yuzu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2025-03-29 17:27:03 +00:00
Code Issues Packages Projects Releases Wiki Activity

3rdparty: Pull Everest x25519 key size into macro

Browse source
This commit is contained in:
Christoph M. Wintersteiger 2019-02-15 16:20:54 +00:00 committed by Janos Follath
parent f21aba4cb2
commit fb779f1700
2 changed files with 22 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
3rdparty/everest/include/everest/x25519.h vendored
View file

@ -27,6 +27,7 @@ extern "C" {
#endif #endif
#define MBEDTLS_ECP_TLS_CURVE25519 0x1d #define MBEDTLS_ECP_TLS_CURVE25519 0x1d
#define MBEDTLS_X25519_KEY_SIZE_BYTES 32
/** /**
* Defines the source of the imported EC key. * Defines the source of the imported EC key.
@ -42,8 +43,8 @@ typedef enum
*/ */
typedef struct typedef struct
{ {
unsigned char our_secret[32]; unsigned char our_secret[MBEDTLS_X25519_KEY_SIZE_BYTES];
unsigned char peer_point[32]; unsigned char peer_point[MBEDTLS_X25519_KEY_SIZE_BYTES];
} mbedtls_x25519_context; } mbedtls_x25519_context;
/** /**

38
3rdparty/everest/library/x25519.c vendored
View file

@ -52,8 +52,8 @@ void mbedtls_x25519_free( mbedtls_x25519_context *ctx )
if( ctx == NULL ) if( ctx == NULL )
return; return;
mbedtls_platform_zeroize( ctx->our_secret, 32 ); mbedtls_platform_zeroize( ctx->our_secret, MBEDTLS_X25519_KEY_SIZE_BYTES );
mbedtls_platform_zeroize( ctx->peer_point, 32 ); mbedtls_platform_zeroize( ctx->peer_point, MBEDTLS_X25519_KEY_SIZE_BYTES );
} }
int mbedtls_x25519_make_params( mbedtls_x25519_context *ctx, size_t *olen, int mbedtls_x25519_make_params( mbedtls_x25519_context *ctx, size_t *olen,
@ -63,9 +63,9 @@ int mbedtls_x25519_make_params( mbedtls_x25519_context *ctx, size_t *olen,
{ {
int ret = 0; int ret = 0;
uint8_t base[32] = {0}; uint8_t base[MBEDTLS_X25519_KEY_SIZE_BYTES] = {0};
if( ( ret = f_rng( p_rng, ctx->our_secret, 32 ) ) != 0 ) if( ( ret = f_rng( p_rng, ctx->our_secret, MBEDTLS_X25519_KEY_SIZE_BYTES ) ) != 0 )
return ret; return ret;
*olen = 36; *olen = 36;
@ -75,13 +75,13 @@ int mbedtls_x25519_make_params( mbedtls_x25519_context *ctx, size_t *olen,
*buf++ = MBEDTLS_ECP_TLS_NAMED_CURVE; *buf++ = MBEDTLS_ECP_TLS_NAMED_CURVE;
*buf++ = MBEDTLS_ECP_TLS_CURVE25519 >> 8; *buf++ = MBEDTLS_ECP_TLS_CURVE25519 >> 8;
*buf++ = MBEDTLS_ECP_TLS_CURVE25519 & 0xFF; *buf++ = MBEDTLS_ECP_TLS_CURVE25519 & 0xFF;
*buf++ = 32; *buf++ = MBEDTLS_X25519_KEY_SIZE_BYTES;
base[0] = 9; base[0] = 9;
Hacl_Curve25519_crypto_scalarmult( buf, ctx->our_secret, base ); Hacl_Curve25519_crypto_scalarmult( buf, ctx->our_secret, base );
base[0] = 0; base[0] = 0;
if( memcmp( buf, base, 32) == 0 ) if( memcmp( buf, base, MBEDTLS_X25519_KEY_SIZE_BYTES) == 0 )
return MBEDTLS_ERR_ECP_RANDOM_FAILED; return MBEDTLS_ERR_ECP_RANDOM_FAILED;
return( 0 ); return( 0 );
@ -93,11 +93,11 @@ int mbedtls_x25519_read_params( mbedtls_x25519_context *ctx,
if( end - *buf < 33 ) if( end - *buf < 33 )
return( MBEDTLS_ERR_ECP_BAD_INPUT_DATA ); return( MBEDTLS_ERR_ECP_BAD_INPUT_DATA );
if( ( *(*buf)++ != 32 ) ) if( ( *(*buf)++ != MBEDTLS_X25519_KEY_SIZE_BYTES ) )
return( MBEDTLS_ERR_ECP_BAD_INPUT_DATA ); return( MBEDTLS_ERR_ECP_BAD_INPUT_DATA );
memcpy( ctx->peer_point, *buf, 32 ); memcpy( ctx->peer_point, *buf, MBEDTLS_X25519_KEY_SIZE_BYTES );
*buf += 32; *buf += MBEDTLS_X25519_KEY_SIZE_BYTES;
return( 0 ); return( 0 );
} }
@ -108,11 +108,11 @@ int mbedtls_x25519_get_params( mbedtls_x25519_context *ctx, const mbedtls_ecp_ke
switch( side ) { switch( side ) {
case MBEDTLS_X25519_ECDH_THEIRS: case MBEDTLS_X25519_ECDH_THEIRS:
mbedtls_ecp_point_write_binary( &key->grp, &key->Q, MBEDTLS_ECP_PF_COMPRESSED, &olen, ctx->peer_point, 32 ); mbedtls_ecp_point_write_binary( &key->grp, &key->Q, MBEDTLS_ECP_PF_COMPRESSED, &olen, ctx->peer_point, MBEDTLS_X25519_KEY_SIZE_BYTES );
