comparison src/protocols/sametime/meanwhile/cipher.c @ 12261:2edf5dc1b2ea

[gaim-migrate @ 14563] Removed the dependancy on libgmp, opting to use the public domain libmpi code instead. Bringing over updates to the places service which should fix some crash bugs. committer: Tailor Script <[e-mail]>

12260:0a9574ed62cd

  License along with this library; if not, write to the Free
  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
*/

#include <stdlib.h>
#include <string.h>
#include <time.h>

#include <gmp.h>


#include "mw_channel.h"
#include "mw_cipher.h"
#include "mw_debug.h"
#include "mw_session.h"


/** From RFC2268 */
static unsigned char PT[] = {
  0xD9, 0x78, 0xF9, 0xC4, 0x19, 0xDD, 0xB5, 0xED,

/** base used in DH exchange */
#define DH_BASE  3


void mwInitDHPrime(mpz_t z) {
  mpz_init(z);
  mpz_import(z, 64, 1, 1, 0, 0, dh_prime);
}


void mwInitDHBase(mpz_t z) {
  mpz_init_set_ui(z, DH_BASE);
}


void mwDHRandKeypair(mpz_t private, mpz_t public) {
  gmp_randstate_t rstate;
  mpz_t prime, base;
 
  mwInitDHPrime(prime);
  mwInitDHBase(base);

  gmp_randinit_default(rstate);
  mpz_urandomb(private, rstate, 512);
  mpz_powm(public, base, private, prime);

  mpz_clear(prime);
  mpz_clear(base);
  gmp_randclear(rstate);
}


void mwDHCalculateShared(mpz_t shared, mpz_t remote, mpz_t private) {
  mpz_t prime;
 
  mwInitDHPrime(prime);
  mpz_powm(shared, remote, private, prime);
  mpz_clear(prime);
}


void mwDHImportKey(mpz_t key, struct mwOpaque *o) {
  g_return_if_fail(o != NULL);
  mpz_import(key, o->len, 1, 1, 1, 0, o->data);
}


void mwDHExportKey(mpz_t key, struct mwOpaque *o) {
  gsize needed;

  g_return_if_fail(o != NULL);

  needed = (mpz_sizeinbase(key,2) + 7) / 8;
  o->len = 65;
  o->data = g_malloc0(o->len);

  mpz_export(o->data+(o->len-needed), NULL, 1, 1, 1, 0, key);
}


void mwKeyRandom(char *key, gsize keylen) {
  g_return_if_fail(key != NULL);

  srand(clock());
  while(keylen--) key[keylen] = rand() & 0xff;
}


void mwIV_init(char *iv) {
  static unsigned char normal_iv[] = {
    0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef
  };
  memcpy(iv, normal_iv, 8);
}


/* This does not seem to produce the same results as normal RC2 key
   expansion would, but it works, so eh. It might be smart to farm
   this out to mozilla or openssl */
void mwKeyExpand(int *ekey, const char *key, gsize keylen) {
  char tmp[128];
  int i, j;

  g_return_if_fail(keylen > 0);
  g_return_if_fail(key != NULL);

  if(keylen > 128) keylen = 128;

  /* fill the first chunk with what key bytes we have */
  memcpy(tmp, key, keylen);

  /* build the remaining key from the given data */
  for(i = 0; keylen < 128; i++) {
    tmp[keylen] = PT[ (tmp[keylen - 1] + tmp[i]) & 0xff ];
    keylen++;

  *out++ = a & 0xff;
  *out++ = (a >> 8) & 0xff;
}


void mwEncryptExpanded(const int *ekey, char *iv,
		       struct mwOpaque *in_data,
		       struct mwOpaque *out_data) {

  char *i = in_data->data;
  gsize i_len = in_data->len;

  char *o;
  gsize o_len;

  int x, y;

  /* pad upwards to a multiple of 8 */

  /* figure out the amount of padding */
  y = o_len - i_len;

  /* copy in to out, and write padding bytes */
  memcpy(o, i, i_len);
  memset(o + i_len, y, y);

