123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356 |
- /**
- * Copyright (c) 2018 - 2020, Nordic Semiconductor ASA
- *
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without modification,
- * are permitted provided that the following conditions are met:
- *
- * 1. Redistributions of source code must retain the above copyright notice, this
- * list of conditions and the following disclaimer.
- *
- * 2. Redistributions in binary form, except as embedded into a Nordic
- * Semiconductor ASA integrated circuit in a product or a software update for
- * such product, must reproduce the above copyright notice, this list of
- * conditions and the following disclaimer in the documentation and/or other
- * materials provided with the distribution.
- *
- * 3. Neither the name of Nordic Semiconductor ASA nor the names of its
- * contributors may be used to endorse or promote products derived from this
- * software without specific prior written permission.
- *
- * 4. This software, with or without modification, must only be used with a
- * Nordic Semiconductor ASA integrated circuit.
- *
- * 5. Any software provided in binary form under this license must not be reverse
- * engineered, decompiled, modified and/or disassembled.
- *
- * THIS SOFTWARE IS PROVIDED BY NORDIC SEMICONDUCTOR ASA "AS IS" AND ANY EXPRESS
- * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
- * OF MERCHANTABILITY, NONINFRINGEMENT, AND FITNESS FOR A PARTICULAR PURPOSE ARE
- * DISCLAIMED. IN NO EVENT SHALL NORDIC SEMICONDUCTOR ASA OR CONTRIBUTORS BE
- * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
- * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
- * GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
- * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
- *
- */
- #ifndef NRF_CRYPTO_ECC_BACKEND_H__
- #define NRF_CRYPTO_ECC_BACKEND_H__
- #if !defined(__SDK_DOXYGEN__)
- #include <stdint.h>
- #include <stddef.h>
- #include "sdk_config.h"
- #include "nordic_common.h"
- #include "nrf_crypto_error.h"
- #include "nrf_crypto_ecc_shared.h"
- // Include all backends
- #include "cc310_backend_ecc.h"
- #include "cc310_bl_backend_ecc.h"
- #include "mbedtls_backend_ecc.h"
- #include "oberon_backend_ecc.h"
- #include "micro_ecc_backend_ecc.h"
- #include "optiga_backend_ecc.h"
- #ifdef __cplusplus
- extern "C" {
- #endif
- // Make sure that all required defines are defined
- #if !defined(NRF_CRYPTO_ECC_SECP160R1_ENABLED)
- #define NRF_CRYPTO_ECC_SECP160R1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_SECP160R2_ENABLED)
- #define NRF_CRYPTO_ECC_SECP160R2_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_SECP192R1_ENABLED)
- #define NRF_CRYPTO_ECC_SECP192R1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_SECP224R1_ENABLED)
- #define NRF_CRYPTO_ECC_SECP224R1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_SECP256R1_ENABLED)
- #define NRF_CRYPTO_ECC_SECP256R1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_SECP384R1_ENABLED)
- #define NRF_CRYPTO_ECC_SECP384R1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_SECP521R1_ENABLED)
- #define NRF_CRYPTO_ECC_SECP521R1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_SECP160K1_ENABLED)
- #define NRF_CRYPTO_ECC_SECP160K1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_SECP192K1_ENABLED)
- #define NRF_CRYPTO_ECC_SECP192K1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_SECP224K1_ENABLED)
- #define NRF_CRYPTO_ECC_SECP224K1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_SECP256K1_ENABLED)
- #define NRF_CRYPTO_ECC_SECP256K1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_BP256R1_ENABLED)
- #define NRF_CRYPTO_ECC_BP256R1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_BP384R1_ENABLED)
- #define NRF_CRYPTO_ECC_BP384R1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_BP512R1_ENABLED)
- #define NRF_CRYPTO_ECC_BP512R1_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_CURVE25519_ENABLED)
- #define NRF_CRYPTO_ECC_CURVE25519_ENABLED 0
- #endif
- #if !defined(NRF_CRYPTO_ECC_ED25519_ENABLED)
- #define NRF_CRYPTO_ECC_ED25519_ENABLED 0
- #endif
- /** @internal @brief Definition to detect if ECC submodule is enabled. It will be enabled if any
- * curve of any of the backends is enabled.
