mirror of
https://github.com/citra-emu/citra.git
synced 2024-11-26 04:10:04 +00:00
354 lines
6.4 KiB
C
354 lines
6.4 KiB
C
#include <string.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <time.h>
|
|
|
|
#include "ctr.h"
|
|
|
|
|
|
void ctr_set_iv( ctr_aes_context* ctx,
|
|
u8 iv[16] )
|
|
{
|
|
memcpy(ctx->iv, iv, 16);
|
|
}
|
|
|
|
void ctr_add_counter( ctr_aes_context* ctx,
|
|
u32 carry )
|
|
{
|
|
u32 counter[4];
|
|
u32 sum;
|
|
int i;
|
|
|
|
for(i=0; i<4; i++)
|
|
counter[i] = (ctx->ctr[i*4+0]<<24) | (ctx->ctr[i*4+1]<<16) | (ctx->ctr[i*4+2]<<8) | (ctx->ctr[i*4+3]<<0);
|
|
|
|
for(i=3; i>=0; i--)
|
|
{
|
|
sum = counter[i] + carry;
|
|
|
|
if (sum < counter[i])
|
|
carry = 1;
|
|
else
|
|
carry = 0;
|
|
|
|
counter[i] = sum;
|
|
}
|
|
|
|
for(i=0; i<4; i++)
|
|
{
|
|
ctx->ctr[i*4+0] = counter[i]>>24;
|
|
ctx->ctr[i*4+1] = counter[i]>>16;
|
|
ctx->ctr[i*4+2] = counter[i]>>8;
|
|
ctx->ctr[i*4+3] = counter[i]>>0;
|
|
}
|
|
}
|
|
|
|
void ctr_set_counter( ctr_aes_context* ctx,
|
|
u8 ctr[16] )
|
|
{
|
|
memcpy(ctx->ctr, ctr, 16);
|
|
}
|
|
|
|
|
|
void ctr_init_counter( ctr_aes_context* ctx,
|
|
u8 key[16],
|
|
u8 ctr[16] )
|
|
{
|
|
aes_setkey_enc(&ctx->aes, key, 128);
|
|
ctr_set_counter(ctx, ctr);
|
|
}
|
|
|
|
|
|
void ctr_crypt_counter_block( ctr_aes_context* ctx,
|
|
u8 input[16],
|
|
u8 output[16] )
|
|
{
|
|
int i;
|
|
u8 stream[16];
|
|
|
|
|
|
aes_crypt_ecb(&ctx->aes, AES_ENCRYPT, ctx->ctr, stream);
|
|
|
|
|
|
if (input)
|
|
{
|
|
for(i=0; i<16; i++)
|
|
{
|
|
output[i] = stream[i] ^ input[i];
|
|
}
|
|
}
|
|
else
|
|
{
|
|
for(i=0; i<16; i++)
|
|
output[i] = stream[i];
|
|
}
|
|
|
|
ctr_add_counter(ctx, 1);
|
|
}
|
|
|
|
|
|
void ctr_crypt_counter( ctr_aes_context* ctx,
|
|
u8* input,
|
|
u8* output,
|
|
u32 size )
|
|
{
|
|
u8 stream[16];
|
|
u32 i;
|
|
|
|
while(size >= 16)
|
|
{
|
|
ctr_crypt_counter_block(ctx, input, output);
|
|
|
|
if (input)
|
|
input += 16;
|
|
if (output)
|
|
output += 16;
|
|
|
|
size -= 16;
|
|
}
|
|
|
|
if (size)
|
|
{
|
|
memset(stream, 0, 16);
|
|
ctr_crypt_counter_block(ctx, stream, stream);
|
|
|
|
if (input)
|
|
{
|
|
for(i=0; i<size; i++)
|
|
output[i] = input[i] ^ stream[i];
|
|
}
|
|
else
|
|
{
|
|
memcpy(output, stream, size);
|
|
}
|
|
}
|
|
}
|
|
|
|
void ctr_init_cbc_encrypt( ctr_aes_context* ctx,
|
|
u8 key[16],
|
|
u8 iv[16] )
|
|
{
|
|
aes_setkey_enc(&ctx->aes, key, 128);
|
|
ctr_set_iv(ctx, iv);
|
|
}
|
|
|
|
void ctr_init_cbc_decrypt( ctr_aes_context* ctx,
|
|
