1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
|
// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
// option. This file may not be copied, modified, or distributed
// except according to those terms.
use std::{
fmt,
ops::{Deref, DerefMut},
os::raw::{c_char, c_uint},
ptr::null_mut,
};
use crate::{
constants::{Cipher, Version},
err::Res,
experimental_api,
p11::{PK11SymKey, SymKey},
scoped_ptr,
ssl::{self, PRUint16, PRUint64, PRUint8, SSLAeadContext},
};
experimental_api!(SSL_MakeAead(
version: PRUint16,
cipher: PRUint16,
secret: *mut PK11SymKey,
label_prefix: *const c_char,
label_prefix_len: c_uint,
ctx: *mut *mut SSLAeadContext,
));
experimental_api!(SSL_AeadEncrypt(
ctx: *const SSLAeadContext,
counter: PRUint64,
aad: *const PRUint8,
aad_len: c_uint,
input: *const PRUint8,
input_len: c_uint,
output: *const PRUint8,
output_len: *mut c_uint,
max_output: c_uint
));
experimental_api!(SSL_AeadDecrypt(
ctx: *const SSLAeadContext,
counter: PRUint64,
aad: *const PRUint8,
aad_len: c_uint,
input: *const PRUint8,
input_len: c_uint,
output: *const PRUint8,
output_len: *mut c_uint,
max_output: c_uint
));
experimental_api!(SSL_DestroyAead(ctx: *mut SSLAeadContext));
scoped_ptr!(AeadContext, SSLAeadContext, SSL_DestroyAead);
pub struct RealAead {
ctx: AeadContext,
}
impl RealAead {
/// Create a new AEAD based on the indicated TLS version and cipher suite.
///
/// # Errors
///
/// Returns `Error` when the supporting NSS functions fail.
pub fn new(version: Version, cipher: Cipher, secret: &SymKey, prefix: &str) -> Res<Self> {
let s: *mut PK11SymKey = **secret;
unsafe { Self::from_raw(version, cipher, s, prefix) }
}
#[must_use]
#[allow(clippy::unused_self)]
pub fn expansion(&self) -> usize {
16
}
unsafe fn from_raw(
version: Version,
cipher: Cipher,
secret: *mut PK11SymKey,
prefix: &str,
) -> Res<Self> {
let p = prefix.as_bytes();
let mut ctx: *mut ssl::SSLAeadContext = null_mut();
SSL_MakeAead(
version,
cipher,
secret,
p.as_ptr().cast(),
c_uint::try_from(p.len())?,
&mut ctx,
)?;
Ok(Self {
ctx: AeadContext::from_ptr(ctx)?,
})
}
/// Encrypt a plaintext.
///
/// The space provided in `output` needs to be larger than `input` by
/// the value provided in `Aead::expansion`.
///
/// # Errors
///
/// If the input can't be protected or any input is too large for NSS.
pub fn encrypt<'a>(
&self,
count: u64,
aad: &[u8],
input: &[u8],
output: &'a mut [u8],
) -> Res<&'a [u8]> {
let mut l: c_uint = 0;
unsafe {
SSL_AeadEncrypt(
*self.ctx,
count,
aad.as_ptr(),
c_uint::try_from(aad.len())?,
input.as_ptr(),
c_uint::try_from(input.len())?,
output.as_mut_ptr(),
&mut l,
c_uint::try_from(output.len())?,
)
}?;
Ok(&output[0..(l.try_into()?)])
}
/// Decrypt a ciphertext.
///
/// Note that NSS insists upon having extra space available for decryption, so
/// the buffer for `output` should be the same length as `input`, even though
/// the final result will be shorter.
///
/// # Errors
///
/// If the input isn't authenticated or any input is too large for NSS.
pub fn decrypt<'a>(
&self,
count: u64,
aad: &[u8],
input: &[u8],
output: &'a mut [u8],
) -> Res<&'a [u8]> {
let mut l: c_uint = 0;
unsafe {
SSL_AeadDecrypt(
*self.ctx,
count,
aad.as_ptr(),
c_uint::try_from(aad.len())?,
input.as_ptr(),
c_uint::try_from(input.len())?,
output.as_mut_ptr(),
&mut l,
c_uint::try_from(output.len())?,
)
}?;
Ok(&output[0..(l.try_into()?)])
}
}
impl fmt::Debug for RealAead {
fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
write!(f, "[AEAD Context]")
}
}
|
