diff options
Diffstat (limited to 'comm/third_party/botan/src/lib/misc/rfc3394/rfc3394.cpp')
-rw-r--r-- | comm/third_party/botan/src/lib/misc/rfc3394/rfc3394.cpp | 44 |
1 files changed, 44 insertions, 0 deletions
diff --git a/comm/third_party/botan/src/lib/misc/rfc3394/rfc3394.cpp b/comm/third_party/botan/src/lib/misc/rfc3394/rfc3394.cpp new file mode 100644 index 0000000000..cb24809984 --- /dev/null +++ b/comm/third_party/botan/src/lib/misc/rfc3394/rfc3394.cpp @@ -0,0 +1,44 @@ +/* +* AES Key Wrap (RFC 3394) +* (C) 2011 Jack Lloyd +* +* Botan is released under the Simplified BSD License (see license.txt) +*/ + +#include <botan/rfc3394.h> +#include <botan/nist_keywrap.h> +#include <botan/block_cipher.h> + +namespace Botan { + +secure_vector<uint8_t> rfc3394_keywrap(const secure_vector<uint8_t>& key, + const SymmetricKey& kek) + { + BOTAN_ARG_CHECK(kek.size() == 16 || kek.size() == 24 || kek.size() == 32, + "Invalid KEK length for NIST key wrap"); + + const std::string cipher_name = "AES-" + std::to_string(8*kek.size()); + std::unique_ptr<BlockCipher> aes(BlockCipher::create_or_throw(cipher_name)); + aes->set_key(kek); + + std::vector<uint8_t> wrapped = nist_key_wrap(key.data(), key.size(), *aes); + return secure_vector<uint8_t>(wrapped.begin(), wrapped.end()); + } + +secure_vector<uint8_t> rfc3394_keyunwrap(const secure_vector<uint8_t>& key, + const SymmetricKey& kek) + { + BOTAN_ARG_CHECK(kek.size() == 16 || kek.size() == 24 || kek.size() == 32, + "Invalid KEK length for NIST key wrap"); + + BOTAN_ARG_CHECK(key.size() >= 16 && key.size() % 8 == 0, + "Bad input key size for NIST key unwrap"); + + const std::string cipher_name = "AES-" + std::to_string(8*kek.size()); + std::unique_ptr<BlockCipher> aes(BlockCipher::create_or_throw(cipher_name)); + aes->set_key(kek); + + return nist_key_unwrap(key.data(), key.size(), *aes); + } + +} |