add aesCmac support to libipcrypto (required by iptcp) (taken from vx6.9 code base) (#14)
The libipcrypto library was ported from VxWorks 7 to use the OpenSSL 3.1.7. (to be 3.5.0 later) This did not have aesCmac support that was required by iptcp. Hence these files are brought from the VxWorks 6.9 (ip_net2-6.9/ipcrypto/src) code base. Reviewed-on: http://13.234.246.121:3000/Neominds/ossl35vx69/pulls/14 Co-authored-by: siddhant <siddhant.singh@neominds.in> Co-committed-by: siddhant <siddhant.singh@neominds.in>
This commit is contained in:
neelimap
@@ -0,0 +1,399 @@
|
||||
/*
|
||||
******************************************************************************
|
||||
* INTERPEAK SOURCE FILE
|
||||
*
|
||||
* Document no: @(#) $Name: VXWORKS_ITER40_2019102207 $ $RCSfile: ipcrypto.c,v $ $Revision: 1.26 $
|
||||
* $Source: /home/interpeak/CVSRoot/ipcrypto/src/ipcrypto.c,v $
|
||||
* $Author: rboden $
|
||||
* $State: Exp $ $Locker: $
|
||||
*
|
||||
* INTERPEAK_COPYRIGHT_STRING
|
||||
* Design and implementation by Roger Boden <roger@interpeak.se>
|
||||
******************************************************************************
|
||||
*/
|
||||
|
||||
/*
|
||||
****************************************************************************
|
||||
* 1 DESCRIPTION
|
||||
****************************************************************************
|
||||
*/
|
||||
|
||||
/*
|
||||
****************************************************************************
|
||||
* 2 CONFIGURATION
|
||||
****************************************************************************
|
||||
*/
|
||||
|
||||
#ifdef IPCOM_DMALLOC_C
|
||||
#undef IPCOM_DMALLOC_C
|
||||
#endif
|
||||
|
||||
|
||||
/*
|
||||
****************************************************************************
|
||||
* 3 INCLUDE FILES
|
||||
****************************************************************************
|
||||
*/
|
||||
|
||||
#define IPCOM_USE_CLIB_PROTO
|
||||
|
||||
#include <ipcom_type.h>
|
||||
#include <ipcom_err.h>
|
||||
#include <ipcom_cstyle.h>
|
||||
#include <openssl/crypto.h>
|
||||
#include <openssl/err.h>
|
||||
#include <openssl/rand.h>
|
||||
|
||||
#include "ipcrypto_start.h"
|
||||
#include "ipcrypto.h"
|
||||
#include "ipcrypto_util.h"
|
||||
#include "ipcrypto_config.h"
|
||||
|
||||
/*
|
||||
****************************************************************************
|
||||
* 4 EXTERN PROTOTYPES
|
||||
****************************************************************************
|
||||
*/
|
||||
|
||||
#ifdef OPENSSL_FIPS
|
||||
unsigned int FIPS_incore_fingerprint(unsigned char *sig,unsigned int len);
|
||||
#endif
|
||||
|
||||
/*
|
||||
****************************************************************************
|
||||
* 5 DEFINES
|
||||
****************************************************************************
|
||||
*/
|
||||
|
||||
|
||||
|
||||
/*
|
||||
****************************************************************************
|
||||
* 6 TYPES
|
||||
****************************************************************************
|
||||
*/
|
||||
|
||||
/*
|
||||
****************************************************************************
|
||||
* 7 LOCAL PROTOTYPES
|
||||
****************************************************************************
|
||||
*/
|
||||
|
||||
IP_PUBLIC const char *ipcrypto_version(void);
|
||||
|
||||
IP_STATIC void ipcrypto_lock_callback(int mode, int type, const char* file, int line);
|
||||
|
||||
IPCOM_PROCESS(ipcrypto_rnd_seed);
|
||||
|
||||
IP_GLOBAL int ipcrypto_cmd_memory(int argc, char **argv);
|
||||
|
||||
IP_PUBLIC void ipcrypto_cmds_startup(void);
|
||||
|
||||
IP_PUBLIC Ip_err ipcrypto_create(void);
|
||||
|
||||
IP_PUBLIC Ip_err ipcrypto_start(void);
|
||||
|
||||
void OPENSSL_init(void);
|
||||
|
||||
/*
|
||||
****************************************************************************
|
||||
* 8 DATA
|
||||
****************************************************************************
|
||||
*/
|
||||
|
||||
#ifndef IP_PORT_LAS
|
||||
extern BIO *bio_err;
|
||||
#endif
|
||||
extern char *default_config_file;
|
||||
