	9.38k	}
65
66		static void chacha20_poly1305_dupctx(void provctx)
67	0	{
68	0	PROV_CHACHA20_POLY1305_CTX *ctx = provctx;
69	0	PROV_CHACHA20_POLY1305_CTX *dctx = NULL;
70
71	0	if (ctx == NULL)
72	0	return NULL;
73	0	dctx = OPENSSL_memdup(ctx, sizeof(*ctx));
74	0	if (dctx != NULL && dctx->base.tlsmac != NULL && dctx->base.alloced) {
75	0	dctx->base.tlsmac = OPENSSL_memdup(dctx->base.tlsmac,
76	0	dctx->base.tlsmacsize);
77	0	if (dctx->base.tlsmac == NULL) {
78	0	OPENSSL_free(dctx);
79	0	dctx = NULL;
80	0	}
81	0	}
82	0	return dctx;
83	0	}
84
85		static void chacha20_poly1305_freectx(void *vctx)
86	9.38k	{
87	9.38k	PROV_CHACHA20_POLY1305_CTX ctx = (PROV_CHACHA20_POLY1305_CTX )vctx;
88
89	9.38k	if (ctx != NULL) {
90	9.38k	ossl_cipher_generic_reset_ctx((PROV_CIPHER_CTX *)vctx);
91	9.38k	OPENSSL_clear_free(ctx, sizeof(*ctx));
92	9.38k	}
93	9.38k	}
94
95		static int chacha20_poly1305_get_params(OSSL_PARAM params[])
96	172k	{
97	172k	return ossl_cipher_generic_get_params(params, 0, CHACHA20_POLY1305_FLAGS,
98	172k	CHACHA20_POLY1305_KEYLEN * 8,
99	172k	CHACHA20_POLY1305_BLKLEN * 8,
100	172k	CHACHA20_POLY1305_IVLEN * 8);
101	172k	}
102
103		/* clang-format off */
104		/* Machine generated by util/perl/OpenSSL/paramnames.pm */
105		#ifndef chacha20_poly1305_get_ctx_params_list
106		static ossl_unused const OSSL_PARAM chacha20_poly1305_get_ctx_params_list[] = {
107		OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_KEYLEN, NULL),
108		OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_IVLEN, NULL),
109		OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_AEAD_TAGLEN, NULL),
110		OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TAG, NULL, 0),
111		OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_AEAD_TLS1_AAD_PAD, NULL),
112		OSSL_PARAM_END
113		};
114		#endif
115
116		#ifndef chacha20_poly1305_get_ctx_params_st
117		struct chacha20_poly1305_get_ctx_params_st {
118		OSSL_PARAM *ivlen;
119		OSSL_PARAM *keylen;
120		OSSL_PARAM *pad;
121		OSSL_PARAM *tag;
122		OSSL_PARAM *taglen;
123		};
124		#endif
125
126		#ifndef chacha20_poly1305_get_ctx_params_decoder
127		static ossl_unused int chacha20_poly1305_get_ctx_params_decoder
128		(const OSSL_PARAM p, struct chacha20_poly1305_get_ctx_params_st r)
129	74.4k	{
130	74.4k	const char *s;
131
132	74.4k	memset(r, 0, sizeof(*r));
133	74.4k	if (p != NULL)
134	148k	for (; (s = p->key) != NULL; p++)
135	74.4k	switch(s[0]) {
136	0	default:
137	0	break;
138	5.27k	case 'i':
139	5.27k	if (ossl_likely(strcmp("vlen", s + 1) == 0)) {
140		/* OSSL_CIPHER_PARAM_IVLEN */
141	5.27k	if (ossl_unlikely(r->ivlen != NULL)) {
142	0	ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
143	0	"param %s is repeated", s);
144	0	return 0;
145	0	}
146	5.27k	r->ivlen = (OSSL_PARAM *)p;
147	5.27k	}
148	5.27k	break;
149	5.92k	case 'k':
150	5.92k	if (ossl_likely(strcmp("eylen", s + 1) == 0)) {
151		/* OSSL_CIPHER_PARAM_KEYLEN */
152	5.92k	if (ossl_unlikely(r->keylen != NULL)) {
