src/lib-dcrypt/dcrypt-gnutls.c

bcb4e51a409d94ae670de96afb8483a4f7855294Stephan Bosch/* Copyright (c) 2016-2018 Dovecot authors, see the included COPYING file */
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz#include "lib.h"
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz#include "buffer.h"
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz#include "randgen.h"
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz#include "array.h"
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz#include "hash-method.h"
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz#include "pkcs5.h"
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz#include "module-dir.h"
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz#include <gnutls/gnutls.h>
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz#include <gnutls/compat.h>
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz#include <gnutls/abstract.h>
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz#include <gnutls/crypto.h>
51ed197520dd9ea534fbc3bc1790ebe3cb5421e2Michael M Slusarz#include <nettle/version.h>
#include <nettle/hmac.h>
#include <nettle/pbkdf2.h>
#include <nettle/ecc.h>

#include "dcrypt.h"
#include "dcrypt-private.h"

struct dcrypt_context_symmetric {
    pool_t pool;
    gnutls_cipher_hd_t ctx;
    gnutls_cipher_algorithm_t cipher;
    gnutls_datum_t key;
    gnutls_datum_t iv;
    enum dcrypt_sym_mode mode;
};

struct dcrypt_context_hmac {
    pool_t pool;
    gnutls_hmac_hd_t ctx;
    gnutls_mac_algorithm_t md;
    gnutls_datum_t key;
    size_t klen;
};

struct dcrypt_public_key {
    void *ctx;
};

struct dcrypt_private_key {
    void *ctx;
};

static
int dcrypt_gnutls_private_to_public_key(struct dcrypt_private_key *priv_key, struct dcrypt_public_key **pub_key_r, const char **error_r);

static
int dcrypt_gnutls_error(int ec, const char **error_r)
{
    i_assert(ec < 0);
    if(error_r != NULL) {
        *error_r = gnutls_strerror(ec);
    }
    return -1;
}

static
int dcrypt_gnutls_ctx_sym_create(const char *algorithm, enum dcrypt_sym_mode mode, struct dcrypt_context_symmetric **ctx_r, const char **error_r)
{
    gnutls_cipher_algorithm_t cipher = gnutls_cipher_get_id(algorithm);
    if(cipher == GNUTLS_CIPHER_UNKNOWN) return dcrypt_gnutls_error(cipher, error_r);
    pool_t pool = pool_alloconly_create("dcrypt gnutls", 128);
    struct dcrypt_context_symmetric *ctx = p_new(pool, struct dcrypt_context_symmetric, 1);
    ctx->pool = pool;
    ctx->cipher = cipher;
    ctx->mode = mode;
    *ctx_r = ctx;
    return 0;
}

static
int dcrypt_gnutls_ctx_sym_destroy(struct dcrypt_context_symmetric **ctx)
{
    pool_t pool =(*ctx)->pool;
    gnutls_cipher_deinit((*ctx)->ctx);
    pool_unref(&pool);
    *ctx = NULL;
    return 0;
}

static
void dcrypt_gnutls_ctx_sym_set_key(struct dcrypt_context_symmetric *ctx, const unsigned char *key, size_t key_len)
{
    if(ctx->key.data != NULL) p_free(ctx->pool, ctx->key.data);
    ctx->key.size = I_MIN(key_len,(size_t)gnutls_cipher_get_key_size(ctx->cipher));
    ctx->key.data = p_malloc(ctx->pool, ctx->key.size);
    memcpy(ctx->key.data, key, ctx->key.size);
}

static
void dcrypt_gnutls_ctx_sym_set_iv(struct dcrypt_context_symmetric *ctx, const unsigned char *iv, size_t iv_len)
{
    if(ctx->iv.data != NULL) p_free(ctx->pool, ctx->iv.data);
    ctx->iv.size = I_MIN(iv_len,(size_t)gnutls_cipher_get_iv_size(ctx->cipher));
    ctx->iv.data = p_malloc(ctx->pool, ctx->iv.size);
    memcpy(ctx->iv.data, iv, ctx->iv.size);
}

