OpenCoverage

cmac.c

Absolute File Name:/home/opencoverage/opencoverage/guest-scripts/openssl/src/crypto/cmac/cmac.c
Source codeSwitch to Preprocessed file
LineSourceCount
1/*-
2 * Copyright 2010-2018 The OpenSSL Project Authors. All Rights Reserved.-
3 *-
4 * Licensed under the OpenSSL license (the "License"). You may not use-
5 * this file except in compliance with the License. You can obtain a copy-
6 * in the file LICENSE in the source distribution or at-
7 * https://www.openssl.org/source/license.html-
8 */-
9-
10#include <stdio.h>-
11#include <stdlib.h>-
12#include <string.h>-
13#include "internal/cryptlib.h"-
14#include <openssl/cmac.h>-
15#include <openssl/err.h>-
16-
17struct CMAC_CTX_st {-
18 /* Cipher context to use */-
19 EVP_CIPHER_CTX *cctx;-
20 /* Keys k1 and k2 */-
21 unsigned char k1[EVP_MAX_BLOCK_LENGTH];-
22 unsigned char k2[EVP_MAX_BLOCK_LENGTH];-
23 /* Temporary block */-
24 unsigned char tbl[EVP_MAX_BLOCK_LENGTH];-
25 /* Last (possibly partial) block */-
26 unsigned char last_block[EVP_MAX_BLOCK_LENGTH];-
27 /* Number of bytes in last block: -1 means context not initialised */-
28 int nlast_block;-
29};-
30-
31/* Make temporary keys K1 and K2 */-
32-
33static void make_kn(unsigned char *k1, const unsigned char *l, int bl)-
34{-
35 int i;-
36 unsigned char c = l[0], carry = c >> 7, cnext;-
37-
38 /* Shift block to left, including carry */-
39 for (i = 0; i < bl - 1; i++, c = cnext)
i < bl - 1Description
TRUEevaluated 104 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 8 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
8-104
40 k1[i] = (c << 1) | ((cnext = l[i + 1]) >> 7);
executed 104 times by 1 test: k1[i] = (c << 1) | ((cnext = l[i + 1]) >> 7);
Executed by:
  • libcrypto.so.1.1
104
41-
42 /* If MSB set fixup with R */-
43 k1[i] = (c << 1) ^ ((0 - carry) & (bl == 16 ? 0x87 : 0x1b));-
44}
executed 8 times by 1 test: end of block
Executed by:
  • libcrypto.so.1.1
8
45-
46CMAC_CTX *CMAC_CTX_new(void)-
47{-
48 CMAC_CTX *ctx;-
49-
50 if ((ctx = OPENSSL_malloc(sizeof(*ctx))) == NULL) {
(ctx = CRYPTO_...== ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 12 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-12
51 CRYPTOerr(CRYPTO_F_CMAC_CTX_NEW, ERR_R_MALLOC_FAILURE);-
52 return NULL;
never executed: return ((void *)0) ;
0
53 }-
54 ctx->cctx = EVP_CIPHER_CTX_new();-
55 if (ctx->cctx == NULL) {
ctx->cctx == ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 12 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-12
56 OPENSSL_free(ctx);-
57 return NULL;
never executed: return ((void *)0) ;
0
58 }-
59 ctx->nlast_block = -1;-
60 return ctx;
executed 12 times by 1 test: return ctx;
Executed by:
  • libcrypto.so.1.1
12
61}-
62-
63void CMAC_CTX_cleanup(CMAC_CTX *ctx)-
64{-
65 EVP_CIPHER_CTX_reset(ctx->cctx);-
66 OPENSSL_cleanse(ctx->tbl, EVP_MAX_BLOCK_LENGTH);-
67 OPENSSL_cleanse(ctx->k1, EVP_MAX_BLOCK_LENGTH);-
68 OPENSSL_cleanse(ctx->k2, EVP_MAX_BLOCK_LENGTH);-
69 OPENSSL_cleanse(ctx->last_block, EVP_MAX_BLOCK_LENGTH);-
70 ctx->nlast_block = -1;-
71}
executed 12 times by 1 test: end of block
Executed by:
  • libcrypto.so.1.1
12
72-
73EVP_CIPHER_CTX *CMAC_CTX_get0_cipher_ctx(CMAC_CTX *ctx)-
74{-
75 return ctx->cctx;
never executed: return ctx->cctx;
0
76}-
77-
78void CMAC_CTX_free(CMAC_CTX *ctx)-
79{-
80 if (!ctx)
!ctxDescription