153	0	ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
154	0	"param %s is repeated", s);
155	0	return 0;
156	0	}
157	5.92k	r->keylen = (OSSL_PARAM *)p;
158	5.92k	}
159	5.92k	break;
160	63.2k	case 't':
161	63.2k	switch(s[1]) {
162	0	default:
163	0	break;
164	56.8k	case 'a':
165	56.8k	switch(s[2]) {
166	0	default:
167	0	break;
168	56.8k	case 'g':
169	56.8k	switch(s[3]) {
170	0	default:
171	0	break;
172	0	case 'l':
173	0	if (ossl_likely(strcmp("en", s + 4) == 0)) {
174		/* OSSL_CIPHER_PARAM_AEAD_TAGLEN */
175	0	if (ossl_unlikely(r->taglen != NULL)) {
176	0	ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
177	0	"param %s is repeated", s);
178	0	return 0;
179	0	}
180	0	r->taglen = (OSSL_PARAM *)p;
181	0	}
182	0	break;
183	56.8k	case '\0':
184	56.8k	if (ossl_unlikely(r->tag != NULL)) {
185	0	ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
186	0	"param %s is repeated", s);
187	0	return 0;
188	0	}
189	56.8k	r->tag = (OSSL_PARAM *)p;
190	56.8k	}
191	56.8k	}
192	56.8k	break;
193	56.8k	case 'l':
194	6.40k	if (ossl_likely(strcmp("saadpad", s + 2) == 0)) {
195		/* OSSL_CIPHER_PARAM_AEAD_TLS1_AAD_PAD */
196	6.39k	if (ossl_unlikely(r->pad != NULL)) {
197	0	ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
198	0	"param %s is repeated", s);
199	0	return 0;
200	0	}
201	6.39k	r->pad = (OSSL_PARAM *)p;
202	6.39k	}
203	63.2k	}
204	74.4k	}
205	74.4k	return 1;
206	74.4k	}
207		#endif
208		/* End of machine generated */
209		/* clang-format on */
210
211		static int chacha20_poly1305_get_ctx_params(void *vctx, OSSL_PARAM params[])
212	40.4k	{
213	40.4k	PROV_CHACHA20_POLY1305_CTX ctx = (PROV_CHACHA20_POLY1305_CTX )vctx;
214	40.4k	struct chacha20_poly1305_get_ctx_params_st p;
215
216	40.4k	if (ctx == NULL \|\| !chacha20_poly1305_get_ctx_params_decoder(params, &p))
217	0	return 0;
218
219	40.4k	if (p.ivlen != NULL
220	3.80k	&& !OSSL_PARAM_set_size_t(p.ivlen, CHACHA20_POLY1305_IVLEN)) {
221	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
222	0	return 0;
223	0	}
224
225	40.4k	if (p.keylen != NULL
226	4.30k	&& !OSSL_PARAM_set_size_t(p.keylen, CHACHA20_POLY1305_KEYLEN)) {
227	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
228	0	return 0;
229	0	}
230
231	40.4k	if (p.taglen != NULL
232	0	&& !OSSL_PARAM_set_size_t(p.taglen, ctx->tag_len)) {
233	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
234	0	return 0;
235	0	}
236
237	40.4k	if (p.pad != NULL
238	4.09k	&& !OSSL_PARAM_set_size_t(p.pad, ctx->tls_aad_pad_sz)) {
239	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
240	0	return 0;
241	0	}
242
243	40.4k	if (p.tag != NULL) {
244	28.2k	if (p.tag->data_type != OSSL_PARAM_OCTET_STRING) {
245	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_SET_PARAMETER);
246	0	return 0;
247	0	}
248	28.2k	if (!ctx->base.enc) {
249	0	ERR_raise(ERR_LIB_PROV, PROV_R_TAG_NOT_SET);
250	0	return 0;
251	0	}
252	28.2k	if (p.tag->data_size == 0 \|\| p.tag->data_size > POLY1305_BLOCK_SIZE) {
