| /******************************************************************************* |
| * Copyright 2015-2018 Intel Corporation |
| * All Rights Reserved. |
| * |
| * If this software was obtained under the Intel Simplified Software License, |
| * the following terms apply: |
| * |
| * The source code, information and material ("Material") contained herein is |
| * owned by Intel Corporation or its suppliers or licensors, and title to such |
| * Material remains with Intel Corporation or its suppliers or licensors. The |
| * Material contains proprietary information of Intel or its suppliers and |
| * licensors. The Material is protected by worldwide copyright laws and treaty |
| * provisions. No part of the Material may be used, copied, reproduced, |
| * modified, published, uploaded, posted, transmitted, distributed or disclosed |
| * in any way without Intel's prior express written permission. No license under |
| * any patent, copyright or other intellectual property rights in the Material |
| * is granted to or conferred upon you, either expressly, by implication, |
| * inducement, estoppel or otherwise. Any license under such intellectual |
| * property rights must be express and approved by Intel in writing. |
| * |
| * Unless otherwise agreed by Intel in writing, you may not remove or alter this |
| * notice or any other notice embedded in Materials by Intel or Intel's |
| * suppliers or licensors in any way. |
| * |
| * |
| * If this software was obtained under the Apache License, Version 2.0 (the |
| * "License"), the following terms apply: |
| * |
| * You may not use this file except in compliance with the License. You may |
| * obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| *******************************************************************************/ |
| |
| /* |
| // |
| // Purpose: |
| // Cryptography Primitive. |
| // Message Authentication Algorithm |
| // Internal Definitions and Internal Functions Prototypes |
| // |
| // |
| */ |
| |
| #if !defined(_CP_AESAUTH_GCM_H) |
| #define _CP_AESAUTH_GCM_H |
| |
| #include "owncp.h" |
| #include "pcpaesm.h" |
| |
| #define BLOCK_SIZE (MBS_RIJ128) |
| |
| /* GCM Hash prototype: GHash = GHash*HKey mod G() */ |
| typedef void (*MulGcm_)(Ipp8u* pGHash, const Ipp8u* pHKey, const void* pParam); |
| |
| /* GCM Authentication prototype: GHash = (GHash^src[])*HKey mod G() */ |
| typedef void (*Auth_)(Ipp8u* pHash, const Ipp8u* pSrc, int len, const Ipp8u* pHKey, const void* pParam); |
| |
| /* GCM Encrypt_Authentication prototype */ |
| typedef void (*Encrypt_)(Ipp8u* pDst, const Ipp8u* pSrc, int len, IppsAES_GCMState* pCtx); |
| |
| /* GCM Authentication_Decrypt prototype */ |
| typedef void (*Decrypt_)(Ipp8u* pDst, const Ipp8u* pSrc, int len, IppsAES_GCMState* pCtx); |
| |
| typedef enum { |
| GcmInit, |
| GcmIVprocessing, |
| GcmAADprocessing, |
| GcmTXTprocessing |
| } GcmState; |
| |
| struct _cpAES_GCM { |
| IppCtxId idCtx; /* AES-GCM id */ |
| GcmState state; /* GCM state: Init, IV|AAD|TXT proccessing */ |
| Ipp64u ivLen; /* IV length (bytes) */ |
| Ipp64u aadLen; /* header length (bytes) */ |
| Ipp64u txtLen; /* text length (bytes) */ |
| |
| int bufLen; /* staff buffer length */ |
| __ALIGN16 /* aligned buffers */ |
| Ipp8u counter[BLOCK_SIZE]; /* counter */ |
| Ipp8u ecounter0[BLOCK_SIZE]; /* encrypted initial counter */ |
| Ipp8u ecounter[BLOCK_SIZE]; /* encrypted counter */ |
| Ipp8u ghash[BLOCK_SIZE]; /* ghash accumulator */ |
| |
| MulGcm_ hashFun; /* AES-GCM mul function */ |
| Auth_ authFun; /* authentication function */ |
| Encrypt_ encFun; /* encryption & authentication */ |
| Decrypt_ decFun; /* authentication & decryption */ |
| |
| __ALIGN16 /* aligned AES context */ |
| IppsAESSpec cipher; |
| |
| __ALIGN16 /* aligned pre-computed data: */ |
| Ipp8u multiplier[BLOCK_SIZE]; /* - (default) hKey */ |
| /* - (ase_ni) hKey*t, (hKey*t)^2, (hKey*t)^4 */ |
| /* - (safe) hKey*(t^i), i=0,...,127 */ |
| }; |
| |
| #define CTR_POS 12 |
| |
