Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 1 | /** |
| 2 | * \file pkcs5.c |
| 3 | * |
| 4 | * \brief PKCS#5 functions |
| 5 | * |
| 6 | * \author Mathias Olsson <mathias@kompetensum.com> |
| 7 | * |
Manuel Pégourié-Gonnard | 6fb8187 | 2015-07-27 11:11:48 +0200 | [diff] [blame] | 8 | * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved |
Manuel Pégourié-Gonnard | 37ff140 | 2015-09-04 14:21:07 +0200 | [diff] [blame] | 9 | * SPDX-License-Identifier: Apache-2.0 |
| 10 | * |
| 11 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
| 12 | * not use this file except in compliance with the License. |
| 13 | * You may obtain a copy of the License at |
| 14 | * |
| 15 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 16 | * |
| 17 | * Unless required by applicable law or agreed to in writing, software |
| 18 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 19 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 20 | * See the License for the specific language governing permissions and |
| 21 | * limitations under the License. |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 22 | * |
Manuel Pégourié-Gonnard | fe44643 | 2015-03-06 13:17:10 +0000 | [diff] [blame] | 23 | * This file is part of mbed TLS (https://tls.mbed.org) |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 24 | */ |
| 25 | /* |
| 26 | * PKCS#5 includes PBKDF2 and more |
| 27 | * |
| 28 | * http://tools.ietf.org/html/rfc2898 (Specification) |
| 29 | * http://tools.ietf.org/html/rfc6070 (Test vectors) |
| 30 | */ |
| 31 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 32 | #if !defined(MBEDTLS_CONFIG_FILE) |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 33 | #include "mbedtls/config.h" |
Manuel Pégourié-Gonnard | cef4ad2 | 2014-04-29 12:39:06 +0200 | [diff] [blame] | 34 | #else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 35 | #include MBEDTLS_CONFIG_FILE |
Manuel Pégourié-Gonnard | cef4ad2 | 2014-04-29 12:39:06 +0200 | [diff] [blame] | 36 | #endif |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 37 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 38 | #if defined(MBEDTLS_PKCS5_C) |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 39 | |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 40 | #include "mbedtls/pkcs5.h" |
| 41 | #include "mbedtls/asn1.h" |
| 42 | #include "mbedtls/cipher.h" |
| 43 | #include "mbedtls/oid.h" |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 44 | |
Rich Evans | 00ab470 | 2015-02-06 13:43:58 +0000 | [diff] [blame] | 45 | #include <string.h> |
| 46 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 47 | #if defined(MBEDTLS_PLATFORM_C) |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 48 | #include "mbedtls/platform.h" |
Paul Bakker | 7dc4c44 | 2014-02-01 22:50:26 +0100 | [diff] [blame] | 49 | #else |
Rich Evans | 00ab470 | 2015-02-06 13:43:58 +0000 | [diff] [blame] | 50 | #include <stdio.h> |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 51 | #define mbedtls_printf printf |
Paul Bakker | 7dc4c44 | 2014-02-01 22:50:26 +0100 | [diff] [blame] | 52 | #endif |
| 53 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 54 | static int pkcs5_parse_pbkdf2_params( const mbedtls_asn1_buf *params, |
| 55 | mbedtls_asn1_buf *salt, int *iterations, |
| 56 | int *keylen, mbedtls_md_type_t *md_type ) |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 57 | { |
| 58 | int ret; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 59 | mbedtls_asn1_buf prf_alg_oid; |
Manuel Pégourié-Gonnard | edc3ab2 | 2014-06-12 17:08:27 +0200 | [diff] [blame] | 60 | unsigned char *p = params->p; |
Paul Bakker | f8d018a | 2013-06-29 12:16:17 +0200 | [diff] [blame] | 61 | const unsigned char *end = params->p + params->len; |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 62 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 63 | if( params->tag != ( MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE ) ) |
| 64 | return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + |
| 65 | MBEDTLS_ERR_ASN1_UNEXPECTED_TAG ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 66 | /* |
| 67 | * PBKDF2-params ::= SEQUENCE { |
| 68 | * salt OCTET STRING, |
| 69 | * iterationCount INTEGER, |