  /* encrypt in blocks */
  for(x = o_len; x > 0; x -= 8) {
    for(y = 8; y--; o[y] ^= iv[y]);
    mwEncryptBlock(ekey, o);
    memcpy(iv, o, 8);
    o += 8;
  }
}


void mwEncrypt(const char *key, gsize keylen, char *iv,
	       struct mwOpaque *in, struct mwOpaque *out) {

  int ekey[64];
  mwKeyExpand(ekey, key, keylen);
  mwEncryptExpanded(ekey, iv, in, out);
}


static void mwDecryptBlock(const int *ekey, char *out) {

  int a, b, c, d;
  int i, j;

  a = (out[7] << 8) | (out[6] & 0xff);

  *out++ = a & 0xff;
  *out++ = (a >> 8) & 0xff;
}


void mwDecryptExpanded(const int *ekey, char *iv,
		       struct mwOpaque *in_data,
		       struct mwOpaque *out_data) {

  char *i = in_data->data;
  gsize i_len = in_data->len;

  char *o;
  gsize o_len;

  int x, y;

  /* this doesn't check to ensure that in_data->len is a multiple of
     8, which is damn well ought to be. */

  o = g_malloc(i_len);
  o_len = i_len;
  memcpy(o, i, i_len);

  out_data->data = o;
  out_data->len = o_len;

  for(x = o_len; x > 0; x -= 8) {
    /* decrypt a block */
    mwDecryptBlock(ekey, o);

    /* modify the initialization vector */
    for(y = 8; y--; o[y] ^= iv[y]);
    memcpy(iv, i, 8);
    i += 8;
    o += 8;
  }

  /* shorten the length by the value of the filler in the padding
     bytes */
  out_data->len -= *(o - 1);
}


void mwDecrypt(const char *key, gsize keylen, char *iv,
	       struct mwOpaque *in, struct mwOpaque *out) {

  int ekey[64];
  mwKeyExpand(ekey, key, keylen);
  mwDecryptExpanded(ekey, iv, in, out);

struct mwCipherInstance_RC2_40 {
  struct mwCipherInstance instance;
  int incoming_key[64];
  char outgoing_iv[8];
  char incoming_iv[8];
};


static const char *get_name_RC2_40() {
  return "RC2/40 Cipher";

}


struct mwCipher_RC2_128 {
  struct mwCipher cipher;
  mpz_t private_key;
  struct mwOpaque public_key;
};


struct mwCipherInstance_RC2_128 {
  struct mwCipherInstance instance;
  int shared[64];      /* shared secret determined via DH exchange */
  char outgoing_iv[8];
  char incoming_iv[8];
};


static const char *get_name_RC2_128() {
  return "RC2/128 Cipher";

static void offered_RC2_128(struct mwCipherInstance *ci,
			    struct mwEncryptItem *item) {
  
  mpz_t remote_key;
  mpz_t shared;
  struct mwOpaque sho = { 0, 0 };

  struct mwCipher *c;
  struct mwCipher_RC2_128 *cr;
  struct mwCipherInstance_RC2_128 *cir;

  c = ci->cipher;
  cr = (struct mwCipher_RC2_128 *) c;
  cir = (struct mwCipherInstance_RC2_128 *) ci;

  mpz_init(remote_key);
  mpz_init(shared);

  mwDHImportKey(remote_key, &item->info);
  mwDHCalculateShared(shared, remote_key, cr->private_key);
  mwDHExportKey(shared, &sho);

  /* key expanded from the last 16 bytes of the DH shared secret. This
     took me forever to figure out. 16 bytes is 128 bit. */
  /* the sh_len-16 is important, because the key len could
     hypothetically start with 8bits or more unset, meaning the
     exported key might be less than 64 bytes in length */
  mwKeyExpand(cir->shared, sho.data+(sho.len-16), 16);
  
  mpz_clear(remote_key);
  mpz_clear(shared);
  mwOpaque_clear(&sho);
}


static struct mwEncryptItem *

static void clear_RC2_128(struct mwCipher *c) {
  struct mwCipher_RC2_128 *cr;
  cr = (struct mwCipher_RC2_128 *) c;

  mpz_clear(cr->private_key);
  mwOpaque_clear(&cr->public_key);
}


struct mwCipher *mwCipher_new_RC2_128(struct mwSession *s) {
  struct mwCipher_RC2_128 *cr;
  struct mwCipher *c;

  mpz_t pubkey;