TRUEnever evaluated
FALSEevaluated 12 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-12
81 return;
never executed: return;
0
82 CMAC_CTX_cleanup(ctx);-
83 EVP_CIPHER_CTX_free(ctx->cctx);-
84 OPENSSL_free(ctx);-
85}
executed 12 times by 1 test: end of block
Executed by:
  • libcrypto.so.1.1
12
86-
87int CMAC_CTX_copy(CMAC_CTX *out, const CMAC_CTX *in)-
88{-
89 int bl;-
90 if (in->nlast_block == -1)
in->nlast_block == -1Description
TRUEnever evaluated
FALSEevaluated 8 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-8
91 return 0;
never executed: return 0;
0
92 if (!EVP_CIPHER_CTX_copy(out->cctx, in->cctx))
!EVP_CIPHER_CT...ctx, in->cctx)Description
TRUEnever evaluated
FALSEevaluated 8 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-8
93 return 0;
never executed: return 0;
0
94 bl = EVP_CIPHER_CTX_block_size(in->cctx);-
95 memcpy(out->k1, in->k1, bl);-
96 memcpy(out->k2, in->k2, bl);-
97 memcpy(out->tbl, in->tbl, bl);-
98 memcpy(out->last_block, in->last_block, bl);-
99 out->nlast_block = in->nlast_block;-
100 return 1;
executed 8 times by 1 test: return 1;
Executed by:
  • libcrypto.so.1.1
8
101}-
102-
103int CMAC_Init(CMAC_CTX *ctx, const void *key, size_t keylen,-
104 const EVP_CIPHER *cipher, ENGINE *impl)-
105{-
106 static const unsigned char zero_iv[EVP_MAX_BLOCK_LENGTH] = { 0 };-
107 /* All zeros means restart */-
108 if (!key && !cipher && !impl && keylen == 0) {
!keyDescription
TRUEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
!cipherDescription
TRUEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEnever evaluated
!implDescription
TRUEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEnever evaluated
keylen == 0Description
TRUEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEnever evaluated
0-4
109 /* Not initialised */-
110 if (ctx->nlast_block == -1)
ctx->nlast_block == -1Description
TRUEnever evaluated
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-4
111 return 0;
never executed: return 0;
0
112 if (!EVP_EncryptInit_ex(ctx->cctx, NULL, NULL, NULL, zero_iv))
!EVP_EncryptIn...)0) , zero_iv)Description
TRUEnever evaluated
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-4
113 return 0;
never executed: return 0;
0
114 memset(ctx->tbl, 0, EVP_CIPHER_CTX_block_size(ctx->cctx));-
115 ctx->nlast_block = 0;-
116 return 1;
executed 4 times by 1 test: return 1;
Executed by:
  • libcrypto.so.1.1
4
117 }-
118 /* Initialise context */-
119 if (cipher && !EVP_EncryptInit_ex(ctx->cctx, cipher, impl, NULL, NULL))
cipherDescription
TRUEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEnever evaluated
!EVP_EncryptIn... ((void *)0) )Description
TRUEnever evaluated
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-4
120 return 0;
never executed: return 0;
0
121 /* Non-NULL key means initialisation complete */-
122 if (key) {
keyDescription
TRUEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEnever evaluated
0-4
123 int bl;-
124 if (!EVP_CIPHER_CTX_cipher(ctx->cctx))
!EVP_CIPHER_CT...her(ctx->cctx)Description
TRUEnever evaluated
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-4
125 return 0;
never executed: return 0;
0
126 if (!EVP_CIPHER_CTX_set_key_length(ctx->cctx, keylen))
!EVP_CIPHER_CT...>cctx, keylen)Description
TRUEnever evaluated
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-4
127 return 0;
never executed: return 0;