| 70 | * keyLength INTEGER OPTIONAL |
| 71 | * prf AlgorithmIdentifier DEFAULT algid-hmacWithSHA1 |
| 72 | * } |
| 73 | * |
| 74 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 75 | if( ( ret = mbedtls_asn1_get_tag( &p, end, &salt->len, MBEDTLS_ASN1_OCTET_STRING ) ) != 0 ) |
| 76 | return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + ret ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 77 | |
Manuel Pégourié-Gonnard | edc3ab2 | 2014-06-12 17:08:27 +0200 | [diff] [blame] | 78 | salt->p = p; |
| 79 | p += salt->len; |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 80 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 81 | if( ( ret = mbedtls_asn1_get_int( &p, end, iterations ) ) != 0 ) |
| 82 | return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + ret ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 83 | |
Manuel Pégourié-Gonnard | edc3ab2 | 2014-06-12 17:08:27 +0200 | [diff] [blame] | 84 | if( p == end ) |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 85 | return( 0 ); |
| 86 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 87 | if( ( ret = mbedtls_asn1_get_int( &p, end, keylen ) ) != 0 ) |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 88 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 89 | if( ret != MBEDTLS_ERR_ASN1_UNEXPECTED_TAG ) |
| 90 | return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + ret ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 91 | } |
| 92 | |
Manuel Pégourié-Gonnard | edc3ab2 | 2014-06-12 17:08:27 +0200 | [diff] [blame] | 93 | if( p == end ) |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 94 | return( 0 ); |
| 95 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 96 | if( ( ret = mbedtls_asn1_get_alg_null( &p, end, &prf_alg_oid ) ) != 0 ) |
| 97 | return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + ret ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 98 | |
Antonio Quartulli | 12ccef2 | 2017-12-20 07:03:55 +0800 | [diff] [blame^] | 99 | if( mbedtls_oid_get_md_hmac( &prf_alg_oid, md_type ) != 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 100 | return( MBEDTLS_ERR_PKCS5_FEATURE_UNAVAILABLE ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 101 | |
Manuel Pégourié-Gonnard | edc3ab2 | 2014-06-12 17:08:27 +0200 | [diff] [blame] | 102 | if( p != end ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 103 | return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + |
| 104 | MBEDTLS_ERR_ASN1_LENGTH_MISMATCH ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 105 | |
| 106 | return( 0 ); |
| 107 | } |
| 108 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 109 | int mbedtls_pkcs5_pbes2( const mbedtls_asn1_buf *pbe_params, int mode, |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 110 | const unsigned char *pwd, size_t pwdlen, |
| 111 | const unsigned char *data, size_t datalen, |
| 112 | unsigned char *output ) |
| 113 | { |
| 114 | int ret, iterations = 0, keylen = 0; |
Paul Bakker | f8d018a | 2013-06-29 12:16:17 +0200 | [diff] [blame] | 115 | unsigned char *p, *end; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 116 | mbedtls_asn1_buf kdf_alg_oid, enc_scheme_oid, kdf_alg_params, enc_scheme_params; |
| 117 | mbedtls_asn1_buf salt; |
| 118 | mbedtls_md_type_t md_type = MBEDTLS_MD_SHA1; |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 119 | unsigned char key[32], iv[32]; |
Paul Bakker | f8d018a | 2013-06-29 12:16:17 +0200 | [diff] [blame] | 120 | size_t olen = 0; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 121 | const mbedtls_md_info_t *md_info; |
| 122 | const mbedtls_cipher_info_t *cipher_info; |
| 123 | mbedtls_md_context_t md_ctx; |
| 124 | mbedtls_cipher_type_t cipher_alg; |
| 125 | mbedtls_cipher_context_t cipher_ctx; |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 126 | |
| 127 | p = pbe_params->p; |
| 128 | end = p + pbe_params->len; |
| 129 | |
| 130 | /* |
| 131 | * PBES2-params ::= SEQUENCE { |
| 132 | * keyDerivationFunc AlgorithmIdentifier {{PBES2-KDFs}}, |
| 133 | * encryptionScheme AlgorithmIdentifier {{PBES2-Encs}} |
| 134 | * } |
| 135 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 136 | if( pbe_params->tag != ( MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE ) ) |
