LCOV - code coverage report
Current view: top level - xmlsecurity/source/xmlsec/nss - ciphercontext.cxx (source / functions) Hit Total Coverage
Test: commit 10e77ab3ff6f4314137acd6e2702a6e5c1ce1fae Lines: 103 127 81.1 %
Date: 2014-11-03 Functions: 4 4 100.0 %
Legend: Lines: hit not hit

          Line data    Source code
       1             : /* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
       2             : /*
       3             :  * This file is part of the LibreOffice project.
       4             :  *
       5             :  * This Source Code Form is subject to the terms of the Mozilla Public
       6             :  * License, v. 2.0. If a copy of the MPL was not distributed with this
       7             :  * file, You can obtain one at http://mozilla.org/MPL/2.0/.
       8             :  *
       9             :  * This file incorporates work covered by the following license notice:
      10             :  *
      11             :  *   Licensed to the Apache Software Foundation (ASF) under one or more
      12             :  *   contributor license agreements. See the NOTICE file distributed
      13             :  *   with this work for additional information regarding copyright
      14             :  *   ownership. The ASF licenses this file to you under the Apache
      15             :  *   License, Version 2.0 (the "License"); you may not use this file
      16             :  *   except in compliance with the License. You may obtain a copy of
      17             :  *   the License at http://www.apache.org/licenses/LICENSE-2.0 .
      18             :  */
      19             : 
      20             : 
      21             : #include <osl/time.h>
      22             : #include <rtl/random.h>
      23             : #include <rtl/ref.hxx>
      24             : 
      25             : #include "ciphercontext.hxx"
      26             : 
      27             : using namespace ::com::sun::star;
      28             : 
      29          78 : uno::Reference< xml::crypto::XCipherContext > OCipherContext::Create( CK_MECHANISM_TYPE nNSSCipherID, const uno::Sequence< ::sal_Int8 >& aKey, const uno::Sequence< ::sal_Int8 >& aInitializationVector, bool bEncryption, bool bW3CPadding )
      30             : {
      31          78 :     ::rtl::Reference< OCipherContext > xResult = new OCipherContext;
      32             : 
      33          78 :     xResult->m_pSlot = PK11_GetBestSlot( nNSSCipherID, NULL );
      34          78 :     if ( xResult->m_pSlot )
      35             :     {
      36          78 :         SECItem aKeyItem = { siBuffer, const_cast< unsigned char* >( reinterpret_cast< const unsigned char* >( aKey.getConstArray() ) ), sal::static_int_cast<unsigned>( aKey.getLength() ) };
      37          78 :         xResult->m_pSymKey = PK11_ImportSymKey( xResult->m_pSlot, nNSSCipherID, PK11_OriginDerive, bEncryption ? CKA_ENCRYPT : CKA_DECRYPT, &aKeyItem, NULL );
      38          78 :         if ( xResult->m_pSymKey )
      39             :         {
      40          78 :             SECItem aIVItem = { siBuffer, const_cast< unsigned char* >( reinterpret_cast< const unsigned char* >( aInitializationVector.getConstArray() ) ), sal::static_int_cast<unsigned>( aInitializationVector.getLength() ) };
      41          78 :             xResult->m_pSecParam = PK11_ParamFromIV( nNSSCipherID, &aIVItem );
      42          78 :             if ( xResult->m_pSecParam )
      43             :             {
      44          78 :                 xResult->m_pContext = PK11_CreateContextBySymKey( nNSSCipherID, bEncryption ? CKA_ENCRYPT : CKA_DECRYPT, xResult->m_pSymKey, xResult->m_pSecParam);
      45          78 :                 if ( xResult->m_pContext )
      46             :                 {
      47          78 :                     xResult->m_bEncryption = bEncryption;
      48          78 :                     xResult->m_bW3CPadding = bW3CPadding;
      49          78 :                     xResult->m_bPadding = bW3CPadding || ( PK11_GetPadMechanism( nNSSCipherID ) == nNSSCipherID );
      50          78 :                     xResult->m_nBlockSize = PK11_GetBlockSize( nNSSCipherID, xResult->m_pSecParam );
      51          78 :                     if ( xResult->m_nBlockSize <= SAL_MAX_INT8 )
      52          78 :                         return xResult.get();