0
128 if (!EVP_EncryptInit_ex(ctx->cctx, NULL, NULL, key, zero_iv))
!EVP_EncryptIn... key, zero_iv)Description
TRUEnever evaluated
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-4
129 return 0;
never executed: return 0;
0
130 bl = EVP_CIPHER_CTX_block_size(ctx->cctx);-
131 if (!EVP_Cipher(ctx->cctx, ctx->tbl, zero_iv, bl))
!EVP_Cipher(ct..., zero_iv, bl)Description
TRUEnever evaluated
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-4
132 return 0;
never executed: return 0;
0
133 make_kn(ctx->k1, ctx->tbl, bl);-
134 make_kn(ctx->k2, ctx->k1, bl);-
135 OPENSSL_cleanse(ctx->tbl, bl);-
136 /* Reset context again ready for first data block */-
137 if (!EVP_EncryptInit_ex(ctx->cctx, NULL, NULL, NULL, zero_iv))
!EVP_EncryptIn...)0) , zero_iv)Description
TRUEnever evaluated
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-4
138 return 0;
never executed: return 0;
0
139 /* Zero tbl so resume works */-
140 memset(ctx->tbl, 0, bl);-
141 ctx->nlast_block = 0;-
142 }
executed 4 times by 1 test: end of block
Executed by:
  • libcrypto.so.1.1
4
143 return 1;
executed 4 times by 1 test: return 1;
Executed by:
  • libcrypto.so.1.1
4
144}-
145-
146int CMAC_Update(CMAC_CTX *ctx, const void *in, size_t dlen)-
147{-
148 const unsigned char *data = in;-
149 size_t bl;-
150 if (ctx->nlast_block == -1)
ctx->nlast_block == -1Description
TRUEnever evaluated
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-4
151 return 0;
never executed: return 0;
0
152 if (dlen == 0)
dlen == 0Description
TRUEevaluated 1 time by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 3 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
1-3
153 return 1;
executed 1 time by 1 test: return 1;
Executed by:
  • libcrypto.so.1.1
1
154 bl = EVP_CIPHER_CTX_block_size(ctx->cctx);-
155 /* Copy into partial block if we need to */-
156 if (ctx->nlast_block > 0) {
ctx->nlast_block > 0Description
TRUEnever evaluated
FALSEevaluated 3 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-3
157 size_t nleft;-
158 nleft = bl - ctx->nlast_block;-
159 if (dlen < nleft)
dlen < nleftDescription
TRUEnever evaluated
FALSEnever evaluated
0
160 nleft = dlen;
never executed: nleft = dlen;
0
161 memcpy(ctx->last_block + ctx->nlast_block, data, nleft);-
162 dlen -= nleft;-
163 ctx->nlast_block += nleft;-
164 /* If no more to process return */-
165 if (dlen == 0)
dlen == 0Description
TRUEnever evaluated
FALSEnever evaluated
0
166 return 1;
never executed: return 1;
0
167 data += nleft;-
168 /* Else not final block so encrypt it */-
169 if (!EVP_Cipher(ctx->cctx, ctx->tbl, ctx->last_block, bl))
!EVP_Cipher(ct...ast_block, bl)Description
TRUEnever evaluated
FALSEnever evaluated
0
170 return 0;
never executed: return 0;
0
171 }
never executed: end of block
0
172 /* Encrypt all but one of the complete blocks left */-
173 while (dlen > bl) {
dlen > blDescription
TRUEevaluated 6 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 3 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
3-6
174 if (!EVP_Cipher(ctx->cctx, ctx->tbl, data, bl))
!EVP_Cipher(ct...tbl, data, bl)Description
TRUEnever evaluated
FALSEevaluated 6 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-6
175 return 0;
never executed: return 0;
0
176 dlen -= bl;-
177 data += bl;-
178 }
executed 6 times by 1 test: end of block
Executed by:
  • libcrypto.so.1.1
