/*
 * CDDL HEADER START
 *
 * The contents of this file are subject to the terms of the
 * Common Development and Distribution License, Version 1.0 only
 * (the "License").  You may not use this file except in compliance
 * with the License.
 *
 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 * or http://www.opensolaris.org/os/licensing.
 * See the License for the specific language governing permissions
 * and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL HEADER in each
 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 * If applicable, add the following below this CDDL HEADER, with the
 * fields enclosed by brackets "[]" replaced with your own identifying
 * information: Portions Copyright [yyyy] [name of copyright owner]
 *
 * CDDL HEADER END
 */

/*
 * Copyright 2006 Sun Microsystems, Inc.  All rights reserved.
 * Use is subject to license terms.
 */

/* Copyright (c) 1984, 1986, 1987, 1988, 1989 AT&T */
/* All Rights Reserved */

/*
 * Portions of this source code were derived from Berkeley 4.3 BSD
 * under license from the Regents of the University of California.
 */

/*
 * DES encryption library routines
 */

#include "mt.h"
#include <unistd.h>
#include <fcntl.h>
#include <sys/types.h>
#include <rpc/des_crypt.h>
#ifdef sun
#include <sys/ioctl.h>
#include <sys/des.h>
#define getdesfd()      (open("/dev/des", 0, 0))
#else
#include <des/des.h>
#endif
#include <rpc/rpc.h>

extern int __des_crypt(char *, unsigned, struct desparams *);

static int common_crypt(char *, char *, unsigned, unsigned, struct desparams *);

/*
 * To see if chip is installed
 */
#define UNOPENED (-2)
static int g_desfd = UNOPENED;


/*
 * Copy 8 bytes
 */
#define COPY8(src, dst) { \
        char *a = (char *)dst; \
        char *b = (char *)src; \
        *a++ = *b++; *a++ = *b++; *a++ = *b++; *a++ = *b++; \
        *a++ = *b++; *a++ = *b++; *a++ = *b++; *a++ = *b++; \
}

/*
 * Copy multiple of 8 bytes
 */
#define DESCOPY(src, dst, len) { \
        char *a = (char *)dst; \
        char *b = (char *)src; \
        int i; \
        for (i = (int)len; i > 0; i -= 8) { \
                *a++ = *b++; *a++ = *b++; *a++ = *b++; *a++ = *b++; \
                *a++ = *b++; *a++ = *b++; *a++ = *b++; *a++ = *b++; \
        } \
}

/*
 * CBC mode encryption
 */
int
cbc_crypt(char *key, char *buf, size_t len, unsigned int mode, char *ivec)
{
        int err;
        struct desparams dp;

        dp.des_mode = CBC;
        COPY8(ivec, dp.des_ivec);
        err = common_crypt(key, buf, len, mode, &dp);
        COPY8(dp.des_ivec, ivec);
        return (err);
}


/*
 * ECB mode encryption
 */
int
ecb_crypt(char *key, char *buf, size_t len, unsigned int mode)
{
        struct desparams dp;

        dp.des_mode = ECB;
        return (common_crypt(key, buf, len, mode, &dp));
}



/*
 * Common code to cbc_crypt() & ecb_crypt()
 */
static int
common_crypt(char *key, char *buf, unsigned len, unsigned mode,
                                                        struct desparams *desp)
{
        int desdev;
        int res;

        if ((len % 8) != 0 || len > DES_MAXDATA)
                return (DESERR_BADPARAM);
        desp->des_dir =
                ((mode & DES_DIRMASK) == DES_ENCRYPT) ? ENCRYPT : DECRYPT;

        desdev = mode & DES_DEVMASK;
        COPY8(key, desp->des_key);
#ifdef sun
        if (desdev == DES_HW) {
                if (g_desfd < 0) {
                        if (g_desfd == -1 || (g_desfd = getdesfd()) < 0) {
                                goto software;  /* no hardware device */
                        }
                }

                /*
                 * hardware
                 */
                desp->des_len = len;
                if (len <= DES_QUICKLEN) {
                        DESCOPY(buf, desp->des_data, len);
                        res = ioctl(g_desfd, DESIOCQUICK, (char *)desp);
                        DESCOPY(desp->des_data, buf, len);
                } else {
                        desp->des_buf = (uchar_t *)buf;
                        res = ioctl(g_desfd, DESIOCBLOCK, (char *)desp);
                }
                return (res == 0 ? DESERR_NONE : DESERR_HWERROR);
        }
software:
#endif
        /*
         * software
         */
        if (!__des_crypt(buf, len, desp))
                return (DESERR_HWERROR);
        return (desdev == DES_SW ? DESERR_NONE : DESERR_NOHWDEVICE);
}

static int
desN_crypt(des_block keys[], int keynum, char *buf, unsigned int len,
                unsigned int mode, char *ivec)
{
        unsigned int m = mode & (DES_ENCRYPT | DES_DECRYPT);
        unsigned int flags = mode & ~(DES_ENCRYPT | DES_DECRYPT);
        des_block svec, dvec;
        int i, j, stat;

        if (keynum < 1)
                return (DESERR_BADPARAM);

        (void) memcpy(svec.c, ivec, sizeof (des_block));
        for (i = 0; i < keynum; i++) {
                j = (mode & DES_DECRYPT) ? keynum - 1 - i : i;
                stat = cbc_crypt(keys[j].c, buf, len, m | flags, ivec);
                if (mode & DES_DECRYPT && i == 0)
                        (void) memcpy(dvec.c, ivec, sizeof (des_block));

                if (DES_FAILED(stat))
                        return (stat);

                m = (m == DES_ENCRYPT ? DES_DECRYPT : DES_ENCRYPT);

                if ((mode & DES_DECRYPT) || i != keynum - 1 || i%2)
                        (void) memcpy(ivec, svec.c, sizeof (des_block));
        }
        if (keynum % 2 == 0)
                stat = cbc_crypt(keys[0].c, buf, len, mode, ivec);

        if (mode & DES_DECRYPT)
                (void) memcpy(ivec, dvec.c, sizeof (des_block));

        return (stat);
}



int
__cbc_triple_crypt(des_block keys[], char *buf,  uint_t len,
                        uint_t mode, char *ivec)
{
        return (desN_crypt(keys, 3, buf, len, mode, ivec));
}