  cr = g_new0(struct mwCipher_RC2_128, 1);
  c = &cr->cipher;

  c->session = s;

  c->encrypt = encrypt_RC2_128;
  c->decrypt = decrypt_RC2_128;

  c->clear = clear_RC2_128;
  
  mpz_init(cr->private_key);
  mpz_init(pubkey);
  mwDHRandKeypair(cr->private_key, pubkey);
  mwDHExportKey(pubkey, &cr->public_key);
  mpz_clear(pubkey);

  return c;
}

  g_return_val_if_fail(ci != NULL, NULL);
  return ci->channel;
}


struct mwEncryptItem *mwCipherInstance_newItem(struct mwCipherInstance *ci) {
  struct mwCipher *cipher;

  g_return_val_if_fail(ci != NULL, NULL);
  cipher = ci->cipher;

  g_return_val_if_fail(cipher != NULL, NULL);
  g_return_val_if_fail(cipher->new_item != NULL, NULL);

  return cipher->new_item(ci);
}


void mwCipherInstance_offered(struct mwCipherInstance *ci,
			      struct mwEncryptItem *item) {
  struct mwCipher *cipher;

  g_return_if_fail(ci != NULL);

12261:2edf5dc1b2ea

  License along with this library; if not, write to the Free
  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
*/

#include <stdlib.h>
#include <time.h>

#include "mpi/mpi.h"

#include "mw_channel.h"
#include "mw_cipher.h"
#include "mw_debug.h"
#include "mw_session.h"


struct mwMpi {
  mp_int i;
};


/** From RFC2268 */
static unsigned char PT[] = {
  0xD9, 0x78, 0xF9, 0xC4, 0x19, 0xDD, 0xB5, 0xED,

/** base used in DH exchange */
#define DH_BASE  3


struct mwMpi *mwMpi_new() {
  struct mwMpi *i;
  i = g_new0(struct mwMpi, 1);
  mp_init(&i->i);
  return i;
}


void mwMpi_free(struct mwMpi *i) {
  if(! i) return;
  mp_clear(&i->i);
  g_free(i);
}


static void mwInitDHPrime(mp_int *i) {
  mp_init(i);
  mp_read_unsigned_bin(i, dh_prime, 64);
}


void mwMpi_setDHPrime(struct mwMpi *i) {
  g_return_if_fail(i != NULL);
  mp_read_unsigned_bin(&i->i, dh_prime, 64);
}


static void mwInitDHBase(mp_int *i) {
  mp_init(i);
  mp_set_int(i, DH_BASE);
}


void mwMpi_setDHBase(struct mwMpi *i) {
  g_return_if_fail(i != NULL);
  mp_set_int(&i->i, DH_BASE);
}


static void mp_set_rand(mp_int *i, guint bits) {
  size_t len, l;
  unsigned char *buf;

  l = len = (bits / 8) + 1;
  buf = g_malloc(len);

  srand(clock());
  while(l--) buf[l] = rand() & 0xff;

  buf[0] &= (0xff >> (8 - (bits % 8)));

  mp_read_unsigned_bin(i, buf, len);
  g_free(buf);
}


void mwMpi_rand(struct mwMpi *i, guint bits) {
  g_return_if_fail(i != NULL);
  mp_set_rand(&i->i, bits);
}


static void mwDHRandKeypair(mp_int *private, mp_int *public) {
  mp_int prime, base;
 
  mwInitDHPrime(&prime);
  mwInitDHBase(&base);

  mp_set_rand(private, 512);
  mp_exptmod(&base, private, &prime, public);

  mp_clear(&prime);
  mp_clear(&base);
}


void mwMpi_randDHKeypair(struct mwMpi *private, struct mwMpi *public) {
  g_return_if_fail(private != NULL);
  g_return_if_fail(public != NULL);

  mwDHRandKeypair(&private->i, &public->i);
}


static void mwDHCalculateShared(mp_int *shared, mp_int *remote,
				mp_int *private) {
  mp_int prime;
 
  mwInitDHPrime(&prime);
  mp_exptmod(remote, private, &prime, shared);
  mp_clear(&prime);
}


void mwMpi_calculateDHShared(struct mwMpi *shared, struct mwMpi *remote,
			     struct mwMpi *private) {

