Line data    Source code

       1             : /*
       2             :  * AES-128 CBC
       3             :  *
       4             :  * Copyright (c) 2003-2007, Jouni Malinen <j@w1.fi>
       5             :  *
       6             :  * This software may be distributed under the terms of the BSD license.
       7             :  * See README for more details.
       8             :  */
       9             : 
      10             : #include "includes.h"
      11             : 
      12             : #include "common.h"
      13             : #include "aes.h"
      14             : #include "aes_wrap.h"
      15             : 
      16             : /**
      17             :  * aes_128_cbc_encrypt - AES-128 CBC encryption
      18             :  * @key: Encryption key
      19             :  * @iv: Encryption IV for CBC mode (16 bytes)
      20             :  * @data: Data to encrypt in-place
      21             :  * @data_len: Length of data in bytes (must be divisible by 16)
      22             :  * Returns: 0 on success, -1 on failure
      23             :  */
      24         928 : int aes_128_cbc_encrypt(const u8 *key, const u8 *iv, u8 *data, size_t data_len)
      25             : {
      26             :         void *ctx;
      27             :         u8 cbc[AES_BLOCK_SIZE];
      28         928 :         u8 *pos = data;
      29             :         int i, j, blocks;
      30             : 
      31         928 :         ctx = aes_encrypt_init(key, 16);
      32         928 :         if (ctx == NULL)
      33           0 :                 return -1;
      34         928 :         os_memcpy(cbc, iv, AES_BLOCK_SIZE);
      35             : 
      36         928 :         blocks = data_len / AES_BLOCK_SIZE;
      37        4872 :         for (i = 0; i < blocks; i++) {
      38       67048 :                 for (j = 0; j < AES_BLOCK_SIZE; j++)
      39       63104 :                         cbc[j] ^= pos[j];
      40        3944 :                 aes_encrypt(ctx, cbc, cbc);
      41        3944 :                 os_memcpy(pos, cbc, AES_BLOCK_SIZE);
      42        3944 :                 pos += AES_BLOCK_SIZE;
      43             :         }
      44         928 :         aes_encrypt_deinit(ctx);
      45         928 :         return 0;
      46             : }
      47             : 
      48             : 
      49             : /**
      50             :  * aes_128_cbc_decrypt - AES-128 CBC decryption
      51             :  * @key: Decryption key
      52             :  * @iv: Decryption IV for CBC mode (16 bytes)
      53             :  * @data: Data to decrypt in-place
      54             :  * @data_len: Length of data in bytes (must be divisible by 16)
      55             :  * Returns: 0 on success, -1 on failure
      56             :  */
      57         915 : int aes_128_cbc_decrypt(const u8 *key, const u8 *iv, u8 *data, size_t data_len)
      58             : {
      59             :         void *ctx;
      60             :         u8 cbc[AES_BLOCK_SIZE], tmp[AES_BLOCK_SIZE];
      61         915 :         u8 *pos = data;
      62             :         int i, j, blocks;
      63             : 
      64         915 :         ctx = aes_decrypt_init(key, 16);
      65         915 :         if (ctx == NULL)
      66           0 :                 return -1;
      67         915 :         os_memcpy(cbc, iv, AES_BLOCK_SIZE);
      68             : 
      69         915 :         blocks = data_len / AES_BLOCK_SIZE;
      70        4809 :         for (i = 0; i < blocks; i++) {
      71        3894 :                 os_memcpy(tmp, pos, AES_BLOCK_SIZE);
      72        3894 :                 aes_decrypt(ctx, pos, pos);
      73       66198 :                 for (j = 0; j < AES_BLOCK_SIZE; j++)
      74       62304 :                         pos[j] ^= cbc[j];
      75        3894 :                 os_memcpy(cbc, tmp, AES_BLOCK_SIZE);
      76        3894 :                 pos += AES_BLOCK_SIZE;
      77             :         }
      78         915 :         aes_decrypt_deinit(ctx);
      79         915 :         return 0;
      80             : }