X-Git-Url: http://www.average.org/gitweb/?p=pam_pcsc_cr.git;a=blobdiff_plain;f=tom_crypto.c;h=97a18e19fafcab5169b3963a7310a1befccd3388;hp=e69de29bb2d1d6434b8b29ae775ad8c2e48c5391;hb=3d841899fe8859b2ce6af8fdfd8fa961c7651425;hpb=4f3247d992b2d4152da0ebc0daf828c874e0b1f1

diff --git a/tom_crypto.c b/tom_crypto.c
index e69de29..97a18e1 100644
--- a/tom_crypto.c
+++ b/tom_crypto.c
@@ -0,0 +1,73 @@
+#include <tomcrypt.h>
+
+#include "crypto_if.h"
+
+static unsigned long tom_encrypt(void *key, int keylen, void *iv,
+			void *pt, void *ct, int tlen)
+{
+	symmetric_CBC cbc;
+	int index, err;
+
+	if ((index = register_cipher(&aes_desc)) == -1)
+		return CRYPT_INVALID_CIPHER;
+	if ((err = cbc_start(index, iv, key, keylen, 0, &cbc)) != CRYPT_OK)
+		return err;
+	err= cbc_encrypt(pt, ct, tlen, &cbc);
+	(void)cbc_done(&cbc);
+	return err;
+}
+
+static unsigned long tom_decrypt(void *key, int keylen, void *iv,
+			void *ct, void *pt, int tlen)
+{
+	symmetric_CBC cbc;
+	int index, err;
+
+	if ((index = register_cipher(&aes_desc)) == -1)
+		return CRYPT_INVALID_CIPHER;
+	if ((err = cbc_start(index, iv, key, keylen, 0, &cbc)) != CRYPT_OK)
+		return err;
+	err= cbc_decrypt(ct, pt, tlen, &cbc);
+	(void)cbc_done(&cbc);
+	return err;
+}
+
+static unsigned long tom_hash(void *pt, int tlen, void *tag, int *taglen)
+{
+	int index, rc;
+	unsigned long ltaglen = *taglen;
+
+	if ((index = register_hash(&sha1_desc)) == -1)
+		return CRYPT_INVALID_HASH;
+	rc = hash_memory(index, pt, tlen, tag, &ltaglen);
+	*taglen = ltaglen;
+	return rc;
+}
+
+static unsigned long tom_hmac(void *key, int keylen,
+			void *pt, int tlen, void *tag, int *taglen)
+{
+	int index, rc;
+	unsigned long ltaglen = *taglen;
+
+	if (keylen != 20) return CRYPT_INVALID_KEYSIZE;
+	if ((index = register_hash(&sha1_desc)) == -1)
+		return CRYPT_INVALID_HASH;
+	rc = hmac_memory(index, key, keylen, pt, tlen, tag, &ltaglen);
+	*taglen = ltaglen;
+	return rc;
+}
+
+static const char *tom_errstr(unsigned long err)
+{
+	return error_to_string((int)err);
+}
+
+struct crypto_interface tom_crypto_if = {
+	.name		= "tomcrypt",
+	.encrypt	= tom_encrypt,
+	.decrypt	= tom_decrypt,
+	.hash		= tom_hash,
+	.hmac		= tom_hmac,
+	.errstr		= tom_errstr,
+};