static
void dcrypt_gnutls_ctx_sym_set_key_iv_random(struct dcrypt_context_symmetric *ctx)
{
    if(ctx->key.data != NULL) p_free(ctx->pool, ctx->key.data);
    if(ctx->iv.data != NULL) p_free(ctx->pool, ctx->iv.data);
    ctx->key.data = p_malloc(ctx->pool, gnutls_cipher_get_key_size(ctx->cipher));
    random_fill(ctx->key.data, gnutls_cipher_get_key_size(ctx->cipher));
    ctx->key.size = gnutls_cipher_get_key_size(ctx->cipher);
    ctx->iv.data = p_malloc(ctx->pool, gnutls_cipher_get_iv_size(ctx->cipher));
    random_fill(ctx->iv.data, gnutls_cipher_get_iv_size(ctx->cipher));
    ctx->iv.size = gnutls_cipher_get_iv_size(ctx->cipher);
}

static
int dcrypt_gnutls_ctx_sym_get_key(struct dcrypt_context_symmetric *ctx, buffer_t *key)
{
    if(ctx->key.data == NULL) return -1;
    buffer_append(key, ctx->key.data, ctx->key.size);
    return 0;
}
static
int dcrypt_gnutls_ctx_sym_get_iv(struct dcrypt_context_symmetric *ctx, buffer_t *iv)
{
    if(ctx->iv.data == NULL) return -1;
    buffer_append(iv, ctx->iv.data, ctx->iv.size);
    return 0;
}

static
int dcrypt_gnutls_ctx_sym_get_key_length(struct dcrypt_context_symmetric *ctx)
{
    return gnutls_cipher_get_iv_size(ctx->cipher);
}
static
int dcrypt_gnutls_ctx_sym_get_iv_length(struct dcrypt_context_symmetric *ctx)
{
    return gnutls_cipher_get_iv_size(ctx->cipher);
}
static
int dcrypt_gnutls_ctx_sym_get_block_size(struct dcrypt_context_symmetric *ctx)
{
    return gnutls_cipher_get_block_size(ctx->cipher);
}

static
int dcrypt_gnutls_ctx_sym_init(struct dcrypt_context_symmetric *ctx, const char **error_r)
{
    int ec;
    ec = gnutls_cipher_init(&ctx->ctx, ctx->cipher, &ctx->key, &ctx->iv);
    if(ec < 0) return dcrypt_gnutls_error(ec, error_r);
    return 0;
}

static
int dcrypt_gnutls_ctx_sym_update(struct dcrypt_context_symmetric *ctx, const unsigned char *data, size_t data_len, buffer_t *result, const char **error_r)
{
    int ec;
    size_t outl = gnutls_cipher_get_block_size(ctx->cipher);
    unsigned char buf[outl];
    ec = gnutls_cipher_encrypt2(ctx->ctx, data, data_len, buf, outl);
    if(ec < 0) return dcrypt_gnutls_error(ec, error_r);
    buffer_append(result, buf, outl);
    return ec;
}

static
int dcrypt_gnutls_ctx_sym_final(struct dcrypt_context_symmetric *ctx, buffer_t *result, const char **error_r)
{
    return dcrypt_gnutls_ctx_sym_update(ctx, (const unsigned char*)"", 0, result, error_r);
}


static
int dcrypt_gnutls_ctx_hmac_create(const char *algorithm, struct dcrypt_context_hmac **ctx_r, const char **error_r)
{
    gnutls_mac_algorithm_t md = gnutls_mac_get_id(algorithm);
    if (md == GNUTLS_MAC_UNKNOWN) return dcrypt_gnutls_error(md, error_r);
    pool_t pool = pool_alloconly_create("dcrypt gnutls", 128);
    struct dcrypt_context_hmac *ctx = p_new(pool, struct dcrypt_context_hmac, 1);
    ctx->pool = pool;
    ctx->md = md;
    *ctx_r = ctx;
    return 0;
}

static
int dcrypt_gnutls_ctx_hmac_destroy(struct dcrypt_context_hmac **ctx)
{
    pool_t pool = (*ctx)->pool;
    gnutls_hmac_deinit((*ctx)->ctx, NULL);
    pool_unref(&pool);
    *ctx = NULL;
    return 0;
}


static
void dcrypt_gnutls_ctx_hmac_set_key(struct dcrypt_context_hmac *ctx, const unsigned char *key, size_t key_len)
{
        if(ctx->key.data != NULL) p_free(ctx->pool, ctx->key.data);
        ctx->key.size = I_MIN(key_len,(size_t)gnutls_hmac_get_len(ctx->md));
        ctx->key.data = p_malloc(ctx->pool, ctx->key.size);
        memcpy(ctx->key.data, key, ctx->key.size);
}

