e_des3.c revision 261037
1169695Skan/* crypto/evp/e_des3.c */ 2169695Skan/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 3169695Skan * All rights reserved. 4169695Skan * 5169695Skan * This package is an SSL implementation written 6169695Skan * by Eric Young (eay@cryptsoft.com). 7169695Skan * The implementation was written so as to conform with Netscapes SSL. 8169695Skan * 9169695Skan * This library is free for commercial and non-commercial use as long as 10169695Skan * the following conditions are aheared to. The following conditions 11169695Skan * apply to all code found in this distribution, be it the RC4, RSA, 12169695Skan * lhash, DES, etc., code; not just the SSL code. The SSL documentation 13169695Skan * included with this distribution is covered by the same copyright terms 14169695Skan * except that the holder is Tim Hudson (tjh@cryptsoft.com). 15169695Skan * 16169695Skan * Copyright remains Eric Young's, and as such any Copyright notices in 17169695Skan * the code are not to be removed. 18169695Skan * If this package is used in a product, Eric Young should be given attribution 19169695Skan * as the author of the parts of the library used. 20169695Skan * This can be in the form of a textual message at program startup or 21169695Skan * in documentation (online or textual) provided with the package. 22169695Skan * 23169695Skan * Redistribution and use in source and binary forms, with or without 24169695Skan * modification, are permitted provided that the following conditions 25169695Skan * are met: 26169695Skan * 1. Redistributions of source code must retain the copyright 27169695Skan * notice, this list of conditions and the following disclaimer. 28169695Skan * 2. Redistributions in binary form must reproduce the above copyright 29169695Skan * notice, this list of conditions and the following disclaimer in the 30169695Skan * documentation and/or other materials provided with the distribution. 31169695Skan * 3. All advertising materials mentioning features or use of this software 32169695Skan * must display the following acknowledgement: 33169695Skan * "This product includes cryptographic software written by 34169695Skan * Eric Young (eay@cryptsoft.com)" 35169695Skan * The word 'cryptographic' can be left out if the rouines from the library 36169695Skan * being used are not cryptographic related :-). 37169695Skan * 4. If you include any Windows specific code (or a derivative thereof) from 38169695Skan * the apps directory (application code) you must include an acknowledgement: 39169695Skan * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" 40169695Skan * 41169695Skan * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND 42169695Skan * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 43169695Skan * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 44169695Skan * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 45169695Skan * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 46169695Skan * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 47169695Skan * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 48169695Skan * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 49169695Skan * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 50169695Skan * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 51169695Skan * SUCH DAMAGE. 52169695Skan * 53169695Skan * The licence and distribution terms for any publically available version or 54169695Skan * derivative of this code cannot be changed. i.e. this code cannot simply be 55169695Skan * copied and put under another distribution licence 56169695Skan * [including the GNU Public Licence.] 