yuzu-emu/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-emu/mbedtls.git synced 2024-11-25 17:25:37 +01:00
Code Issues Packages Projects Releases Wiki Activity

- Moved out_msg to out_hdr + 32 to support hardware acceleration

Browse Source
This commit is contained in:
Paul Bakker 2012-05-08 13:16:14 +00:00
parent 3aac1daf1d
commit 186751d9dd
3 changed files with 47 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
ChangeLog
View File

@ -23,6 +23,7 @@ Changes
* AES code only check for Padlock once * AES code only check for Padlock once
* Fixed const-correctness mpi_get_bit() * Fixed const-correctness mpi_get_bit()
* Documentation for mpi_lsb() and mpi_msb() * Documentation for mpi_lsb() and mpi_msb()
* Moved out_msg to out_hdr + 32 to support hardware acceleration
Bugfix Bugfix
* Fixed handling error in mpi_cmp_mpi() on longer B values (found by * Fixed handling error in mpi_cmp_mpi() on longer B values (found by

2
include/polarssl/ssl.h
View File

@ -316,7 +316,7 @@ struct _ssl_context
*/ */
unsigned char *out_ctr; /*!< 64-bit outgoing message counter */ unsigned char *out_ctr; /*!< 64-bit outgoing message counter */
unsigned char *out_hdr; /*!< 5-byte record header (out_ctr+8) */ unsigned char *out_hdr; /*!< 5-byte record header (out_ctr+8) */
unsigned char *out_msg; /*!< the message contents (out_hdr+5) */ unsigned char *out_msg; /*!< the message contents (out_hdr+32)*/
int out_msgtype; /*!< record header: message type */ int out_msgtype; /*!< record header: message type */
size_t out_msglen; /*!< record header: message length */ size_t out_msglen; /*!< record header: message length */

57
library/ssl_tls.c
View File

@ -824,19 +824,34 @@ static int ssl_encrypt_buf( ssl_context *ssl )
else else
{ {
if( ssl->maclen == 16 ) if( ssl->maclen == 16 )
md5_hmac( ssl->mac_enc, 16, {
ssl->out_ctr, ssl->out_msglen + 13, md5_context ctx;
ssl->out_msg + ssl->out_msglen ); md5_hmac_starts( &ctx, ssl->mac_enc, 16 );
md5_hmac_update( &ctx, ssl->out_ctr, 13 );
md5_hmac_update( &ctx, ssl->out_msg, ssl->out_msglen );
md5_hmac_finish( &ctx, ssl->out_msg + ssl->out_msglen );
memset( &ctx, 0, sizeof(md5_context));
}
if( ssl->maclen == 20 ) if( ssl->maclen == 20 )
sha1_hmac( ssl->mac_enc, 20, {
ssl->out_ctr, ssl->out_msglen + 13, sha1_context ctx;
ssl->out_msg + ssl->out_msglen ); sha1_hmac_starts( &ctx, ssl->mac_enc, 20 );
sha1_hmac_update( &ctx, ssl->out_ctr, 13 );
sha1_hmac_update( &ctx, ssl->out_msg, ssl->out_msglen );
sha1_hmac_finish( &ctx, ssl->out_msg + ssl->out_msglen );
memset( &ctx, 0, sizeof(sha1_context));
}
if( ssl->maclen == 32 ) if( ssl->maclen == 32 )
sha2_hmac( ssl->mac_enc, 32, {
ssl->out_ctr, ssl->out_msglen + 13, sha2_context ctx;
ssl->out_msg + ssl->out_msglen, 0); sha2_hmac_starts( &ctx, ssl->mac_enc, 32, 0 );
sha2_hmac_update( &ctx, ssl->out_ctr, 13 );
sha2_hmac_update( &ctx, ssl->out_msg, ssl->out_msglen );
sha2_hmac_finish( &ctx, ssl->out_msg + ssl->out_msglen );
memset( &ctx, 0, sizeof(sha2_context));
}
} }
SSL_DEBUG_BUF( 4, "computed mac", SSL_DEBUG_BUF( 4, "computed mac",
@ -1430,8 +1445,24 @@ int ssl_flush_output( ssl_context *ssl )
SSL_DEBUG_MSG( 2, ( "message length: %d, out_left: %d", SSL_DEBUG_MSG( 2, ( "message length: %d, out_left: %d",
5 + ssl->out_msglen, ssl->out_left ) ); 5 + ssl->out_msglen, ssl->out_left ) );
buf = ssl->out_hdr + 5 + ssl->out_msglen - ssl->out_left; if( ssl->out_msglen < ssl->out_left )
{
size_t header_left = ssl->out_left - ssl->out_msglen;
buf = ssl->out_hdr + 5 - header_left;
ret = ssl->f_send( ssl->p_send, buf, header_left );
SSL_DEBUG_RET( 2, "ssl->f_send (header)", ret );
if( ret <= 0 )
return( ret );
ssl->out_left -= ret;
}
buf = ssl->out_msg + ssl->out_msglen - ssl->out_left;
ret = ssl->f_send( ssl->p_send, buf, ssl->out_left ); ret = ssl->f_send( ssl->p_send, buf, ssl->out_left );
SSL_DEBUG_RET( 2, "ssl->f_send", ret ); SSL_DEBUG_RET( 2, "ssl->f_send", ret );
if( ret <= 0 ) if( ret <= 0 )
@ -1506,8 +1537,10 @@ int ssl_write_record( ssl_context *ssl )
ssl->out_hdr[0], ssl->out_hdr[1], ssl->out_hdr[2], ssl->out_hdr[0], ssl->out_hdr[1], ssl->out_hdr[2],
( ssl->out_hdr[3] << 8 ) | ssl->out_hdr[4] ) ); ( ssl->out_hdr[3] << 8 ) | ssl->out_hdr[4] ) );
SSL_DEBUG_BUF( 4, "output record header sent to network",
ssl->out_hdr, 5 );
SSL_DEBUG_BUF( 4, "output record sent to network", SSL_DEBUG_BUF( 4, "output record sent to network",
ssl->out_hdr, 5 + ssl->out_msglen ); ssl->out_hdr + 32, ssl->out_msglen );
} }
if( ( ret = ssl_flush_output( ssl ) ) != 0 ) if( ( ret = ssl_flush_output( ssl ) ) != 0 )
@ -2457,7 +2490,7 @@ int ssl_init( ssl_context *ssl )
ssl->out_ctr = (unsigned char *) malloc( len ); ssl->out_ctr = (unsigned char *) malloc( len );
ssl->out_hdr = ssl->out_ctr + 8; ssl->out_hdr = ssl->out_ctr + 8;
ssl->out_msg = ssl->out_ctr + 13; ssl->out_msg = ssl->out_ctr + 40;
if( ssl->out_ctr == NULL ) if( ssl->out_ctr == NULL )
{ {