/** * Copyright (c) 2018, Nordic Semiconductor ASA * * All rights reserved. * * Redistribution and use in source and binary forms, with or without modification, * are permitted provided that the following conditions are met: * * 1. Redistributions of source code must retain the above copyright notice, this * list of conditions and the following disclaimer. * * 2. Redistributions in binary form, except as embedded into a Nordic * Semiconductor ASA integrated circuit in a product or a software update for * such product, must reproduce the above copyright notice, this list of * conditions and the following disclaimer in the documentation and/or other * materials provided with the distribution. * * 3. Neither the name of Nordic Semiconductor ASA nor the names of its * contributors may be used to endorse or promote products derived from this * software without specific prior written permission. * * 4. This software, with or without modification, must only be used with a * Nordic Semiconductor ASA integrated circuit. * * 5. Any software provided in binary form under this license must not be reverse * engineered, decompiled, modified and/or disassembled. * * THIS SOFTWARE IS PROVIDED BY NORDIC SEMICONDUCTOR ASA "AS IS" AND ANY EXPRESS * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES * OF MERCHANTABILITY, NONINFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE ARE * DISCLAIMED. IN NO EVENT SHALL NORDIC SEMICONDUCTOR ASA OR CONTRIBUTORS BE * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE * GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. * */ #include "nrf_crypto_error.h" #include "nrf_crypto_mem.h" #include "nrf_crypto_ecc.h" #include "nrf_crypto_ecdh.h" #include "app_util.h" #include "sdk_macros.h" #if NRF_CRYPTO_ECC_ENABLED #if NRF_CRYPTO_ECC_IMPLEMENTED_CURVES_COUNT > 1 static const nrf_crypto_backend_ecdh_compute_fn_t compute_impl[] = { #if NRF_CRYPTO_ECC_SECP160R1_ENABLED nrf_crypto_backend_secp160r1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_SECP160R2_ENABLED nrf_crypto_backend_secp160r2_ecdh_compute, #endif #if NRF_CRYPTO_ECC_SECP192R1_ENABLED nrf_crypto_backend_secp192r1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_SECP224R1_ENABLED nrf_crypto_backend_secp224r1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_SECP256R1_ENABLED nrf_crypto_backend_secp256r1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_SECP384R1_ENABLED nrf_crypto_backend_secp384r1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_SECP521R1_ENABLED nrf_crypto_backend_secp521r1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_SECP160K1_ENABLED nrf_crypto_backend_secp160k1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_SECP192K1_ENABLED nrf_crypto_backend_secp192k1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_SECP224K1_ENABLED nrf_crypto_backend_secp224k1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_SECP256K1_ENABLED nrf_crypto_backend_secp256k1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_BP256R1_ENABLED nrf_crypto_backend_bp256r1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_BP384R1_ENABLED nrf_crypto_backend_bp384r1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_BP512R1_ENABLED nrf_crypto_backend_bp512r1_ecdh_compute, #endif #if NRF_CRYPTO_ECC_CURVE25519_ENABLED nrf_crypto_backend_curve25519_ecdh_compute, #endif }; static const uint16_t compute_impl_context_size[] = { #if NRF_CRYPTO_ECC_SECP160R1_ENABLED NRF_CRYPTO_BACKEND_SECP160R1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_SECP160R2_ENABLED NRF_CRYPTO_BACKEND_SECP160R2_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_SECP192R1_ENABLED NRF_CRYPTO_BACKEND_SECP192R1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_SECP224R1_ENABLED NRF_CRYPTO_BACKEND_SECP224R1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_SECP256R1_ENABLED NRF_CRYPTO_BACKEND_SECP256R1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_SECP384R1_ENABLED NRF_CRYPTO_BACKEND_SECP384R1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_SECP521R1_ENABLED NRF_CRYPTO_BACKEND_SECP521R1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_SECP160K1_ENABLED NRF_CRYPTO_BACKEND_SECP160K1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_SECP192K1_ENABLED NRF_CRYPTO_BACKEND_SECP192K1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_SECP224K1_ENABLED NRF_CRYPTO_BACKEND_SECP224K1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_SECP256K1_ENABLED NRF_CRYPTO_BACKEND_SECP256K1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_BP256R1_ENABLED NRF_CRYPTO_BACKEND_BP256R1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_BP384R1_ENABLED NRF_CRYPTO_BACKEND_BP384R1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_BP512R1_ENABLED NRF_CRYPTO_BACKEND_BP512R1_ECDH_CONTEXT_SIZE, #endif #if NRF_CRYPTO_ECC_CURVE25519_ENABLED NRF_CRYPTO_BACKEND_CURVE25519_ECDH_CONTEXT_SIZE, #endif }; #define BACKEND_IMPL_GET(table, curve_type) (table)[(uint32_t)(curve_type)] #else #if NRF_CRYPTO_ECC_SECP160R1_ENABLED #define compute_impl nrf_crypto_backend_secp160r1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_SECP160R1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_SECP160R2_ENABLED #define compute_impl nrf_crypto_backend_secp160r2_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_SECP160R2_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_SECP192R1_ENABLED #define compute_impl nrf_crypto_backend_secp192r1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_SECP192R1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_SECP224R1_ENABLED #define compute_impl nrf_crypto_backend_secp224r1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_SECP224R1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_SECP256R1_ENABLED #define compute_impl nrf_crypto_backend_secp256r1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_SECP256R1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_SECP384R1_ENABLED #define compute_impl nrf_crypto_backend_secp384r1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_SECP384R1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_SECP521R1_ENABLED #define compute_impl nrf_crypto_backend_secp521r1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_SECP521R1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_SECP160K1_ENABLED #define compute_impl nrf_crypto_backend_secp160k1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_SECP160K1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_SECP192K1_ENABLED #define compute_impl nrf_crypto_backend_secp192k1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_SECP192K1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_SECP224K1_ENABLED #define compute_impl nrf_crypto_backend_secp224k1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_SECP224K1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_SECP256K1_ENABLED #define compute_impl nrf_crypto_backend_secp256k1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_SECP256K1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_BP256R1_ENABLED #define compute_impl nrf_crypto_backend_bp256r1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_BP256R1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_BP384R1_ENABLED #define compute_impl nrf_crypto_backend_bp384r1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_BP384R1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_BP512R1_ENABLED #define compute_impl nrf_crypto_backend_bp512r1_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_BP512R1_ECDH_CONTEXT_SIZE #elif NRF_CRYPTO_ECC_CURVE25519_ENABLED #define compute_impl nrf_crypto_backend_curve25519_ecdh_compute #define compute_impl_context_size NRF_CRYPTO_BACKEND_CURVE25519_ECDH_CONTEXT_SIZE #else #define compute_impl NULL #define compute_impl_context_size 0 #endif #define BACKEND_IMPL_GET(function, curve_type) (function) #endif ret_code_t nrf_crypto_ecdh_compute( nrf_crypto_ecdh_context_t * p_context, nrf_crypto_ecc_private_key_t const * p_private_key, nrf_crypto_ecc_public_key_t const * p_public_key, uint8_t * p_shared_secret, size_t * p_shared_secret_size) { ret_code_t result; void * p_allocated_context = NULL; nrf_crypto_backend_ecdh_compute_fn_t backend_implementation; size_t context_size; nrf_crypto_ecc_curve_info_t const * p_info; // Get pointer to header for each key nrf_crypto_internal_ecc_key_header_t const * p_private_key_header = (nrf_crypto_internal_ecc_key_header_t const *)p_private_key; nrf_crypto_internal_ecc_key_header_t const * p_public_key_header = (nrf_crypto_internal_ecc_key_header_t const *)p_public_key; // Check and prepare parameters result = nrf_crypto_internal_ecc_key_input_check( p_private_key_header, NRF_CRYPTO_INTERNAL_ECC_PRIVATE_KEY_INIT_VALUE); VERIFY_SUCCESS(result); result = nrf_crypto_internal_ecc_key_input_check( p_public_key_header, NRF_CRYPTO_INTERNAL_ECC_PUBLIC_KEY_INIT_VALUE); VERIFY_SUCCESS(result); VERIFY_TRUE(p_private_key_header->p_info == p_public_key_header->p_info, NRF_ERROR_CRYPTO_ECDH_CURVE_MISMATCH); p_info = p_private_key_header->p_info; result = nrf_crypto_internal_ecc_raw_output_prepare( p_shared_secret, p_shared_secret_size, p_info->raw_private_key_size); VERIFY_SUCCESS(result); // Get backend specific information backend_implementation = BACKEND_IMPL_GET(compute_impl, p_info->curve_type); context_size = BACKEND_IMPL_GET(compute_impl_context_size, p_info->curve_type); VERIFY_TRUE(backend_implementation != NULL, NRF_ERROR_CRYPTO_FEATURE_UNAVAILABLE); // Allocate context if not provided if (p_context == NULL && context_size > 0) { p_allocated_context = NRF_CRYPTO_ALLOC(context_size); VERIFY_TRUE(p_allocated_context != NULL, NRF_ERROR_CRYPTO_ALLOC_FAILED); p_context = p_allocated_context; } // Execute backend implementation result = backend_implementation(p_context, p_private_key, p_public_key, p_shared_secret); // Deallocate context if allocated if (p_allocated_context != NULL) { NRF_CRYPTO_FREE(p_allocated_context); } return result; } #endif // NRF_CRYPTO_ECC_ENABLED