mirror of
https://github.com/urbit/shrub.git
synced 2024-12-22 18:31:44 +03:00
220 lines
9.0 KiB
C
220 lines
9.0 KiB
C
#ifndef URCRYPT_H
|
|
#define URCRYPT_H
|
|
|
|
#include <stdint.h>
|
|
#include <stdbool.h>
|
|
#include <stdlib.h>
|
|
|
|
typedef void *(*urcrypt_malloc_t)(size_t);
|
|
typedef void *(*urcrypt_realloc_t)(void*, size_t);
|
|
typedef void (*urcrypt_free_t)(void*);
|
|
|
|
/* We depend on OpenSSL for various reasons, which doesn't promise not to
|
|
* allocate memory and has the annoying CRYPTO_set_mem_functions api. We
|
|
* are therefore forced to support it in some fashion.
|
|
*
|
|
* If you need to control urcrypt's internal OpenSSL allocation, you can call
|
|
* this function. It wraps the OpenSSL function, returning 0 on success.
|
|
*
|
|
* urcrypt will not use these functions directly.
|
|
*/
|
|
int urcrypt_set_openssl_mem_functions(urcrypt_malloc_t malloc_ptr,
|
|
urcrypt_realloc_t realloc_ptr,
|
|
urcrypt_free_t free_ptr);
|
|
|
|
// const arguments are not written to, non-const arguments may be
|
|
// all arrays are in little-endian byte order.
|
|
// array sizes[64] are purely documentary
|
|
|
|
// 0 on success, result in out
|
|
int urcrypt_ed_point_add(const uint8_t a[32],
|
|
const uint8_t b[32],
|
|
uint8_t out[32]);
|
|
int urcrypt_ed_scalarmult(const uint8_t a[32],
|
|
const uint8_t b[32],
|
|
uint8_t out[32]);
|
|
// void functions have no failure mode
|
|
void urcrypt_ed_scalarmult_base(const uint8_t a[32],
|
|
uint8_t out[32]);
|
|
int urcrypt_ed_add_scalarmult_scalarmult_base(const uint8_t a[32],
|
|
const uint8_t a_point[32],
|
|
const uint8_t b[32],
|
|
uint8_t out[32]);
|
|
int urcrypt_ed_add_double_scalarmult(const uint8_t a[32],
|
|
const uint8_t a_point[32],
|
|
const uint8_t b[32],
|
|
const uint8_t b_point[32],
|
|
uint8_t out[32]);
|
|
|
|
void urcrypt_ed_puck(const uint8_t seed[32],
|
|
uint8_t out[32]);
|
|
void urcrypt_ed_shar(const uint8_t public[32],
|
|
const uint8_t seed[32],
|
|
uint8_t out[32]);
|
|
void urcrypt_ed_sign(const uint8_t *message,
|
|
size_t length,
|
|
const uint8_t seed[32],
|
|
uint8_t out[64]);
|
|
// return value means the signature was (not) verified
|
|
bool urcrypt_ed_veri(const uint8_t *message,
|
|
size_t length,
|
|
const uint8_t signature[64],
|
|
const uint8_t public[32]);
|
|
|
|
int urcrypt_aes_ecba_en(uint8_t key[16], uint8_t block[16], uint8_t out[16]);
|
|
int urcrypt_aes_ecba_de(uint8_t key[16], uint8_t block[16], uint8_t out[16]);
|
|
int urcrypt_aes_ecbb_en(uint8_t key[24], uint8_t block[16], uint8_t out[16]);
|
|
int urcrypt_aes_ecbb_de(uint8_t key[24], uint8_t block[16], uint8_t out[16]);
|
|
int urcrypt_aes_ecbc_en(uint8_t key[32], uint8_t block[16], uint8_t out[16]);
|
|
int urcrypt_aes_ecbc_de(uint8_t key[32], uint8_t block[16], uint8_t out[16]);
|
|
|
|
// message and length are read/write so
|
|
// realloc_ptr can be used as realloc to pad message
|
|
int urcrypt_aes_cbca_en(uint8_t **message_ptr,
|
|
size_t *length_ptr,
|
|
uint8_t key[16],
|
|
uint8_t ivec[16],
|
|
urcrypt_realloc_t realloc_ptr);
|
|
int urcrypt_aes_cbca_de(uint8_t **message_ptr,
|
|
size_t *length_ptr,
|
|
uint8_t key[16],
|
|
uint8_t ivec[16],
|
|
urcrypt_realloc_t realloc_ptr);
|
|
int urcrypt_aes_cbcb_en(uint8_t **message_ptr,
|
|
size_t *length_ptr,
|
|
uint8_t key[24],
|
|
uint8_t ivec[16],
|
|
urcrypt_realloc_t realloc_ptr);
|
|
int urcrypt_aes_cbcb_de(uint8_t **message_ptr,
|
|
size_t *length_ptr,
|
|
uint8_t key[24],
|
|
uint8_t ivec[16],
|
|
urcrypt_realloc_t realloc_ptr);
|
|
int urcrypt_aes_cbcc_en(uint8_t **message_ptr,
|
|
size_t *length_ptr,
|
|
uint8_t key[32],
|
|
uint8_t ivec[16],
|
|
urcrypt_realloc_t realloc_ptr);
|
|
int urcrypt_aes_cbcc_de(uint8_t **message_ptr,