253	0	ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_TAG_LENGTH);
254	0	return 0;
255	0	}
256	28.2k	memcpy(p.tag->data, ctx->tag, p.tag->data_size);
257	28.2k	}
258	40.4k	return 1;
259	40.4k	}
260
261		static const OSSL_PARAM chacha20_poly1305_gettable_ctx_params(ossl_unused void cctx, ossl_unused void *provctx)
262	85	{
263	85	return chacha20_poly1305_get_ctx_params_list;
264	85	}
265
266		/* clang-format off */
267		/* Machine generated by util/perl/OpenSSL/paramnames.pm */
268		#ifndef chacha20_poly1305_set_ctx_params_list
269		static ossl_unused const OSSL_PARAM chacha20_poly1305_set_ctx_params_list[] = {
270		OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_KEYLEN, NULL),
271		OSSL_PARAM_size_t(OSSL_CIPHER_PARAM_IVLEN, NULL),
272		OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TAG, NULL, 0),
273		OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TLS1_AAD, NULL, 0),
274		OSSL_PARAM_octet_string(OSSL_CIPHER_PARAM_AEAD_TLS1_IV_FIXED, NULL, 0),
275		OSSL_PARAM_END
276		};
277		#endif
278
279		#ifndef chacha20_poly1305_set_ctx_params_st
280		struct chacha20_poly1305_set_ctx_params_st {
281		OSSL_PARAM *aad;
282		OSSL_PARAM *fixed;
283		OSSL_PARAM *ivlen;
284		OSSL_PARAM *keylen;
285		OSSL_PARAM *tag;
286		};
287		#endif
288
289		#ifndef chacha20_poly1305_set_ctx_params_decoder
290		static ossl_unused int chacha20_poly1305_set_ctx_params_decoder
291		(const OSSL_PARAM p, struct chacha20_poly1305_set_ctx_params_st r)
292	191k	{
293	191k	const char *s;
294
295	191k	memset(r, 0, sizeof(*r));
296	191k	if (p != NULL)
297	135k	for (; (s = p->key) != NULL; p++)
298	67.7k	switch(s[0]) {
299	0	default:
300	0	break;
301	3.11k	case 'i':
302	3.11k	if (ossl_likely(strcmp("vlen", s + 1) == 0)) {
303		/* OSSL_CIPHER_PARAM_IVLEN */
304	3.11k	if (ossl_unlikely(r->ivlen != NULL)) {
305	0	ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
306	0	"param %s is repeated", s);
307	0	return 0;
308	0	}
309	3.11k	r->ivlen = (OSSL_PARAM *)p;
310	3.11k	}
311	3.11k	break;
312	3.11k	case 'k':
313	17	if (ossl_likely(strcmp("eylen", s + 1) == 0)) {
314		/* OSSL_CIPHER_PARAM_KEYLEN */
315	17	if (ossl_unlikely(r->keylen != NULL)) {
316	0	ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
317	0	"param %s is repeated", s);
318	0	return 0;
319	0	}
320	17	r->keylen = (OSSL_PARAM *)p;
321	17	}
322	17	break;
323	64.6k	case 't':
324	64.6k	switch(s[1]) {
325	0	default:
326	0	break;
327	57.7k	case 'a':
328	57.7k	if (ossl_likely(strcmp("g", s + 2) == 0)) {
329		/* OSSL_CIPHER_PARAM_AEAD_TAG */
330	57.7k	if (ossl_unlikely(r->tag != NULL)) {
331	0	ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
332	0	"param %s is repeated", s);
333	0	return 0;
334	0	}
335	57.7k	r->tag = (OSSL_PARAM *)p;
336	57.7k	}
337	57.7k	break;
338	57.7k	case 'l':
339	6.88k	switch(s[2]) {
340	0	default:
341	0	break;
342	6.88k	case 's':
343	6.88k	switch(s[3]) {
344	454	default:
345	454	break;
346	6.41k	case 'a':