static
int dcrypt_gnutls_ctx_hmac_get_key(struct dcrypt_context_hmac *ctx, buffer_t *key)
{
    if (ctx->key.data == NULL) return -1;
    buffer_append(key, ctx->key.data, ctx->key.size);
    return 0;
}

static
int dcrypt_gnutls_ctx_hmac_init(struct dcrypt_context_hmac *ctx, const char **error_r)
{
    int ec;
    ec = gnutls_hmac_init(&ctx->ctx, ctx->md, ctx->key.data, ctx->key.size);
    if (ec < 0) return dcrypt_gnutls_error(ec, error_r);
    return 0;
}
static
int dcrypt_gnutls_ctx_hmac_update(struct dcrypt_context_hmac *ctx, const unsigned char *data, size_t data_len, const char **error_r)
{
    int ec;
    if ((ec = gnutls_hmac(ctx->ctx, data, data_len)) != 0)
        return dcrypt_gnutls_error(ec, error_r);
    return 0;
}
static
int dcrypt_gnutls_ctx_hmac_final(struct dcrypt_context_hmac *ctx, buffer_t *result, const char **error_r)
{
    size_t hlen = gnutls_hmac_get_len(ctx->md);
    unsigned char buf[hlen];
    gnutls_hmac_output(ctx->ctx, buf);
    buffer_append(result, buf, hlen);
    return 0;
}

static
int dcrypt_gnutls_ecdh_derive_secret(struct dcrypt_public_key *peer_key, buffer_t *R, buffer_t *S, const char **error_r)
{

}

static
int dcrypt_gnutls_pbkdf2(const unsigned char *password, size_t password_len, const unsigned char *salt, size_t salt_len, const char *algorithm,
    unsigned int rounds, buffer_t *result, unsigned int result_len, const char **error_r)
{
    unsigned char buf[result_len];
    /* only sha1 or sha256 is supported */
    if (strncasecmp(algorithm, "sha1", 4) == 0) {
        pbkdf2_hmac_sha1(password_len, password, rounds, salt_len, salt, result_len, buf);
    } else if (strncasecmp(algorithm, "sha256", 6) == 0) {
        pbkdf2_hmac_sha256(password_len, password, rounds, salt_len, salt, result_len, buf);
    } else if (strncasecmp(algorithm, "sha512", 6) == 0) {
        struct hmac_sha512_ctx ctx;
        hmac_sha512_set_key(&ctx, password_len, password);
        PBKDF2(&ctx, hmac_sha512_update, hmac_sha512_digest, 64, rounds, salt_len, salt, result_len, buf);
        i_zero(&ctx);
    } else {
        *error_r = "Unsupported algorithm";
        return -1;
    }
    buffer_append(result, buf, result_len);
    memset(buf, 0, sizeof(buf));
    return 0;
}

static
int dcrypt_gnutls_generate_keypair(struct dcrypt_keypair *pair_r, enum dcrypt_key_type kind, unsigned int bits, const char *curve, const char **error_r)
{
    gnutls_pk_algorithm_t pk_algo;
    gnutls_ecc_curve_t pk_curve;

        if (kind == DCRYPT_KEY_EC) {
        pk_curve = gnutls_ecc_curve_get_id(curve);
        if (pk_curve == GNUTLS_ECC_CURVE_INVALID) {
            *error_r = "Invalid curve";
            return -1;
        }
        bits = GNUTLS_CURVE_TO_BITS(pk_curve);
#if GNUTLS_VERSION_NUMBER >= 0x030500
        pk_algo = gnutls_curve_get_pk(pk_curve);
#else
        pk_algo = GNUTLS_PK_EC;
#endif
        } else if (kind == DCRYPT_KEY_RSA) {
                pk_algo = gnutls_pk_get_id("RSA");
        } else {
        *error_r = "Unsupported key type";
        return -1;
    }

    int ec;
    gnutls_privkey_t priv;
    if ((ec = gnutls_privkey_init(&priv)) != GNUTLS_E_SUCCESS) return dcrypt_gnutls_error(ec, error_r);
#if GNUTLS_VERSION_NUMBER >= 0x030500
    gnutls_privkey_set_flags(priv, GNUTLS_PRIVKEY_FLAG_EXPORT_COMPAT);
#endif
    ec = gnutls_privkey_generate(priv, pk_algo, bits, 0);
    if (ec != GNUTLS_E_SUCCESS) {
        gnutls_privkey_deinit(priv);
        return dcrypt_gnutls_error(ec, error_r);
    }

    pair_r->priv = (struct dcrypt_private_key*)priv;

    return dcrypt_gnutls_private_to_public_key(pair_r->priv, &pair_r->pub, error_r);
}

static
int dcrypt_gnutls_load_private_key(struct dcrypt_private_key **key_r, const unsigned char *data, size_t data_len, dcrypt_password_cb *cb, void *ctx, const char **error_r)
{