| 137 | return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + |
| 138 | MBEDTLS_ERR_ASN1_UNEXPECTED_TAG ); |
Paul Bakker | f8d018a | 2013-06-29 12:16:17 +0200 | [diff] [blame] | 139 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 140 | if( ( ret = mbedtls_asn1_get_alg( &p, end, &kdf_alg_oid, &kdf_alg_params ) ) != 0 ) |
| 141 | return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + ret ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 142 | |
| 143 | // Only PBKDF2 supported at the moment |
| 144 | // |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 145 | if( MBEDTLS_OID_CMP( MBEDTLS_OID_PKCS5_PBKDF2, &kdf_alg_oid ) != 0 ) |
| 146 | return( MBEDTLS_ERR_PKCS5_FEATURE_UNAVAILABLE ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 147 | |
Paul Bakker | f8d018a | 2013-06-29 12:16:17 +0200 | [diff] [blame] | 148 | if( ( ret = pkcs5_parse_pbkdf2_params( &kdf_alg_params, |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 149 | &salt, &iterations, &keylen, |
| 150 | &md_type ) ) != 0 ) |
| 151 | { |
| 152 | return( ret ); |
| 153 | } |
| 154 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 155 | md_info = mbedtls_md_info_from_type( md_type ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 156 | if( md_info == NULL ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 157 | return( MBEDTLS_ERR_PKCS5_FEATURE_UNAVAILABLE ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 158 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 159 | if( ( ret = mbedtls_asn1_get_alg( &p, end, &enc_scheme_oid, |
Paul Bakker | b9e4e2c | 2014-05-01 14:18:25 +0200 | [diff] [blame] | 160 | &enc_scheme_params ) ) != 0 ) |
| 161 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 162 | return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + ret ); |
Paul Bakker | b9e4e2c | 2014-05-01 14:18:25 +0200 | [diff] [blame] | 163 | } |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 164 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 165 | if( mbedtls_oid_get_cipher_alg( &enc_scheme_oid, &cipher_alg ) != 0 ) |
| 166 | return( MBEDTLS_ERR_PKCS5_FEATURE_UNAVAILABLE ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 167 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 168 | cipher_info = mbedtls_cipher_info_from_type( cipher_alg ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 169 | if( cipher_info == NULL ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 170 | return( MBEDTLS_ERR_PKCS5_FEATURE_UNAVAILABLE ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 171 | |
Manuel Pégourié-Gonnard | 66aca93 | 2014-06-12 13:14:55 +0200 | [diff] [blame] | 172 | /* |
| 173 | * The value of keylen from pkcs5_parse_pbkdf2_params() is ignored |
| 174 | * since it is optional and we don't know if it was set or not |
| 175 | */ |
Manuel Pégourié-Gonnard | 898e0aa | 2015-06-18 15:28:12 +0200 | [diff] [blame] | 176 | keylen = cipher_info->key_bitlen / 8; |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 177 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 178 | if( enc_scheme_params.tag != MBEDTLS_ASN1_OCTET_STRING || |
Paul Bakker | f8d018a | 2013-06-29 12:16:17 +0200 | [diff] [blame] | 179 | enc_scheme_params.len != cipher_info->iv_size ) |
| 180 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 181 | return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT ); |
Paul Bakker | f8d018a | 2013-06-29 12:16:17 +0200 | [diff] [blame] | 182 | } |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 183 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 184 | mbedtls_md_init( &md_ctx ); |
| 185 | mbedtls_cipher_init( &cipher_ctx ); |
Paul Bakker | 84bbeb5 | 2014-07-01 14:53:22 +0200 | [diff] [blame] | 186 | |
Paul Bakker | f8d018a | 2013-06-29 12:16:17 +0200 | [diff] [blame] | 187 | memcpy( iv, enc_scheme_params.p, enc_scheme_params.len ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 188 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 189 | if( ( ret = mbedtls_md_setup( &md_ctx, md_info, 1 ) ) != 0 ) |
Paul Bakker | 4632083 | 2013-07-03 14:01:52 +0200 | [diff] [blame] | 190 | goto exit; |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 191 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 192 | if( ( ret = mbedtls_pkcs5_pbkdf2_hmac( &md_ctx, pwd, pwdlen, salt.p, salt.len, |