347	6.41k	if (ossl_likely(strcmp("ad", s + 4) == 0)) {
348		/* OSSL_CIPHER_PARAM_AEAD_TLS1_AAD */
349	6.41k	if (ossl_unlikely(r->aad != NULL)) {
350	0	ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
351	0	"param %s is repeated", s);
352	0	return 0;
353	0	}
354	6.41k	r->aad = (OSSL_PARAM *)p;
355	6.41k	}
356	6.41k	break;
357	6.41k	case 'i':
358	17	if (ossl_likely(strcmp("vfixed", s + 4) == 0)) {
359		/* OSSL_CIPHER_PARAM_AEAD_TLS1_IV_FIXED */
360	17	if (ossl_unlikely(r->fixed != NULL)) {
361	0	ERR_raise_data(ERR_LIB_PROV, PROV_R_REPEATED_PARAMETER,
362	0	"param %s is repeated", s);
363	0	return 0;
364	0	}
365	17	r->fixed = (OSSL_PARAM *)p;
366	17	}
367	6.88k	}
368	6.88k	}
369	64.6k	}
370	67.7k	}
371	191k	return 1;
372	191k	}
373		#endif
374		/* End of machine generated */
375		/* clang-format on */
376
377		static const OSSL_PARAM *chacha20_poly1305_settable_ctx_params(
378		ossl_unused void cctx, ossl_unused void provctx)
379	23	{
380	23	return chacha20_poly1305_set_ctx_params_list;
381	23	}
382
383		static int chacha20_poly1305_set_ctx_params(void *vctx,
384		const OSSL_PARAM params[])
385	191k	{
386	191k	size_t len;
387	191k	PROV_CHACHA20_POLY1305_CTX ctx = (PROV_CHACHA20_POLY1305_CTX )vctx;
388	191k	PROV_CIPHER_HW_CHACHA20_POLY1305 hw = (PROV_CIPHER_HW_CHACHA20_POLY1305 )ctx->base.hw;
389	191k	struct chacha20_poly1305_set_ctx_params_st p;
390
391	191k	if (!chacha20_poly1305_set_ctx_params_decoder(params, &p))
392	0	return 0;
393
394	191k	if (p.keylen != NULL) {
395	17	if (!OSSL_PARAM_get_size_t(p.keylen, &len)) {
396	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
397	0	return 0;
398	0	}
399	17	if (len != CHACHA20_POLY1305_KEYLEN) {
400	10	ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_KEY_LENGTH);
401	10	return 0;
402	10	}
403	17	}
404
405	191k	if (p.ivlen != NULL) {
406	3.10k	if (!OSSL_PARAM_get_size_t(p.ivlen, &len)) {
407	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
408	0	return 0;
409	0	}
410	3.10k	if (len != CHACHA20_POLY1305_MAX_IVLEN) {
411	3	ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_IV_LENGTH);
412	3	return 0;
413	3	}
414	3.10k	}
415
416	191k	if (p.tag != NULL) {
417	57.7k	if (p.tag->data_type != OSSL_PARAM_OCTET_STRING) {
418	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
419	0	return 0;
420	0	}
421	57.7k	if (p.tag->data_size == 0 \|\| p.tag->data_size > POLY1305_BLOCK_SIZE) {
422	2	ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_TAG_LENGTH);
423	2	return 0;
424	2	}
425	57.7k	if (p.tag->data != NULL) {
426	57.7k	if (ctx->base.enc) {
427	2	ERR_raise(ERR_LIB_PROV, PROV_R_TAG_NOT_NEEDED);
428	2	return 0;
429	2	}
430	57.7k	memcpy(ctx->tag, p.tag->data, p.tag->data_size);
431	57.7k	}
432	57.7k	ctx->tag_len = p.tag->data_size;
433	57.7k	}
434
435	191k	if (p.aad != NULL) {
436	6.39k	if (p.aad->data_type != OSSL_PARAM_OCTET_STRING) {
437	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
438	0	return 0;
439	0	}
