17c478bd9Sstevel@tonic-gate /*
27c478bd9Sstevel@tonic-gate * CDDL HEADER START
37c478bd9Sstevel@tonic-gate *
47c478bd9Sstevel@tonic-gate * The contents of this file are subject to the terms of the
5d3a28a55Sdinak * Common Development and Distribution License (the "License").
6d3a28a55Sdinak * You may not use this file except in compliance with the License.
77c478bd9Sstevel@tonic-gate *
87c478bd9Sstevel@tonic-gate * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
97c478bd9Sstevel@tonic-gate * or http://www.opensolaris.org/os/licensing.
107c478bd9Sstevel@tonic-gate * See the License for the specific language governing permissions
117c478bd9Sstevel@tonic-gate * and limitations under the License.
127c478bd9Sstevel@tonic-gate *
137c478bd9Sstevel@tonic-gate * When distributing Covered Code, include this CDDL HEADER in each
147c478bd9Sstevel@tonic-gate * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
157c478bd9Sstevel@tonic-gate * If applicable, add the following below this CDDL HEADER, with the
167c478bd9Sstevel@tonic-gate * fields enclosed by brackets "[]" replaced with your own identifying
177c478bd9Sstevel@tonic-gate * information: Portions Copyright [yyyy] [name of copyright owner]
187c478bd9Sstevel@tonic-gate *
197c478bd9Sstevel@tonic-gate * CDDL HEADER END
207c478bd9Sstevel@tonic-gate */
217c478bd9Sstevel@tonic-gate /*
22d3a28a55Sdinak * Copyright 2007 Sun Microsystems, Inc. All rights reserved.
237c478bd9Sstevel@tonic-gate * Use is subject to license terms.
24*fb261280SJason King * Copyright 2018, Joyent, Inc.
257c478bd9Sstevel@tonic-gate */
267c478bd9Sstevel@tonic-gate
277c478bd9Sstevel@tonic-gate /*
287c478bd9Sstevel@tonic-gate * Encryption and Decryption Functions
297c478bd9Sstevel@tonic-gate * (as defined in PKCS#11 spec sections 11.8 and 11.9)
307c478bd9Sstevel@tonic-gate */
317c478bd9Sstevel@tonic-gate
327c478bd9Sstevel@tonic-gate #include "metaGlobal.h"
337c478bd9Sstevel@tonic-gate
347c478bd9Sstevel@tonic-gate
357c478bd9Sstevel@tonic-gate /*
367c478bd9Sstevel@tonic-gate * meta_EncryptInit
377c478bd9Sstevel@tonic-gate *
387c478bd9Sstevel@tonic-gate */
397c478bd9Sstevel@tonic-gate CK_RV
meta_EncryptInit(CK_SESSION_HANDLE hSession,CK_MECHANISM_PTR pMechanism,CK_OBJECT_HANDLE hKey)407c478bd9Sstevel@tonic-gate meta_EncryptInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechanism,
417c478bd9Sstevel@tonic-gate CK_OBJECT_HANDLE hKey)
427c478bd9Sstevel@tonic-gate {
437c478bd9Sstevel@tonic-gate CK_RV rv;
447c478bd9Sstevel@tonic-gate meta_session_t *session;
457c478bd9Sstevel@tonic-gate meta_object_t *key;
467c478bd9Sstevel@tonic-gate
477c478bd9Sstevel@tonic-gate if (pMechanism == NULL)
487c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
497c478bd9Sstevel@tonic-gate
507c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
517c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
527c478bd9Sstevel@tonic-gate return (rv);
537c478bd9Sstevel@tonic-gate
547c478bd9Sstevel@tonic-gate rv = meta_handle2object(hKey, &key);
557c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
567c478bd9Sstevel@tonic-gate REFRELEASE(session);