Ipcrypto_data ipcrypto;
|
||||
|
||||
|
||||
#ifdef OPENSSL_FIPS
|
||||
extern unsigned char FIPS_signature[20];
|
||||
extern unsigned char ipcrypto_fips_signature[20];
|
||||
#endif
|
||||
|
||||
/*
|
||||
****************************************************************************
|
||||
* 9 LOCAL FUNCTIONS
|
||||
****************************************************************************
|
||||
*/
|
||||
|
||||
/*
|
||||
*===========================================================================
|
||||
* ipcrypto_setup_lock_functions
|
||||
*===========================================================================
|
||||
* Description:
|
||||
* Parameters:
|
||||
* Returns:
|
||||
*
|
||||
*/
|
||||
IP_STATIC Ip_err
|
||||
ipcrypto_setup_lock_functions(void)
|
||||
{
|
||||
int i;
|
||||
|
||||
ipcrypto.crypto_locks = ipcom_malloc(sizeof(Ipcom_mutex)*CRYPTO_NUM_LOCKS);
|
||||
if(!ipcrypto.crypto_locks)
|
||||
return IPCOM_ERR_FAILED;
|
||||
|
||||
for(i=0; i<CRYPTO_NUM_LOCKS; i++)
|
||||
{
|
||||
if(ipcom_mutex_create(&(ipcrypto.crypto_locks[i])) != IPCOM_SUCCESS)
|
||||
{
|
||||
while(i>0)
|
||||
{
|
||||
ipcom_mutex_delete(&(ipcrypto.crypto_locks[i]));
|
||||
i--;
|
||||
}
|
||||
return IPCOM_ERR_FAILED;
|
||||
}
|
||||
}
|
||||
|
||||
CRYPTO_set_locking_callback(ipcrypto_lock_callback);
|
||||
|
||||
return IPCOM_SUCCESS;
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
*===========================================================================
|
||||
* ipcrypto_lock_callback
|
||||
*===========================================================================
|
||||
* Description:
|
||||
* Parameters:
|
||||
* Returns:
|
||||
*
|
||||
*/
|
||||
IP_STATIC void
|
||||
ipcrypto_lock_callback(int mode, int type, const char *file, int line)
|
||||
{
|
||||
(void)file;
|
||||
(void)line;
|
||||
|
||||
ip_assert(type < CRYPTO_NUM_LOCKS);
|
||||
ip_assert((mode & CRYPTO_LOCK) || (mode & CRYPTO_UNLOCK));
|
||||
|
||||
if(type >= CRYPTO_NUM_LOCKS)
|
||||
return;
|
||||
|
||||
if(mode & CRYPTO_UNLOCK)
|
||||
{
|
||||
ipcom_mutex_unlock(ipcrypto.crypto_locks[type]);
|
||||
}
|
||||
|
||||
if(mode & CRYPTO_LOCK)
|
||||
{
|
||||
ipcom_mutex_lock(ipcrypto.crypto_locks[type]);
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
*===========================================================================
|
||||
* ipcrypto_rnd_seed
|
||||
*===========================================================================
|
||||
* Description:
|
||||
* Parameters:
|
||||
* Returns:
|
||||
*
|
||||
*/
|
||||
IPCOM_PROCESS(ipcrypto_rnd_seed)
|
||||
{
|
||||
Ip_u32 i, tmp;
|
||||
|
||||
ipcom_proc_init();
|
||||
|
||||
while(ipcom_random_seed_state() != 100)
|
||||
{
|
||||
tmp = ipcom_random();
|
||||
RAND_seed((char *) &tmp, 4);
|
||||
ipcom_sleep(1); /* Wait for some entryphy to be gathered */
|
||||
}
|
||||
|
||||
for(i=0; i<5; i++)
|
||||
{
|
||||
tmp = ipcom_random();
|
||||
RAND_seed((char*) &tmp, 4);
|
||||
}
|
||||
|
||||
ipcom_proc_exit();
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
*===========================================================================
|
||||
* ipcrypto_dmalloc
|
||||
*===========================================================================
|
||||
* Description:
|
||||
* Parameters:
|
||||
* Returns:
|
||||
*
|
||||
*/
|
||||
#ifdef IPCOM_USE_DMALLOC
|
||||
IP_STATIC void *
|
||||
ipcrypto_dmalloc(Ip_size_t num, const char *file, int line)
|
||||
{
|
||||
return ipcom_dmalloc(num, file, IP_NULL, line);
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
*===========================================================================
|
||||
* ipcrypto_drealloc
|
||||
*===========================================================================
|
||||
* Description:
|
||||
* Parameters:
|
||||
* Returns:
|
||||
*
|
||||
*/
|
||||
IP_STATIC void *
|
||||
ipcrypto_drealloc(void *old_ptr, Ip_size_t num, const char *file, int line)
|
||||
{
|
||||
return ipcom_drealloc(old_ptr, num, file, IP_NULL, line);
|
||||
}
|
||||
#endif /* IPCOM_USE_DMALLOC */
|
||||
|
||||
|
||||
/*
|
||||
****************************************************************************
|