440	6.39k	len = hw->tls_init(&ctx->base, p.aad->data, p.aad->data_size);
441	6.39k	if (len == 0) {
442	0	ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_DATA);
443	0	return 0;
444	0	}
445	6.39k	ctx->tls_aad_pad_sz = len;
446	6.39k	}
447
448	191k	if (p.fixed != NULL) {
449	0	if (p.fixed->data_type != OSSL_PARAM_OCTET_STRING) {
450	0	ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_TO_GET_PARAMETER);
451	0	return 0;
452	0	}
453	0	if (hw->tls_iv_set_fixed(&ctx->base, p.fixed->data,
454	0	p.fixed->data_size)
455	0	== 0) {
456	0	ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_IV_LENGTH);
457	0	return 0;
458	0	}
459	0	}
460	191k	return 1;
461	191k	}
462
463		static int chacha20_poly1305_einit(void vctx, const unsigned char key,
464		size_t keylen, const unsigned char *iv,
465		size_t ivlen, const OSSL_PARAM params[])
466	115k	{
467	115k	int ret;
468
469		/* The generic function checks for ossl_prov_is_running() */
470	115k	ret = ossl_cipher_generic_einit(vctx, key, keylen, iv, ivlen, NULL);
471	115k	if (ret && iv != NULL) {
472	109k	PROV_CIPHER_CTX ctx = (PROV_CIPHER_CTX )vctx;
473	109k	PROV_CIPHER_HW_CHACHA20_POLY1305 hw = (PROV_CIPHER_HW_CHACHA20_POLY1305 )ctx->hw;
474
475	109k	hw->initiv(ctx);
476	109k	}
477	115k	if (ret && !chacha20_poly1305_set_ctx_params(vctx, params))
478	0	ret = 0;
479	115k	return ret;
480	115k	}
481
482		static int chacha20_poly1305_dinit(void vctx, const unsigned char key,
483		size_t keylen, const unsigned char *iv,
484		size_t ivlen, const OSSL_PARAM params[])
485	91.3k	{
486	91.3k	int ret;
487
488		/* The generic function checks for ossl_prov_is_running() */
489	91.3k	ret = ossl_cipher_generic_dinit(vctx, key, keylen, iv, ivlen, NULL);
490	91.3k	if (ret && iv != NULL) {
491	87.8k	PROV_CIPHER_CTX ctx = (PROV_CIPHER_CTX )vctx;
492	87.8k	PROV_CIPHER_HW_CHACHA20_POLY1305 hw = (PROV_CIPHER_HW_CHACHA20_POLY1305 )ctx->hw;
493
494	87.8k	hw->initiv(ctx);
495	87.8k	}
496	91.3k	if (ret && !chacha20_poly1305_set_ctx_params(vctx, params))
497	0	ret = 0;
498	91.3k	return ret;
499	91.3k	}
500
501		static int chacha20_poly1305_cipher(void vctx, unsigned char out,
502		size_t *outl, size_t outsize,
503		const unsigned char *in, size_t inl)
504	395k	{
505	395k	PROV_CIPHER_CTX ctx = (PROV_CIPHER_CTX )vctx;
506	395k	PROV_CIPHER_HW_CHACHA20_POLY1305 hw = (PROV_CIPHER_HW_CHACHA20_POLY1305 )ctx->hw;
507
508	395k	if (!ossl_prov_is_running())
509	0	return 0;
510
511	395k	if (outsize < inl) {
512	0	ERR_raise(ERR_LIB_PROV, PROV_R_OUTPUT_BUFFER_TOO_SMALL);
513	0	return 0;
514	0	}
515
516	395k	if (!hw->aead_cipher(ctx, out, outl, in, inl))
517	8.77k	return 0;
518
519	386k	return 1;
520	395k	}
521
522		static int chacha20_poly1305_update(void vctx, unsigned char out,
523		size_t *outl, size_t outsize,
524		const unsigned char *in, size_t inl)
525	200k	{
526		/*
527		* A zero-length update is a no-op. Only EVP_Cipher() and Final produce or
528		* check the authentication tag.
