Mercurial > dropbear
annotate crypto_desc.c @ 1672:3a97f14c0235
Add Chacha20-Poly1305, AES128-GCM and AES256-GCM support (#93)
* Add Chacha20-Poly1305 authenticated encryption
* Add general AEAD approach.
* Add [email protected] algo using LibTomCrypt chacha and
poly1305 routines.
Chacha20-Poly1305 is generally faster than AES256 on CPU w/o dedicated
AES instructions, having the same key size.
Compiling in will add ~5,5kB to binary size on x86-64.
function old new delta
chacha_crypt - 1397 +1397
_poly1305_block - 608 +608
poly1305_done - 595 +595
dropbear_chachapoly_crypt - 457 +457
.rodata 26976 27392 +416
poly1305_process - 290 +290
poly1305_init - 221 +221
chacha_setup - 218 +218
encrypt_packet 1068 1270 +202
dropbear_chachapoly_getlength - 147 +147
decrypt_packet 756 897 +141
chacha_ivctr64 - 137 +137
read_packet 543 637 +94
dropbear_chachapoly_start - 94 +94
read_kex_algos 792 880 +88
chacha_keystream - 69 +69
dropbear_mode_chachapoly - 48 +48
sshciphers 280 320 +40
dropbear_mode_none 24 48 +24
dropbear_mode_ctr 24 48 +24
dropbear_mode_cbc 24 48 +24
dropbear_chachapoly_mac - 24 +24
dropbear_chachapoly - 24 +24
gen_new_keys 848 854 +6
------------------------------------------------------------------------------
(add/remove: 14/0 grow/shrink: 10/0 up/down: 5388/0) Total: 5388 bytes
* Add AES128-GCM and AES256-GCM authenticated encryption
* Add general AES-GCM mode.
* Add [email protected] and [email protected] algo using
LibTomCrypt gcm routines.
AES-GCM is combination of AES CTR mode and GHASH, slower than AES-CTR on
CPU w/o dedicated AES/GHASH instructions therefore disabled by default.
Compiling in will add ~6kB to binary size on x86-64.
function old new delta
gcm_process - 1060 +1060
.rodata 26976 27808 +832
gcm_gf_mult - 820 +820
gcm_add_aad - 660 +660
gcm_shift_table - 512 +512
gcm_done - 471 +471
gcm_add_iv - 384 +384
gcm_init - 347 +347
dropbear_gcm_crypt - 309 +309
encrypt_packet 1068 1270 +202
decrypt_packet 756 897 +141
gcm_reset - 118 +118
read_packet 543 637 +94
read_kex_algos 792 880 +88
sshciphers 280 360 +80
gcm_mult_h - 80 +80
dropbear_gcm_start - 62 +62
dropbear_mode_gcm - 48 +48
dropbear_mode_none 24 48 +24
dropbear_mode_ctr 24 48 +24
dropbear_mode_cbc 24 48 +24
dropbear_ghash - 24 +24
dropbear_gcm_getlength - 24 +24
gen_new_keys 848 854 +6
------------------------------------------------------------------------------
(add/remove: 14/0 grow/shrink: 10/0 up/down: 6434/0) Total: 6434 bytes
| author | Vladislav Grishenko <themiron@users.noreply.github.com> |
|---|---|
| date | Mon, 25 May 2020 20:50:25 +0500 |
| parents | 750ec4ec4cbe |
| children | 34d9d3c022ce |
| rev | line source |
|---|---|
| 766 | 1 #include "includes.h" |
| 2 #include "dbutil.h" | |
| 3 #include "crypto_desc.h" | |
| 4 #include "ltc_prng.h" | |
|
767
e465ed10c51d
Be safer with how we handle ltc_ecc_sets[] (particularly with
Matt Johnston <matt@ucc.asn.au>
parents:
766
diff
changeset
|
5 #include "ecc.h" |
| 766 | 6 |
|
1295
750ec4ec4cbe
Convert #ifdef to #if, other build changes
Matt Johnston <matt@ucc.asn.au>
parents:
767
diff
changeset
|
7 #if DROPBEAR_LTC_PRNG |
| 766 | 8 int dropbear_ltc_prng = -1; |