Paul Bakker | 66d5d07 | 2014-06-17 16:39:18 +0200 | [diff] [blame] | 193 | iterations, keylen, key ) ) != 0 ) |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 194 | { |
Paul Bakker | 4632083 | 2013-07-03 14:01:52 +0200 | [diff] [blame] | 195 | goto exit; |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 196 | } |
| 197 | |
Manuel Pégourié-Gonnard | 8473f87 | 2015-05-14 13:51:45 +0200 | [diff] [blame] | 198 | if( ( ret = mbedtls_cipher_setup( &cipher_ctx, cipher_info ) ) != 0 ) |
Paul Bakker | 4632083 | 2013-07-03 14:01:52 +0200 | [diff] [blame] | 199 | goto exit; |
| 200 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 201 | if( ( ret = mbedtls_cipher_setkey( &cipher_ctx, key, 8 * keylen, (mbedtls_operation_t) mode ) ) != 0 ) |
Paul Bakker | 4632083 | 2013-07-03 14:01:52 +0200 | [diff] [blame] | 202 | goto exit; |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 203 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 204 | if( ( ret = mbedtls_cipher_crypt( &cipher_ctx, iv, enc_scheme_params.len, |
Manuel Pégourié-Gonnard | 90dac90 | 2014-06-12 17:04:24 +0200 | [diff] [blame] | 205 | data, datalen, output, &olen ) ) != 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 206 | ret = MBEDTLS_ERR_PKCS5_PASSWORD_MISMATCH; |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 207 | |
Paul Bakker | 4632083 | 2013-07-03 14:01:52 +0200 | [diff] [blame] | 208 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 209 | mbedtls_md_free( &md_ctx ); |
| 210 | mbedtls_cipher_free( &cipher_ctx ); |
Paul Bakker | 4632083 | 2013-07-03 14:01:52 +0200 | [diff] [blame] | 211 | |
| 212 | return( ret ); |
Paul Bakker | 28144de | 2013-06-24 19:28:55 +0200 | [diff] [blame] | 213 | } |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 214 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 215 | int mbedtls_pkcs5_pbkdf2_hmac( mbedtls_md_context_t *ctx, const unsigned char *password, |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 216 | size_t plen, const unsigned char *salt, size_t slen, |
| 217 | unsigned int iteration_count, |
| 218 | uint32_t key_length, unsigned char *output ) |
| 219 | { |
| 220 | int ret, j; |
| 221 | unsigned int i; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 222 | unsigned char md1[MBEDTLS_MD_MAX_SIZE]; |
| 223 | unsigned char work[MBEDTLS_MD_MAX_SIZE]; |
| 224 | unsigned char md_size = mbedtls_md_get_size( ctx->md_info ); |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 225 | size_t use_len; |
| 226 | unsigned char *out_p = output; |
| 227 | unsigned char counter[4]; |
| 228 | |
| 229 | memset( counter, 0, 4 ); |
| 230 | counter[3] = 1; |
| 231 | |
| 232 | if( iteration_count > 0xFFFFFFFF ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 233 | return( MBEDTLS_ERR_PKCS5_BAD_INPUT_DATA ); |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 234 | |
| 235 | while( key_length ) |
| 236 | { |
| 237 | // U1 ends up in work |
| 238 | // |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 239 | if( ( ret = mbedtls_md_hmac_starts( ctx, password, plen ) ) != 0 ) |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 240 | return( ret ); |
| 241 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 242 | if( ( ret = mbedtls_md_hmac_update( ctx, salt, slen ) ) != 0 ) |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 243 | return( ret ); |
| 244 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 245 | if( ( ret = mbedtls_md_hmac_update( ctx, counter, 4 ) ) != 0 ) |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 246 | return( ret ); |
| 247 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 248 | if( ( ret = mbedtls_md_hmac_finish( ctx, work ) ) != 0 ) |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 249 | return( ret ); |
| 250 | |
| 251 | memcpy( md1, work, md_size ); |
| 252 | |
Paul Bakker | 66d5d07 | 2014-06-17 16:39:18 +0200 | [diff] [blame] | 253 | for( i = 1; i < iteration_count; i++ ) |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 254 | { |
| 255 | // U2 ends up in md1 |
