148 lines
3.9 KiB
C
148 lines
3.9 KiB
C
/* aes-gcm.c
|
|
*
|
|
* Copyright (C) 2006-2021 wolfSSL Inc.
|
|
*
|
|
* This file is part of wolfSSL.
|
|
*
|
|
* wolfSSL is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* wolfSSL is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
|
|
*/
|
|
|
|
#include <wolfssl/options.h>
|
|
#include <wolfssl/wolfcrypt/wc_port.h>
|
|
#include <wolfssl/wolfcrypt/logging.h>
|
|
#include <wolfssl/wolfcrypt/port/caam/wolfcaam.h>
|
|
|
|
#include <stdio.h>
|
|
|
|
#define MAX_UPDATES 100
|
|
|
|
static unsigned int createAesKey()
|
|
{
|
|
int keyGroup = 1; /* group one was chosen arbitrarily */
|
|
unsigned int keyIdOut;
|
|
int keyInfo = CAAM_KEY_PERSISTENT;
|
|
int keyType = CAAM_KEYTYPE_AES128;
|
|
byte pubOut[AES_256_KEY_SIZE];
|
|
|
|
/* generate a AES-GCM key in the HSM */
|
|
if (wc_SECO_GenerateKey(CAAM_GENERATE_KEY, keyGroup, pubOut, 0, keyType,
|
|
keyInfo, &keyIdOut) != 0) {
|
|
printf("Error generating key in hsm\n");
|
|
return -1;
|
|
}
|
|
return keyIdOut;
|
|
}
|
|
|
|
|
|
static int doGcm(unsigned int keyId, const byte* in, int inSz,
|
|
const byte* nonce, const byte* aad, int aadSz)
|
|
{
|
|
Aes aes;
|
|
byte out[AES_BLOCK_SIZE*2];
|
|
byte cipherTxt[AES_BLOCK_SIZE*2];
|
|
byte authTag[AES_BLOCK_SIZE];
|
|
int i;
|
|
|
|
XMEMSET(authTag, 0, AES_BLOCK_SIZE);
|
|
XMEMSET(cipherTxt, 0, sizeof(cipherTxt));
|
|
wc_AesInit(&aes, NULL, WOLFSSL_SECO_DEVID);
|
|
wc_SECO_AesSetKeyID(&aes, keyId);
|
|
|
|
printf("Encrypting : ");
|
|
for (i = 0; i < inSz; i++)
|
|
printf("%02X", in[i]);
|
|
printf("\n");
|
|
|
|
if (wc_AesGcmEncrypt(&aes, cipherTxt, in, inSz, nonce, GCM_NONCE_MID_SZ,
|
|
authTag, AES_BLOCK_SIZE, aad, aadSz) != 0) {
|
|
printf("Issue with ccm encrypt\n");
|
|
}
|
|
|
|
printf("Cipher text: ");
|
|
for (i = 0; i < inSz; i++)
|
|
printf("%02X", cipherTxt[i]);
|
|
printf("\n");
|
|
|
|
printf("Tag : ");
|
|
for (i = 0; i < AES_BLOCK_SIZE; i++)
|
|
printf("%02X", authTag[i]);
|
|
printf("\n");
|
|
|
|
if (wc_AesGcmDecrypt(&aes, out, cipherTxt, inSz, nonce, GCM_NONCE_MID_SZ,
|
|
authTag, AES_BLOCK_SIZE, aad, aadSz) != 0) {
|
|
printf("Issue with ccm decrypt\n");
|
|
}
|
|
|
|
printf("Decrypted : ");
|
|
for (i = 0; i < inSz; i++)
|
|
printf("%02X", out[i]);
|
|
printf("\n");
|
|
|
|
wc_AesFree(&aes);
|
|
return 0;
|
|
}
|
|
|
|
|
|
int main(int argc, char** argv)
|
|
{
|
|
word32 nonce = 0x1111;
|
|
int create = 0;
|
|
unsigned int keyId;
|
|
unsigned int keyStoreId;
|
|
const byte in[] = "test message to encrypt";
|
|
int inSz;
|
|
const byte n[] = {1,2,3,4,5,6,7,8,9,10,11,12};
|
|
const byte aad[] = {1,2,3,4};
|
|
|
|
inSz = (int)XSTRLEN((const char*)in);
|
|
if (argc == 4) {
|
|
if (XSTRNCMP(argv[1], "1", 1) == 0) {
|
|
create = CAAM_KEYSTORE_CREATE;
|
|
}
|
|
|
|
keyId = (unsigned int)XATOI(argv[2]);
|
|
keyStoreId = (unsigned int)XATOI(argv[3]);
|
|
}
|
|
else {
|
|
printf("USAGE: %s <1/0 create> <keyid (0 if create)> <key store id>\n",
|
|
argv[0]);
|
|
return -1;
|
|
}
|
|
|
|
wolfSSL_Debugging_ON();
|
|
if (wolfCrypt_Init() != 0) {
|
|
printf("Could not initialize wolfSSL library!\n");
|
|
return -1;
|
|
}
|
|
|
|
if (wc_SECO_OpenHSM(keyStoreId, nonce, MAX_UPDATES, create) != 0) {
|
|
printf("unable to open HSM\n");
|
|
wolfCrypt_Cleanup();
|
|
return -1;
|
|
}
|
|
|
|
if (create == CAAM_KEYSTORE_CREATE) {
|
|
keyId = createAesKey();
|
|
}
|
|
printf("Key ID: %u\n", keyId);
|
|
|
|
doGcm(keyId, in, inSz, n, aad, sizeof(aad));
|
|
|
|
wc_SECO_CloseHSM();
|
|
wolfCrypt_Cleanup();
|
|
return 0;
|
|
}
|
|
|