blob: 7feb9e7158165d36c25492467fe4d9b70a0104c3 [file] [log] [blame]
/*
* Copyright (c) 2021, Arm Limited and Contributors. All rights reserved.
*
* SPDX-License-Identifier: BSD-3-Clause
*/
#ifndef PACKEDC_CRYPTO_CALLER_CIPHER_H
#define PACKEDC_CRYPTO_CALLER_CIPHER_H
#include <string.h>
#include <stdlib.h>
#include <psa/crypto.h>
#include <service/common/client/service_client.h>
#include <protocols/rpc/common/packed-c/status.h>
#include <protocols/service/crypto/packed-c/opcodes.h>
#include <protocols/service/crypto/packed-c/cipher.h>
#include <common/tlv/tlv.h>
#ifdef __cplusplus
extern "C" {
#endif
static inline psa_status_t common_cipher_setup(struct service_client *context,
uint32_t *op_handle,
psa_key_id_t key,
psa_algorithm_t alg,
uint32_t opcode)
{
psa_status_t psa_status = PSA_ERROR_GENERIC_ERROR;
struct ts_crypto_cipher_setup_in req_msg;
size_t req_len = sizeof(struct ts_crypto_cipher_setup_in);
req_msg.key_id = key;
req_msg.alg = alg;
rpc_call_handle call_handle;
uint8_t *req_buf;
call_handle = rpc_caller_session_begin(context->session, &req_buf, req_len, 0);
if (call_handle) {
uint8_t *resp_buf;
size_t resp_len;
service_status_t service_status;
memcpy(req_buf, &req_msg, req_len);
context->rpc_status =
rpc_caller_session_invoke(call_handle, opcode, &resp_buf, &resp_len,
&service_status);
if (context->rpc_status == RPC_SUCCESS) {
psa_status = service_status;
if (psa_status == PSA_SUCCESS) {
if (resp_len >= sizeof(struct ts_crypto_cipher_setup_out)) {
struct ts_crypto_cipher_setup_out resp_msg;
memcpy(&resp_msg, resp_buf, sizeof(struct ts_crypto_cipher_setup_out));
*op_handle = resp_msg.op_handle;
}
else {
/* Failed to decode response message */
psa_status = PSA_ERROR_GENERIC_ERROR;
}
}
}
rpc_caller_session_end(call_handle);
}
return psa_status;
}
static inline psa_status_t crypto_caller_cipher_encrypt_setup(struct service_client *context,
uint32_t *op_handle,
psa_key_id_t key,
psa_algorithm_t alg)
{
return common_cipher_setup(context,
op_handle, key, alg, TS_CRYPTO_OPCODE_CIPHER_ENCRYPT_SETUP);
}
static inline psa_status_t crypto_caller_cipher_decrypt_setup(struct service_client *context,
uint32_t *op_handle,
psa_key_id_t key,
psa_algorithm_t alg)
{
return common_cipher_setup(context,
op_handle, key, alg, TS_CRYPTO_OPCODE_CIPHER_DECRYPT_SETUP);
}
static inline psa_status_t crypto_caller_cipher_generate_iv(struct service_client *context,
uint32_t op_handle,
uint8_t *iv,
size_t iv_size,
size_t *iv_length)
{
psa_status_t psa_status = PSA_ERROR_GENERIC_ERROR;
struct ts_crypto_cipher_generate_iv_in req_msg;
const size_t req_fixed_len = sizeof(struct ts_crypto_cipher_generate_iv_in);
size_t req_len = req_fixed_len;
*iv_length = 0;
req_msg.op_handle = op_handle;
rpc_call_handle call_handle;
uint8_t *req_buf;
call_handle = rpc_caller_session_begin(context->session, &req_buf, req_len,
tlv_required_space(iv_size));
if (call_handle) {
uint8_t *resp_buf;
size_t resp_len;
service_status_t service_status;
memcpy(req_buf, &req_msg, req_fixed_len);
context->rpc_status =
rpc_caller_session_invoke(call_handle,
TS_CRYPTO_OPCODE_CIPHER_GENERATE_IV, &resp_buf, &resp_len,
&service_status);
if (context->rpc_status == RPC_SUCCESS) {
psa_status = service_status;
if (psa_status == PSA_SUCCESS) {
struct tlv_const_iterator resp_iter;
struct tlv_record decoded_record;
tlv_const_iterator_begin(&resp_iter, resp_buf, resp_len);