| 256 | // |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 257 | if( ( ret = mbedtls_md_hmac_starts( ctx, password, plen ) ) != 0 ) |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 258 | return( ret ); |
| 259 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 260 | if( ( ret = mbedtls_md_hmac_update( ctx, md1, md_size ) ) != 0 ) |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 261 | return( ret ); |
| 262 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 263 | if( ( ret = mbedtls_md_hmac_finish( ctx, md1 ) ) != 0 ) |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 264 | return( ret ); |
| 265 | |
| 266 | // U1 xor U2 |
| 267 | // |
| 268 | for( j = 0; j < md_size; j++ ) |
| 269 | work[j] ^= md1[j]; |
| 270 | } |
| 271 | |
| 272 | use_len = ( key_length < md_size ) ? key_length : md_size; |
| 273 | memcpy( out_p, work, use_len ); |
| 274 | |
Paul Bakker | b9cfaa0 | 2013-10-11 18:58:55 +0200 | [diff] [blame] | 275 | key_length -= (uint32_t) use_len; |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 276 | out_p += use_len; |
| 277 | |
| 278 | for( i = 4; i > 0; i-- ) |
| 279 | if( ++counter[i - 1] != 0 ) |
| 280 | break; |
| 281 | } |
| 282 | |
| 283 | return( 0 ); |
| 284 | } |
| 285 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 286 | #if defined(MBEDTLS_SELF_TEST) |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 287 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 288 | #if !defined(MBEDTLS_SHA1_C) |
| 289 | int mbedtls_pkcs5_self_test( int verbose ) |
Manuel Pégourié-Gonnard | 2a8afa9 | 2014-06-12 12:00:44 +0200 | [diff] [blame] | 290 | { |
| 291 | if( verbose != 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 292 | mbedtls_printf( " PBKDF2 (SHA1): skipped\n\n" ); |
Manuel Pégourié-Gonnard | 2a8afa9 | 2014-06-12 12:00:44 +0200 | [diff] [blame] | 293 | |
| 294 | return( 0 ); |
| 295 | } |
| 296 | #else |
| 297 | |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 298 | #define MAX_TESTS 6 |
| 299 | |
Manuel Pégourié-Gonnard | 28122e4 | 2015-03-11 09:13:42 +0000 | [diff] [blame] | 300 | static const size_t plen[MAX_TESTS] = |
Manuel Pégourié-Gonnard | 73ed39d | 2015-03-10 15:46:30 +0000 | [diff] [blame] | 301 | { 8, 8, 8, 24, 9 }; |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 302 | |
Manuel Pégourié-Gonnard | 28122e4 | 2015-03-11 09:13:42 +0000 | [diff] [blame] | 303 | static const unsigned char password[MAX_TESTS][32] = |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 304 | { |
| 305 | "password", |
| 306 | "password", |
| 307 | "password", |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 308 | "passwordPASSWORDpassword", |
| 309 | "pass\0word", |
| 310 | }; |
| 311 | |
Manuel Pégourié-Gonnard | 28122e4 | 2015-03-11 09:13:42 +0000 | [diff] [blame] | 312 | static const size_t slen[MAX_TESTS] = |
Manuel Pégourié-Gonnard | 73ed39d | 2015-03-10 15:46:30 +0000 | [diff] [blame] | 313 | { 4, 4, 4, 36, 5 }; |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 314 | |
Manuel Pégourié-Gonnard | 28122e4 | 2015-03-11 09:13:42 +0000 | [diff] [blame] | 315 | static const unsigned char salt[MAX_TESTS][40] = |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 316 | { |
| 317 | "salt", |
| 318 | "salt", |
| 319 | "salt", |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 320 | "saltSALTsaltSALTsaltSALTsaltSALTsalt", |
| 321 | "sa\0lt", |
| 322 | }; |
| 323 | |
Manuel Pégourié-Gonnard | 28122e4 | 2015-03-11 09:13:42 +0000 | [diff] [blame] | 324 | static const uint32_t it_cnt[MAX_TESTS] = |
Manuel Pégourié-Gonnard | 73ed39d | 2015-03-10 15:46:30 +0000 | [diff] [blame] | 325 | { 1, 2, 4096, 4096, 4096 }; |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 326 | |
Manuel Pégourié-Gonnard | 28122e4 | 2015-03-11 09:13:42 +0000 | [diff] [blame] | 327 | static const uint32_t key_len[MAX_TESTS] = |
Manuel Pégourié-Gonnard | 73ed39d | 2015-03-10 15:46:30 +0000 | [diff] [blame] | 328 | { 20, 20, 20, 25, 16 }; |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 329 | |
Manuel Pégourié-Gonnard | 28122e4 | 2015-03-11 09:13:42 +0000 | [diff] [blame] | 330 | static const unsigned char result_key[MAX_TESTS][32] = |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 331 | { |
| 332 | { 0x0c, 0x60, 0xc8, 0x0f, 0x96, 0x1f, 0x0e, 0x71, |
| 333 | 0xf3, 0xa9, 0xb5, 0x24, 0xaf, 0x60, 0x12, 0x06, |
