Tool/software:
Hi all:
Hi,
A small update required in the to support IV other than 96 bits as per the GCM NIST Spec below
I will share you the updated patch by tomorrow, which would support this.
Thanks and Regards,
Nikhil Dasan
Hi,
Please find the updated patch here to support the IV for misaligned length (i.e. not 96 bits)
i.e. using the below to calculate Hash and Y0 and then using GCM mode 2 to pass the precalculated H and Y0
You can refer the below testcase as example
static void test_aes_gcm_nist_unaligned_iv(DTHE_Handle aesHandle)
{
DTHE_AES_Return_t status;
DTHE_AES_Params aesParams;
uint32_t aesResultEnc[APP_CRYPTO_AES_GCM_MAX_BUFF_SIZE/4U];
uint32_t aesGcmTagEnc[4U];
uint8_t zero_arr[] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
uint8_t key_unaligned_iv_tc[] = {
0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c,
0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08
};
uint8_t data_in_unaligned_iv_tc[] = {
0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5,
0xa5, 0x59, 0x09, 0xc5, 0xaf, 0xf5, 0x26, 0x9a,
0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72,
0x1c, 0x3c, 0x0c, 0x95, 0x95, 0x68, 0x09, 0x53,
0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57,
0xba, 0x63, 0x7b, 0x39
};
uint8_t data_out_unaligned_iv_tc[] = {
0x61, 0x35, 0x3b, 0x4c, 0x28, 0x06, 0x93, 0x4a,
0x77, 0x7f, 0xf5, 0x1f, 0xa2, 0x2a, 0x47, 0x55,
0x69, 0x9b, 0x2a, 0x71, 0x4f, 0xcd, 0xc6, 0xf8,
0x37, 0x66, 0xe5, 0xf9, 0x7b, 0x6c, 0x74, 0x23,
0x73, 0x80, 0x69, 0x00, 0xe4, 0x9f, 0x24, 0xb2,
0x2b, 0x09, 0x75, 0x44, 0xd4, 0x89, 0x6b, 0x42,
0x49, 0x89, 0xb5, 0xe1, 0xeb, 0xac, 0x0f, 0x07,
0xc2, 0x3f, 0x45, 0x98
};
uint8_t unaligned_iv[] = {
0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad
};
uint8_t tag_out_unaligned_iv_tc[] = {
0x36, 0x12, 0xd2, 0xe7, 0x9e, 0x3b, 0x07, 0x85,
0x56, 0x1b, 0xe1, 0x4a, 0xac, 0xa2, 0xfc, 0xcb
};
uint8_t aad_in_unaligned_iv_tc[] = {
0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
0xab, 0xad, 0xda, 0xd2
};
uint8_t temp_buff[16U] __attribute__((aligned(128)));
uint8_t calculated_H[16U] __attribute__((aligned(128)));
uint8_t calculated_Y0[16U] __attribute__((aligned(128)));
/* Initialize the AES Parameters */
(void)memset ((void *)&aesParams, 0, sizeof(DTHE_AES_Params));
(void)memset ((void *)zero_arr, 0, 16U);
/* Initialize the encryption parameters */
aesParams.algoType = DTHE_AES_ECB_MODE;
aesParams.opType = DTHE_AES_ENCRYPT;
aesParams.useKEKMode = FALSE;
aesParams.ptrKey = (uint32_t*)&key_unaligned_iv_tc[0];
aesParams.keyLen = DTHE_AES_KEY_128_SIZE;
aesParams.ptrPlainTextData = (uint32_t*)SOC_virtToPhy(zero_arr);
aesParams.dataLenBytes = 16U;
aesParams.ptrEncryptedData = (uint32_t*)SOC_virtToPhy(calculated_H);
/* Encryption */
status = DTHE_AES_execute(aesHandle, &aesParams);
DebugP_assert(DTHE_AES_RETURN_SUCCESS == status);
/* Initialize the AES Parameters */
(void)memset ((void *)&aesParams, 0, sizeof(DTHE_AES_Params));
