crypto/old/old_decrypt.c

	old_decrypt.c revision 159d09a20817016f09b3ea28d1bdada4a336bb91
/*
 * Copyright 2008 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */


/*
 * Copyright (C) 1998 by the FundsXpress, INC.
 *
 * All rights reserved.
 *
 * Export of this software from the United States of America may require
 * a specific license from the United States Government.  It is the
 * responsibility of any person or organization contemplating export to
 * obtain such a license before exporting.
 *
 * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
 * distribute this software and its documentation for any purpose and
 * without fee is hereby granted, provided that the above copyright
 * notice appear in all copies and that both that copyright notice and
 * this permission notice appear in supporting documentation, and that
 * the name of FundsXpress. not be used in advertising or publicity pertaining
 * to distribution of the software without specific, written prior
 * permission.  FundsXpress makes no representations about the suitability of
 * this software for any purpose.  It is provided "as is" without express
 * or implied warranty.
 *
 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
 * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
 * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
 */

#include "k5-int.h"
#include "old.h"

/*ARGSUSED*/
krb5_error_code
krb5_old_decrypt(krb5_context context,
         const struct krb5_enc_provider *enc,
         const struct krb5_hash_provider *hash,
         const krb5_keyblock *key,
         krb5_keyusage usage,
         const krb5_data *ivec,
         const krb5_data *input,
         krb5_data *arg_output)
{
    krb5_error_code ret;
    size_t blocksize, hashsize, plainsize;
    unsigned char *cn;
    krb5_data output, cksum, crcivec;
    int alloced;
    unsigned char orig_cksum[128], new_cksum[128];

    blocksize = enc->block_size;
    hashsize = hash->hashsize;

    plainsize = input->length - blocksize - hashsize;

    if (arg_output->length < plainsize)
    return(KRB5_BAD_MSIZE);

    if (arg_output->length < input->length) {
    output.length = input->length;

    if ((output.data = (char *) MALLOC(output.length)) == NULL) {
        return(ENOMEM);
    }

    alloced = 1;
    } else {
    output.length = input->length;

    output.data = arg_output->data;

    alloced = 0;
    }

    /* decrypt it */

    /* save last ciphertext block in case we decrypt in place */
    if (ivec != NULL && ivec->length == blocksize) {
    cn = MALLOC(blocksize);
    if (cn == NULL) {
        ret = ENOMEM;
        goto cleanup;
    }
    (void) memcpy(cn, input->data + input->length - blocksize, blocksize);
    } else
    cn = NULL;

    /* XXX this is gross, but I don't have much choice */
    if ((key->enctype == ENCTYPE_DES_CBC_CRC) && (ivec == 0)) {
    crcivec.length = key->length;
    crcivec.data = (char *) key->contents;
    ivec = &crcivec;
    }

    if ((ret = ((*(enc->decrypt))(context, key, ivec, input, &output))))
    goto cleanup;

    /* verify the checksum */

    (void) memcpy(orig_cksum, output.data+blocksize, hashsize);
    (void) memset(output.data+blocksize, 0, hashsize);

    cksum.length = hashsize;
    cksum.data = (char *)new_cksum;

    if ((ret = ((*(hash->hash))(context, 1, &output, &cksum))))
    goto cleanup;

    if (memcmp(cksum.data, orig_cksum, cksum.length) != 0) {
    ret = KRB5KRB_AP_ERR_BAD_INTEGRITY;
    goto cleanup;
    }

    /* copy the plaintext around */

    if (alloced) {
    (void) memcpy(arg_output->data, output.data+blocksize+hashsize,
           plainsize);
    } else {
    (void) memmove(arg_output->data, arg_output->data+blocksize+hashsize,
        plainsize);
    }
    arg_output->length = plainsize;

    /* update ivec */
    if (cn != NULL)
    (void) memcpy(ivec->data, cn, blocksize);

    ret = 0;

cleanup:
    if (alloced) {
    (void) memset(output.data, 0, output.length);
    FREE(output.data, output.length);
    }

    if (cn != NULL)
    FREE(cn, blocksize);
    (void) memset(new_cksum, 0, hashsize);

    return(ret);
}