| /* alignment */ |
| #define AESGCM_ALIGNMENT (16) |
| |
| #define PRECOMP_DATA_SIZE_AES_NI_AESGCM (BLOCK_SIZE*4) |
| #define PRECOMP_DATA_SIZE_FAST2K (BLOCK_SIZE*128) |
| |
| /* |
| // Useful macros |
| */ |
| #define AESGCM_ID(stt) ((stt)->idCtx) |
| #define AESGCM_STATE(stt) ((stt)->state) |
| |
| #define AESGCM_IV_LEN(stt) ((stt)->ivLen) |
| #define AESGCM_AAD_LEN(stt) ((stt)->aadLen) |
| #define AESGCM_TXT_LEN(stt) ((stt)->txtLen) |
| |
| #define AESGCM_BUFLEN(stt) ((stt)->bufLen) |
| #define AESGCM_COUNTER(stt) ((stt)->counter) |
| #define AESGCM_ECOUNTER0(stt) ((stt)->ecounter0) |
| #define AESGCM_ECOUNTER(stt) ((stt)->ecounter) |
| #define AESGCM_GHASH(stt) ((stt)->ghash) |
| |
| #define AESGCM_HASH(stt) ((stt)->hashFun) |
| #define AESGCM_AUTH(stt) ((stt)->authFun) |
| #define AESGCM_ENC(stt) ((stt)->encFun) |
| #define AESGCM_DEC(stt) ((stt)->decFun) |
| |
| #define AESGCM_CIPHER(stt) (IppsAESSpec*)(&((stt)->cipher)) |
| |
| #define AESGCM_HKEY(stt) ((stt)->multiplier) |
| #define AESGCM_CPWR(stt) ((stt)->multiplier) |
| #define AES_GCM_MTBL(stt) ((stt)->multiplier) |
| |
| #define AESGCM_VALID_ID(stt) (AESGCM_ID((stt))==idCtxAESGCM) |
| |
| |
| __INLINE void IncrementCounter32(Ipp8u* pCtr) |
| { |
| int i; |
| for(i=BLOCK_SIZE-1; i>=CTR_POS && 0==(Ipp8u)(++pCtr[i]); i--) ; |
| } |
| |
| |
| #if (_IPP>=_IPP_P8) || (_IPP32E>=_IPP32E_Y8) |
| #define AesGcmPrecompute_avx OWNAPI(AesGcmPrecompute_avx) |
| void AesGcmPrecompute_avx(Ipp8u* pPrecomputeData, const Ipp8u* pHKey); |
| #define AesGcmMulGcm_avx OWNAPI(AesGcmMulGcm_avx) |
| void AesGcmMulGcm_avx(Ipp8u* pGhash, const Ipp8u* pHkey, const void* pParam); |
| #define AesGcmAuth_avx OWNAPI(AesGcmAuth_avx) |
| void AesGcmAuth_avx(Ipp8u* pGhash, const Ipp8u* pSrc, int len, const Ipp8u* pHkey, const void* pParam); |
| #define wrpAesGcmEnc_avx OWNAPI(wrpAesGcmEnc_avx) |
| void wrpAesGcmEnc_avx(Ipp8u* pDst, const Ipp8u* pSrc, int len, IppsAES_GCMState* pCtx); |
| #define wrpAesGcmDec_avx OWNAPI(wrpAesGcmDec_avx) |
| void wrpAesGcmDec_avx(Ipp8u* pDst, const Ipp8u* pSrc, int len, IppsAES_GCMState* pCtx); |
| #define AesGcmEnc_avx OWNAPI(AesGcmEnc_avx) |
| void AesGcmEnc_avx(Ipp8u* pDst, const Ipp8u* pSrc, int len, |
| RijnCipher cipher, int nr, const Ipp8u* pKeys, |
| Ipp8u* pGhash, Ipp8u* pCnt, Ipp8u* pECnt, const Ipp8u* pMuls); |
| #define AesGcmDec_avx OWNAPI(AesGcmDec_avx) |
| void AesGcmDec_avx(Ipp8u* pDst, const Ipp8u* pSrc, int len, |
| RijnCipher cipher, int nr, const Ipp8u* pKeys, |
| Ipp8u* pGhash, Ipp8u* pCnt, Ipp8u* pECnt, const Ipp8u* pMuls); |
| #endif |
| |
| #define AesGcmPrecompute_table2K OWNAPI(AesGcmPrecompute_table2K) |
| void AesGcmPrecompute_table2K(Ipp8u* pPrecomputeData, const Ipp8u* pHKey); |
| #define AesGcmMulGcm_table2K OWNAPI(AesGcmMulGcm_table2K) |
| void AesGcmMulGcm_table2K(Ipp8u* pGhash, const Ipp8u* pHkey, const void* pParam); |
| #define AesGcmAuth_table2K OWNAPI(AesGcmAuth_table2K) |
| void AesGcmAuth_table2K(Ipp8u* pGhash, const Ipp8u* pSrc, int len, const Ipp8u* pHkey, const void* pParam); |
| #define wrpAesGcmEnc_table2K OWNAPI(wrpAesGcmEnc_table2K) |
| void wrpAesGcmEnc_table2K(Ipp8u* pDst, const Ipp8u* pSrc, int len, IppsAES_GCMState* pCtx); |
| #define wrpAesGcmDec_table2K OWNAPI(wrpAesGcmDec_table2K) |
| void wrpAesGcmDec_table2K(Ipp8u* pDst, const Ipp8u* pSrc, int len, IppsAES_GCMState* pCtx); |
| |
| extern const Ipp16u AesGcmConst_table[256]; /* precomputed reduction table */ |
| |
| static int cpSizeofCtx_AESGCM(void) |
| { |
| int precomp_size; |
| |
| #if (_IPP>=_IPP_P8) || (_IPP32E>=_IPP32E_Y8) |
| if( IsFeatureEnabled(ippCPUID_AES|ippCPUID_CLMUL) ) |
| precomp_size = PRECOMP_DATA_SIZE_AES_NI_AESGCM; |
| else |
| #endif |
| precomp_size = PRECOMP_DATA_SIZE_FAST2K; |
| |
| /* decrease precomp_size as soon as BLOCK_SIZE bytes already reserved in context */ |
| precomp_size -= BLOCK_SIZE; |
| |
| return sizeof(IppsAES_GCMState) |
| +precomp_size |
| +AESGCM_ALIGNMENT-1; |
| } |
| |
| #endif /* _CP_AESAUTH_GCM_H*/ |