|
|
size_t *length_ptr,
|
|
uint8_t key[32],
|
|
uint8_t ivec[16],
|
|
urcrypt_realloc_t realloc_ptr);
|
|
|
|
typedef struct {
|
|
size_t length;
|
|
uint8_t *bytes;
|
|
} urcrypt_aes_siv_data;
|
|
|
|
int urcrypt_aes_siva_en(uint8_t *message,
|
|
size_t message_length,
|
|
urcrypt_aes_siv_data *data,
|
|
size_t data_length,
|
|
uint8_t key[32],
|
|
uint8_t iv[16],
|
|
uint8_t *out);
|
|
int urcrypt_aes_siva_de(uint8_t *message,
|
|
size_t message_length,
|
|
urcrypt_aes_siv_data *data,
|
|
size_t data_length,
|
|
uint8_t key[32],
|
|
uint8_t iv[16],
|
|
uint8_t *out);
|
|
int urcrypt_aes_sivb_en(uint8_t *message,
|
|
size_t message_length,
|
|
urcrypt_aes_siv_data *data,
|
|
size_t data_length,
|
|
uint8_t key[32],
|
|
uint8_t iv[16],
|
|
uint8_t *out);
|
|
int urcrypt_aes_sivb_de(uint8_t *message,
|
|
size_t message_length,
|
|
urcrypt_aes_siv_data *data,
|
|
size_t data_length,
|
|
uint8_t key[48],
|
|
uint8_t iv[16],
|
|
uint8_t *out);
|
|
int urcrypt_aes_sivc_en(uint8_t *message,
|
|
size_t message_length,
|
|
urcrypt_aes_siv_data *data,
|
|
size_t data_length,
|
|
uint8_t key[64],
|
|
uint8_t iv[16],
|
|
uint8_t *out);
|
|
int urcrypt_aes_sivc_de(uint8_t *message,
|
|
size_t message_length,
|
|
urcrypt_aes_siv_data *data,
|
|
size_t data_length,
|
|
uint8_t key[64],
|
|
uint8_t iv[16],
|
|
uint8_t *out);
|
|
|
|
int urcrypt_ripemd160(uint8_t *message, size_t length, uint8_t out[20]);
|
|
|
|
void urcrypt_sha1(uint8_t *message, size_t length, uint8_t out[20]);
|
|
void urcrypt_shay(const uint8_t *message, size_t length, uint8_t out[32]);
|
|
void urcrypt_shal(const uint8_t *message, size_t length, uint8_t out[64]);
|
|
void urcrypt_shas(uint8_t *salt, size_t salt_length,
|
|
const uint8_t *message, size_t message_length,
|
|
uint8_t out[32]);
|
|
|
|
#define urcrypt_argon2_d 0
|
|
#define urcrypt_argon2_i 1
|
|
#define urcrypt_argon2_id 2
|
|
#define urcrypt_argon2_u 10
|
|
|
|
/* returns a constant error message string or NULL for success */
|
|
const char* urcrypt_argon2(uint8_t type, // one of the urcrpyt_argon2_*
|
|
uint32_t version,
|
|
uint32_t threads,
|
|
uint32_t memory_cost,
|
|
uint32_t time_cost,
|
|
size_t secret_length,
|
|
uint8_t *secret,
|
|
size_t associated_length,
|
|
uint8_t *associated,
|
|
size_t password_length,
|
|
uint8_t *password,
|
|
size_t salt_length,
|
|
uint8_t *salt,
|
|
size_t out_length,
|
|
uint8_t *out,
|
|
urcrypt_malloc_t malloc_ptr,
|
|
urcrypt_free_t free_ptr);
|
|
|
|
int urcrypt_blake2(size_t message_length,
|
|
uint8_t *message,
|
|
size_t key_length,
|
|
uint8_t key[64],
|
|
size_t out_length,
|
|
uint8_t *out);
|
|
|
|
/* there is some long-term context associated with the secp library
|
|
* (precomputed tables, etc). Because the context itself is thread-safe,
|
|
* we have opted to manage it statically and present a simple calling
|
|
* interface that doesn't mention it.
|
|
*/
|
|
|
|
/* initialize static secp context (not thread-safe). Recommmendation:
|
|
* call this once at main thread startup before calling other secp functions.
|
|
* Use a high quality source of entropy.
|
|
*/
|
|
int urcrypt_secp_init(uint8_t entropy[32]);
|
|
|
|
/* restore initial secp context conditons (not thread-safe). Recommendation:
|
|
* call this just before that main thread exits to make valgrind etc. happy
|
|
*/
|
|
void urcrypt_secp_cleanup(void);
|
|
|
|
// technically usable without the secp context
|
|
int urcrypt_secp_make(uint8_t hash[32], uint8_t key[32], uint8_t out[32]);
|
|
|
|
int urcrypt_secp_reco(uint8_t hash[32],
|
|
uint8_t key_v, // 0, 1, 2, 3
|
|
const uint8_t key_r[32],
|
|
const uint8_t key_s[32],
|
|
uint8_t out_x[32],
|
|
uint8_t out_y[32]);
|
|
|
|
#endif
|