1 // SPDX-License-Identifier: BSD-2-Clause
2 /*
3 * Copyright (C) 2018, ARM Limited
4 * Copyright (C) 2019, Linaro Limited
5 */
6
7 #include <assert.h>
8 #include <compiler.h>
9 #include <crypto/crypto_accel.h>
10 #include <crypto/crypto.h>
11 #include <crypto/crypto_impl.h>
12 #include <kernel/panic.h>
13 #include <mbedtls/md.h>
14 #include <mbedtls/platform_util.h>
15 #include <mbedtls/sha1.h>
16 #include <mbedtls/sha256.h>
17 #include <mbedtls/sha512.h>
18 #include <stdlib.h>
19 #include <string_ext.h>
20 #include <string.h>
21 #include <tee_api_types.h>
22 #include <utee_defines.h>
23 #include <util.h>
24
25 struct mbed_hash_ctx {
26 struct crypto_hash_ctx hash_ctx;
27 mbedtls_md_context_t md_ctx;
28 };
29
30 static const struct crypto_hash_ops mbed_hash_ops;
31
to_hash_ctx(struct crypto_hash_ctx * ctx)32 static struct mbed_hash_ctx *to_hash_ctx(struct crypto_hash_ctx *ctx)
33 {
34 assert(ctx && ctx->ops == &mbed_hash_ops);
35
36 return container_of(ctx, struct mbed_hash_ctx, hash_ctx);
37 }
38
mbed_hash_init(struct crypto_hash_ctx * ctx)39 static TEE_Result mbed_hash_init(struct crypto_hash_ctx *ctx)
40 {
41 if (mbedtls_md_starts(&to_hash_ctx(ctx)->md_ctx))
42 return TEE_ERROR_BAD_STATE;
43
44 return TEE_SUCCESS;
45 }
46
mbed_hash_update(struct crypto_hash_ctx * ctx,const uint8_t * data,size_t len)47 static TEE_Result mbed_hash_update(struct crypto_hash_ctx *ctx,
48 const uint8_t *data, size_t len)
49 {
50 if (mbedtls_md_update(&to_hash_ctx(ctx)->md_ctx, data, len))
51 return TEE_ERROR_BAD_STATE;
52
53 return TEE_SUCCESS;
54 }
55
mbed_hash_final(struct crypto_hash_ctx * ctx,uint8_t * digest,size_t len)56 static TEE_Result mbed_hash_final(struct crypto_hash_ctx *ctx, uint8_t *digest,
57 size_t len)
58 {
59 struct mbed_hash_ctx *hc = to_hash_ctx(ctx);
60 size_t hash_size = mbedtls_md_get_size(hc->md_ctx.md_info);
61 uint8_t block_digest[TEE_MAX_HASH_SIZE] = { 0 };
62 uint8_t *tmp_digest = NULL;
63
64 if (len == 0)
65 return TEE_ERROR_BAD_PARAMETERS;
66
67 if (hash_size > len) {
68 if (hash_size > sizeof(block_digest))
69 return TEE_ERROR_BAD_STATE;
70 tmp_digest = block_digest; /* use a tempory buffer */
71 } else {
72 tmp_digest = digest;
73 }
74
75 if (mbedtls_md_finish(&hc->md_ctx, tmp_digest))
76 return TEE_ERROR_BAD_STATE;
77
78 if (hash_size > len)
79 memcpy(digest, tmp_digest, len);
80
81 return TEE_SUCCESS;
82 }
83
mbed_hash_free_ctx(struct crypto_hash_ctx * ctx)84 static void mbed_hash_free_ctx(struct crypto_hash_ctx *ctx)
85 {
86 struct mbed_hash_ctx *hc = to_hash_ctx(ctx);
87
88 mbedtls_md_free(&hc->md_ctx);
89 free(hc);
90 }
91