}
static
int dcrypt_gnutls_load_public_key(struct dcrypt_public_key **key_r, const unsigned char *data, size_t data_len, const char **error_r)
{

}

static
int dcrypt_gnutls_store_private_key(struct dcrypt_private_key *key, const char *cipher, buffer_t *destination, dcrypt_password_cb *cb, void *ctx, const char **error_r)
{
    gnutls_privkey_t priv = (gnutls_privkey_t)key;
    gnutls_x509_privkey_t xkey;
    gnutls_privkey_export_x509(priv, &xkey);
    /* then export PEM */
    size_t outl = 0;
    gnutls_x509_privkey_export_pkcs8(xkey, GNUTLS_X509_FMT_PEM, NULL, 0, NULL, &outl);
    char buffer[outl];
    gnutls_x509_privkey_export_pkcs8(xkey, GNUTLS_X509_FMT_PEM, NULL, 0, buffer, &outl);
    buffer_append(destination, buffer, outl);
    memset(buffer, 0, sizeof(buffer));
    return 0;
}

static
int dcrypt_gnutls_store_public_key(struct dcrypt_public_key *key, buffer_t *destination, const char **error_r)
{
    gnutls_pubkey_t pub = (gnutls_pubkey_t)key;
    size_t outl = 0;
    gnutls_pubkey_export(pub, GNUTLS_X509_FMT_PEM, NULL, &outl);
    char buffer[outl];
    gnutls_pubkey_export(pub, GNUTLS_X509_FMT_PEM, buffer, &outl);
    buffer_append(destination, buffer, outl);
    return 0;
}

static
int dcrypt_gnutls_private_to_public_key(struct dcrypt_private_key *priv_key, struct dcrypt_public_key **pub_key_r, const char **error_r)
{
    int ec;

    gnutls_privkey_t priv = (gnutls_privkey_t)priv_key;
    if (gnutls_privkey_get_pk_algorithm(priv, NULL) == GNUTLS_PK_RSA) {
        gnutls_datum_t m,e;
        /* do not extract anything we don't need */
        ec = gnutls_privkey_export_rsa_raw(priv, &m, &e, NULL, NULL, NULL, NULL, NULL, NULL);
        if (ec != GNUTLS_E_SUCCESS) return dcrypt_gnutls_error(ec, error_r);
        gnutls_pubkey_t pub;
        gnutls_pubkey_init(&pub);
        ec = gnutls_pubkey_import_rsa_raw(pub, &m, &e);
        gnutls_free(m.data);
        gnutls_free(e.data);
        if (ec < 0) {
            gnutls_pubkey_deinit(pub);
            return dcrypt_gnutls_error(ec, error_r);
        }
        *pub_key_r = (struct dcrypt_public_key*)pub;
        return 0;
    } else if (gnutls_privkey_get_pk_algorithm(priv, NULL) == GNUTLS_PK_EC) {
        gnutls_ecc_curve_t curve;
        gnutls_datum_t x,y,k;
        ec = gnutls_privkey_export_ecc_raw(priv, &curve, &x, &y, NULL);
        if (ec != GNUTLS_E_SUCCESS) return dcrypt_gnutls_error(ec, error_r);
        gnutls_pubkey_t pub;
        gnutls_pubkey_init(&pub);
        ec = gnutls_pubkey_import_ecc_raw(pub, curve, &x, &y);
        gnutls_free(x.data);
        gnutls_free(y.data);
        if (ec < 0) {
            gnutls_pubkey_deinit(pub);
            return dcrypt_gnutls_error(ec, error_r);
        }
        *pub_key_r = (struct dcrypt_public_key*)pub;
        return 0;
    }

    return -1;
}

static
void dcrypt_gnutls_free_public_key(struct dcrypt_public_key **key)
{
    gnutls_pubkey_deinit((gnutls_pubkey_t)*key);
    *key = NULL;
}
static
void dcrypt_gnutls_free_private_key(struct dcrypt_private_key **key)
{
    gnutls_privkey_deinit((gnutls_privkey_t)*key);
    *key = NULL;
}
static
void dcrypt_gnutls_free_keypair(struct dcrypt_keypair *keypair)
{
    dcrypt_gnutls_free_public_key(&keypair->pub);
    dcrypt_gnutls_free_private_key(&keypair->priv);
}

static
int dcrypt_gnutls_rsa_encrypt(struct dcrypt_public_key *key, const unsigned char *data, size_t data_len, buffer_t *result, const char **error_r)
{