6
179 /* Copy any data left to last block buffer */-
180 memcpy(ctx->last_block, data, dlen);-
181 ctx->nlast_block = dlen;-
182 return 1;
executed 3 times by 1 test: return 1;
Executed by:
  • libcrypto.so.1.1
3
183-
184}-
185-
186int CMAC_Final(CMAC_CTX *ctx, unsigned char *out, size_t *poutlen)-
187{-
188 int i, bl, lb;-
189 if (ctx->nlast_block == -1)
ctx->nlast_block == -1Description
TRUEnever evaluated
FALSEevaluated 8 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-8
190 return 0;
never executed: return 0;
0
191 bl = EVP_CIPHER_CTX_block_size(ctx->cctx);-
192 *poutlen = (size_t)bl;-
193 if (!out)
!outDescription
TRUEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
4
194 return 1;
executed 4 times by 1 test: return 1;
Executed by:
  • libcrypto.so.1.1
4
195 lb = ctx->nlast_block;-
196 /* Is last block complete? */-
197 if (lb == bl) {
lb == blDescription
TRUEevaluated 3 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 1 time by 1 test
Evaluated by:
  • libcrypto.so.1.1
1-3
198 for (i = 0; i < bl; i++)
i < blDescription
TRUEevaluated 40 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 3 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
3-40
199 out[i] = ctx->last_block[i] ^ ctx->k1[i];
executed 40 times by 1 test: out[i] = ctx->last_block[i] ^ ctx->k1[i];
Executed by:
  • libcrypto.so.1.1
40
200 } else {
executed 3 times by 1 test: end of block
Executed by:
  • libcrypto.so.1.1
3
201 ctx->last_block[lb] = 0x80;-
202 if (bl - lb > 1)
bl - lb > 1Description
TRUEevaluated 1 time by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEnever evaluated
0-1
203 memset(ctx->last_block + lb + 1, 0, bl - lb - 1);
executed 1 time by 1 test: memset(ctx->last_block + lb + 1, 0, bl - lb - 1);
Executed by:
  • libcrypto.so.1.1
1
204 for (i = 0; i < bl; i++)
i < blDescription
TRUEevaluated 16 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 1 time by 1 test
Evaluated by:
  • libcrypto.so.1.1
1-16
205 out[i] = ctx->last_block[i] ^ ctx->k2[i];
executed 16 times by 1 test: out[i] = ctx->last_block[i] ^ ctx->k2[i];
Executed by:
  • libcrypto.so.1.1
16
206 }
executed 1 time by 1 test: end of block
Executed by:
  • libcrypto.so.1.1
1
207 if (!EVP_Cipher(ctx->cctx, out, out, bl)) {
!EVP_Cipher(ct... out, out, bl)Description
TRUEnever evaluated
FALSEevaluated 4 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-4
208 OPENSSL_cleanse(out, bl);-
209 return 0;
never executed: return 0;
0
210 }-
211 return 1;
executed 4 times by 1 test: return 1;
Executed by:
  • libcrypto.so.1.1
4
212}-
213-
214int CMAC_resume(CMAC_CTX *ctx)-
215{-
216 if (ctx->nlast_block == -1)
ctx->nlast_block == -1Description
TRUEnever evaluated
FALSEnever evaluated
0
217 return 0;
never executed: return 0;
0
218 /*-
219 * The buffer "tbl" contains the last fully encrypted block which is the-
220 * last IV (or all zeroes if no last encrypted block). The last block has-
221 * not been modified since CMAC_final(). So reinitialising using the last-
222 * decrypted block will allow CMAC to continue after calling-
223 * CMAC_Final().-
224 */-
225 return EVP_EncryptInit_ex(ctx->cctx, NULL, NULL, NULL, ctx->tbl);
never executed: return EVP_EncryptInit_ex(ctx->cctx, ((void *)0) , ((void *)0) , ((void *)0) , ctx->tbl);
0
226}-
Source codeSwitch to Preprocessed file
Generated by Squish Coco 4.2.2