if (tlv_find_decode(&resp_iter,
TS_CRYPTO_CIPHER_GENERATE_IV_OUT_TAG_IV, &decoded_record)) {
if (decoded_record.length <= iv_size) {
memcpy(iv, decoded_record.value, decoded_record.length);
*iv_length = decoded_record.length;
}
else {
/* Provided buffer is too small */
psa_status = PSA_ERROR_BUFFER_TOO_SMALL;
}
}
else {
/* Mandatory response parameter missing */
psa_status = PSA_ERROR_GENERIC_ERROR;
}
}
}
rpc_caller_session_end(call_handle);
}
return psa_status;
}
static inline psa_status_t crypto_caller_cipher_set_iv(struct service_client *context,
uint32_t op_handle,
const uint8_t *iv,
size_t iv_length)
{
psa_status_t psa_status = PSA_ERROR_GENERIC_ERROR;
struct ts_crypto_cipher_set_iv_in req_msg;
const size_t req_fixed_len = sizeof(struct ts_crypto_cipher_set_iv_in);
size_t req_len = req_fixed_len;
req_msg.op_handle = op_handle;
/* Mandatory input data parameter */
struct tlv_record data_record;
data_record.tag = TS_CRYPTO_CIPHER_SET_IV_IN_TAG_IV;
data_record.length = iv_length;
data_record.value = iv;
req_len += tlv_required_space(data_record.length);
rpc_call_handle call_handle;
uint8_t *req_buf;
call_handle = rpc_caller_session_begin(context->session, &req_buf, req_len, 0);
if (call_handle) {
uint8_t *resp_buf;
size_t resp_len;
service_status_t service_status;
struct tlv_iterator req_iter;
memcpy(req_buf, &req_msg, req_fixed_len);
tlv_iterator_begin(&req_iter, &req_buf[req_fixed_len], req_len - req_fixed_len);
tlv_encode(&req_iter, &data_record);
context->rpc_status =
rpc_caller_session_invoke(call_handle, TS_CRYPTO_OPCODE_CIPHER_SET_IV,
&resp_buf, &resp_len, &service_status);
if (context->rpc_status == RPC_SUCCESS)
psa_status = service_status;
rpc_caller_session_end(call_handle);
}
return psa_status;
}
static inline psa_status_t crypto_caller_cipher_update(struct service_client *context,
uint32_t op_handle,
const uint8_t *input,
size_t input_length,
uint8_t *output,
size_t output_size,
size_t *output_length)
{
psa_status_t psa_status = PSA_ERROR_GENERIC_ERROR;
struct ts_crypto_cipher_update_in req_msg;
const size_t req_fixed_len = sizeof(struct ts_crypto_cipher_update_in);
size_t req_len = req_fixed_len;
*output_length = 0;
req_msg.op_handle = op_handle;
/* Mandatory input data parameter */
struct tlv_record data_record;
data_record.tag = TS_CRYPTO_CIPHER_UPDATE_IN_TAG_DATA;
data_record.length = input_length;
data_record.value = input;
req_len += tlv_required_space(data_record.length);
rpc_call_handle call_handle;
uint8_t *req_buf;
call_handle = rpc_caller_session_begin(context->session, &req_buf, req_len, 0);
if (call_handle) {
uint8_t *resp_buf;
size_t resp_len;
service_status_t service_status;
struct tlv_iterator req_iter;
memcpy(req_buf, &req_msg, req_fixed_len);
tlv_iterator_begin(&req_iter, &req_buf[req_fixed_len], req_len - req_fixed_len);
tlv_encode(&req_iter, &data_record);
context->rpc_status =
rpc_caller_session_invoke(call_handle, TS_CRYPTO_OPCODE_CIPHER_UPDATE,
&resp_buf, &resp_len, &service_status);
if (context->rpc_status == RPC_SUCCESS) {
psa_status = service_status;
if (psa_status == PSA_SUCCESS) {
struct tlv_const_iterator resp_iter;
struct tlv_record decoded_record;
tlv_const_iterator_begin(&resp_iter, resp_buf, resp_len);
if (tlv_find_decode(&resp_iter,
TS_CRYPTO_CIPHER_UPDATE_OUT_TAG_DATA, &decoded_record)) {
if (decoded_record.length <= output_size) {