/* untested; defensively throw an error for now. */ /* untested; defensively throw an error for now. */
return(MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE); return(MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE);
case MBEDTLS_X25519_ECDH_OURS: case MBEDTLS_X25519_ECDH_OURS:
mbedtls_mpi_write_binary( &key->d, ctx->our_secret, 32 ); mbedtls_mpi_write_binary( &key->d, ctx->our_secret, MBEDTLS_X25519_KEY_SIZE_BYTES );
/* CMW: key->Q = key->d * base; do we need to set up ctx.peer_point here? */ /* CMW: key->Q = key->d * base; do we need to set up ctx.peer_point here? */
/* untested; defensively throw an error for now. */ /* untested; defensively throw an error for now. */
return( MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE ); return( MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE );
@ -130,7 +130,7 @@ int mbedtls_x25519_calc_secret( mbedtls_x25519_context *ctx, size_t *olen,
(( void )f_rng); (( void )f_rng);
(( void )p_rng); (( void )p_rng);
*olen = 32; *olen = MBEDTLS_X25519_KEY_SIZE_BYTES;
if( blen < *olen ) if( blen < *olen )
return( MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL ); return( MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL );
@ -138,8 +138,8 @@ int mbedtls_x25519_calc_secret( mbedtls_x25519_context *ctx, size_t *olen,
Hacl_Curve25519_crypto_scalarmult( buf, ctx->our_secret, ctx->peer_point); Hacl_Curve25519_crypto_scalarmult( buf, ctx->our_secret, ctx->peer_point);
/* Wipe the DH secret and don't let the peer chose a small subgroup point */ /* Wipe the DH secret and don't let the peer chose a small subgroup point */
memset( ctx->our_secret, 0, 32 ); memset( ctx->our_secret, 0, MBEDTLS_X25519_KEY_SIZE_BYTES );
if( memcmp( buf, ctx->our_secret, 32) == 0 ) if( memcmp( buf, ctx->our_secret, MBEDTLS_X25519_KEY_SIZE_BYTES) == 0 )
return MBEDTLS_ERR_ECP_RANDOM_FAILED; return MBEDTLS_ERR_ECP_RANDOM_FAILED;
return( 0 ); return( 0 );
@ -150,7 +150,7 @@ int mbedtls_x25519_make_public( mbedtls_x25519_context *ctx, size_t *olen,
int( *f_rng )(void *, unsigned char *, size_t), int( *f_rng )(void *, unsigned char *, size_t),
void *p_rng ) void *p_rng )
{ {
unsigned char base[32] = { 0 }; unsigned char base[MBEDTLS_X25519_KEY_SIZE_BYTES] = { 0 };
/* CMW: Is it okay that f_rng, p_rng are not used? */ /* CMW: Is it okay that f_rng, p_rng are not used? */
(( void )f_rng); (( void )f_rng);
@ -162,13 +162,13 @@ int mbedtls_x25519_make_public( mbedtls_x25519_context *ctx, size_t *olen,
*olen = 33; *olen = 33;
if( blen < *olen ) if( blen < *olen )
return(MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL); return(MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL);
*buf++ = 32; *buf++ = MBEDTLS_X25519_KEY_SIZE_BYTES;
base[0] = 9; base[0] = 9;
Hacl_Curve25519_crypto_scalarmult( buf, ctx->our_secret, base ); Hacl_Curve25519_crypto_scalarmult( buf, ctx->our_secret, base );
base[0] = 0; base[0] = 0;
if( memcmp( buf, base, 32 ) == 0 ) if( memcmp( buf, base, MBEDTLS_X25519_KEY_SIZE_BYTES ) == 0 )
return MBEDTLS_ERR_ECP_RANDOM_FAILED; return MBEDTLS_ERR_ECP_RANDOM_FAILED;
return(0); return(0);
@ -179,9 +179,9 @@ int mbedtls_x25519_read_public( mbedtls_x25519_context *ctx,
{ {
if( blen < 33 ) if( blen < 33 )
return(MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL); return(MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL);
if( (*buf++ != 32) ) if( (*buf++ != MBEDTLS_X25519_KEY_SIZE_BYTES) )
return(MBEDTLS_ERR_ECP_BAD_INPUT_DATA); return(MBEDTLS_ERR_ECP_BAD_INPUT_DATA);
memcpy( ctx->peer_point, buf, 32 ); memcpy( ctx->peer_point, buf, MBEDTLS_X25519_KEY_SIZE_BYTES );
return(0); return(0);
} }