40fa684c18
Keep module compatibility with mbedtls 2.x (old LTS branch). A patch has been added to allow compiling after removing all the `psa_*` files from the library folder (will look into upstreaming it). Note: mbedTLS 3.6 finally enabled TLSv1.3 by default, but it requires some module changes, and to enable PSA crypto (new "standard" API specification), so it might be best done in a separate commit/PR.
112 lines
3.2 KiB
C++
112 lines
3.2 KiB
C++
/**
|
|
* \file padlock.h
|
|
*
|
|
* \brief VIA PadLock ACE for HW encryption/decryption supported by some
|
|
* processors
|
|
*
|
|
* \warning These functions are only for internal use by other library
|
|
* functions; you must not call them directly.
|
|
*/
|
|
/*
|
|
* Copyright The Mbed TLS Contributors
|
|
* SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
|
|
*/
|
|
#ifndef MBEDTLS_PADLOCK_H
|
|
#define MBEDTLS_PADLOCK_H
|
|
|
|
#include "mbedtls/build_info.h"
|
|
|
|
#include "mbedtls/aes.h"
|
|
|
|
#define MBEDTLS_ERR_PADLOCK_DATA_MISALIGNED -0x0030 /**< Input data should be aligned. */
|
|
|
|
#if defined(__has_feature)
|
|
#if __has_feature(address_sanitizer)
|
|
#define MBEDTLS_HAVE_ASAN
|
|
#endif
|
|
#endif
|
|
|
|
/*
|
|
* - `padlock` is implements with GNUC assembly for x86 target.
|
|
* - Some versions of ASan result in errors about not enough registers.
|
|
*/
|
|
#if defined(MBEDTLS_PADLOCK_C) && \
|
|
defined(__GNUC__) && defined(MBEDTLS_ARCH_IS_X86) && \
|
|
defined(MBEDTLS_HAVE_ASM) && \
|
|
!defined(MBEDTLS_HAVE_ASAN)
|
|
|
|
#define MBEDTLS_VIA_PADLOCK_HAVE_CODE
|
|
|
|
#include <stdint.h>
|
|
|
|
#define MBEDTLS_PADLOCK_RNG 0x000C
|
|
#define MBEDTLS_PADLOCK_ACE 0x00C0
|
|
#define MBEDTLS_PADLOCK_PHE 0x0C00
|
|
#define MBEDTLS_PADLOCK_PMM 0x3000
|
|
|
|
#define MBEDTLS_PADLOCK_ALIGN16(x) (uint32_t *) (16 + ((int32_t) (x) & ~15))
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
/**
|
|
* \brief Internal PadLock detection routine
|
|
*
|
|
* \note This function is only for internal use by other library
|
|
* functions; you must not call it directly.
|
|
*
|
|
* \param feature The feature to detect
|
|
*
|
|
* \return non-zero if CPU has support for the feature, 0 otherwise
|
|
*/
|
|
int mbedtls_padlock_has_support(int feature);
|
|
|
|
/**
|
|
* \brief Internal PadLock AES-ECB block en(de)cryption
|
|
*
|
|
* \note This function is only for internal use by other library
|
|
* functions; you must not call it directly.
|
|
*
|
|
* \param ctx AES context
|
|
* \param mode MBEDTLS_AES_ENCRYPT or MBEDTLS_AES_DECRYPT
|
|
* \param input 16-byte input block
|
|
* \param output 16-byte output block
|
|
*
|
|
* \return 0 if success, 1 if operation failed
|
|
*/
|
|
int mbedtls_padlock_xcryptecb(mbedtls_aes_context *ctx,
|
|
int mode,
|
|
const unsigned char input[16],
|
|
unsigned char output[16]);
|
|
|
|
/**
|
|
* \brief Internal PadLock AES-CBC buffer en(de)cryption
|
|
*
|
|
* \note This function is only for internal use by other library
|
|
* functions; you must not call it directly.
|
|
*
|
|
* \param ctx AES context
|
|
* \param mode MBEDTLS_AES_ENCRYPT or MBEDTLS_AES_DECRYPT
|
|
* \param length length of the input data
|
|
* \param iv initialization vector (updated after use)
|
|
* \param input buffer holding the input data
|
|
* \param output buffer holding the output data
|
|
*
|
|
* \return 0 if success, 1 if operation failed
|
|
*/
|
|
int mbedtls_padlock_xcryptcbc(mbedtls_aes_context *ctx,
|
|
int mode,
|
|
size_t length,
|
|
unsigned char iv[16],
|
|
const unsigned char *input,
|
|
unsigned char *output);
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif /* HAVE_X86 */
|
|
|
|
#endif /* padlock.h */
|