mbed_hash_copy_state(struct crypto_hash_ctx * dst_ctx,struct crypto_hash_ctx * src_ctx)92 static void mbed_hash_copy_state(struct crypto_hash_ctx *dst_ctx,
93 struct crypto_hash_ctx *src_ctx)
94 {
95 struct mbed_hash_ctx *src = to_hash_ctx(src_ctx);
96 struct mbed_hash_ctx *dst = to_hash_ctx(dst_ctx);
97
98 if (mbedtls_md_clone(&dst->md_ctx, &src->md_ctx))
99 panic();
100 }
101
102 static const struct crypto_hash_ops mbed_hash_ops = {
103 .init = mbed_hash_init,
104 .update = mbed_hash_update,
105 .final = mbed_hash_final,
106 .free_ctx = mbed_hash_free_ctx,
107 .copy_state = mbed_hash_copy_state,
108 };
109
mbed_hash_alloc_ctx(struct crypto_hash_ctx ** ctx_ret,mbedtls_md_type_t md_type)110 static TEE_Result mbed_hash_alloc_ctx(struct crypto_hash_ctx **ctx_ret,
111 mbedtls_md_type_t md_type)
112 {
113 int mbed_res = 0;
114 struct mbed_hash_ctx *hc = NULL;
115 const mbedtls_md_info_t *md_info = mbedtls_md_info_from_type(md_type);
116
117 if (!md_info)
118 return TEE_ERROR_NOT_SUPPORTED;
119
120 hc = calloc(1, sizeof(*hc));
121 if (!hc)
122 return TEE_ERROR_OUT_OF_MEMORY;
123
124 hc->hash_ctx.ops = &mbed_hash_ops;
125 mbed_res = mbedtls_md_setup(&hc->md_ctx, md_info, 0);
126 if (mbed_res) {
127 free(hc);
128 if (mbed_res == MBEDTLS_ERR_MD_ALLOC_FAILED)
129 return TEE_ERROR_OUT_OF_MEMORY;
130 return TEE_ERROR_NOT_SUPPORTED;
131 }
132
133 *ctx_ret = &hc->hash_ctx;
134
135 return TEE_SUCCESS;
136 }
137
138 #if defined(CFG_CRYPTO_MD5)
crypto_md5_alloc_ctx(struct crypto_hash_ctx ** ctx)139 TEE_Result crypto_md5_alloc_ctx(struct crypto_hash_ctx **ctx)
140 {
141 return mbed_hash_alloc_ctx(ctx, MBEDTLS_MD_MD5);
142 }
143 #endif
144
145 #if defined(CFG_CRYPTO_SHA1)
crypto_sha1_alloc_ctx(struct crypto_hash_ctx ** ctx)146 TEE_Result crypto_sha1_alloc_ctx(struct crypto_hash_ctx **ctx)
147 {
148 return mbed_hash_alloc_ctx(ctx, MBEDTLS_MD_SHA1);
149 }
150 #endif
151
152 #if defined(CFG_CRYPTO_SHA224)
crypto_sha224_alloc_ctx(struct crypto_hash_ctx ** ctx)153 TEE_Result crypto_sha224_alloc_ctx(struct crypto_hash_ctx **ctx)
154 {
155 return mbed_hash_alloc_ctx(ctx, MBEDTLS_MD_SHA224);
156 }
157 #endif
158
159 #if defined(CFG_CRYPTO_SHA256)
crypto_sha256_alloc_ctx(struct crypto_hash_ctx ** ctx)160 TEE_Result crypto_sha256_alloc_ctx(struct crypto_hash_ctx **ctx)
161 {
162 return mbed_hash_alloc_ctx(ctx, MBEDTLS_MD_SHA256);
163 }
164 #endif
165
166 #if defined(CFG_CRYPTO_SHA384)
crypto_sha384_alloc_ctx(struct crypto_hash_ctx ** ctx)167 TEE_Result crypto_sha384_alloc_ctx(struct crypto_hash_ctx **ctx)
168 {
169 return mbed_hash_alloc_ctx(ctx, MBEDTLS_MD_SHA384);
170 }
171 #endif
