1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
|
/*
* This file and its contents are supplied under the terms of the
* Common Development and Distribution License ("CDDL"), version 1.0.
* You may only use this file in accordance with the terms of version
* 1.0 of the CDDL.
*
* A full copy of the text of the CDDL should have accompanied this
* source. A copy of the CDDL is also available via the Internet at
* http://www.illumos.org/license/CDDL.
*/
/*
* Copyright 2017 Nexenta Systems, Inc. All rights reserved.
* Copyright 2020 RackTop Systems, Inc.
*/
#ifndef _SMB_KCRYPT_H_
#define _SMB_KCRYPT_H_
/*
* SMB signing routines used in {smb,smb2}_signing.c
* Two implementations of these (kernel/user) in:
* uts/common/fs/smbsrv/smb_sign_kcf.c
* lib/smbsrv/libfksmbsrv/common/fksmb_sign_pkcs.c
*/
#ifdef _KERNEL
#include <sys/crypto/api.h>
#else
#include <security/cryptoki.h>
#include <security/pkcs11.h>
#endif
#ifdef __cplusplus
extern "C" {
#endif
#define MD5_DIGEST_LENGTH 16 /* MD5 digest length in bytes */
#define SHA256_DIGEST_LENGTH 32 /* SHA256 digest length in bytes */
#define SHA512_DIGEST_LENGTH 64 /* SHA512 digest length in bytes */
#define SMB2_SIG_SIZE 16
#define SMB2_KEYLEN 16
#define SMB3_KEYLEN 16 /* AES-128 keys */
#ifdef _KERNEL
/* KCF variant */
typedef crypto_mechanism_t smb_crypto_mech_t;
typedef crypto_context_t smb_sign_ctx_t;
typedef struct smb3_enc_ctx {
crypto_context_t ctx;
crypto_data_t output;
size_t len;
} smb3_enc_ctx_t;
typedef union {
CK_AES_CCM_PARAMS ccm;
CK_AES_GCM_PARAMS gcm;
} smb3_crypto_param_t;
#else /* _KERNEL */
/* PKCS11 variant */
typedef CK_MECHANISM smb_crypto_mech_t;
typedef CK_SESSION_HANDLE smb_sign_ctx_t;
typedef struct smb_enc_ctx {
CK_SESSION_HANDLE ctx;
uint8_t *output;
CK_ULONG len;
} smb3_enc_ctx_t;
/*
* CCM in PKCS has not been implemented.
* We just need an opaque type with space to refer to.
*/
typedef struct pkcs_ccm_param {
uint8_t buf[100];
} smb3_crypto_param_t;
#endif /* _KERNEL */
/*
* SMB signing routines used in smb_signing.c
*/
int smb_md5_getmech(smb_crypto_mech_t *);
int smb_md5_init(smb_sign_ctx_t *, smb_crypto_mech_t *);
int smb_md5_update(smb_sign_ctx_t, void *, size_t);
int smb_md5_final(smb_sign_ctx_t, uint8_t *);
/*
* SMB2/3 signing routines used in smb2_signing.c
* Two implementations of these (kernel/user) in:
* uts/common/fs/smbsrv/smb2_sign_kcf.c
* lib/smbsrv/libfksmbsrv/common/fksmb_sign_pkcs.c
*/
int smb2_hmac_getmech(smb_crypto_mech_t *);
int smb2_hmac_init(smb_sign_ctx_t *, smb_crypto_mech_t *, uint8_t *, size_t);
int smb2_hmac_update(smb_sign_ctx_t, uint8_t *, size_t);
int smb2_hmac_final(smb_sign_ctx_t, uint8_t *);
int smb3_cmac_getmech(smb_crypto_mech_t *);
int smb3_cmac_init(smb_sign_ctx_t *, smb_crypto_mech_t *, uint8_t *, size_t);
int smb3_cmac_update(smb_sign_ctx_t, uint8_t *, size_t);
int smb3_cmac_final(smb_sign_ctx_t, uint8_t *);
int smb3_kdf(uint8_t *outbuf, uint8_t *key, size_t key_len,
uint8_t *label, size_t label_len,
uint8_t *context, size_t context_len);
int smb3_aes_ccm_getmech(smb_crypto_mech_t *);
int smb3_aes_gcm_getmech(smb_crypto_mech_t *);
void smb3_crypto_init_ccm_param(smb3_crypto_param_t *, uint8_t *, size_t,
uint8_t *, size_t, size_t);
void smb3_crypto_init_gcm_param(smb3_crypto_param_t *, uint8_t *, size_t,
uint8_t *, size_t);
int smb3_encrypt_init(smb3_enc_ctx_t *, smb_crypto_mech_t *,
smb3_crypto_param_t *, uint8_t *, size_t, uint8_t *, size_t);
int smb3_encrypt_update(smb3_enc_ctx_t *, uint8_t *, size_t);
int smb3_encrypt_final(smb3_enc_ctx_t *, uint8_t *);
void smb3_encrypt_cancel(smb3_enc_ctx_t *);
int smb3_decrypt_init(smb3_enc_ctx_t *, smb_crypto_mech_t *,
smb3_crypto_param_t *, uint8_t *, size_t);
int smb3_decrypt_update(smb3_enc_ctx_t *, uint8_t *, size_t);
int smb3_decrypt_final(smb3_enc_ctx_t *, uint8_t *, size_t);
#ifdef __cplusplus
}
#endif
#endif /* _SMB_KCRYPT_H_ */
|
