1 files changed, 138 insertions, 0 deletions
diff --git a/core/lib/libtomcrypt/ecb.c b/core/lib/libtomcrypt/ecb.c
new file mode 100644
index 00000000..ab68efd7
--- /dev/null
+++ b/core/lib/libtomcrypt/ecb.c
@@ -0,0 +1,138 @@
+// SPDX-License-Identifier: BSD-2-Clause
+/*
+ * Copyright (c) 2014-2019, Linaro Limited
+ */
+
+#include <assert.h>
+#include <crypto/crypto.h>
+#include <crypto/crypto_impl.h>
+#include <stdlib.h>
+#include <tee_api_types.h>
+#include <tomcrypt.h>
+#include <util.h>
+
+#include "des2_key.h"
+
+struct ltc_ecb_ctx {
+	struct crypto_cipher_ctx ctx;
+	int cipher_idx;
+	bool des3;
+	int (*update)(const unsigned char *src, unsigned char *dst,
+		      unsigned long len, symmetric_ECB *ecb);
+	symmetric_ECB state;
+};
+
+static const struct crypto_cipher_ops ltc_ecb_ops;
+
+static struct ltc_ecb_ctx *to_ecb_ctx(struct crypto_cipher_ctx *ctx)
+{
+	assert(ctx && ctx->ops == &ltc_ecb_ops);
+
+	return container_of(ctx, struct ltc_ecb_ctx, ctx);
+}
+
+static TEE_Result ltc_ecb_init(struct crypto_cipher_ctx *ctx,
+			       TEE_OperationMode mode, const uint8_t *key1,
+			       size_t key1_len, const uint8_t *key2 __unused,
+			       size_t key2_len __unused,
+			       const uint8_t *iv __unused,
+			       size_t iv_len __unused)
+{
+	struct ltc_ecb_ctx *c = to_ecb_ctx(ctx);
+	uint8_t tmp[24] = { 0 };
+	const uint8_t *k = key1;
+	size_t kl = key1_len;
+
+	if (mode == TEE_MODE_ENCRYPT)
+		c->update = ecb_encrypt;
+	else
+		c->update = ecb_decrypt;
+
+	if (c->des3)
+		get_des2_key(&k, &kl, tmp);
+
+	if (ecb_start(c->cipher_idx, k, kl, 0, &c->state) == CRYPT_OK)
+		return TEE_SUCCESS;
+	else
+		return TEE_ERROR_BAD_STATE;
+}
+
+static TEE_Result ltc_ecb_update(struct crypto_cipher_ctx *ctx,
+				 bool last_block __unused,
+				 const uint8_t *data, size_t len, uint8_t *dst)
+{
+	struct ltc_ecb_ctx *c = to_ecb_ctx(ctx);
+
+	if (c->update && c->update(data, dst, len, &c->state) == CRYPT_OK)
+		return TEE_SUCCESS;
+	else
+		return TEE_ERROR_BAD_STATE;
+}
+
+static void ltc_ecb_final(struct crypto_cipher_ctx *ctx)
+{
+	ecb_done(&to_ecb_ctx(ctx)->state);
+}
+
+static void ltc_ecb_free_ctx(struct crypto_cipher_ctx *ctx)
+{
+	free(to_ecb_ctx(ctx));
+}
+
+static void ltc_ecb_copy_state(struct crypto_cipher_ctx *dst_ctx,
+			       struct crypto_cipher_ctx *src_ctx)
+{
+	struct ltc_ecb_ctx *src = to_ecb_ctx(src_ctx);
+	struct ltc_ecb_ctx *dst = to_ecb_ctx(dst_ctx);
+
+	assert(src->cipher_idx == dst->cipher_idx);
+	dst->update = src->update;
+	dst->state = src->state;
+}
+
+static const struct crypto_cipher_ops ltc_ecb_ops = {
+	.init = ltc_ecb_init,
+	.update = ltc_ecb_update,
+	.final = ltc_ecb_final,
+	.free_ctx = ltc_ecb_free_ctx,
+	.copy_state = ltc_ecb_copy_state,
+};
+
+static TEE_Result ltc_ecb_alloc_ctx(struct crypto_cipher_ctx **ctx_ret,
+				    int cipher_idx, bool des3)
+{
+	struct ltc_ecb_ctx *c = NULL;
+
+	if (cipher_idx < 0)
+		return TEE_ERROR_NOT_SUPPORTED;
+
+	c = calloc(1, sizeof(*c));
+	if (!c)
+		return TEE_ERROR_OUT_OF_MEMORY;
+
+	c->ctx.ops = &ltc_ecb_ops;
+	c->cipher_idx = cipher_idx;
+	c->des3 = des3;
+	*ctx_ret = &c->ctx;
+
+	return TEE_SUCCESS;
+}
+
+#if defined(CFG_CRYPTO_AES)
+TEE_Result crypto_aes_ecb_alloc_ctx(struct crypto_cipher_ctx **ctx)
+{
+	return ltc_ecb_alloc_ctx(ctx, find_cipher("aes"), false);
+}
+#endif
+
+#if defined(CFG_CRYPTO_DES)
+TEE_Result crypto_des_ecb_alloc_ctx(struct crypto_cipher_ctx **ctx)
+{
+	return ltc_ecb_alloc_ctx(ctx, find_cipher("des"), false);
+}
+
+TEE_Result crypto_des3_ecb_alloc_ctx(struct crypto_cipher_ctx **ctx)
+{
+	return ltc_ecb_alloc_ctx(ctx, find_cipher("3des"), true);
+}
+#endif