529		*/
530	200k	if (inl == 0) {
531	0	if (!ossl_prov_is_running())
532	0	return 0;
533	0	*outl = 0;
534	0	return 1;
535	0	}
536
537	200k	return chacha20_poly1305_cipher(vctx, out, outl, outsize, in, inl);
538	200k	}
539
540		static int chacha20_poly1305_final(void vctx, unsigned char out, size_t *outl,
541		size_t outsize)
542	96.3k	{
543	96.3k	PROV_CIPHER_CTX ctx = (PROV_CIPHER_CTX )vctx;
544	96.3k	PROV_CIPHER_HW_CHACHA20_POLY1305 hw = (PROV_CIPHER_HW_CHACHA20_POLY1305 )ctx->hw;
545
546	96.3k	if (!ossl_prov_is_running())
547	0	return 0;
548
549	96.3k	if (hw->aead_cipher(ctx, out, outl, NULL, 0) <= 0)
550	37.5k	return 0;
551
552	58.8k	*outl = 0;
553	58.8k	return 1;
554	96.3k	}
555
556		/* ossl_chacha20_ossl_poly1305_functions */
557		const OSSL_DISPATCH ossl_chacha20_ossl_poly1305_functions[] = {
558		{ OSSL_FUNC_CIPHER_NEWCTX, (void (*)(void))chacha20_poly1305_newctx },
559		{ OSSL_FUNC_CIPHER_FREECTX, (void (*)(void))chacha20_poly1305_freectx },
560		{ OSSL_FUNC_CIPHER_DUPCTX, (void (*)(void))chacha20_poly1305_dupctx },
561		{ OSSL_FUNC_CIPHER_ENCRYPT_INIT, (void (*)(void))chacha20_poly1305_einit },
562		{ OSSL_FUNC_CIPHER_DECRYPT_INIT, (void (*)(void))chacha20_poly1305_dinit },
563		{ OSSL_FUNC_CIPHER_UPDATE, (void (*)(void))chacha20_poly1305_update },
564		{ OSSL_FUNC_CIPHER_FINAL, (void (*)(void))chacha20_poly1305_final },
565		{ OSSL_FUNC_CIPHER_CIPHER, (void (*)(void))chacha20_poly1305_cipher },
566		{ OSSL_FUNC_CIPHER_GET_PARAMS,
567		(void (*)(void))chacha20_poly1305_get_params },
568		{ OSSL_FUNC_CIPHER_GETTABLE_PARAMS,
569		(void (*)(void))chacha20_poly1305_gettable_params },
570		{ OSSL_FUNC_CIPHER_GET_CTX_PARAMS,
571		(void (*)(void))chacha20_poly1305_get_ctx_params },
572		{ OSSL_FUNC_CIPHER_GETTABLE_CTX_PARAMS,
573		(void (*)(void))chacha20_poly1305_gettable_ctx_params },
574		{ OSSL_FUNC_CIPHER_SET_CTX_PARAMS,
575		(void (*)(void))chacha20_poly1305_set_ctx_params },
576		{ OSSL_FUNC_CIPHER_SETTABLE_CTX_PARAMS,
577		(void (*)(void))chacha20_poly1305_settable_ctx_params },
578		OSSL_DISPATCH_END
579		};