      53             :                 }
      54             :             }
      55             :         }
      56             :     }
      57             : 
      58           0 :     return uno::Reference< xml::crypto::XCipherContext >();
      59             : }
      60             : 
      61         154 : void OCipherContext::Dispose()
      62             : {
      63         154 :     ::osl::MutexGuard aGuard( m_aMutex );
      64             : 
      65         154 :     if ( m_pContext )
      66             :     {
      67          78 :         PK11_DestroyContext( m_pContext, PR_TRUE );
      68          78 :         m_pContext = NULL;
      69             :     }
      70             : 
      71         154 :     if ( m_pSecParam )
      72             :     {
      73          78 :         SECITEM_FreeItem( m_pSecParam, PR_TRUE );
      74          78 :         m_pSecParam = NULL;
      75             :     }
      76             : 
      77         154 :     if ( m_pSymKey )
      78             :     {
      79          78 :         PK11_FreeSymKey( m_pSymKey );
      80          78 :         m_pSymKey = NULL;
      81             :     }
      82             : 
      83         154 :     if ( m_pSlot )
      84             :     {
      85          78 :         PK11_FreeSlot( m_pSlot );
      86          78 :         m_pSlot = NULL;
      87             :     }
      88             : 
      89         154 :     m_bDisposed = true;
      90         154 : }
      91             : 
      92          76 : uno::Sequence< ::sal_Int8 > SAL_CALL OCipherContext::convertWithCipherContext( const uno::Sequence< ::sal_Int8 >& aData )
      93             :     throw ( lang::IllegalArgumentException, lang::DisposedException, uno::RuntimeException, std::exception)
      94             : {
      95          76 :     ::osl::MutexGuard aGuard( m_aMutex );
      96             : 
      97          76 :     if ( m_bBroken )
      98           0 :         throw uno::RuntimeException();
      99             : 
     100          76 :     if ( m_bDisposed )
     101           0 :         throw lang::DisposedException();
     102             : 
     103         152 :     uno::Sequence< sal_Int8 > aToConvert;
     104          76 :     if ( aData.getLength() )
     105             :     {
     106          76 :         sal_Int32 nOldLastBlockLen = m_aLastBlock.getLength();
     107             :         OSL_ENSURE( nOldLastBlockLen <= m_nBlockSize, "Unexpected last block size!" );
     108             : 
     109          76 :         sal_Int32 nAvailableData = nOldLastBlockLen + aData.getLength();
     110          76 :         sal_Int32 nToConvertLen = nAvailableData;
     111          76 :         if ( m_bEncryption || !m_bW3CPadding )
     112             :         {
     113          20 :             if ( nAvailableData % m_nBlockSize == 0 )
     114           0 :                 nToConvertLen = nAvailableData;
     115          10 :             else if ( nAvailableData < m_nBlockSize )
     116           0 :                 nToConvertLen = 0;
     117             :             else
     118          10 :                 nToConvertLen = nAvailableData - nAvailableData % m_nBlockSize;
     119             :         }
     120             :         else
     121             :         {
     122             :             // decryption with W3C padding needs at least one block for finalizing
     123          66 :             if ( nAvailableData < m_nBlockSize * 2 )
     124           0 :                 nToConvertLen = 0;
     125             :             else
     126          66 :                 nToConvertLen = nAvailableData - nAvailableData % m_nBlockSize - m_nBlockSize;
     127             :         }
     128             : 
     129          76 :         aToConvert.realloc( nToConvertLen );
     130          76 :         if ( nToConvertLen == 0 )
     131             :         {
     132           0 :             m_aLastBlock.realloc( nOldLastBlockLen + aData.getLength() );
     133           0 :             memcpy( m_aLastBlock.getArray() + nOldLastBlockLen, aData.getConstArray(), aData.getLength() );
     134             :             // aToConvert stays empty
     135             :         }
     136          76 :         else if ( nToConvertLen < nOldLastBlockLen )