}
static
int dcrypt_gnutls_rsa_decrypt(struct dcrypt_private_key *key, const unsigned char *data, size_t data_len, buffer_t *result, const char **error_r)
{

}

static
int dcrypt_gnutls_oid_keytype(const unsigned char *oid, size_t oid_len, enum dcrypt_key_type *key_type, const char **error_r)
{

}
static
int dcrypt_gnutls_keytype_oid(enum dcrypt_key_type key_type, buffer_t *oid, const char **error_r)
{

}

static
const char *dcrypt_gnutls_oid2name(const unsigned char *oid, size_t oid_len, const char **error_r)
{
}

static
int dcrypt_gnutls_name2oid(const char *name, buffer_t *oid, const char **error_r)
{

}

static struct dcrypt_vfs dcrypt_gnutls_vfs = {
    .ctx_sym_create = dcrypt_gnutls_ctx_sym_create,
    .ctx_sym_destroy = dcrypt_gnutls_ctx_sym_destroy,
    .ctx_sym_set_key = dcrypt_gnutls_ctx_sym_set_key,
    .ctx_sym_set_iv = dcrypt_gnutls_ctx_sym_set_iv,
    .ctx_sym_set_key_iv_random = dcrypt_gnutls_ctx_sym_set_key_iv_random,
    .ctx_sym_get_key = dcrypt_gnutls_ctx_sym_get_key,
    .ctx_sym_get_iv = dcrypt_gnutls_ctx_sym_get_iv,
    .ctx_sym_get_key_length = dcrypt_gnutls_ctx_sym_get_key_length,
    .ctx_sym_get_iv_length = dcrypt_gnutls_ctx_sym_get_iv_length,
    .ctx_sym_init = dcrypt_gnutls_ctx_sym_init,
    .ctx_sym_update = dcrypt_gnutls_ctx_sym_update,
    .ctx_sym_final = dcrypt_gnutls_ctx_sym_final,
    .ctx_hmac_create = dcrypt_gnutls_ctx_hmac_create,
    .ctx_hmac_destroy = dcrypt_gnutls_ctx_hmac_destroy,
    .ctx_hmac_set_key = dcrypt_gnutls_ctx_hmac_set_key,
    .ctx_hmac_get_key = dcrypt_gnutls_ctx_hmac_get_key,
    .ctx_hmac_init = dcrypt_gnutls_ctx_hmac_init,
    .ctx_hmac_update = dcrypt_gnutls_ctx_hmac_update,
    .ctx_hmac_final = dcrypt_gnutls_ctx_hmac_final,
//  .ecdh_derive_secret = dcrypt_gnutls_ecdh_derive_secret,
    .pbkdf2 = dcrypt_gnutls_pbkdf2,
    .generate_keypair = dcrypt_gnutls_generate_keypair,
    .load_private_key = dcrypt_gnutls_load_private_key,
    .load_public_key = dcrypt_gnutls_load_public_key,
    .store_private_key = dcrypt_gnutls_store_private_key,
    .store_public_key = dcrypt_gnutls_store_public_key,
    .private_to_public_key = dcrypt_gnutls_private_to_public_key,
    .free_keypair = dcrypt_gnutls_free_keypair,
    .free_public_key = dcrypt_gnutls_free_public_key,
    .free_private_key = dcrypt_gnutls_free_private_key,
    .rsa_encrypt = dcrypt_gnutls_rsa_encrypt,
    .rsa_decrypt = dcrypt_gnutls_rsa_decrypt,
    .oid_keytype = dcrypt_gnutls_oid_keytype,
    .keytype_oid = dcrypt_gnutls_keytype_oid,
    .oid2name = dcrypt_gnutls_oid2name,
    .name2oid = dcrypt_gnutls_name2oid
};

void dcrypt_gnutls_init(struct module *module ATTR_UNUSED)
{
    gnutls_global_init();
    dcrypt_set_vfs(&dcrypt_gnutls_vfs);
}

void dcrypt_gnutls_deinit(void)
{
    gnutls_global_deinit();
}