||||
* 10 PUBLIC FUNCTIONS
|
||||
****************************************************************************
|
||||
*/
|
||||
|
||||
|
||||
/*
|
||||
*===========================================================================
|
||||
* ipcrypto_create
|
||||
*===========================================================================
|
||||
* Description:
|
||||
* Parameters:
|
||||
* Returns:
|
||||
*
|
||||
*/
|
||||
IP_PUBLIC Ip_err
|
||||
ipcrypto_create(void)
|
||||
{
|
||||
static int init = 0;
|
||||
char uninitialized_buf[32];
|
||||
|
||||
if(init == 0)
|
||||
{
|
||||
int ret;
|
||||
init = 1;
|
||||
|
||||
/* Set memory allocation function callbacks. */
|
||||
#ifdef IPCOM_USE_DMALLOC
|
||||
ret = CRYPTO_set_mem_ex_functions(ipcrypto_dmalloc, ipcrypto_drealloc, ipcom_dfree);
|
||||
#else
|
||||
ret = CRYPTO_set_mem_functions(ipcom_malloc, ipcom_realloc, ipcom_free);
|
||||
#endif
|
||||
|
||||
(void) ret;
|
||||
ip_assert(ret);
|
||||
|
||||
if(ipcrypto_setup_lock_functions() != IPCOM_SUCCESS)
|
||||
return IPCOM_ERR_FAILED;
|
||||
|
||||
OpenSSL_add_all_algorithms();
|
||||
|
||||
/* Init things so we will get meaningful error messages rather than numbers. */
|
||||
ERR_load_crypto_strings();
|
||||
|
||||
#ifndef OPENSSL_NO_ENGINE
|
||||
ENGINE_load_builtin_engines();
|
||||
#endif
|
||||
|
||||
/* Dummy seed to make RAND functions operational */
|
||||
#ifdef IPVALGRIND
|
||||
ipcom_memset(uninitialized_buf, 0, sizeof(uninitialized_buf));
|
||||
#endif
|
||||
RAND_seed((char *) uninitialized_buf, sizeof(uninitialized_buf));
|
||||
|
||||
#ifdef OPENSSL_FIPS
|
||||
{
|
||||
unsigned int i;
|
||||
Ip_bool enable_fips = IP_FALSE;
|
||||
#if defined(IP_DEBUG) || defined(IPTESTENGINE)
|
||||
int len;
|
||||
|
||||
len=FIPS_incore_fingerprint(ipcrypto_fips_signature, sizeof(ipcrypto_fips_signature));
|
||||
if (len!=sizeof(ipcrypto_fips_signature))
|
||||
{
|
||||
IPCOM_LOG0(ERR, "FIPS_incore_fingerprint() failed");
|
||||
return IPCOM_ERR_FAILED;
|
||||
}
|
||||
#endif
|
||||
for (i=0; i<sizeof(ipcrypto_fips_signature); i++)
|
||||
{
|
||||
if (ipcrypto_fips_signature[i] != 0xEE)
|
||||
{
|
||||
enable_fips = IP_TRUE;
|
||||
break;
|
||||
}
|
||||
}
|
||||
if (enable_fips)
|
||||
{
|
||||
ipcom_memcpy(FIPS_signature, ipcrypto_fips_signature, sizeof(FIPS_signature));
|
||||
FIPS_mode_set(1);
|
||||
}
|
||||
}
|
||||
#endif
|
||||
}
|
||||
|
||||
return IPCOM_SUCCESS;
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
*===========================================================================
|
||||
* ipcrypto_start
|
||||
*===========================================================================
|
||||
*/
|
||||
IP_PUBLIC Ip_err
|
||||
ipcrypto_start(void)
|
||||
{
|
||||
Ipcom_proc_attr proc_attr;
|
||||
|
||||
ipcom_proc_attr_init(&proc_attr);
|
||||
proc_attr.stacksize = IPCOM_PROC_STACK_SMALL;
|
||||
proc_attr.flags = IPCOM_PROC_FLAG_FP;
|
||||
(void)ipcom_proc_acreate("ipcrypto_rnd_seed", ipcrypto_rnd_seed, &proc_attr, IP_NULL);
|
||||
|
||||
return IPCOM_SUCCESS;
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
*===========================================================================
|
||||
* ipcrypto_version
|
||||
*===========================================================================
|
||||
* Description:
|
||||
* Parameters:
|
||||
* Returns:
|
||||
*
|
||||
*/
|
||||
IP_PUBLIC const char *
|
||||
ipcrypto_version(void)
|
||||
{
|
||||
#ifdef OPENSSL_FIPS
|
||||
return "@(#) IPCRYPTO FIPS 140-2 $Name: VXWORKS_ITER40_2019102207 $ - INTERPEAK_COPYRIGHT_STRING";
|
||||
#else
|
||||
return "@(#) IPCRYPTO $Name: VXWORKS_ITER40_2019102207 $ - INTERPEAK_COPYRIGHT_STRING";
|
||||
#endif
|
||||
}
|
||||
|
||||
|
||||
void
|
||||
OPENSSL_init(void)
|
||||
{
|
||||
/* Dummy function to make the linker happy */
|
||||
}
|
||||
|
||||
|
||||
/*
|
||||
****************************************************************************
|
||||
* END OF FILE
|
||||
****************************************************************************
|
||||
*/
|
||||
|
||||
Reference in New Issue
Block a user