summaryrefslogtreecommitdiff
path: root/src/core/crypto_backends.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/core/crypto_backends.c')
-rw-r--r--src/core/crypto_backends.c223
1 files changed, 223 insertions, 0 deletions
diff --git a/src/core/crypto_backends.c b/src/core/crypto_backends.c
new file mode 100644
index 0000000..da25497
--- /dev/null
+++ b/src/core/crypto_backends.c
@@ -0,0 +1,223 @@
+#include "crypto_backends.h"
+#include "hybbx/crypto_config.h"
+
+#include "aes256gcm.h"
+#include "monocypher.h"
+#include "tinysha256.h"
+
+#include <fcntl.h>
+#include <stdio.h>
+#include <string.h>
+#include <unistd.h>
+
+#if defined(__linux__)
+#include <sys/random.h>
+#endif
+
+#if defined(HYBBX_HAVE_OPENSSL)
+void hybbx_openssl_sha256_hex(const char *data, size_t len, char hex[65]);
+int hybbx_openssl_aes256gcm_encrypt(
+ const uint8_t key[32], const uint8_t nonce[12], const uint8_t *aad,
+ size_t aad_len, const uint8_t *plaintext, size_t plaintext_len,
+ uint8_t *ciphertext, uint8_t tag[16]);
+int hybbx_openssl_aes256gcm_decrypt(
+ const uint8_t key[32], const uint8_t nonce[12], const uint8_t *aad,
+ size_t aad_len, const uint8_t *ciphertext, size_t ciphertext_len,
+ uint8_t *plaintext, const uint8_t tag[16]);
+hybbx_result_t hybbx_openssl_random(uint8_t *buf, size_t len);
+#endif
+
+#if defined(HYBBX_HAVE_LIBSODIUM)
+void hybbx_libsodium_chacha_lock(uint8_t *ciphertext, uint8_t tag[16],
+ const uint8_t key[32], const uint8_t nonce[24],
+ const uint8_t *aad, size_t aad_len,
+ const uint8_t *plaintext, size_t plaintext_len);
+int hybbx_libsodium_chacha_unlock(uint8_t *plaintext, const uint8_t tag[16],
+ const uint8_t key[32], const uint8_t nonce[24],
+ const uint8_t *aad, size_t aad_len,
+ const uint8_t *ciphertext, size_t ciphertext_len);
+void hybbx_libsodium_x25519_public_key(uint8_t public_key[32],
+ const uint8_t secret_key[32]);
+void hybbx_libsodium_x25519_shared(uint8_t shared[32],
+ const uint8_t secret_key[32],
+ const uint8_t peer_public_key[32]);
+#endif
+
+void hybbx_backend_sha256_hex(const char *data, size_t len, char hex[65])
+{
+#if defined(HYBBX_HAVE_OPENSSL)
+ const hybbx_crypto_config_t *cfg = hybbx_crypto_config_get();
+
+ if (cfg->password_hash == HYBBX_PASSWORD_HASH_OPENSSL) {
+ hybbx_openssl_sha256_hex(data, len, hex);
+ return;
+ }
+#endif
+
+ tinysha256_hex(data, len, hex);
+}
+
+int hybbx_backend_aes256gcm_encrypt(
+ const uint8_t key[32], const uint8_t nonce[12], const uint8_t *aad,
+ size_t aad_len, const uint8_t *plaintext, size_t plaintext_len,
+ uint8_t *ciphertext, uint8_t tag[16])
+{
+#if defined(HYBBX_HAVE_OPENSSL)
+ const hybbx_crypto_config_t *cfg = hybbx_crypto_config_get();
+
+ if (cfg->aes_gcm == HYBBX_AES_GCM_OPENSSL) {
+ return hybbx_openssl_aes256gcm_encrypt(key, nonce, aad, aad_len,
+ plaintext, plaintext_len,
+ ciphertext, tag);
+ }
+#endif
+
+ return hybbx_aes256gcm_encrypt(key, nonce, aad, aad_len, plaintext,
+ plaintext_len, ciphertext, tag);
+}
+
+int hybbx_backend_aes256gcm_decrypt(
+ const uint8_t key[32], const uint8_t nonce[12], const uint8_t *aad,
+ size_t aad_len, const uint8_t *ciphertext, size_t ciphertext_len,
+ uint8_t *plaintext, const uint8_t tag[16])
+{
+#if defined(HYBBX_HAVE_OPENSSL)
+ const hybbx_crypto_config_t *cfg = hybbx_crypto_config_get();
+
+ if (cfg->aes_gcm == HYBBX_AES_GCM_OPENSSL) {
+ return hybbx_openssl_aes256gcm_decrypt(key, nonce, aad, aad_len,