577c478bd9Sstevel@tonic-gate return (rv);
587c478bd9Sstevel@tonic-gate }
597c478bd9Sstevel@tonic-gate
604a5b2e70Shaimay rv = meta_operation_init_defer(CKF_ENCRYPT, session, pMechanism, key);
617c478bd9Sstevel@tonic-gate
627c478bd9Sstevel@tonic-gate OBJRELEASE(key);
637c478bd9Sstevel@tonic-gate REFRELEASE(session);
647c478bd9Sstevel@tonic-gate
657c478bd9Sstevel@tonic-gate return (rv);
667c478bd9Sstevel@tonic-gate }
677c478bd9Sstevel@tonic-gate
687c478bd9Sstevel@tonic-gate
697c478bd9Sstevel@tonic-gate /*
707c478bd9Sstevel@tonic-gate * meta_Encrypt
717c478bd9Sstevel@tonic-gate *
727c478bd9Sstevel@tonic-gate */
737c478bd9Sstevel@tonic-gate CK_RV
meta_Encrypt(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pData,CK_ULONG ulDataLen,CK_BYTE_PTR pEncryptedData,CK_ULONG_PTR pulEncryptedDataLen)747c478bd9Sstevel@tonic-gate meta_Encrypt(CK_SESSION_HANDLE hSession,
757c478bd9Sstevel@tonic-gate CK_BYTE_PTR pData, CK_ULONG ulDataLen,
767c478bd9Sstevel@tonic-gate CK_BYTE_PTR pEncryptedData, CK_ULONG_PTR pulEncryptedDataLen)
777c478bd9Sstevel@tonic-gate {
787c478bd9Sstevel@tonic-gate CK_RV rv;
797c478bd9Sstevel@tonic-gate meta_session_t *session;
807c478bd9Sstevel@tonic-gate
817c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
827c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
837c478bd9Sstevel@tonic-gate return (rv);
847c478bd9Sstevel@tonic-gate
85*fb261280SJason King if (pulEncryptedDataLen == NULL) {
86*fb261280SJason King meta_operation_cleanup(session, CKF_ENCRYPT, FALSE);
87*fb261280SJason King REFRELEASE(session);
88*fb261280SJason King return (CKR_ARGUMENTS_BAD);
89*fb261280SJason King }
90*fb261280SJason King
91*fb261280SJason King /*
92*fb261280SJason King * Allow pData to be NULL as long as the length is 0 in order to
93*fb261280SJason King * support ciphers that permit 0 byte inputs (e.g. combined mode
94*fb261280SJason King * ciphers), otherwise consider pData being NULL as invalid.
95*fb261280SJason King */
96*fb261280SJason King if (pData == NULL && ulDataLen != 0) {
97d3a28a55Sdinak meta_operation_cleanup(session, CKF_ENCRYPT, FALSE);
987c478bd9Sstevel@tonic-gate REFRELEASE(session);
997c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
1007c478bd9Sstevel@tonic-gate }
1017c478bd9Sstevel@tonic-gate
102d3a28a55Sdinak rv = meta_do_operation(CKF_ENCRYPT, MODE_SINGLE, session, NULL,
1037c478bd9Sstevel@tonic-gate pData, ulDataLen, pEncryptedData, pulEncryptedDataLen);
1047c478bd9Sstevel@tonic-gate
1057c478bd9Sstevel@tonic-gate REFRELEASE(session);
1067c478bd9Sstevel@tonic-gate
1077c478bd9Sstevel@tonic-gate return (rv);
1087c478bd9Sstevel@tonic-gate }
1097c478bd9Sstevel@tonic-gate
1107c478bd9Sstevel@tonic-gate
1117c478bd9Sstevel@tonic-gate /*
1127c478bd9Sstevel@tonic-gate * meta_EncryptUpdate
1137c478bd9Sstevel@tonic-gate *
1147c478bd9Sstevel@tonic-gate */
1157c478bd9Sstevel@tonic-gate CK_RV
meta_EncryptUpdate(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pPart,CK_ULONG ulPartLen,CK_BYTE_PTR pEncryptedPart,CK_ULONG_PTR pulEncryptedPartLen)1167c478bd9Sstevel@tonic-gate meta_EncryptUpdate(CK_SESSION_HANDLE hSession,