  g_return_if_fail(shared != NULL);
  g_return_if_fail(remote != NULL);
  g_return_if_fail(private != NULL);

  mwDHCalculateShared(&shared->i, &remote->i, &private->i);
}


static void mwDHImportKey(mp_int *key, struct mwOpaque *o) {
  mp_read_unsigned_bin(key, o->data, o->len);
}


void mwMpi_import(struct mwMpi *i, struct mwOpaque *o) {
  g_return_if_fail(i != NULL);
  g_return_if_fail(o != NULL);

  mwDHImportKey(&i->i, o);
}


static void mwDHExportKey(mp_int *key, struct mwOpaque *o) {
  o->len = mp_unsigned_bin_size(key);
  o->data = g_malloc0(o->len);
  mp_to_unsigned_bin(key, o->data);
}


void mwMpi_export(struct mwMpi *i, struct mwOpaque *o) {
  g_return_if_fail(i != NULL);
  g_return_if_fail(o != NULL);
  
  mwDHExportKey(&i->i, o);
}


void mwKeyRandom(unsigned char *key, gsize keylen) {
  g_return_if_fail(key != NULL);

  srand(clock());
  while(keylen--) key[keylen] = rand() & 0xff;
}


void mwIV_init(unsigned char *iv) {
  int i;
  static unsigned char normal_iv[] = {
    0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef
  };
  for(i = 8; i--; iv[i] = normal_iv[i]);
  /* memcpy(iv, normal_iv, 8); */
}


/* This does not seem to produce the same results as normal RC2 key
   expansion would, but it works, so eh. It might be smart to farm
   this out to mozilla or openssl */
void mwKeyExpand(int *ekey, const char *key, gsize keylen) {
  unsigned char tmp[128];
  int i, j;

  g_return_if_fail(keylen > 0);
  g_return_if_fail(key != NULL);

  if(keylen > 128) keylen = 128;

  /* fill the first chunk with what key bytes we have */
  for(i = keylen; i--; tmp[i] = key[i]);
  /* memcpy(tmp, key, keylen); */

  /* build the remaining key from the given data */
  for(i = 0; keylen < 128; i++) {
    tmp[keylen] = PT[ (tmp[keylen - 1] + tmp[i]) & 0xff ];
    keylen++;

  *out++ = a & 0xff;
  *out++ = (a >> 8) & 0xff;
}


void mwEncryptExpanded(const int *ekey, unsigned char *iv,
		       struct mwOpaque *in_data,
		       struct mwOpaque *out_data) {

  unsigned char *i = in_data->data;
  gsize i_len = in_data->len;

  unsigned char *o;
  gsize o_len;

  int x, y;

  /* pad upwards to a multiple of 8 */

  /* figure out the amount of padding */
  y = o_len - i_len;

  /* copy in to out, and write padding bytes */
  for(x = i_len; x--; o[x] = i[x]);
  for(x = i_len; x < o_len; o[x++] = y);
  /* memcpy(o, i, i_len);
     memset(o + i_len, y, y); */

  /* encrypt in blocks */
  for(x = o_len; x > 0; x -= 8) {
    for(y = 8; y--; o[y] ^= iv[y]);
    mwEncryptBlock(ekey, o);
    for(y = 8; y--; iv[y] = o[y]);
    /* memcpy(iv, o, 8); */
    o += 8;
  }
}


void mwEncrypt(const char *key, gsize keylen, unsigned char *iv,
	       struct mwOpaque *in, struct mwOpaque *out) {

  int ekey[64];
  mwKeyExpand(ekey, key, keylen);
  mwEncryptExpanded(ekey, iv, in, out);
}


static void mwDecryptBlock(const int *ekey, unsigned char *out) {

  int a, b, c, d;
  int i, j;

  a = (out[7] << 8) | (out[6] & 0xff);

  *out++ = a & 0xff;
  *out++ = (a >> 8) & 0xff;
}


void mwDecryptExpanded(const int *ekey, unsigned char *iv,
		       struct mwOpaque *in_data,
		       struct mwOpaque *out_data) {

  unsigned char *i = in_data->data;
  gsize i_len = in_data->len;

  unsigned char *o;
  gsize o_len;

  int x, y;

