CryptAes.c

Go to the documentation of this file.

 
#include "InternalCryptLib.h"
#include <mbedtls/aes.h>
 
UINTN
EFIAPI
AesGetContextSize (
  VOID
  )
{
  //
  // AES uses different key contexts for encryption and decryption, so here memory
  // for 2 copies of mbedtls_aes_context is allocated.
  //
  return (UINTN)(2 * sizeof (mbedtls_aes_context));
}
 
BOOLEAN
EFIAPI
AesInit (
  OUT  VOID         *AesContext,
  IN   CONST UINT8  *Key,
  IN   UINTN        KeyLength
  )
{
  mbedtls_aes_context  *AesCtx;
 
  //
  // Check input parameters.
  //
  if ((AesContext == NULL) || (Key == NULL) || ((KeyLength != 128) && (KeyLength != 192) && (KeyLength != 256))) {
    return FALSE;
  }
 
  //
  // Initialize AES encryption & decryption key schedule.
  //
  AesCtx = (mbedtls_aes_context *)AesContext;
  if (mbedtls_aes_setkey_enc (AesCtx, Key, (UINT32)KeyLength) != 0) {
    return FALSE;
  }
 
  if (mbedtls_aes_setkey_dec (AesCtx + 1, Key, (UINT32)KeyLength) != 0) {
    return FALSE;
  }
 
  return TRUE;
}
 
BOOLEAN
EFIAPI
AesCbcEncrypt (
  IN   VOID         *AesContext,
  IN   CONST UINT8  *Input,
  IN   UINTN        InputSize,
  IN   CONST UINT8  *Ivec,
  OUT  UINT8        *Output
  )
{
  mbedtls_aes_context  *AesCtx;
  UINT8                IvecBuffer[AES_BLOCK_SIZE];
 
  //
  // Check input parameters.
  //
  if ((AesContext == NULL) || (Input == NULL) || ((InputSize % AES_BLOCK_SIZE) != 0)) {
    return FALSE;
  }
 
  if ((Ivec == NULL) || (Output == NULL) || (InputSize > INT_MAX)) {
    return FALSE;
  }
 
  AesCtx = (mbedtls_aes_context *)AesContext;
  CopyMem (IvecBuffer, Ivec, AES_BLOCK_SIZE);
 
  //
  // Perform AES data encryption with CBC mode
  //
  if (mbedtls_aes_crypt_cbc (
        AesCtx,
        MBEDTLS_AES_ENCRYPT,
        (UINT32)InputSize,
        IvecBuffer,
        Input,
        Output
        ) != 0)
  {
    return FALSE;
  } else {
    return TRUE;
  }
}
 
BOOLEAN
EFIAPI
AesCbcDecrypt (
  IN   VOID         *AesContext,
  IN   CONST UINT8  *Input,
  IN   UINTN        InputSize,
  IN   CONST UINT8  *Ivec,
  OUT  UINT8        *Output
  )
{
  mbedtls_aes_context  *AesCtx;
  UINT8                IvecBuffer[AES_BLOCK_SIZE];
 
  //
  // Check input parameters.
  //
  if ((AesContext == NULL) || (Input == NULL) || ((InputSize % AES_BLOCK_SIZE) != 0)) {
    return FALSE;
  }
 
  if ((Ivec == NULL) || (Output == NULL) || (InputSize > INT_MAX)) {
    return FALSE;
  }
 
  AesCtx = (mbedtls_aes_context *)AesContext;
  CopyMem (IvecBuffer, Ivec, AES_BLOCK_SIZE);
 
  //
  // Perform AES data encryption with CBC mode
  //
  if (mbedtls_aes_crypt_cbc (
        AesCtx + 1,
        MBEDTLS_AES_DECRYPT,
        (UINT32)InputSize,
        IvecBuffer,
        Input,
        Output
        ) != 0)
  {
    return FALSE;
  } else {
    return TRUE;
  }
}