1177c478bd9Sstevel@tonic-gate CK_BYTE_PTR pPart, CK_ULONG ulPartLen,
1187c478bd9Sstevel@tonic-gate CK_BYTE_PTR pEncryptedPart, CK_ULONG_PTR pulEncryptedPartLen)
1197c478bd9Sstevel@tonic-gate {
1207c478bd9Sstevel@tonic-gate CK_RV rv;
1217c478bd9Sstevel@tonic-gate meta_session_t *session;
1227c478bd9Sstevel@tonic-gate
1237c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
1247c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
1257c478bd9Sstevel@tonic-gate return (rv);
1267c478bd9Sstevel@tonic-gate
1277c478bd9Sstevel@tonic-gate if (pPart == NULL || pulEncryptedPartLen == NULL) {
128d3a28a55Sdinak meta_operation_cleanup(session, CKF_ENCRYPT, FALSE);
1297c478bd9Sstevel@tonic-gate REFRELEASE(session);
1307c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
1317c478bd9Sstevel@tonic-gate }
1327c478bd9Sstevel@tonic-gate
133d3a28a55Sdinak rv = meta_do_operation(CKF_ENCRYPT, MODE_UPDATE, session, NULL,
1347c478bd9Sstevel@tonic-gate pPart, ulPartLen, pEncryptedPart, pulEncryptedPartLen);
1357c478bd9Sstevel@tonic-gate
1367c478bd9Sstevel@tonic-gate REFRELEASE(session);
1377c478bd9Sstevel@tonic-gate
1387c478bd9Sstevel@tonic-gate return (rv);
1397c478bd9Sstevel@tonic-gate }
1407c478bd9Sstevel@tonic-gate
1417c478bd9Sstevel@tonic-gate
1427c478bd9Sstevel@tonic-gate /*
1437c478bd9Sstevel@tonic-gate * meta_EncryptFinal
1447c478bd9Sstevel@tonic-gate *
1457c478bd9Sstevel@tonic-gate */
1467c478bd9Sstevel@tonic-gate CK_RV
meta_EncryptFinal(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pLastEncryptedPart,CK_ULONG_PTR pulLastEncryptedPartLen)1477c478bd9Sstevel@tonic-gate meta_EncryptFinal(CK_SESSION_HANDLE hSession,
1487c478bd9Sstevel@tonic-gate CK_BYTE_PTR pLastEncryptedPart, CK_ULONG_PTR pulLastEncryptedPartLen)
1497c478bd9Sstevel@tonic-gate {
1507c478bd9Sstevel@tonic-gate CK_RV rv;
1517c478bd9Sstevel@tonic-gate meta_session_t *session;
1527c478bd9Sstevel@tonic-gate
1537c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
1547c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
1557c478bd9Sstevel@tonic-gate return (rv);
1567c478bd9Sstevel@tonic-gate
1577c478bd9Sstevel@tonic-gate if (pulLastEncryptedPartLen == NULL) {
158d3a28a55Sdinak meta_operation_cleanup(session, CKF_ENCRYPT, FALSE);
1597c478bd9Sstevel@tonic-gate REFRELEASE(session);
1607c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
1617c478bd9Sstevel@tonic-gate }
1627c478bd9Sstevel@tonic-gate
163d3a28a55Sdinak rv = meta_do_operation(CKF_ENCRYPT, MODE_FINAL, session, NULL,
1647c478bd9Sstevel@tonic-gate NULL, 0, pLastEncryptedPart, pulLastEncryptedPartLen);
1657c478bd9Sstevel@tonic-gate
1667c478bd9Sstevel@tonic-gate REFRELEASE(session);
1677c478bd9Sstevel@tonic-gate
1687c478bd9Sstevel@tonic-gate return (rv);
1697c478bd9Sstevel@tonic-gate }
1707c478bd9Sstevel@tonic-gate
1717c478bd9Sstevel@tonic-gate
1727c478bd9Sstevel@tonic-gate /*
1737c478bd9Sstevel@tonic-gate * meta_DecryptInit
1747c478bd9Sstevel@tonic-gate *
1757c478bd9Sstevel@tonic-gate */
1767c478bd9Sstevel@tonic-gate CK_RV