u8 key[16],
|
|
u8 iv[16] )
|
|
{
|
|
aes_setkey_dec(&ctx->aes, key, 128);
|
|
ctr_set_iv(ctx, iv);
|
|
}
|
|
|
|
void ctr_encrypt_cbc( ctr_aes_context* ctx,
|
|
u8* input,
|
|
u8* output,
|
|
u32 size )
|
|
{
|
|
aes_crypt_cbc(&ctx->aes, AES_ENCRYPT, size, ctx->iv, input, output);
|
|
}
|
|
|
|
void ctr_decrypt_cbc( ctr_aes_context* ctx,
|
|
u8* input,
|
|
u8* output,
|
|
u32 size )
|
|
{
|
|
aes_crypt_cbc(&ctx->aes, AES_DECRYPT, size, ctx->iv, input, output);
|
|
}
|
|
|
|
void ctr_sha_256( const u8* data,
|
|
u32 size,
|
|
u8 hash[0x20] )
|
|
{
|
|
sha2(data, size, hash, 0);
|
|
}
|
|
|
|
int ctr_sha_256_verify( const u8* data,
|
|
u32 size,
|
|
const u8 checkhash[0x20] )
|
|
{
|
|
u8 hash[0x20];
|
|
|
|
sha2(data, size, hash, 0);
|
|
|
|
if (memcmp(hash, checkhash, 0x20) == 0)
|
|
return Good;
|
|
else
|
|
return Fail;
|
|
}
|
|
|
|
void ctr_sha_256_init( ctr_sha256_context* ctx )
|
|
{
|
|
sha2_starts(&ctx->sha, 0);
|
|
}
|
|
|
|
void ctr_sha_256_update( ctr_sha256_context* ctx,
|
|
const u8* data,
|
|
u32 size )
|
|
{
|
|
sha2_update(&ctx->sha, data, size);
|
|
}
|
|
|
|
|
|
void ctr_sha_256_finish( ctr_sha256_context* ctx,
|
|
u8 hash[0x20] )
|
|
{
|
|
sha2_finish(&ctx->sha, hash);
|
|
}
|
|
|
|
|
|
void ctr_rsa_init_key_pubmodulus(rsakey2048* key, u8 modulus[0x100])
|
|
{
|
|
u8 exponent[3] = {0x01, 0x00, 0x01};
|
|
|
|
ctr_rsa_init_key_pub(key, modulus, exponent);
|
|
}
|
|
|
|
void ctr_rsa_init_key_pub(rsakey2048* key, u8 modulus[0x100], u8 exponent[3])
|
|
{
|
|
key->keytype = RSAKEY_PUB;
|
|
memcpy(key->n, modulus, 0x100);
|
|
memcpy(key->e, exponent, 3);
|
|
}
|
|
|
|
int ctr_rsa_init(ctr_rsa_context* ctx, rsakey2048* key)
|
|
{
|
|
rsa_init(&ctx->rsa, RSA_PKCS_V15, 0);
|
|
ctx->rsa.len = 0x100;
|
|
|
|
if (key->keytype == RSAKEY_INVALID)
|
|
goto clean;
|
|
|
|
if (mpi_read_binary(&ctx->rsa.N, key->n, sizeof(key->n)))
|
|
goto clean;
|
|
if (mpi_read_binary(&ctx->rsa.E, key->e, sizeof(key->e)))
|
|
goto clean;
|
|
if (rsa_check_pubkey(&ctx->rsa))
|
|
goto clean;
|
|
|
|
if (key->keytype == RSAKEY_PRIV)
|
|
{
|
|
if (mpi_read_binary(&ctx->rsa.D, key->d, sizeof(key->d)))
|
|
goto clean;
|
|
if (mpi_read_binary(&ctx->rsa.P, key->p, sizeof(key->p)))
|
|
goto clean;
|
|
if (mpi_read_binary(&ctx->rsa.Q, key->q, sizeof(key->q)))
|
|
goto clean;
|
|
if (mpi_read_binary(&ctx->rsa.DP, key->dp, sizeof(key->dp)))
|
|
goto clean;
|
|
if (mpi_read_binary(&ctx->rsa.DQ, key->dq, sizeof(key->dq)))
|
|
goto clean;
|
|
