2 * Copyright (c) 2020 Dmitry Belyavskiy <beldmit@gmail.com>
4 * Contents licensed under the terms of the OpenSSL license
5 * See https://www.openssl.org/source/license.html for details
7 #ifndef GOST_GOST2015_H
8 #define GOST_GOST2015_H
10 #include "gost_grasshopper_cipher.h"
12 #include <openssl/evp.h>
13 #include <openssl/x509.h>
14 #include <openssl/modes.h>
16 #define MAGMA_MAC_MAX_SIZE 8
17 #define KUZNYECHIK_MAC_MAX_SIZE 16
18 #define OID_GOST_CMS_MAC "1.2.643.7.1.0.6.1.1"
21 (((x & 0xFF00000000000000ULL) >> 56) | \
22 ((x & 0x00FF000000000000ULL) >> 40) | \
23 ((x & 0x0000FF0000000000ULL) >> 24) | \
24 ((x & 0x000000FF00000000ULL) >> 8) | \
25 ((x & 0x00000000FF000000ULL) << 8) | \
26 ((x & 0x0000000000FF0000ULL) << 24) | \
27 ((x & 0x000000000000FF00ULL) << 40) | \
28 ((x & 0x00000000000000FFULL) << 56))
30 typedef void (*mul128_f) (uint64_t *result, uint64_t *arg1, uint64_t *arg2);
37 } nonce, Yi, Zi, EKi, Hi, len, ACi, mul, sum, tag;
39 unsigned int mres, ares;
48 struct ossl_gost_cipher_ctx g_ks;
49 gost_grasshopper_cipher_ctx gh_ks;
59 int gost2015_final_call(EVP_CIPHER_CTX *ctx, EVP_MD_CTX *omac_ctx, size_t mac_size,
60 unsigned char *encrypted_mac,
61 int (*do_cipher) (EVP_CIPHER_CTX *ctx,
63 const unsigned char *in,
66 /* IV is expected to be 16 bytes*/
67 int gost2015_get_asn1_params(const ASN1_TYPE *params, size_t ukm_size,
68 unsigned char *iv, size_t ukm_offset, unsigned char *kdf_seed);
70 int gost2015_set_asn1_params(ASN1_TYPE *params,
71 const unsigned char *iv, size_t iv_size, const unsigned char *kdf_seed);
73 int gost2015_process_unprotected_attributes(STACK_OF(X509_ATTRIBUTE) *attrs,
74 int encryption, size_t mac_len, unsigned char *final_tag);
76 int gost2015_acpkm_omac_init(int nid, int enc, const unsigned char *inkey,
78 unsigned char *outkey, unsigned char *kdf_seed);
79 int init_zero_kdf_seed(unsigned char *kdf_seed);
82 /* enc/dec mgm mode */
84 void gost_mgm128_init(mgm128_context *ctx, void *key, block128_f block,
85 mul128_f mul_gf, int blen);
87 int gost_mgm128_setiv(mgm128_context *ctx, const unsigned char *iv, size_t len);
89 int gost_mgm128_aad(mgm128_context *ctx, const unsigned char *aad, size_t len);
91 int gost_mgm128_encrypt(mgm128_context *ctx, const unsigned char *in,
92 unsigned char *out, size_t len);
94 int gost_mgm128_decrypt(mgm128_context *ctx, const unsigned char *in,
95 unsigned char *out, size_t len);
97 int gost_mgm128_finish(mgm128_context *ctx, const unsigned char *tag, size_t len);
99 void gost_mgm128_tag(mgm128_context *ctx, unsigned char *tag, size_t len);