meta_DecryptInit(CK_SESSION_HANDLE hSession,CK_MECHANISM_PTR pMechanism,CK_OBJECT_HANDLE hKey)1777c478bd9Sstevel@tonic-gate meta_DecryptInit(CK_SESSION_HANDLE hSession, CK_MECHANISM_PTR pMechanism,
1787c478bd9Sstevel@tonic-gate CK_OBJECT_HANDLE hKey)
1797c478bd9Sstevel@tonic-gate {
1807c478bd9Sstevel@tonic-gate CK_RV rv;
1817c478bd9Sstevel@tonic-gate meta_session_t *session;
1827c478bd9Sstevel@tonic-gate meta_object_t *key;
1837c478bd9Sstevel@tonic-gate
1847c478bd9Sstevel@tonic-gate if (pMechanism == NULL)
1857c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
1867c478bd9Sstevel@tonic-gate
1877c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
1887c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
1897c478bd9Sstevel@tonic-gate return (rv);
1907c478bd9Sstevel@tonic-gate
1917c478bd9Sstevel@tonic-gate rv = meta_handle2object(hKey, &key);
1927c478bd9Sstevel@tonic-gate if (rv != CKR_OK) {
1937c478bd9Sstevel@tonic-gate REFRELEASE(session);
1947c478bd9Sstevel@tonic-gate return (rv);
1957c478bd9Sstevel@tonic-gate }
1967c478bd9Sstevel@tonic-gate
1974a5b2e70Shaimay rv = meta_operation_init_defer(CKF_DECRYPT, session, pMechanism, key);
1987c478bd9Sstevel@tonic-gate
1997c478bd9Sstevel@tonic-gate OBJRELEASE(key);
2007c478bd9Sstevel@tonic-gate REFRELEASE(session);
2017c478bd9Sstevel@tonic-gate
2027c478bd9Sstevel@tonic-gate return (rv);
2037c478bd9Sstevel@tonic-gate }
2047c478bd9Sstevel@tonic-gate
2057c478bd9Sstevel@tonic-gate
2067c478bd9Sstevel@tonic-gate /*
2077c478bd9Sstevel@tonic-gate * meta_Decrypt
2087c478bd9Sstevel@tonic-gate *
2097c478bd9Sstevel@tonic-gate */
2107c478bd9Sstevel@tonic-gate CK_RV
meta_Decrypt(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pEncryptedData,CK_ULONG ulEncryptedDataLen,CK_BYTE_PTR pData,CK_ULONG_PTR pulDataLen)2117c478bd9Sstevel@tonic-gate meta_Decrypt(CK_SESSION_HANDLE hSession,
2127c478bd9Sstevel@tonic-gate CK_BYTE_PTR pEncryptedData, CK_ULONG ulEncryptedDataLen,
2137c478bd9Sstevel@tonic-gate CK_BYTE_PTR pData, CK_ULONG_PTR pulDataLen)
2147c478bd9Sstevel@tonic-gate {
2157c478bd9Sstevel@tonic-gate CK_RV rv;
2167c478bd9Sstevel@tonic-gate meta_session_t *session;
2177c478bd9Sstevel@tonic-gate
2187c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
2197c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
2207c478bd9Sstevel@tonic-gate return (rv);
2217c478bd9Sstevel@tonic-gate
2227c478bd9Sstevel@tonic-gate if (pEncryptedData == NULL || pulDataLen == NULL) {
223d3a28a55Sdinak meta_operation_cleanup(session, CKF_DECRYPT, FALSE);
2247c478bd9Sstevel@tonic-gate REFRELEASE(session);
2257c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
2267c478bd9Sstevel@tonic-gate }
2277c478bd9Sstevel@tonic-gate
228d3a28a55Sdinak rv = meta_do_operation(CKF_DECRYPT, MODE_SINGLE, session, NULL,
2297c478bd9Sstevel@tonic-gate pEncryptedData, ulEncryptedDataLen, pData, pulDataLen);
2307c478bd9Sstevel@tonic-gate
2317c478bd9Sstevel@tonic-gate REFRELEASE(session);
2327c478bd9Sstevel@tonic-gate
2337c478bd9Sstevel@tonic-gate return (rv);
2347c478bd9Sstevel@tonic-gate }
2357c478bd9Sstevel@tonic-gate
2367c478bd9Sstevel@tonic-gate
2377c478bd9Sstevel@tonic-gate /*
