1#include <libkern/crypto/crypto_internal.h>
2#include <libkern/crypto/sha1.h>
3#include <kern/debug.h>
4#include <corecrypto/ccdigest.h>
5
6
7static uint64_t
8getCount(SHA1_CTX *ctx)
9{
10 return ctx->c.b64[0];
11}
12
13static void
14setCount(SHA1_CTX *ctx, uint64_t count)
15{
16 ctx->c.b64[0] = count;
17}
18
19/* Copy a ccdigest ctx into a legacy SHA1 context */
20static void
21DiToSHA1(const struct ccdigest_info *di, struct ccdigest_ctx *di_ctx, SHA1_CTX *sha1_ctx)
22{
23 setCount(ctx: sha1_ctx, ccdigest_nbits(di, di_ctx) / 8 + ccdigest_num(di, di_ctx));
24 memcpy(dst: sha1_ctx->m.b8, ccdigest_data(di, di_ctx), n: di->block_size);
25 memcpy(dst: sha1_ctx->h.b8, ccdigest_state_ccn(di, di_ctx), n: di->state_size);
26}
27
28/* Copy a legacy SHA1 context into a ccdigest ctx */
29static void
30SHA1ToDi(const struct ccdigest_info *di, SHA1_CTX *sha1_ctx, struct ccdigest_ctx *di_ctx)
31{
32 uint64_t count = getCount(ctx: sha1_ctx);
33
34 ccdigest_num(di, di_ctx) = (unsigned)(count % di->block_size);
35 ccdigest_nbits(di, di_ctx) = (count - ccdigest_num(di, di_ctx)) * 8;
36 memcpy(ccdigest_data(di, di_ctx), src: sha1_ctx->m.b8, n: di->block_size);
37 memcpy(ccdigest_state_ccn(di, di_ctx), src: sha1_ctx->h.b8, n: di->state_size);
38}
39
40void
41SHA1Init(SHA1_CTX *ctx)
42{
43 const struct ccdigest_info *di = g_crypto_funcs->ccsha1_di;
44 ccdigest_di_decl(di, di_ctx);
45
46 g_crypto_funcs->ccdigest_init_fn(di, di_ctx);
47
48 DiToSHA1(di, di_ctx, sha1_ctx: ctx);
49}
50
51void
52SHA1Update(SHA1_CTX *ctx, const void *data, size_t len)
53{
54 const struct ccdigest_info *di = g_crypto_funcs->ccsha1_di;
55 ccdigest_di_decl(di, di_ctx);
56
57 SHA1ToDi(di, sha1_ctx: ctx, di_ctx);
58 g_crypto_funcs->ccdigest_update_fn(di, di_ctx, len, data);
59 DiToSHA1(di, di_ctx, sha1_ctx: ctx);
60}
61
62void
63SHA1Final(void *digest, SHA1_CTX *ctx)
64{
65 const struct ccdigest_info *di = g_crypto_funcs->ccsha1_di;
66 ccdigest_di_decl(di, di_ctx);
67
68 SHA1ToDi(di, sha1_ctx: ctx, di_ctx);
69 ccdigest_final(di, ctx: di_ctx, digest);
70}
71
72/* This is not publicised in header, but exported in libkern.exports */
73void SHA1Final_r(SHA1_CTX *context, void *digest);
74void
75SHA1Final_r(SHA1_CTX *context, void *digest)
76{
77 SHA1Final(digest, ctx: context);
78}
79
80
81/*
82 * This function is called by the SHA1 hardware kext during its init.
83 * This will register the function to call to perform SHA1 using hardware.
84 */
85#include <sys/types.h>
86#include <libkern/OSAtomic.h>
87#include <sys/systm.h>
88
89typedef kern_return_t (*InKernelPerformSHA1Func)(void *ref, const void *data, size_t dataLen, u_int32_t *inHash, u_int32_t options, u_int32_t *outHash, Boolean usePhysicalAddress);
90void sha1_hardware_hook(Boolean option, InKernelPerformSHA1Func func, void *ref);
91static void *SHA1Ref;
92static InKernelPerformSHA1Func performSHA1WithinKernelOnly;
93
94void
95sha1_hardware_hook(Boolean option, InKernelPerformSHA1Func func, void *ref)
96{
97 if (option) {
98 // Establish the hook. The hardware is ready.
99 OSCompareAndSwapPtr((void*)NULL, (void*)ref, (void * volatile*)&SHA1Ref);
100
101 if (!OSCompareAndSwapPtr((void *)NULL, (void *)func, (void * volatile *)&performSHA1WithinKernelOnly)) {
102 panic("sha1_hardware_hook: Called twice.. Should never happen");
103 }
104 } else {
105 // The hardware is going away. Tear down the hook.
106 performSHA1WithinKernelOnly = NULL;
107 SHA1Ref = NULL;
108 }
109}
110