     137             :         {
     138           0 :             memcpy( aToConvert.getArray(), m_aLastBlock.getConstArray(), nToConvertLen );
     139           0 :             memcpy( m_aLastBlock.getArray(), m_aLastBlock.getConstArray() + nToConvertLen, nOldLastBlockLen - nToConvertLen );
     140           0 :             m_aLastBlock.realloc( nOldLastBlockLen - nToConvertLen + aData.getLength() );
     141           0 :             memcpy( m_aLastBlock.getArray() + nOldLastBlockLen - nToConvertLen, aData.getConstArray(), aData.getLength() );
     142             :         }
     143             :         else
     144             :         {
     145          76 :             memcpy( aToConvert.getArray(), m_aLastBlock.getConstArray(), nOldLastBlockLen );
     146          76 :             if ( nToConvertLen > nOldLastBlockLen )
     147          76 :                 memcpy( aToConvert.getArray() + nOldLastBlockLen, aData.getConstArray(), nToConvertLen - nOldLastBlockLen );
     148          76 :             m_aLastBlock.realloc( nAvailableData - nToConvertLen );
     149          76 :             memcpy( m_aLastBlock.getArray(), aData.getConstArray() + nToConvertLen - nOldLastBlockLen, nAvailableData - nToConvertLen );
     150             :         }
     151             :     }
     152             : 
     153          76 :     uno::Sequence< sal_Int8 > aResult;
     154             :     OSL_ENSURE( aToConvert.getLength() % m_nBlockSize == 0, "Unexpected size of the data to encrypt!" );
     155          76 :     if ( aToConvert.getLength() )
     156             :     {
     157          76 :         int nResultLen = 0;
     158          76 :         aResult.realloc( aToConvert.getLength() + m_nBlockSize );
     159          76 :         if ( PK11_CipherOp( m_pContext, reinterpret_cast< unsigned char* >( aResult.getArray() ), &nResultLen, aResult.getLength(), const_cast< unsigned char* >( reinterpret_cast< const unsigned char* >( aToConvert.getConstArray() ) ), aToConvert.getLength() ) != SECSuccess )
     160             :         {
     161           0 :             m_bBroken = true;
     162           0 :             Dispose();
     163           0 :             throw uno::RuntimeException();
     164             :         }
     165             : 
     166          76 :         m_nConverted += aToConvert.getLength();
     167          76 :         aResult.realloc( nResultLen );
     168             :     }
     169             : 
     170         152 :     return aResult;
     171             : }
     172             : 
     173          76 : uno::Sequence< ::sal_Int8 > SAL_CALL OCipherContext::finalizeCipherContextAndDispose()
     174             :     throw (lang::DisposedException, uno::RuntimeException, std::exception)
     175             : {
     176          76 :     ::osl::MutexGuard aGuard( m_aMutex );
     177             : 
     178          76 :     if ( m_bBroken )
     179           0 :         throw uno::RuntimeException();
     180             : 
     181          76 :     if ( m_bDisposed )
     182           0 :         throw lang::DisposedException();
     183             : 
     184             :     OSL_ENSURE( m_nBlockSize <= SAL_MAX_INT8, "Unexpected block size!" );
     185             :     OSL_ENSURE( m_nConverted % m_nBlockSize == 0, "Unexpected amount of bytes is already converted!" );
     186          76 :     sal_Int32 nSizeForPadding = ( m_nConverted + m_aLastBlock.getLength() ) % m_nBlockSize;
     187             : 
     188             :     // if it is decryption, the amount of data should be rounded to the block size even in case of padding
     189          76 :     if ( ( !m_bPadding || !m_bEncryption ) && nSizeForPadding )
     190           0 :         throw uno::RuntimeException("The data should contain complete blocks only." );
     191             : 
     192          76 :     if ( m_bW3CPadding && m_bEncryption )
     193             :     {
     194             :         // in this case the last block should be smaller than standtard block
     195             :         // it will be increased with the padding
     196             :         OSL_ENSURE( m_aLastBlock.getLength() < m_nBlockSize, "Unexpected size of cashed incomplete last block!" );
     197             : 
     198             :         // W3CPadding handling for encryption
