reinit iv before every op
[pam_pcsc_cr.git] / tom_crypto.c
index e69de29bb2d1d6434b8b29ae775ad8c2e48c5391..fa4fc5dabb0ae3d10a53c5e4753c6210a8cf2447 100644 (file)
@@ -0,0 +1,81 @@
+#ifdef HAVE_CONFIG_H
+# include "config.h"
+#endif
+#include <tomcrypt.h>
+
+#include "crypto_if.h"
+
+static const char *tom_init(void)
+{
+       /* nothing to initialize */
+       return "tomcrypt";
+}
+
+static unsigned long tom_encrypt(void *key, int keylen, void *iv,
+                       void *pt, void *ct, int tlen)
+{
+       symmetric_CBC cbc;
+       int index, err;
+
+       if ((index = register_cipher(&aes_desc)) == -1)
+               return CRYPT_INVALID_CIPHER;
+       if ((err = cbc_start(index, iv, key, keylen, 0, &cbc)) != CRYPT_OK)
+               return err;
+       err= cbc_encrypt(pt, ct, tlen, &cbc);
+       (void)cbc_done(&cbc);
+       return err;
+}
+
+static unsigned long tom_decrypt(void *key, int keylen, void *iv,
+                       void *ct, void *pt, int tlen)
+{
+       symmetric_CBC cbc;
+       int index, err;
+
+       if ((index = register_cipher(&aes_desc)) == -1)
+               return CRYPT_INVALID_CIPHER;
+       if ((err = cbc_start(index, iv, key, keylen, 0, &cbc)) != CRYPT_OK)
+               return err;
+       err= cbc_decrypt(ct, pt, tlen, &cbc);
+       (void)cbc_done(&cbc);
+       return err;
+}
+
+static unsigned long tom_hash(void *pt, int tlen, void *tag, int *taglen)
+{
+       int index, rc;
+       unsigned long ltaglen = *taglen;
+
+       if ((index = register_hash(&sha1_desc)) == -1)
+               return CRYPT_INVALID_HASH;
+       rc = hash_memory(index, pt, tlen, tag, &ltaglen);
+       *taglen = ltaglen;
+       return rc;
+}
+
+static unsigned long tom_hmac(void *key, int keylen,
+                       void *pt, int tlen, void *tag, int *taglen)
+{
+       int index, rc;
+       unsigned long ltaglen = *taglen;
+
+       if ((index = register_hash(&sha1_desc)) == -1)
+               return CRYPT_INVALID_HASH;
+       rc = hmac_memory(index, key, keylen, pt, tlen, tag, &ltaglen);
+       *taglen = ltaglen;
+       return rc;
+}
+
+static const char *tom_errstr(unsigned long err)
+{
+       return error_to_string((int)err);
+}
+
+struct crypto_interface tom_crypto_if = {
+       .init           = tom_init,
+       .encrypt        = tom_encrypt,
+       .decrypt        = tom_decrypt,
+       .hash           = tom_hash,
+       .hmac           = tom_hmac,
+       .errstr         = tom_errstr,
+};