mirror of
https://github.com/Atmosphere-NX/Atmosphere
synced 2024-11-14 09:06:35 +00:00
144 lines
4.1 KiB
C++
144 lines
4.1 KiB
C++
/*
|
|
* Copyright (c) Atmosphère-NX
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms and conditions of the GNU General Public License,
|
|
* version 2, as published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
|
|
* more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
#include <vapours.hpp>
|
|
|
|
namespace ams::crypto::impl {
|
|
|
|
namespace {
|
|
|
|
/* TODO: Support non-Nintendo Endianness */
|
|
|
|
void MultiplyTweakGeneric(u64 *tweak) {
|
|
const u64 carry = tweak[1] & (static_cast<u64>(1) << (BITSIZEOF(u64) - 1));
|
|
|
|
tweak[1] = ((tweak[1] << 1) | (tweak[0] >> (BITSIZEOF(u64) - 1)));
|
|
tweak[0] = (tweak[0] << 1);
|
|
|
|
if (carry) {
|
|
tweak[0] ^= static_cast<u64>(0x87);
|
|
}
|
|
}
|
|
|
|
}
|
|
|
|
void XtsModeImpl::ProcessBlock(u8 *dst, const u8 *src) {
|
|
u8 tmp[BlockSize];
|
|
|
|
/* Xor. */
|
|
for (size_t i = 0; i < BlockSize; i++) {
|
|
tmp[i] = m_tweak[i] ^ src[i];
|
|
}
|
|
|
|
/* Crypt */
|
|
m_cipher_func(tmp, tmp, m_cipher_ctx);
|
|
|
|
/* Xor. */
|
|
for (size_t i = 0; i < BlockSize; i++) {
|
|
dst[i] = m_tweak[i] ^ tmp[i];
|
|
}
|
|
|
|
MultiplyTweakGeneric(reinterpret_cast<u64 *>(m_tweak));
|
|
}
|
|
|
|
size_t XtsModeImpl::FinalizeEncryption(void *dst, size_t dst_size) {
|
|
AMS_ASSERT(m_state == State_Processing);
|
|
AMS_UNUSED(dst_size);
|
|
|
|
u8 *dst_u8 = static_cast<u8 *>(dst);
|
|
size_t processed = 0;
|
|
|
|
if (m_num_buffered == 0) {
|
|
this->ProcessBlock(dst_u8, m_last_block);
|
|
processed = BlockSize;
|
|
} else {
|
|
this->ProcessBlock(m_last_block, m_last_block);
|
|
|
|
std::memcpy(m_buffer + m_num_buffered, m_last_block + m_num_buffered, BlockSize - m_num_buffered);
|
|
|
|
this->ProcessBlock(dst_u8, m_buffer);
|
|
|
|
std::memcpy(dst_u8 + BlockSize, m_last_block, m_num_buffered);
|
|
|
|
processed = BlockSize + m_num_buffered;
|
|
}
|
|
|
|
m_state = State_Done;
|
|
return processed;
|
|
}
|
|
|
|
size_t XtsModeImpl::FinalizeDecryption(void *dst, size_t dst_size) {
|
|
AMS_ASSERT(m_state == State_Processing);
|
|
AMS_UNUSED(dst_size);
|
|
|
|
u8 *dst_u8 = static_cast<u8 *>(dst);
|
|
size_t processed = 0;
|
|
|
|
if (m_num_buffered == 0) {
|
|
this->ProcessBlock(dst_u8, m_last_block);
|
|
processed = BlockSize;
|
|
} else {
|
|
u8 tmp_tweak[BlockSize];
|
|
std::memcpy(tmp_tweak, m_tweak, BlockSize);
|
|
MultiplyTweakGeneric(reinterpret_cast<u64 *>(m_tweak));
|
|
|
|
this->ProcessBlock(m_last_block, m_last_block);
|
|
|
|
std::memcpy(m_buffer + m_num_buffered, m_last_block + m_num_buffered, BlockSize - m_num_buffered);
|
|
|
|
std::memcpy(m_tweak, tmp_tweak, BlockSize);
|
|
|
|
this->ProcessBlock(dst_u8, m_buffer);
|
|
|
|
std::memcpy(dst_u8 + BlockSize, m_last_block, m_num_buffered);
|
|
|
|
processed = BlockSize + m_num_buffered;
|
|
}
|
|
|
|
m_state = State_Done;
|
|
return processed;
|
|
}
|
|
|
|
size_t XtsModeImpl::ProcessPartialData(u8 *dst, const u8 *src, size_t size) {
|
|
size_t processed = 0;
|
|
|
|
std::memcpy(m_buffer + m_num_buffered, src, size);
|
|
m_num_buffered += size;
|
|
|
|
if (m_num_buffered == BlockSize) {
|
|
if (m_state == State_Processing) {
|
|
this->ProcessBlock(dst, m_last_block);
|
|
processed += BlockSize;
|
|
}
|
|
|
|
std::memcpy(m_last_block, m_buffer, BlockSize);
|
|
m_num_buffered = 0;
|
|
|
|
m_state = State_Processing;
|
|
}
|
|
|
|
return processed;
|
|
}
|
|
|
|
size_t XtsModeImpl::ProcessRemainingData(u8 *dst, const u8 *src, size_t size) {
|
|
AMS_UNUSED(dst);
|
|
|
|
std::memcpy(m_buffer, src, size);
|
|
m_num_buffered = size;
|
|
|
|
return 0;
|
|
}
|
|
|
|
}
|