  /* this doesn't check to ensure that in_data->len is a multiple of
     8, which is damn well ought to be. */

  o = g_malloc(i_len);
  o_len = i_len;
  for(x = i_len; x--; o[x] = i[x]);
  /* memcpy(o, i, i_len); */

  out_data->data = o;
  out_data->len = o_len;

  for(x = o_len; x > 0; x -= 8) {
    /* decrypt a block */
    mwDecryptBlock(ekey, o);

    /* modify the initialization vector */
    for(y = 8; y--; o[y] ^= iv[y]);
    for(y = 8; y--; iv[y] = i[y]);
    /* memcpy(iv, i, 8); */
    i += 8;
    o += 8;
  }

  /* shorten the length by the value of the filler in the padding
     bytes */
  out_data->len -= *(o - 1);
}


void mwDecrypt(const char *key, gsize keylen, unsigned char *iv,
	       struct mwOpaque *in, struct mwOpaque *out) {

  int ekey[64];
  mwKeyExpand(ekey, key, keylen);
  mwDecryptExpanded(ekey, iv, in, out);

struct mwCipherInstance_RC2_40 {
  struct mwCipherInstance instance;
  int incoming_key[64];
  unsigned char outgoing_iv[8];
  unsigned char incoming_iv[8];
};


static const char *get_name_RC2_40() {
  return "RC2/40 Cipher";

}


struct mwCipher_RC2_128 {
  struct mwCipher cipher;
  mp_int private_key;
  struct mwOpaque public_key;
};


struct mwCipherInstance_RC2_128 {
  struct mwCipherInstance instance;
  int shared[64];      /* shared secret determined via DH exchange */
  unsigned char outgoing_iv[8];
  unsigned char incoming_iv[8];
};


static const char *get_name_RC2_128() {
  return "RC2/128 Cipher";

static void offered_RC2_128(struct mwCipherInstance *ci,
			    struct mwEncryptItem *item) {
  
  mp_int remote_key;
  mp_int shared;
  struct mwOpaque sho = { 0, 0 };

  struct mwCipher *c;
  struct mwCipher_RC2_128 *cr;
  struct mwCipherInstance_RC2_128 *cir;

  c = ci->cipher;
  cr = (struct mwCipher_RC2_128 *) c;
  cir = (struct mwCipherInstance_RC2_128 *) ci;

  mp_init(&remote_key);
  mp_init(&shared);

  mwDHImportKey(&remote_key, &item->info);
  mwDHCalculateShared(&shared, &remote_key, &cr->private_key);
  mwDHExportKey(&shared, &sho);

  /* key expanded from the last 16 bytes of the DH shared secret. This
     took me forever to figure out. 16 bytes is 128 bit. */
  /* the sh_len-16 is important, because the key len could
     hypothetically start with 8bits or more unset, meaning the
     exported key might be less than 64 bytes in length */
  mwKeyExpand(cir->shared, sho.data+(sho.len-16), 16);
  
  mp_clear(&remote_key);
  mp_clear(&shared);
  mwOpaque_clear(&sho);
}


static struct mwEncryptItem *

static void clear_RC2_128(struct mwCipher *c) {
  struct mwCipher_RC2_128 *cr;
  cr = (struct mwCipher_RC2_128 *) c;

  mp_clear(&cr->private_key);
  mwOpaque_clear(&cr->public_key);
}


struct mwCipher *mwCipher_new_RC2_128(struct mwSession *s) {
  struct mwCipher_RC2_128 *cr;
  struct mwCipher *c;

  mp_int pubkey;

  cr = g_new0(struct mwCipher_RC2_128, 1);
  c = &cr->cipher;

  c->session = s;

  c->encrypt = encrypt_RC2_128;
  c->decrypt = decrypt_RC2_128;

  c->clear = clear_RC2_128;
  
  mp_init(&cr->private_key);
  mp_init(&pubkey);
  mwDHRandKeypair(&cr->private_key, &pubkey);
  mwDHExportKey(&pubkey, &cr->public_key);
  mp_clear(&pubkey);

  return c;
}

  g_return_val_if_fail(ci != NULL, NULL);
  return ci->channel;
}


void mwCipherInstance_offered(struct mwCipherInstance *ci,
			      struct mwEncryptItem *item) {
  struct mwCipher *cipher;

  g_return_if_fail(ci != NULL);