2387c478bd9Sstevel@tonic-gate * meta_DecryptUpdate
2397c478bd9Sstevel@tonic-gate *
2407c478bd9Sstevel@tonic-gate */
2417c478bd9Sstevel@tonic-gate CK_RV
meta_DecryptUpdate(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pEncryptedPart,CK_ULONG ulEncryptedPartLen,CK_BYTE_PTR pPart,CK_ULONG_PTR pulPartLen)2427c478bd9Sstevel@tonic-gate meta_DecryptUpdate(CK_SESSION_HANDLE hSession,
2437c478bd9Sstevel@tonic-gate CK_BYTE_PTR pEncryptedPart, CK_ULONG ulEncryptedPartLen,
2447c478bd9Sstevel@tonic-gate CK_BYTE_PTR pPart, CK_ULONG_PTR pulPartLen)
2457c478bd9Sstevel@tonic-gate {
2467c478bd9Sstevel@tonic-gate CK_RV rv;
2477c478bd9Sstevel@tonic-gate meta_session_t *session;
2487c478bd9Sstevel@tonic-gate
2497c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
2507c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
2517c478bd9Sstevel@tonic-gate return (rv);
2527c478bd9Sstevel@tonic-gate
2537c478bd9Sstevel@tonic-gate if (pEncryptedPart == NULL || pulPartLen == NULL) {
254d3a28a55Sdinak meta_operation_cleanup(session, CKF_DECRYPT, FALSE);
2557c478bd9Sstevel@tonic-gate REFRELEASE(session);
2567c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
2577c478bd9Sstevel@tonic-gate }
2587c478bd9Sstevel@tonic-gate
259d3a28a55Sdinak rv = meta_do_operation(CKF_DECRYPT, MODE_UPDATE, session, NULL,
2607c478bd9Sstevel@tonic-gate pEncryptedPart, ulEncryptedPartLen, pPart, pulPartLen);
2617c478bd9Sstevel@tonic-gate
2627c478bd9Sstevel@tonic-gate REFRELEASE(session);
2637c478bd9Sstevel@tonic-gate
2647c478bd9Sstevel@tonic-gate return (rv);
2657c478bd9Sstevel@tonic-gate }
2667c478bd9Sstevel@tonic-gate
2677c478bd9Sstevel@tonic-gate
2687c478bd9Sstevel@tonic-gate /*
2697c478bd9Sstevel@tonic-gate * meta_DecryptFinal
2707c478bd9Sstevel@tonic-gate *
2717c478bd9Sstevel@tonic-gate */
2727c478bd9Sstevel@tonic-gate CK_RV
meta_DecryptFinal(CK_SESSION_HANDLE hSession,CK_BYTE_PTR pLastPart,CK_ULONG_PTR pulLastPartLen)2737c478bd9Sstevel@tonic-gate meta_DecryptFinal(CK_SESSION_HANDLE hSession,
2747c478bd9Sstevel@tonic-gate CK_BYTE_PTR pLastPart, CK_ULONG_PTR pulLastPartLen)
2757c478bd9Sstevel@tonic-gate {
2767c478bd9Sstevel@tonic-gate CK_RV rv;
2777c478bd9Sstevel@tonic-gate meta_session_t *session;
2787c478bd9Sstevel@tonic-gate
2797c478bd9Sstevel@tonic-gate rv = meta_handle2session(hSession, &session);
2807c478bd9Sstevel@tonic-gate if (rv != CKR_OK)
2817c478bd9Sstevel@tonic-gate return (rv);
2827c478bd9Sstevel@tonic-gate
2837c478bd9Sstevel@tonic-gate if (pulLastPartLen == NULL) {
284d3a28a55Sdinak meta_operation_cleanup(session, CKF_DECRYPT, FALSE);
2857c478bd9Sstevel@tonic-gate REFRELEASE(session);
2867c478bd9Sstevel@tonic-gate return (CKR_ARGUMENTS_BAD);
2877c478bd9Sstevel@tonic-gate }
2887c478bd9Sstevel@tonic-gate
289d3a28a55Sdinak rv = meta_do_operation(CKF_DECRYPT, MODE_FINAL, session, NULL,
2907c478bd9Sstevel@tonic-gate NULL, 0, pLastPart, pulLastPartLen);
2917c478bd9Sstevel@tonic-gate
2927c478bd9Sstevel@tonic-gate REFRELEASE(session);
2937c478bd9Sstevel@tonic-gate
2947c478bd9Sstevel@tonic-gate return (rv);
2957c478bd9Sstevel@tonic-gate }
296