     199          10 :         sal_Int32 nPaddingSize = m_nBlockSize - nSizeForPadding;
     200          10 :         sal_Int32 nOldLastBlockLen = m_aLastBlock.getLength();
     201          10 :         m_aLastBlock.realloc( nOldLastBlockLen + nPaddingSize );
     202             : 
     203          10 :         if ( nPaddingSize > 1 )
     204             :         {
     205             :             TimeValue aTime;
     206          10 :             osl_getSystemTime( &aTime );
     207          10 :             rtlRandomPool aRandomPool = rtl_random_createPool();
     208          10 :             rtl_random_addBytes( aRandomPool, &aTime, 8 );
     209          10 :             rtl_random_getBytes( aRandomPool, m_aLastBlock.getArray() + nOldLastBlockLen, nPaddingSize - 1 );
     210          10 :             rtl_random_destroyPool ( aRandomPool );
     211             :         }
     212          10 :         m_aLastBlock[m_aLastBlock.getLength() - 1] = static_cast< sal_Int8 >( nPaddingSize );
     213             :     }
     214             : 
     215             :     // finally should the last block be smaller than two standard blocks
     216             :     OSL_ENSURE( m_aLastBlock.getLength() < m_nBlockSize * 2 , "Unexpected size of cashed incomplete last block!" );
     217             : 
     218          76 :     uno::Sequence< sal_Int8 > aResult;
     219          76 :     if ( m_aLastBlock.getLength() )
     220             :     {
     221          76 :         int nPrefResLen = 0;
     222          76 :         aResult.realloc( m_aLastBlock.getLength() + m_nBlockSize );
     223          76 :         if ( PK11_CipherOp( m_pContext, reinterpret_cast< unsigned char* >( aResult.getArray() ), &nPrefResLen, aResult.getLength(), const_cast< unsigned char* >( reinterpret_cast< const unsigned char* >( m_aLastBlock.getConstArray() ) ), m_aLastBlock.getLength() ) != SECSuccess )
     224             :         {
     225           0 :             m_bBroken = true;
     226           0 :             Dispose();
     227           0 :             throw uno::RuntimeException();
     228             :         }
     229             : 
     230          76 :         aResult.realloc( nPrefResLen );
     231          76 :         m_aLastBlock.realloc( 0 );
     232             :     }
     233             : 
     234          76 :     sal_Int32 nPrefixLen = aResult.getLength();
     235          76 :     aResult.realloc( nPrefixLen + m_nBlockSize * 2 );
     236          76 :     unsigned nFinalLen = 0;
     237          76 :     if ( PK11_DigestFinal( m_pContext, reinterpret_cast< unsigned char* >( aResult.getArray() + nPrefixLen ), &nFinalLen, aResult.getLength() - nPrefixLen ) != SECSuccess )
     238             :     {
     239           0 :         m_bBroken = true;
     240           0 :         Dispose();
     241           0 :         throw uno::RuntimeException();
     242             :     }
     243             : 
     244          76 :     aResult.realloc( nPrefixLen + nFinalLen );
     245             : 
     246          76 :     if ( m_bW3CPadding && !m_bEncryption )
     247             :     {
     248             :         // W3CPadding handling for decryption
     249             :         // aResult should have anough data, since we let m_aLastBlock be big enough in case of decryption
     250             :         OSL_ENSURE( aResult.getLength() >= m_nBlockSize, "Not enough data to handle the padding!" );
     251             : 
     252          66 :         sal_Int8 nBytesToRemove = aResult[aResult.getLength() - 1];
     253          66 :         if ( nBytesToRemove <= 0 || nBytesToRemove > aResult.getLength() )
     254             :         {
     255          26 :             m_bBroken = true;
     256          26 :             Dispose();
     257          26 :             throw uno::RuntimeException();
     258             :         }
     259             : 
     260          40 :         aResult.realloc( aResult.getLength() - nBytesToRemove );
     261             :     }
     262             : 
     263          50 :     Dispose();
     264             : 
     265          76 :     return aResult;
     266             : }
     267             : 
     268             : /* vim:set shiftwidth=4 softtabstop=4 expandtab: */

Generated by: LCOV version 1.10