172
173 #if defined(CFG_CRYPTO_SHA512)
crypto_sha512_alloc_ctx(struct crypto_hash_ctx ** ctx)174 TEE_Result crypto_sha512_alloc_ctx(struct crypto_hash_ctx **ctx)
175 {
176 return mbed_hash_alloc_ctx(ctx, MBEDTLS_MD_SHA512);
177 }
178 #endif
179
180 #if defined(CFG_CRYPTO_SHA256)
hash_sha256_check(const uint8_t * hash,const uint8_t * data,size_t data_size)181 TEE_Result hash_sha256_check(const uint8_t *hash, const uint8_t *data,
182 size_t data_size)
183 {
184 mbedtls_sha256_context hs;
185 uint8_t digest[TEE_SHA256_HASH_SIZE] = { 0 };
186
187 memset(&hs, 0, sizeof(hs));
188 mbedtls_sha256_init(&hs);
189 mbedtls_sha256_starts(&hs, 0);
190 mbedtls_sha256_update(&hs, data, data_size);
191 mbedtls_sha256_finish(&hs, digest);
192 mbedtls_sha256_free(&hs);
193
194 if (consttime_memcmp(digest, hash, sizeof(digest)))
195 return TEE_ERROR_SECURITY;
196 return TEE_SUCCESS;
197 }
198 #endif
199
200 #if defined(MBEDTLS_SHA1_PROCESS_ALT)
mbedtls_internal_sha1_process(mbedtls_sha1_context * ctx,const unsigned char data[64])201 int mbedtls_internal_sha1_process(mbedtls_sha1_context *ctx,
202 const unsigned char data[64])
203 {
204 MBEDTLS_INTERNAL_VALIDATE_RET(ctx != NULL,
205 MBEDTLS_ERR_SHA1_BAD_INPUT_DATA);
206 MBEDTLS_INTERNAL_VALIDATE_RET((const unsigned char *)data != NULL,
207 MBEDTLS_ERR_SHA1_BAD_INPUT_DATA);
208
209 crypto_accel_sha1_compress(ctx->state, data, 1);
210
211 return 0;
212 }
213 #endif /*MBEDTLS_SHA1_PROCESS_ALT*/
214
215 #if defined(MBEDTLS_SHA256_PROCESS_ALT)
mbedtls_internal_sha256_process(mbedtls_sha256_context * ctx,const unsigned char data[64])216 int mbedtls_internal_sha256_process(mbedtls_sha256_context *ctx,
217 const unsigned char data[64])
218 {
219 MBEDTLS_INTERNAL_VALIDATE_RET(ctx != NULL,
220 MBEDTLS_ERR_SHA256_BAD_INPUT_DATA);
221 MBEDTLS_INTERNAL_VALIDATE_RET((const unsigned char *)data != NULL,
222 MBEDTLS_ERR_SHA256_BAD_INPUT_DATA);
223
224 crypto_accel_sha256_compress(ctx->state, data, 1);
225
226 return 0;
227 }
228 #endif /*MBEDTLS_SHA256_PROCESS_ALT*/
229
230 #if defined(MBEDTLS_SHA512_PROCESS_ALT)
mbedtls_internal_sha512_process(mbedtls_sha512_context * ctx,const unsigned char data[64])231 int mbedtls_internal_sha512_process(mbedtls_sha512_context *ctx,
232 const unsigned char data[64])
233 {
234 MBEDTLS_INTERNAL_VALIDATE_RET(ctx != NULL,
235 MBEDTLS_ERR_SHA512_BAD_INPUT_DATA);
236 MBEDTLS_INTERNAL_VALIDATE_RET((const unsigned char *)data != NULL,
237 MBEDTLS_ERR_SHA512_BAD_INPUT_DATA);
238
239 crypto_accel_sha512_compress(ctx->state, data, 1);
240
241 return 0;
242 }
243 #endif /*MBEDTLS_SHA512_PROCESS_ALT*/
244