17c478bd9Sstevel@tonic-gate /*
2159d09a2SMark Phalan * Copyright 2008 Sun Microsystems, Inc. All rights reserved.
37c478bd9Sstevel@tonic-gate * Use is subject to license terms.
47c478bd9Sstevel@tonic-gate */
57c478bd9Sstevel@tonic-gate
67c478bd9Sstevel@tonic-gate
77c478bd9Sstevel@tonic-gate /*
87c478bd9Sstevel@tonic-gate * Copyright (C) 1998 by the FundsXpress, INC.
9*55fea89dSDan Cross *
107c478bd9Sstevel@tonic-gate * All rights reserved.
11*55fea89dSDan Cross *
127c478bd9Sstevel@tonic-gate * Export of this software from the United States of America may require
137c478bd9Sstevel@tonic-gate * a specific license from the United States Government. It is the
147c478bd9Sstevel@tonic-gate * responsibility of any person or organization contemplating export to
157c478bd9Sstevel@tonic-gate * obtain such a license before exporting.
16*55fea89dSDan Cross *
177c478bd9Sstevel@tonic-gate * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
187c478bd9Sstevel@tonic-gate * distribute this software and its documentation for any purpose and
197c478bd9Sstevel@tonic-gate * without fee is hereby granted, provided that the above copyright
207c478bd9Sstevel@tonic-gate * notice appear in all copies and that both that copyright notice and
217c478bd9Sstevel@tonic-gate * this permission notice appear in supporting documentation, and that
227c478bd9Sstevel@tonic-gate * the name of FundsXpress. not be used in advertising or publicity pertaining
237c478bd9Sstevel@tonic-gate * to distribution of the software without specific, written prior
247c478bd9Sstevel@tonic-gate * permission. FundsXpress makes no representations about the suitability of
257c478bd9Sstevel@tonic-gate * this software for any purpose. It is provided "as is" without express
267c478bd9Sstevel@tonic-gate * or implied warranty.
27*55fea89dSDan Cross *
287c478bd9Sstevel@tonic-gate * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
297c478bd9Sstevel@tonic-gate * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
307c478bd9Sstevel@tonic-gate * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
317c478bd9Sstevel@tonic-gate */
327c478bd9Sstevel@tonic-gate
33159d09a2SMark Phalan #include "k5-int.h"
34159d09a2SMark Phalan #include "des_int.h"
357c478bd9Sstevel@tonic-gate
367c478bd9Sstevel@tonic-gate static krb5_error_code
k5_des3_docrypt(krb5_context context,krb5_const krb5_keyblock * key,krb5_const krb5_data * ivec,krb5_const krb5_data * input,krb5_data * output,int encrypt)377c478bd9Sstevel@tonic-gate k5_des3_docrypt(krb5_context context,
387c478bd9Sstevel@tonic-gate krb5_const krb5_keyblock *key, krb5_const krb5_data *ivec,
397c478bd9Sstevel@tonic-gate krb5_const krb5_data *input, krb5_data *output, int encrypt)
407c478bd9Sstevel@tonic-gate {
417c478bd9Sstevel@tonic-gate /* LINTED */
427c478bd9Sstevel@tonic-gate krb5_error_code ret;
437c478bd9Sstevel@tonic-gate
447c478bd9Sstevel@tonic-gate KRB5_LOG0(KRB5_INFO, "k5_des3_docrypt() start");
457c478bd9Sstevel@tonic-gate
467c478bd9Sstevel@tonic-gate /* key->enctype was checked by the caller */
477c478bd9Sstevel@tonic-gate
487c478bd9Sstevel@tonic-gate if (key->length != 24)
497c478bd9Sstevel@tonic-gate return(KRB5_BAD_KEYSIZE);
507c478bd9Sstevel@tonic-gate if ((input->length%8) != 0)
517c478bd9Sstevel@tonic-gate return(KRB5_BAD_MSIZE);
527c478bd9Sstevel@tonic-gate if (ivec && (ivec->length != 8))
537c478bd9Sstevel@tonic-gate return(KRB5_BAD_MSIZE);
547c478bd9Sstevel@tonic-gate if (input->length != output->length)
557c478bd9Sstevel@tonic-gate return(KRB5_BAD_MSIZE);
567c478bd9Sstevel@tonic-gate
577c478bd9Sstevel@tonic-gate ret = mit_des3_cbc_encrypt(context, (krb5_pointer) input->data,
587c478bd9Sstevel@tonic-gate (krb5_pointer) output->data, input->length,
597c478bd9Sstevel@tonic-gate (krb5_keyblock *)key,
607c478bd9Sstevel@tonic-gate ivec?(unsigned char *)ivec->data:(unsigned char *)mit_des_zeroblock,
617c478bd9Sstevel@tonic-gate encrypt);
627c478bd9Sstevel@tonic-gate
637c478bd9Sstevel@tonic-gate KRB5_LOG0(KRB5_INFO, "k5_des3_docrypt() end\n");
647c478bd9Sstevel@tonic-gate return(ret);
657c478bd9Sstevel@tonic-gate }
667c478bd9Sstevel@tonic-gate
677c478bd9Sstevel@tonic-gate static krb5_error_code