+ ciphertext, ciphertext_len,
+ plaintext, tag);
+ }
+#endif
+
+ return hybbx_aes256gcm_decrypt(key, nonce, aad, aad_len, ciphertext,
+ ciphertext_len, plaintext, tag);
+}
+
+void hybbx_backend_chacha_lock(uint8_t *ciphertext, uint8_t tag[16],
+ const uint8_t key[32], const uint8_t nonce[24],
+ const uint8_t *aad, size_t aad_len,
+ const uint8_t *plaintext, size_t plaintext_len)
+{
+#if defined(HYBBX_HAVE_LIBSODIUM)
+ const hybbx_crypto_config_t *cfg = hybbx_crypto_config_get();
+
+ if (cfg->chacha == HYBBX_CHACHA_LIBSODIUM) {
+ hybbx_libsodium_chacha_lock(ciphertext, tag, key, nonce, aad, aad_len,
+ plaintext, plaintext_len);
+ return;
+ }
+#endif
+
+ crypto_aead_lock(ciphertext, tag, key, nonce, aad, aad_len, plaintext,
+ plaintext_len);
+}
+
+int hybbx_backend_chacha_unlock(uint8_t *plaintext, const uint8_t tag[16],
+ const uint8_t key[32], const uint8_t nonce[24],
+ const uint8_t *aad, size_t aad_len,
+ const uint8_t *ciphertext, size_t ciphertext_len)
+{
+#if defined(HYBBX_HAVE_LIBSODIUM)
+ const hybbx_crypto_config_t *cfg = hybbx_crypto_config_get();
+
+ if (cfg->chacha == HYBBX_CHACHA_LIBSODIUM) {
+ return hybbx_libsodium_chacha_unlock(plaintext, tag, key, nonce, aad,
+ aad_len, ciphertext,
+ ciphertext_len);
+ }
+#endif
+
+ return crypto_aead_unlock(plaintext, tag, key, nonce, aad, aad_len,
+ ciphertext, ciphertext_len);
+}
+
+void hybbx_backend_x25519_public_key(uint8_t public_key[32],
+ const uint8_t secret_key[32])
+{
+#if defined(HYBBX_HAVE_LIBSODIUM)
+ const hybbx_crypto_config_t *cfg = hybbx_crypto_config_get();
+
+ if (cfg->x25519 == HYBBX_X25519_LIBSODIUM) {
+ hybbx_libsodium_x25519_public_key(public_key, secret_key);
+ return;
+ }
+#endif
+
+ crypto_x25519_public_key(public_key, secret_key);
+}
+
+void hybbx_backend_x25519_shared(uint8_t shared[32],
+ const uint8_t secret_key[32],
+ const uint8_t peer_public_key[32])
+{
+#if defined(HYBBX_HAVE_LIBSODIUM)
+ const hybbx_crypto_config_t *cfg = hybbx_crypto_config_get();
+
+ if (cfg->x25519 == HYBBX_X25519_LIBSODIUM) {
+ hybbx_libsodium_x25519_shared(shared, secret_key, peer_public_key);
+ return;
+ }
+#endif
+
+ crypto_x25519(shared, secret_key, peer_public_key);
+}
+
+void hybbx_backend_blake2b_keyed(uint8_t *hash, size_t hash_size,
+ const uint8_t *message, size_t message_size,
+ const uint8_t *key, size_t key_size)
+{
+ crypto_blake2b_keyed(hash, hash_size, message, message_size, key, key_size);
+}
+
+static hybbx_result_t system_random(uint8_t *buf, size_t len)
+{
+ size_t done = 0;
+
+#if defined(__linux__)
+ while (done < len) {
+ ssize_t n = getrandom(buf + done, len - done, 0);
+
+ if (n < 0) {
+ break;
+ }
+ done += (size_t)n;
+ }
+#endif
+
+ if (done < len) {
+ int fd = open("/dev/urandom", O_RDONLY);
+
+ if (fd < 0) {
+ return HYBBX_ERR_IO;
+ }
+
+ while (done < len) {
+ ssize_t n = read(fd, buf + done, len - done);
+
+ if (n <= 0) {
+ close(fd);
+ return HYBBX_ERR_IO;
+ }
+ done += (size_t)n;
+ }
+
+ close(fd);
+ }
+
+ return HYBBX_OK;
+}
+
+hybbx_result_t hybbx_backend_random(uint8_t *buf, size_t len)
+{
+#if defined(HYBBX_HAVE_OPENSSL)
+ const hybbx_crypto_config_t *cfg = hybbx_crypto_config_get();
+
+ if (cfg->random == HYBBX_RANDOM_OPENSSL) {
+ return hybbx_openssl_random(buf, len);
+ }
+#endif
+
+ return system_random(buf, len);
+}
git clone -b <branch> https://cgit.mode42.com/<repo>.git
git clone -b <branch> git://cgit.mode42.com/<repo>.git


info@mode42.com