if (mpi_read_binary(&ctx->rsa.QP, key->qp, sizeof(key->qp)))
|
|
goto clean;
|
|
if (rsa_check_privkey(&ctx->rsa))
|
|
goto clean;
|
|
}
|
|
|
|
return 1;
|
|
clean:
|
|
return 0;
|
|
}
|
|
|
|
int ctr_rsa_verify_hash(const u8 signature[0x100], const u8 hash[0x20], rsakey2048* key)
|
|
{
|
|
ctr_rsa_context ctx;
|
|
u32 result;
|
|
u8 output[0x100];
|
|
|
|
if (key->keytype == RSAKEY_INVALID)
|
|
return Fail;
|
|
|
|
ctr_rsa_init(&ctx, key);
|
|
// memset(output, 0, 0x100);
|
|
// result = ctr_rsa_public(signature, output, key);
|
|
// printf("Result = %d\n", result);
|
|
// memdump(stdout, "output: ", output, 0x100);
|
|
|
|
result = rsa_pkcs1_verify(&ctx.rsa, RSA_PUBLIC, SIG_RSA_SHA256, 0x20, hash, (u8*)signature);
|
|
|
|
ctr_rsa_free(&ctx);
|
|
|
|
if (result == 0)
|
|
return Good;
|
|
else
|
|
return Fail;
|
|
}
|
|
|
|
|
|
int ctr_rsa_sign_hash(const u8 hash[0x20], u8 signature[0x100], rsakey2048* key)
|
|
{
|
|
ctr_rsa_context ctx;
|
|
u32 result;
|
|
|
|
ctr_rsa_init(&ctx, key);
|
|
|
|
result = rsa_pkcs1_verify(&ctx.rsa, RSA_PUBLIC, SIG_RSA_SHA256, 0x20, hash, (u8*)signature);
|
|
result = rsa_pkcs1_sign(&ctx.rsa, RSA_PRIVATE, SIG_RSA_SHA256, 0x20, hash, signature);
|
|
|
|
ctr_rsa_free(&ctx);
|
|
|
|
if (result == 0)
|
|
return 1;
|
|
else
|
|
return 0;
|
|
}
|
|
|
|
int ctr_rsa_public(const u8 signature[0x100], u8 output[0x100], rsakey2048* key)
|
|
{
|
|
ctr_rsa_context ctx;
|
|
u32 result;
|
|
|
|
ctr_rsa_init(&ctx, key);
|
|
|
|
result = rsa_public(&ctx.rsa, signature, output);
|
|
|
|
ctr_rsa_free(&ctx);
|
|
|
|
if (result == 0)
|
|
return 1;
|
|
else
|
|
return 0;
|
|
}
|
|
|
|
|
|
void ctr_rsa_free(ctr_rsa_context* ctx)
|
|
{
|
|
rsa_free(&ctx->rsa);
|
|
}
|
|
|
|
/*
|
|
* Generate DP, DQ, QP based on private key
|
|
*/
|
|
#if 0
|
|
static int ctr_rsa_key_init(ctr_rsa_context* ctx )
|
|
{
|
|
int ret;
|
|
mpi P1, Q1;
|
|
|
|
mpi_init( &P1, &Q1, NULL );
|
|
|
|
MPI_CHK( mpi_sub_int( &P1, &ctx->rsa.P, 1 ) );
|
|
MPI_CHK( mpi_sub_int( &Q1, &ctx->rsa.Q, 1 ) );
|
|
|
|
/*
|
|
* DP = D mod (P - 1)
|
|
* DQ = D mod (Q - 1)
|
|
* QP = Q^-1 mod P
|
|
*/
|
|
MPI_CHK( mpi_mod_mpi( &ctx->rsa.DP, &ctx->rsa.D, &P1 ) );
|
|
MPI_CHK( mpi_mod_mpi( &ctx->rsa.DQ, &ctx->rsa.D, &Q1 ) );
|
|
MPI_CHK( mpi_inv_mod( &ctx->rsa.QP, &ctx->rsa.Q, &ctx->rsa.P ) );
|
|
|
|
cleanup:
|
|
|
|
mpi_free(&Q1, &P1, NULL );
|
|
|
|
if( ret != 0 )
|
|
{
|
|
rsa_free( &ctx->rsa );
|
|
return( POLARSSL_ERR_RSA_KEY_GEN_FAILED | ret );
|
|
}
|
|
|
|
return( 0 );
|
|
}
|
|
#endif
|