xref: /illumos-gate/usr/src/uts/common/gssapi/mechs/krb5/crypto/decrypt.c (revision 628e3cbed6489fa1db545d8524a06cd6535af456)
1 /*
2  * Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
3  * Use is subject to license terms.
4  */
5 
6 #pragma ident	"%Z%%M%	%I%	%E% SMI"
7 /*
8  * Copyright (C) 1998 by the FundsXpress, INC.
9  *
10  * All rights reserved.
11  *
12  * Export of this software from the United States of America may require
13  * a specific license from the United States Government.  It is the
14  * responsibility of any person or organization contemplating export to
15  * obtain such a license before exporting.
16  *
17  * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
18  * distribute this software and its documentation for any purpose and
19  * without fee is hereby granted, provided that the above copyright
20  * notice appear in all copies and that both that copyright notice and
21  * this permission notice appear in supporting documentation, and that
22  * the name of FundsXpress. not be used in advertising or publicity pertaining
23  * to distribution of the software without specific, written prior
24  * permission.  FundsXpress makes no representations about the suitability of
25  * this software for any purpose.  It is provided "as is" without express
26  * or implied warranty.
27  *
28  * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
29  * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
30  * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
31  */
32 
33 #include <k5-int.h>
34 #include <etypes.h>
35 
36 /*ARGSUSED*/
37 krb5_error_code KRB5_CALLCONV
38 krb5_c_decrypt(krb5_context context, const krb5_keyblock *key,
39 	    krb5_keyusage usage, const krb5_data *ivec,
40 	    const krb5_enc_data *input, krb5_data *output)
41 {
42     int i;
43     krb5_error_code ret = 0;
44 
45     for (i=0; i<krb5_enctypes_length; i++) {
46 	if (krb5_enctypes_list[i].etype == key->enctype)
47 	    break;
48     }
49 
50     if (i == krb5_enctypes_length)
51 	return(KRB5_BAD_ENCTYPE);
52 
53     if ((input->enctype != ENCTYPE_UNKNOWN) &&
54 	(krb5_enctypes_list[i].etype != input->enctype))
55 	return(KRB5_BAD_ENCTYPE);
56 
57 #ifdef _KERNEL
58     context->kef_cipher_mt = krb5_enctypes_list[i].kef_cipher_mt;
59     context->kef_hash_mt = krb5_enctypes_list[i].kef_hash_mt;
60     if (key->kef_key.ck_data == NULL)
61       ret = init_key_kef(context->kef_cipher_mt, (krb5_keyblock *)key);
62     if (ret)
63 	    return(ret);
64 
65 #else
66     if ((ret = init_key_uef(krb_ctx_hSession(context), (krb5_keyblock *)key)))
67 	return (ret);
68 
69 #endif /* _KERNEL */
70 
71     return((*(krb5_enctypes_list[i].decrypt))
72 	   (context, krb5_enctypes_list[i].enc, krb5_enctypes_list[i].hash,
73 	    key, usage, ivec, &input->ciphertext, output));
74 }
75 
76 
77