57169695Skan */ 58169695Skan 59169695Skan#include <stdio.h> 60169695Skan#include "cryptlib.h" 61169695Skan#ifndef OPENSSL_NO_DES 62169695Skan#include <openssl/evp.h> 63169695Skan#include <openssl/objects.h> 64169695Skan#include "evp_locl.h" 65169695Skan#include <openssl/des.h> 66169695Skan#include <openssl/rand.h> 67169695Skan 68169695Skan#ifndef OPENSSL_FIPS 69169695Skan 70169695Skanstatic int des_ede_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key, 71169695Skan const unsigned char *iv,int enc); 72169695Skan 73169695Skanstatic int des_ede3_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key, 74169695Skan const unsigned char *iv,int enc); 75169695Skan 76169695Skanstatic int des3_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr); 77169695Skan 78169695Skantypedef struct 79169695Skan { 80169695Skan DES_key_schedule ks1;/* key schedule */ 81169695Skan DES_key_schedule ks2;/* key schedule (for ede) */ 82169695Skan DES_key_schedule ks3;/* key schedule (for ede3) */ 83169695Skan } DES_EDE_KEY; 84169695Skan 85169695Skan#define data(ctx) ((DES_EDE_KEY *)(ctx)->cipher_data) 86169695Skan 87169695Skan/* Because of various casts and different args can't use IMPLEMENT_BLOCK_CIPHER */ 88169695Skan 89169695Skanstatic int des_ede_ecb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, 90169695Skan const unsigned char *in, size_t inl) 91169695Skan{ 92169695Skan BLOCK_CIPHER_ecb_loop() 93169695Skan DES_ecb3_encrypt((const_DES_cblock *)(in + i), 94169695Skan (DES_cblock *)(out + i), 95169695Skan &data(ctx)->ks1, &data(ctx)->ks2, 96169695Skan &data(ctx)->ks3, 97169695Skan ctx->encrypt); 98169695Skan return 1; 99169695Skan} 100169695Skan 101169695Skanstatic int des_ede_ofb_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, 102169695Skan const unsigned char *in, size_t inl) 103169695Skan{ 104169695Skan while (inl>=EVP_MAXCHUNK) 105169695Skan { 106169695Skan DES_ede3_ofb64_encrypt(in, out, (long)EVP_MAXCHUNK, 107169695Skan &data(ctx)->ks1, &data(ctx)->ks2, &data(ctx)->ks3, 108169695Skan (DES_cblock *)ctx->iv, &ctx->num); 109169695Skan inl-=EVP_MAXCHUNK; 110169695Skan in +=EVP_MAXCHUNK; 111169695Skan out+=EVP_MAXCHUNK; 112169695Skan } 113169695Skan if (inl) 114169695Skan DES_ede3_ofb64_encrypt(in, out, (long)inl, 115169695Skan &data(ctx)->ks1, &data(ctx)->ks2, &data(ctx)->ks3, 116169695Skan (DES_cblock *)ctx->iv, &ctx->num); 117169695Skan 118169695Skan return 1; 119169695Skan} 120169695Skan 121169695Skanstatic int des_ede_cbc_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, 122169695Skan const unsigned char *in, size_t inl) 123169695Skan{ 124169695Skan#ifdef KSSL_DEBUG 125169695Skan { 126169695Skan int i; 127169695Skan char *cp; 128169695Skan printf("des_ede_cbc_cipher(ctx=%lx, buflen=%d)\n", ctx, ctx->buf_len); 129169695Skan printf("\t iv= "); 130169695Skan for(i=0;i<8;i++) 131169695Skan printf("%02X",ctx->iv[i]); 132169695Skan printf("\n"); 133169695Skan } 134169695Skan#endif /* KSSL_DEBUG */ 135169695Skan while (inl>=EVP_MAXCHUNK) 136169695Skan { 137169695Skan DES_ede3_cbc_encrypt(in, out, (long)EVP_MAXCHUNK, 138169695Skan &data(ctx)->ks1, &data(ctx)->ks2, &data(ctx)->ks3, 139169695Skan (DES_cblock *)ctx->iv, ctx->encrypt); 140169695Skan inl-=EVP_MAXCHUNK; 141169695Skan in +=EVP_MAXCHUNK; 142169695Skan out+=EVP_MAXCHUNK; 143169695Skan } 144169695Skan if (inl) 145169695Skan DES_ede3_cbc_encrypt(in, out, (long)inl, 146169695Skan &data(ctx)->ks1, &data(ctx)->ks2, &data(ctx)->ks3, 147169695Skan (DES_cblock *)ctx->iv, ctx->encrypt); 148169695Skan return 1; 149169695Skan} 150169695Skan 151169695Skanstatic int des_ede_cfb64_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, 152169695Skan const unsigned char *in, size_t inl) 153169695Skan{ 154169695Skan while (inl>=EVP_MAXCHUNK) 155169695Skan { 156169695Skan DES_ede3_cfb64_encrypt(in, out, (long)EVP_MAXCHUNK, 157169695Skan &data(ctx)->ks1, &data(ctx)->ks2, &data(ctx)->ks3, 158169695Skan (DES_cblock *)ctx->iv, &ctx->num, ctx->encrypt); 159169695Skan inl-=EVP_MAXCHUNK; 160169695Skan in +=EVP_MAXCHUNK; 161169695Skan out+=EVP_MAXCHUNK; 162169695Skan } 163169695Skan if (inl) 164169695Skan DES_ede3_cfb64_encrypt(in, out, (long)inl, 165169695Skan &data(ctx)->ks1, &data(ctx)->ks2, &data(ctx)->ks3, 166169695Skan (DES_cblock *)ctx->iv, &ctx->num, ctx->encrypt); 167169695Skan return 1; 168169695Skan} 169169695Skan 170169695Skan/* Although we have a CFB-r implementation for 3-DES, it doesn't pack the right 171169695Skan way, so wrap it here */ 172169695Skanstatic int des_ede3_cfb1_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, 173169695Skan const unsigned char *in, size_t inl) 174169695Skan { 175169695Skan size_t n; 176169695Skan unsigned char c[1],d[1]; 177169695Skan 178169695Skan for(n=0 ; n < inl ; ++n) 179169695Skan { 180169695Skan c[0]=(in[n/8]&(1 << (7-n%8))) ? 