| 9 #endif | |
| 10 | |
| 11 | |
| 12 /* Register the compiled in ciphers. | |
| 13 * This should be run before using any of the ciphers/hashes */ | |
| 14 void crypto_init() { | |
| 15 | |
| 16 const struct ltc_cipher_descriptor *regciphers[] = { | |
|
1295
750ec4ec4cbe
Convert #ifdef to #if, other build changes
Matt Johnston <matt@ucc.asn.au>
parents:
767
diff
changeset
|
17 #if DROPBEAR_AES |
| 766 | 18 &aes_desc, |
| 19 #endif | |
|
1295
750ec4ec4cbe
Convert #ifdef to #if, other build changes
Matt Johnston <matt@ucc.asn.au>
parents:
767
diff
changeset
|
20 #if DROPBEAR_BLOWFISH |
| 766 | 21 &blowfish_desc, |
| 22 #endif | |
|
1295
750ec4ec4cbe
Convert #ifdef to #if, other build changes
Matt Johnston <matt@ucc.asn.au>
parents:
767
diff
changeset
|
23 #if DROPBEAR_TWOFISH |
| 766 | 24 &twofish_desc, |
| 25 #endif | |
|
1295
750ec4ec4cbe
Convert #ifdef to #if, other build changes
Matt Johnston <matt@ucc.asn.au>
parents:
767
diff
changeset
|
26 #if DROPBEAR_3DES |
| 766 | 27 &des3_desc, |
| 28 #endif | |
| 29 NULL | |
| 30 }; | |
| 31 | |
| 32 const struct ltc_hash_descriptor *reghashes[] = { | |
| 33 /* we need sha1 for hostkey stuff regardless */ | |
| 34 &sha1_desc, | |
|
1295
750ec4ec4cbe
Convert #ifdef to #if, other build changes
Matt Johnston <matt@ucc.asn.au>
parents:
767
diff
changeset
|
35 #if DROPBEAR_MD5_HMAC |
| 766 | 36 &md5_desc, |
| 37 #endif | |
|
1295
750ec4ec4cbe
Convert #ifdef to #if, other build changes
Matt Johnston <matt@ucc.asn.au>
parents:
767
diff
changeset
|
38 #if DROPBEAR_SHA256 |
| 766 | 39 &sha256_desc, |
| 40 #endif | |
|
1295
750ec4ec4cbe
Convert #ifdef to #if, other build changes
Matt Johnston <matt@ucc.asn.au>
parents:
767
diff
changeset
|
41 #if DROPBEAR_SHA384 |
| 766 | 42 &sha384_desc, |
| 43 #endif | |
|
1295
750ec4ec4cbe
Convert #ifdef to #if, other build changes
Matt Johnston <matt@ucc.asn.au>
parents:
767
diff
changeset
|
44 #if DROPBEAR_SHA512 |
| 766 | 45 &sha512_desc, |
| 46 #endif | |
| 47 NULL | |
| 48 }; | |
| 49 int i; | |
| 50 | |
| 51 for (i = 0; regciphers[i] != NULL; i++) { | |
| 52 if (register_cipher(regciphers[i]) == -1) { | |
| 53 dropbear_exit("Error registering crypto"); | |
| 54 } | |
| 55 } | |
| 56 | |
| 57 for (i = 0; reghashes[i] != NULL; i++) { | |
| 58 if (register_hash(reghashes[i]) == -1) { | |
| 59 dropbear_exit("Error registering crypto"); | |
| 60 } | |
| 61 } | |
| 62 | |
|
1295
750ec4ec4cbe
Convert #ifdef to #if, other build changes
Matt Johnston <matt@ucc.asn.au>
parents:
767
diff
changeset
|
63 #if DROPBEAR_LTC_PRNG |
| 766 | 64 dropbear_ltc_prng = register_prng(&dropbear_prng_desc); |
| 65 if (dropbear_ltc_prng == -1) { | |
| 66 dropbear_exit("Error registering crypto"); | |
| 67 } | |
| 68 #endif | |
| 69 | |
|
1295
750ec4ec4cbe
Convert #ifdef to #if, other build changes
Matt Johnston <matt@ucc.asn.au>
parents:
767
diff
changeset
|
70 #if DROPBEAR_ECC |
| 766 | 71 ltc_mp = ltm_desc; |
|
767
e465ed10c51d
Be safer with how we handle ltc_ecc_sets[] (particularly with
Matt Johnston <matt@ucc.asn.au>
parents:
766
diff
changeset
|
72 dropbear_ecc_fill_dp(); |
| 766 | 73 #endif |
| 74 } | |
| 75 |