k5_des3_encrypt(krb5_context context,krb5_const krb5_keyblock * key,krb5_const krb5_data * ivec,krb5_const krb5_data * input,krb5_data * output)687c478bd9Sstevel@tonic-gate k5_des3_encrypt(krb5_context context,
697c478bd9Sstevel@tonic-gate krb5_const krb5_keyblock *key, krb5_const krb5_data *ivec,
707c478bd9Sstevel@tonic-gate krb5_const krb5_data *input, krb5_data *output)
717c478bd9Sstevel@tonic-gate {
727c478bd9Sstevel@tonic-gate return(k5_des3_docrypt(context, key, ivec, input, output, 1));
737c478bd9Sstevel@tonic-gate }
747c478bd9Sstevel@tonic-gate
757c478bd9Sstevel@tonic-gate static krb5_error_code
k5_des3_decrypt(krb5_context context,krb5_const krb5_keyblock * key,krb5_const krb5_data * ivec,krb5_const krb5_data * input,krb5_data * output)767c478bd9Sstevel@tonic-gate k5_des3_decrypt(krb5_context context,
777c478bd9Sstevel@tonic-gate krb5_const krb5_keyblock *key, krb5_const krb5_data *ivec,
787c478bd9Sstevel@tonic-gate krb5_const krb5_data *input, krb5_data *output)
797c478bd9Sstevel@tonic-gate {
807c478bd9Sstevel@tonic-gate return(k5_des3_docrypt(context, key, ivec, input, output, 0));
817c478bd9Sstevel@tonic-gate }
827c478bd9Sstevel@tonic-gate
837c478bd9Sstevel@tonic-gate static krb5_error_code
k5_des3_make_key(krb5_context context,krb5_const krb5_data * randombits,krb5_keyblock * key)847c478bd9Sstevel@tonic-gate k5_des3_make_key(krb5_context context, krb5_const krb5_data *randombits,
857c478bd9Sstevel@tonic-gate krb5_keyblock *key)
867c478bd9Sstevel@tonic-gate {
877c478bd9Sstevel@tonic-gate int i;
887c478bd9Sstevel@tonic-gate krb5_error_code ret = 0;
897c478bd9Sstevel@tonic-gate
907c478bd9Sstevel@tonic-gate KRB5_LOG0(KRB5_INFO, "k5_des3_make_key() start\n");
917c478bd9Sstevel@tonic-gate
927c478bd9Sstevel@tonic-gate if (key->length != 24)
937c478bd9Sstevel@tonic-gate return(KRB5_BAD_KEYSIZE);
947c478bd9Sstevel@tonic-gate if (randombits->length != 21)
957c478bd9Sstevel@tonic-gate return(KRB5_CRYPTO_INTERNAL);
967c478bd9Sstevel@tonic-gate
977c478bd9Sstevel@tonic-gate key->magic = KV5M_KEYBLOCK;
987c478bd9Sstevel@tonic-gate key->length = 24;
997c478bd9Sstevel@tonic-gate key->dk_list = NULL;
1007c478bd9Sstevel@tonic-gate
1017c478bd9Sstevel@tonic-gate /* take the seven bytes, move them around into the top 7 bits of the
1027c478bd9Sstevel@tonic-gate 8 key bytes, then compute the parity bits. Do this three times. */
1037c478bd9Sstevel@tonic-gate
1047c478bd9Sstevel@tonic-gate for (i=0; i<3; i++) {
1057c478bd9Sstevel@tonic-gate (void) memcpy(key->contents+i*8, randombits->data+i*7, 7);
1067c478bd9Sstevel@tonic-gate key->contents[i*8+7] = (((key->contents[i*8]&1)<<1) |
1077c478bd9Sstevel@tonic-gate ((key->contents[i*8+1]&1)<<2) |
1087c478bd9Sstevel@tonic-gate ((key->contents[i*8+2]&1)<<3) |
1097c478bd9Sstevel@tonic-gate ((key->contents[i*8+3]&1)<<4) |
1107c478bd9Sstevel@tonic-gate ((key->contents[i*8+4]&1)<<5) |
1117c478bd9Sstevel@tonic-gate ((key->contents[i*8+5]&1)<<6) |
1127c478bd9Sstevel@tonic-gate ((key->contents[i*8+6]&1)<<7));
1137c478bd9Sstevel@tonic-gate
1147c478bd9Sstevel@tonic-gate mit_des_fixup_key_parity(key->contents+i*8);
1157c478bd9Sstevel@tonic-gate }
1167c478bd9Sstevel@tonic-gate #ifdef _KERNEL
1177c478bd9Sstevel@tonic-gate key->kef_key.ck_data = NULL;
1187c478bd9Sstevel@tonic-gate key->key_tmpl = NULL;
1197c478bd9Sstevel@tonic-gate ret = init_key_kef(context->kef_cipher_mt, key);
1207c478bd9Sstevel@tonic-gate #else
1217c478bd9Sstevel@tonic-gate key->hKey = CK_INVALID_HANDLE;
1227c478bd9Sstevel@tonic-gate ret = init_key_uef(krb_ctx_hSession(context), key);
1237c478bd9Sstevel@tonic-gate #endif /* _KERNEL */
1247c478bd9Sstevel@tonic-gate KRB5_LOG0(KRB5_INFO, "k5_des3_make_key() end\n");
1257c478bd9Sstevel@tonic-gate return(ret);
1267c478bd9Sstevel@tonic-gate }
1277c478bd9Sstevel@tonic-gate
128159d09a2SMark Phalan const struct krb5_enc_provider krb5int_enc_des3 = {
129505d05c7Sgtb 8,
130505d05c7Sgtb 21, 24,
1317c478bd9Sstevel@tonic-gate k5_des3_encrypt,
1327c478bd9Sstevel@tonic-gate k5_des3_decrypt,
1337c478bd9Sstevel@tonic-gate k5_des3_make_key,
1347c478bd9Sstevel@tonic-gate krb5int_des_init_state,
1357c478bd9Sstevel@tonic-gate krb5int_default_free_state
1367c478bd9Sstevel@tonic-gate };
137