(void)memset ((void *)zero_arr, 0, 16U);
/* Initialize the encryption parameters */
aesParams.algoType = DTHE_AES_GHASH_ONLY_MODE;
aesParams.gcmModeSelect = DTHE_AES_GCM_MODE_1;
aesParams.opType = DTHE_AES_DECRYPT;
aesParams.useKEKMode = FALSE;
aesParams.ptrKey = (uint32_t*)&key_unaligned_iv_tc[0];
aesParams.ptrKey1 = (uint32_t*)&calculated_H[0];
aesParams.keyLen = DTHE_AES_KEY_128_SIZE;
aesParams.ptrIV = (uint32_t*)NULL;
aesParams.ptrEncryptedData = (uint32_t*)SOC_virtToPhy(unaligned_iv);
aesParams.ptrPlainTextData = (uint32_t*)SOC_virtToPhy(temp_buff);
aesParams.dataLenBytes = sizeof(unaligned_iv);
aesParams.ptrTag = (uint32_t*)&calculated_Y0[0];
aesParams.ptrAAD = (uint32_t*)SOC_virtToPhy(zero_arr);
aesParams.aadLength = 0U;
/* Encryption */
status = DTHE_AES_execute(aesHandle, &aesParams);
DebugP_assert(DTHE_AES_RETURN_SUCCESS == status);
/* Initialize the AES Parameters */
(void)memset ((void *)&aesParams, 0, sizeof(DTHE_AES_Params));
/* Initialize the encryption parameters */
aesParams.algoType = DTHE_AES_GCM_MODE;
aesParams.gcmModeSelect = DTHE_AES_GCM_MODE_2;
aesParams.opType = DTHE_AES_ENCRYPT;
aesParams.useKEKMode = FALSE;
aesParams.ptrKey = (uint32_t*)&key_unaligned_iv_tc[0];
aesParams.ptrKey1 = (uint32_t*)&calculated_H[0];
aesParams.keyLen = DTHE_AES_KEY_128_SIZE;
aesParams.ptrIV = (uint32_t*)&calculated_Y0[0];
aesParams.ptrPlainTextData = (uint32_t*)SOC_virtToPhy(data_in_unaligned_iv_tc);
aesParams.dataLenBytes = sizeof(data_in_unaligned_iv_tc);
aesParams.ptrEncryptedData = (uint32_t*)SOC_virtToPhy(aesResultEnc);
aesParams.ptrTag = (uint32_t*)&aesGcmTagEnc[0];
aesParams.ptrAAD = (uint32_t*)SOC_virtToPhy(aad_in_unaligned_iv_tc);
aesParams.aadLength = sizeof(aad_in_unaligned_iv_tc);
/* Encryption */
status = DTHE_AES_execute(aesHandle, &aesParams);
DebugP_assert(DTHE_AES_RETURN_SUCCESS == status);
status = memcmp(aesResultEnc, data_out_unaligned_iv_tc, sizeof(data_in_unaligned_iv_tc));
if(status == SystemP_SUCCESS)
{
DebugP_log("[CRYPTO] DTHE AES GCM Encryption Unaligned Success!\r\n");
}
else
{
DebugP_log("[CRYPTO] DTHE AES GCM Encryption Unaligned Failed!\r\n");
}
/* comparing Tag result for authentication and verification */
status = memcmp(aesGcmTagEnc, tag_out_unaligned_iv_tc, 16U);
if(status == SystemP_SUCCESS)
{
DebugP_log("[CRYPTO] DTHE AES GCM Tag generation Unaligned Success!\r\n");
}
else
{
DebugP_log("[CRYPTO] DTHE AES GCM Tag generation Unaligned Failed!\r\n");
}
}Hi,
For GHASH we don't set any specific mode using the DTHE_AES_controlMode() API as we are not using the encryption block of AES here.
However, we set only the GCM here as shown below to Mode 1 to same CTRL register, meaning, no encryption (only GHASH)
We only use the GHASH block of AES core to calculate the Y0 value.
And from the configuration above, you can see that DTHE_AES_GHASH_ONLY_MODE and DTHE_AES_GCM_MODE_1 and DTHE_AES_DECRYPT, which means, no encryption
Thanks and Regards,
Nikhil Dasan