2
0

s2_enc.c 6.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193
  1. /* ssl/s2_enc.c */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. #include "ssl_locl.h"
  59. #ifndef OPENSSL_NO_SSL2
  60. #include <stdio.h>
  61. int ssl2_enc_init(SSL *s, int client)
  62. {
  63. /* Max number of bytes needed */
  64. EVP_CIPHER_CTX *rs,*ws;
  65. const EVP_CIPHER *c;
  66. const EVP_MD *md;
  67. int num;
  68. if (!ssl_cipher_get_evp(s->session,&c,&md,NULL,NULL,NULL))
  69. {
  70. ssl2_return_error(s,SSL2_PE_NO_CIPHER);
  71. SSLerr(SSL_F_SSL2_ENC_INIT,SSL_R_PROBLEMS_MAPPING_CIPHER_FUNCTIONS);
  72. return(0);
  73. }
  74. ssl_replace_hash(&s->read_hash,md);
  75. ssl_replace_hash(&s->write_hash,md);
  76. if ((s->enc_read_ctx == NULL) &&
  77. ((s->enc_read_ctx=(EVP_CIPHER_CTX *)
  78. OPENSSL_malloc(sizeof(EVP_CIPHER_CTX))) == NULL))
  79. goto err;
  80. /* make sure it's intialized in case the malloc for enc_write_ctx fails
  81. * and we exit with an error */
  82. rs= s->enc_read_ctx;
  83. EVP_CIPHER_CTX_init(rs);
  84. if ((s->enc_write_ctx == NULL) &&
  85. ((s->enc_write_ctx=(EVP_CIPHER_CTX *)
  86. OPENSSL_malloc(sizeof(EVP_CIPHER_CTX))) == NULL))
  87. goto err;
  88. ws= s->enc_write_ctx;
  89. EVP_CIPHER_CTX_init(ws);
  90. num=c->key_len;
  91. s->s2->key_material_length=num*2;
  92. OPENSSL_assert(s->s2->key_material_length <= sizeof s->s2->key_material);
  93. if (ssl2_generate_key_material(s) <= 0)
  94. return 0;
  95. OPENSSL_assert(c->iv_len <= (int)sizeof(s->session->key_arg));
  96. EVP_EncryptInit_ex(ws,c,NULL,&(s->s2->key_material[(client)?num:0]),
  97. s->session->key_arg);
  98. EVP_DecryptInit_ex(rs,c,NULL,&(s->s2->key_material[(client)?0:num]),
  99. s->session->key_arg);
  100. s->s2->read_key= &(s->s2->key_material[(client)?0:num]);
  101. s->s2->write_key= &(s->s2->key_material[(client)?num:0]);
  102. return(1);
  103. err:
  104. SSLerr(SSL_F_SSL2_ENC_INIT,ERR_R_MALLOC_FAILURE);
  105. return(0);
  106. }
  107. /* read/writes from s->s2->mac_data using length for encrypt and
  108. * decrypt. It sets s->s2->padding and s->[rw]length
  109. * if we are encrypting */
  110. void ssl2_enc(SSL *s, int send)
  111. {
  112. EVP_CIPHER_CTX *ds;
  113. unsigned long l;
  114. int bs;
  115. if (send)
  116. {
  117. ds=s->enc_write_ctx;
  118. l=s->s2->wlength;
  119. }
  120. else
  121. {
  122. ds=s->enc_read_ctx;
  123. l=s->s2->rlength;
  124. }
  125. /* check for NULL cipher */
  126. if (ds == NULL) return;
  127. bs=ds->cipher->block_size;
  128. /* This should be using (bs-1) and bs instead of 7 and 8, but
  129. * what the hell. */
  130. if (bs == 8)
  131. l=(l+7)/8*8;
  132. EVP_Cipher(ds,s->s2->mac_data,s->s2->mac_data,l);
  133. }
  134. void ssl2_mac(SSL *s, unsigned char *md, int send)
  135. {
  136. EVP_MD_CTX c;
  137. unsigned char sequence[4],*p,*sec,*act;
  138. unsigned long seq;
  139. unsigned int len;
  140. if (send)
  141. {
  142. seq=s->s2->write_sequence;
  143. sec=s->s2->write_key;
  144. len=s->s2->wact_data_length;
  145. act=s->s2->wact_data;
  146. }
  147. else
  148. {
  149. seq=s->s2->read_sequence;
  150. sec=s->s2->read_key;
  151. len=s->s2->ract_data_length;
  152. act=s->s2->ract_data;
  153. }
  154. p= &(sequence[0]);
  155. l2n(seq,p);
  156. /* There has to be a MAC algorithm. */
  157. EVP_MD_CTX_init(&c);
  158. EVP_MD_CTX_copy(&c, s->read_hash);
  159. EVP_DigestUpdate(&c,sec,
  160. EVP_CIPHER_CTX_key_length(s->enc_read_ctx));
  161. EVP_DigestUpdate(&c,act,len);
  162. /* the above line also does the pad data */
  163. EVP_DigestUpdate(&c,sequence,4);
  164. EVP_DigestFinal_ex(&c,md,NULL);
  165. EVP_MD_CTX_cleanup(&c);
  166. }
  167. #else /* !OPENSSL_NO_SSL2 */
  168. # if PEDANTIC
  169. static void *dummy=&dummy;
  170. # endif
  171. #endif