0x80 : 0; 181169695Skan DES_ede3_cfb_encrypt(c,d,1,1, 182169695Skan &data(ctx)->ks1,&data(ctx)->ks2,&data(ctx)->ks3, 183 (DES_cblock *)ctx->iv,ctx->encrypt); 184 out[n/8]=(out[n/8]&~(0x80 >> (unsigned int)(n%8))) | 185 ((d[0]&0x80) >> (unsigned int)(n%8)); 186 } 187 188 return 1; 189 } 190 191static int des_ede3_cfb8_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, 192 const unsigned char *in, size_t inl) 193 { 194 while (inl>=EVP_MAXCHUNK) 195 { 196 DES_ede3_cfb_encrypt(in,out,8,(long)EVP_MAXCHUNK, 197 &data(ctx)->ks1,&data(ctx)->ks2,&data(ctx)->ks3, 198 (DES_cblock *)ctx->iv,ctx->encrypt); 199 inl-=EVP_MAXCHUNK; 200 in +=EVP_MAXCHUNK; 201 out+=EVP_MAXCHUNK; 202 } 203 if (inl) 204 DES_ede3_cfb_encrypt(in,out,8,(long)inl, 205 &data(ctx)->ks1,&data(ctx)->ks2,&data(ctx)->ks3, 206 (DES_cblock *)ctx->iv,ctx->encrypt); 207 return 1; 208 } 209 210BLOCK_CIPHER_defs(des_ede, DES_EDE_KEY, NID_des_ede, 8, 16, 8, 64, 211 EVP_CIPH_RAND_KEY, des_ede_init_key, NULL, 212 EVP_CIPHER_set_asn1_iv, 213 EVP_CIPHER_get_asn1_iv, 214 des3_ctrl) 215 216#define des_ede3_cfb64_cipher des_ede_cfb64_cipher 217#define des_ede3_ofb_cipher des_ede_ofb_cipher 218#define des_ede3_cbc_cipher des_ede_cbc_cipher 219#define des_ede3_ecb_cipher des_ede_ecb_cipher 220 221BLOCK_CIPHER_defs(des_ede3, DES_EDE_KEY, NID_des_ede3, 8, 24, 8, 64, 222 EVP_CIPH_RAND_KEY, des_ede3_init_key, NULL, 223 EVP_CIPHER_set_asn1_iv, 224 EVP_CIPHER_get_asn1_iv, 225 des3_ctrl) 226 227BLOCK_CIPHER_def_cfb(des_ede3,DES_EDE_KEY,NID_des_ede3,24,8,1, 228 EVP_CIPH_RAND_KEY, des_ede3_init_key,NULL, 229 EVP_CIPHER_set_asn1_iv, 230 EVP_CIPHER_get_asn1_iv, 231 des3_ctrl) 232 233BLOCK_CIPHER_def_cfb(des_ede3,DES_EDE_KEY,NID_des_ede3,24,8,8, 234 EVP_CIPH_RAND_KEY, des_ede3_init_key,NULL, 235 EVP_CIPHER_set_asn1_iv, 236 EVP_CIPHER_get_asn1_iv, 237 des3_ctrl) 238 239static int des_ede_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key, 240 const unsigned char *iv, int enc) 241 { 242 DES_cblock *deskey = (DES_cblock *)key; 243#ifdef EVP_CHECK_DES_KEY 244 if (DES_set_key_checked(&deskey[0],&data(ctx)->ks1) 245 !! DES_set_key_checked(&deskey[1],&data(ctx)->ks2)) 246 return 0; 247#else 248 DES_set_key_unchecked(&deskey[0],&data(ctx)->ks1); 249 DES_set_key_unchecked(&deskey[1],&data(ctx)->ks2); 250#endif 251 memcpy(&data(ctx)->ks3,&data(ctx)->ks1, 252 sizeof(data(ctx)->ks1)); 253 return 1; 254 } 255 256static int des_ede3_init_key(EVP_CIPHER_CTX *ctx, const unsigned char *key, 257 const unsigned char *iv, int enc) 258 { 259 DES_cblock *deskey = (DES_cblock *)key; 260#ifdef KSSL_DEBUG 261 { 262 int i; 263 printf("des_ede3_init_key(ctx=%lx)\n", ctx); 264 printf("\tKEY= "); 265 for(i=0;i<24;i++) printf("%02X",key[i]); printf("\n"); 266 printf("\t IV= "); 267 for(i=0;i<8;i++) printf("%02X",iv[i]); printf("\n"); 268 } 269#endif /* KSSL_DEBUG */ 270 271#ifdef EVP_CHECK_DES_KEY 272 if (DES_set_key_checked(&deskey[0],&data(ctx)->ks1) 273 || DES_set_key_checked(&deskey[1],&data(ctx)->ks2) 274 || DES_set_key_checked(&deskey[2],&data(ctx)->ks3)) 275 return 0; 276#else 277 DES_set_key_unchecked(&deskey[0],&data(ctx)->ks1); 278 DES_set_key_unchecked(&deskey[1],&data(ctx)->ks2); 279 DES_set_key_unchecked(&deskey[2],&data(ctx)->ks3); 280#endif 281 return 1; 282 } 283 284static int des3_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr) 285 { 286 287 DES_cblock *deskey = ptr; 288 289 switch(type) 290 { 291 case EVP_CTRL_RAND_KEY: 292 if (RAND_bytes(ptr, c->key_len) <= 0) 293 return 0; 294 DES_set_odd_parity(deskey); 295 if (c->key_len >= 16) 296 DES_set_odd_parity(deskey + 1); 297 if (c->key_len >= 24) 298 DES_set_odd_parity(deskey + 2); 299 return 1; 300 301 default: 302 return -1; 303 } 304 } 305 306const EVP_CIPHER *EVP_des_ede(void) 307{ 308 return &des_ede_ecb; 309} 310 311const EVP_CIPHER *EVP_des_ede3(void) 312{ 313 return &des_ede3_ecb; 314} 315#endif 316#endif 317