- */
- #define NRF_CRYPTO_ECC_ENABLED ( \
- NRF_MODULE_ENABLED(NRF_CRYPTO) && ( \
- NRF_CRYPTO_ECC_SECP160R1_ENABLED | \
- NRF_CRYPTO_ECC_SECP160R2_ENABLED | \
- NRF_CRYPTO_ECC_SECP192R1_ENABLED | \
- NRF_CRYPTO_ECC_SECP224R1_ENABLED | \
- NRF_CRYPTO_ECC_SECP256R1_ENABLED | \
- NRF_CRYPTO_ECC_SECP384R1_ENABLED | \
- NRF_CRYPTO_ECC_SECP521R1_ENABLED | \
- NRF_CRYPTO_ECC_SECP160K1_ENABLED | \
- NRF_CRYPTO_ECC_SECP192K1_ENABLED | \
- NRF_CRYPTO_ECC_SECP224K1_ENABLED | \
- NRF_CRYPTO_ECC_SECP256K1_ENABLED | \
- NRF_CRYPTO_ECC_BP256R1_ENABLED | \
- NRF_CRYPTO_ECC_BP384R1_ENABLED | \
- NRF_CRYPTO_ECC_BP512R1_ENABLED | \
- NRF_CRYPTO_ECC_CURVE25519_ENABLED | \
- NRF_CRYPTO_ECC_ED25519_ENABLED))
- /** @internal @brief Definition containing number of enabled curves.
- */
- #define NRF_CRYPTO_ECC_IMPLEMENTED_CURVES_COUNT ( \
- NRF_CRYPTO_ECC_SECP160R1_ENABLED + \
- NRF_CRYPTO_ECC_SECP160R2_ENABLED + \
- NRF_CRYPTO_ECC_SECP192R1_ENABLED + \
- NRF_CRYPTO_ECC_SECP224R1_ENABLED + \
- NRF_CRYPTO_ECC_SECP256R1_ENABLED + \
- NRF_CRYPTO_ECC_SECP384R1_ENABLED + \
- NRF_CRYPTO_ECC_SECP521R1_ENABLED + \
- NRF_CRYPTO_ECC_SECP160K1_ENABLED + \
- NRF_CRYPTO_ECC_SECP192K1_ENABLED + \
- NRF_CRYPTO_ECC_SECP224K1_ENABLED + \
- NRF_CRYPTO_ECC_SECP256K1_ENABLED + \
- NRF_CRYPTO_ECC_BP256R1_ENABLED + \
- NRF_CRYPTO_ECC_BP384R1_ENABLED + \
- NRF_CRYPTO_ECC_BP512R1_ENABLED + \
- NRF_CRYPTO_ECC_CURVE25519_ENABLED + \
- NRF_CRYPTO_ECC_ED25519_ENABLED)
- #if !NRF_CRYPTO_ECC_SECP160R1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_secp160r1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_secp160r1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp160r1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp160r1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_SECP160R2_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_secp160r2_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_secp160r2_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp160r2_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp160r2_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_SECP192R1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_secp192r1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_secp192r1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp192r1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp192r1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_SECP224R1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_secp224r1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_secp224r1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp224r1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp224r1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_SECP256R1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_secp256r1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_secp256r1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp256r1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp256r1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_SECP384R1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_secp384r1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_secp384r1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp384r1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp384r1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_SECP521R1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_secp521r1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_secp521r1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp521r1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp521r1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_SECP160K1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_secp160k1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_secp160k1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp160k1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp160k1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_SECP192K1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_secp192k1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_secp192k1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp192k1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp192k1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_SECP224K1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_secp224k1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_secp224k1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp224k1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp224k1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_SECP256K1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_secp256k1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_secp256k1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp256k1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_secp256k1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_BP256R1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_bp256r1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_bp256r1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_bp256r1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_bp256r1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_BP384R1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_bp384r1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_bp384r1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_bp384r1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_bp384r1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_BP512R1_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_bp512r1_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_bp512r1_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_bp512r1_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_bp512r1_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_CURVE25519_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_curve25519_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_curve25519_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_curve25519_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_curve25519_public_key_t;
- #endif
- #if !NRF_CRYPTO_ECC_ED25519_ENABLED
- // Dummy typedefs for disabled contexts
- typedef uint32_t nrf_crypto_backend_ed25519_key_pair_generate_context_t;
- typedef uint32_t nrf_crypto_backend_ed25519_public_key_calculate_context_t;
- // Dummy typedefs for disabled keys
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_ed25519_private_key_t;
- typedef nrf_crypto_internal_ecc_key_header_t nrf_crypto_backend_ed25519_public_key_t;
- #endif
- // Find biggest raw private and public key size that is currently enabled
- #if NRF_CRYPTO_ECC_SECP521R1_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PRIVATE_KEY_MAX_SIZE (66)
- #elif NRF_CRYPTO_ECC_BP512R1_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PRIVATE_KEY_MAX_SIZE (64)
- #elif NRF_CRYPTO_ECC_BP384R1_ENABLED || NRF_CRYPTO_ECC_SECP384R1_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PRIVATE_KEY_MAX_SIZE (48)
- #elif NRF_CRYPTO_ECC_BP256R1_ENABLED || NRF_CRYPTO_ECC_SECP256K1_ENABLED || NRF_CRYPTO_ECC_CURVE25519_ENABLED || NRF_CRYPTO_ECC_ED25519_ENABLED || NRF_CRYPTO_ECC_SECP256R1_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PRIVATE_KEY_MAX_SIZE (32)
- #elif NRF_CRYPTO_ECC_SECP224K1_ENABLED || NRF_CRYPTO_ECC_SECP224R1_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PRIVATE_KEY_MAX_SIZE (28)
- #elif NRF_CRYPTO_ECC_SECP192K1_ENABLED || NRF_CRYPTO_ECC_SECP192R1_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PRIVATE_KEY_MAX_SIZE (24)
- #elif NRF_CRYPTO_ECC_SECP160K1_ENABLED || NRF_CRYPTO_ECC_SECP160R1_ENABLED || NRF_CRYPTO_ECC_SECP160R2_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PRIVATE_KEY_MAX_SIZE (20)
- #else
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PRIVATE_KEY_MAX_SIZE (1)
- #endif
- #if NRF_CRYPTO_ECC_SECP521R1_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PUBLIC_KEY_MAX_SIZE (2 * 66)
- #elif NRF_CRYPTO_ECC_BP512R1_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PUBLIC_KEY_MAX_SIZE (2 * 64)
- #elif NRF_CRYPTO_ECC_BP384R1_ENABLED || NRF_CRYPTO_ECC_SECP384R1_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PUBLIC_KEY_MAX_SIZE (2 * 48)
- #elif NRF_CRYPTO_ECC_BP256R1_ENABLED || NRF_CRYPTO_ECC_SECP256K1_ENABLED || NRF_CRYPTO_ECC_SECP256R1_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PUBLIC_KEY_MAX_SIZE (2 * 32)
- #elif NRF_CRYPTO_ECC_SECP224K1_ENABLED || NRF_CRYPTO_ECC_SECP224R1_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PUBLIC_KEY_MAX_SIZE (2 * 28)
- #elif NRF_CRYPTO_ECC_SECP192K1_ENABLED || NRF_CRYPTO_ECC_SECP192R1_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PUBLIC_KEY_MAX_SIZE (2 * 24)
- #elif NRF_CRYPTO_ECC_SECP160K1_ENABLED || NRF_CRYPTO_ECC_SECP160R1_ENABLED || NRF_CRYPTO_ECC_SECP160R2_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PUBLIC_KEY_MAX_SIZE (2 * 20)
- #elif NRF_CRYPTO_ECC_CURVE25519_ENABLED || NRF_CRYPTO_ECC_ED25519_ENABLED
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PUBLIC_KEY_MAX_SIZE (32)
- #else
- # define NRF_CRYPTO_BACKEND_ECC_RAW_PUBLIC_KEY_MAX_SIZE (1)
- #endif
- #if NRF_CRYPTO_ECC_CURVE25519_ENABLED && !defined(NRF_CRYPTO_CURVE25519_BIG_ENDIAN_ENABLED)
- #warning "NRF_CRYPTO_CURVE25519_BIG_ENDIAN_ENABLED not defined. Please define it to choose the endianness of Curve25519 parameters."
- #endif
- #ifdef __cplusplus
- }
- #endif
- #endif // !defined(__SDK_DOXYGEN__)
- #endif // NRF_CRYPTO_ECC_BACKEND_H__
|