| 334 | 0x2f, 0xe0, 0x37, 0xa6 }, |
| 335 | { 0xea, 0x6c, 0x01, 0x4d, 0xc7, 0x2d, 0x6f, 0x8c, |
| 336 | 0xcd, 0x1e, 0xd9, 0x2a, 0xce, 0x1d, 0x41, 0xf0, |
| 337 | 0xd8, 0xde, 0x89, 0x57 }, |
| 338 | { 0x4b, 0x00, 0x79, 0x01, 0xb7, 0x65, 0x48, 0x9a, |
| 339 | 0xbe, 0xad, 0x49, 0xd9, 0x26, 0xf7, 0x21, 0xd0, |
| 340 | 0x65, 0xa4, 0x29, 0xc1 }, |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 341 | { 0x3d, 0x2e, 0xec, 0x4f, 0xe4, 0x1c, 0x84, 0x9b, |
| 342 | 0x80, 0xc8, 0xd8, 0x36, 0x62, 0xc0, 0xe4, 0x4a, |
| 343 | 0x8b, 0x29, 0x1a, 0x96, 0x4c, 0xf2, 0xf0, 0x70, |
| 344 | 0x38 }, |
| 345 | { 0x56, 0xfa, 0x6a, 0xa7, 0x55, 0x48, 0x09, 0x9d, |
| 346 | 0xcc, 0x37, 0xd7, 0xf0, 0x34, 0x25, 0xe0, 0xc3 }, |
| 347 | }; |
| 348 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 349 | int mbedtls_pkcs5_self_test( int verbose ) |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 350 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 351 | mbedtls_md_context_t sha1_ctx; |
| 352 | const mbedtls_md_info_t *info_sha1; |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 353 | int ret, i; |
| 354 | unsigned char key[64]; |
| 355 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 356 | mbedtls_md_init( &sha1_ctx ); |
Paul Bakker | 84bbeb5 | 2014-07-01 14:53:22 +0200 | [diff] [blame] | 357 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 358 | info_sha1 = mbedtls_md_info_from_type( MBEDTLS_MD_SHA1 ); |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 359 | if( info_sha1 == NULL ) |
Paul Bakker | 84bbeb5 | 2014-07-01 14:53:22 +0200 | [diff] [blame] | 360 | { |
| 361 | ret = 1; |
| 362 | goto exit; |
| 363 | } |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 364 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 365 | if( ( ret = mbedtls_md_setup( &sha1_ctx, info_sha1, 1 ) ) != 0 ) |
Paul Bakker | 84bbeb5 | 2014-07-01 14:53:22 +0200 | [diff] [blame] | 366 | { |
| 367 | ret = 1; |
| 368 | goto exit; |
| 369 | } |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 370 | |
| 371 | for( i = 0; i < MAX_TESTS; i++ ) |
| 372 | { |
Manuel Pégourié-Gonnard | 13a1ef8 | 2014-03-27 20:12:44 +0100 | [diff] [blame] | 373 | if( verbose != 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 374 | mbedtls_printf( " PBKDF2 (SHA1) #%d: ", i ); |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 375 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 376 | ret = mbedtls_pkcs5_pbkdf2_hmac( &sha1_ctx, password[i], plen[i], salt[i], |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 377 | slen[i], it_cnt[i], key_len[i], key ); |
| 378 | if( ret != 0 || |
| 379 | memcmp( result_key[i], key, key_len[i] ) != 0 ) |
| 380 | { |
| 381 | if( verbose != 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 382 | mbedtls_printf( "failed\n" ); |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 383 | |
Paul Bakker | 84bbeb5 | 2014-07-01 14:53:22 +0200 | [diff] [blame] | 384 | ret = 1; |
| 385 | goto exit; |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 386 | } |
| 387 | |
| 388 | if( verbose != 0 ) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 389 | mbedtls_printf( "passed\n" ); |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 390 | } |
| 391 | |
Paul Bakker | 4400ecc | 2016-07-19 14:41:43 +0100 | [diff] [blame] | 392 | if( verbose != 0 ) |
| 393 | mbedtls_printf( "\n" ); |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 394 | |
Paul Bakker | 84bbeb5 | 2014-07-01 14:53:22 +0200 | [diff] [blame] | 395 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 396 | mbedtls_md_free( &sha1_ctx ); |
Paul Bakker | f863485 | 2013-07-03 13:31:52 +0200 | [diff] [blame] | 397 | |
Alfred Klomp | 1b4eda3 | 2014-07-14 22:07:34 +0200 | [diff] [blame] | 398 | return( ret ); |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 399 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 400 | #endif /* MBEDTLS_SHA1_C */ |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 401 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 402 | #endif /* MBEDTLS_SELF_TEST */ |
Paul Bakker | b0c19a4 | 2013-06-24 19:26:38 +0200 | [diff] [blame] | 403 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 404 | #endif /* MBEDTLS_PKCS5_C */ |