memcpy(output, decoded_record.value, decoded_record.length);
*output_length = decoded_record.length;
}
else {
/* Provided buffer is too small */
psa_status = PSA_ERROR_BUFFER_TOO_SMALL;
}
}
else {
/* Mandatory response parameter missing */
psa_status = PSA_ERROR_GENERIC_ERROR;
}
}
}
rpc_caller_session_end(call_handle);
}
return psa_status;
}
static inline psa_status_t crypto_caller_cipher_finish(struct service_client *context,
uint32_t op_handle,
uint8_t *output,
size_t output_size,
size_t *output_length)
{
psa_status_t psa_status = PSA_ERROR_GENERIC_ERROR;
struct ts_crypto_cipher_finish_in req_msg;
const size_t req_fixed_len = sizeof(struct ts_crypto_cipher_finish_in);
size_t req_len = req_fixed_len;
*output_length = 0;
req_msg.op_handle = op_handle;
rpc_call_handle call_handle;
uint8_t *req_buf;
call_handle = rpc_caller_session_begin(context->session, &req_buf, req_len, 0);
if (call_handle) {
uint8_t *resp_buf;
size_t resp_len;
service_status_t service_status;
memcpy(req_buf, &req_msg, req_fixed_len);
context->rpc_status =
rpc_caller_session_invoke(call_handle, TS_CRYPTO_OPCODE_CIPHER_FINISH,
&resp_buf, &resp_len, &service_status);
if (context->rpc_status == RPC_SUCCESS) {
psa_status = service_status;
if (psa_status == PSA_SUCCESS) {
struct tlv_const_iterator resp_iter;
struct tlv_record decoded_record;
tlv_const_iterator_begin(&resp_iter, resp_buf, resp_len);
if (tlv_find_decode(&resp_iter,
TS_CRYPTO_CIPHER_FINISH_OUT_TAG_DATA, &decoded_record)) {
if (decoded_record.length <= output_size) {
memcpy(output, decoded_record.value, decoded_record.length);
*output_length = decoded_record.length;
}
else {
/* Provided buffer is too small */
psa_status = PSA_ERROR_BUFFER_TOO_SMALL;
}
}
else {
/* Mandatory response parameter missing */
psa_status = PSA_ERROR_GENERIC_ERROR;
}
}
}
rpc_caller_session_end(call_handle);
}
return psa_status;
}
static inline psa_status_t crypto_caller_cipher_abort(struct service_client *context,
uint32_t op_handle)
{
psa_status_t psa_status = PSA_ERROR_GENERIC_ERROR;
struct ts_crypto_cipher_abort_in req_msg;
const size_t req_fixed_len = sizeof(struct ts_crypto_cipher_abort_in);
size_t req_len = req_fixed_len;
req_msg.op_handle = op_handle;
rpc_call_handle call_handle;
uint8_t *req_buf;
call_handle = rpc_caller_session_begin(context->session, &req_buf, req_len, 0);
if (call_handle) {
uint8_t *resp_buf;
size_t resp_len;
service_status_t service_status;
memcpy(req_buf, &req_msg, req_fixed_len);
context->rpc_status =
rpc_caller_session_invoke(call_handle, TS_CRYPTO_OPCODE_CIPHER_ABORT,
&resp_buf, &resp_len, &service_status);
if (context->rpc_status == RPC_SUCCESS)
psa_status = service_status;
rpc_caller_session_end(call_handle);
}
return psa_status;
}
static inline size_t crypto_caller_cipher_max_update_size(const struct service_client *context)
{
/* Returns the maximum number of bytes that may be
* carried as a parameter of the cipher_update operation
* using the packed-c encoding.
*/
size_t payload_space = context->service_info.max_payload;
size_t overhead = sizeof(struct ts_crypto_cipher_update_in) + TLV_HDR_LEN;
/* Allow for output to be a whole number of blocks */
overhead += PSA_BLOCK_CIPHER_BLOCK_MAX_SIZE;
return (payload_space > overhead) ? payload_space - overhead : 0;
}
#ifdef __cplusplus
}
#endif
#endif /* PACKEDC_CRYPTO_CALLER_CIPHER_H */