mirror of https://github.com/acidanthera/audk.git
CryptoPkg: add new Hkdf api to Crypto Service.
REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4033 Signed-off-by: Qi Zhang <qi1.zhang@intel.com> Cc: Jiewen Yao <jiewen.yao@intel.com> Cc: Jian J Wang <jian.j.wang@intel.com> Cc: Xiaoyu Lu <xiaoyu1.lu@intel.com> Cc: Guomin Jiang <guomin.jiang@intel.com> Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>
This commit is contained in:
Qi Zhang
mergify[bot]
parent
11b24ef0d7
commit
e919c390e8
|
|
@ -3770,6 +3770,150 @@ CryptoServiceHkdfSha256ExtractAndExpand (
|
|||
return CALL_BASECRYPTLIB (Hkdf.Services.Sha256ExtractAndExpand, HkdfSha256ExtractAndExpand, (Key, KeySize, Salt, SaltSize, Info, InfoSize, Out, OutSize), FALSE);
|
||||
}
|
||||
|
||||
/**
|
||||
Derive SHA256 HMAC-based Extract key Derivation Function (HKDF).
|
||||
|
||||
@param[in] Key Pointer to the user-supplied key.
|
||||
@param[in] KeySize key size in bytes.
|
||||
@param[in] Salt Pointer to the salt(non-secret) value.
|
||||
@param[in] SaltSize salt size in bytes.
|
||||
@param[out] PrkOut Pointer to buffer to receive hkdf value.
|
||||
@param[in] PrkOutSize size of hkdf bytes to generate.
|
||||
|
||||
@retval true Hkdf generated successfully.
|
||||
@retval false Hkdf generation failed.
|
||||
|
||||
**/
|
||||
BOOLEAN
|
||||
EFIAPI
|
||||
CryptoServiceHkdfSha256Extract (
|
||||
IN CONST UINT8 *Key,
|
||||
IN UINTN KeySize,
|
||||
IN CONST UINT8 *Salt,
|
||||
IN UINTN SaltSize,
|
||||
OUT UINT8 *PrkOut,
|
||||
UINTN PrkOutSize
|
||||
)
|
||||
{
|
||||
return CALL_BASECRYPTLIB (Hkdf.Services.Sha256Extract, HkdfSha256Extract, (Key, KeySize, Salt, SaltSize, PrkOut, PrkOutSize), FALSE);
|
||||
}
|
||||
|
||||
/**
|
||||
Derive SHA256 HMAC-based Expand Key Derivation Function (HKDF).
|
||||
|
||||
@param[in] Prk Pointer to the user-supplied key.
|
||||
@param[in] PrkSize Key size in bytes.
|
||||
@param[in] Info Pointer to the application specific info.
|
||||
@param[in] InfoSize Info size in bytes.
|
||||
@param[out] Out Pointer to buffer to receive hkdf value.
|
||||
@param[in] OutSize Size of hkdf bytes to generate.
|
||||
|
||||
@retval TRUE Hkdf generated successfully.
|
||||
@retval FALSE Hkdf generation failed.
|
||||
|
||||
**/
|
||||
BOOLEAN
|
||||
EFIAPI
|
||||
CryptoServiceHkdfSha256Expand (
|
||||
IN CONST UINT8 *Prk,
|
||||
IN UINTN PrkSize,
|
||||
IN CONST UINT8 *Info,
|
||||
IN UINTN InfoSize,
|
||||
OUT UINT8 *Out,
|
||||
IN UINTN OutSize
|
||||
)
|
||||
{
|
||||
return CALL_BASECRYPTLIB (Hkdf.Services.Sha256Expand, HkdfSha256Expand, (Prk, PrkSize, Info, InfoSize, Out, OutSize), FALSE);
|
||||
}
|
||||
|
||||
/**
|
||||
Derive SHA384 HMAC-based Extract-and-Expand Key Derivation Function (HKDF).
|
||||
|
||||
@param[in] Key Pointer to the user-supplied key.
|
||||
@param[in] KeySize Key size in bytes.
|
||||
@param[in] Salt Pointer to the salt(non-secret) value.
|
||||
@param[in] SaltSize Salt size in bytes.
|
||||
@param[in] Info Pointer to the application specific info.
|
||||
@param[in] InfoSize Info size in bytes.
|
||||
@param[out] Out Pointer to buffer to receive hkdf value.
|
||||
@param[in] OutSize Size of hkdf bytes to generate.
|
||||
|
||||
@retval TRUE Hkdf generated successfully.
|
||||
@retval FALSE Hkdf generation failed.
|
||||
|
||||
**/
|
||||
BOOLEAN
|
||||
EFIAPI
|
||||
CryptoServiceHkdfSha384ExtractAndExpand (
|
||||
IN CONST UINT8 *Key,
|
||||
IN UINTN KeySize,
|
||||
IN CONST UINT8 *Salt,
|
||||
IN UINTN SaltSize,
|
||||
IN CONST UINT8 *Info,
|
||||
IN UINTN InfoSize,
|
||||
OUT UINT8 *Out,
|
||||
IN UINTN OutSize
|
||||
)
|
||||
{
|
||||
return CALL_BASECRYPTLIB (Hkdf.Services.Sha384ExtractAndExpand, HkdfSha384ExtractAndExpand, (Key, KeySize, Salt, SaltSize, Info, InfoSize, Out, OutSize), FALSE);
|
||||
}
|
||||
|
||||
/**
|
||||
Derive SHA384 HMAC-based Extract key Derivation Function (HKDF).
|
||||
|
||||
@param[in] Key Pointer to the user-supplied key.
|
||||
@param[in] KeySize key size in bytes.
|
||||
@param[in] Salt Pointer to the salt(non-secret) value.
|
||||
@param[in] SaltSize salt size in bytes.
|
||||
@param[out] PrkOut Pointer to buffer to receive hkdf value.
|
||||
@param[in] PrkOutSize size of hkdf bytes to generate.
|
||||
|
||||
@retval true Hkdf generated successfully.
|
||||
@retval false Hkdf generation failed.
|
||||
|
||||
**/
|
||||
BOOLEAN
|
||||
EFIAPI
|
||||
CryptoServiceHkdfSha384Extract (
|
||||
IN CONST UINT8 *Key,
|
||||
IN UINTN KeySize,
|
||||
IN CONST UINT8 *Salt,
|
||||
IN UINTN SaltSize,
|
||||
OUT UINT8 *PrkOut,
|
||||
UINTN PrkOutSize
|
||||
)
|
||||
{
|
||||
return CALL_BASECRYPTLIB (Hkdf.Services.Sha384Extract, HkdfSha384Extract, (Key, KeySize, Salt, SaltSize, PrkOut, PrkOutSize), FALSE);
|
||||
}
|
||||
|
||||
/**
|
||||
Derive SHA384 HMAC-based Expand Key Derivation Function (HKDF).
|
||||
|
||||
@param[in] Prk Pointer to the user-supplied key.
|
||||
@param[in] PrkSize Key size in bytes.
|
||||
@param[in] Info Pointer to the application specific info.
|
||||
@param[in] InfoSize Info size in bytes.
|
||||
@param[out] Out Pointer to buffer to receive hkdf value.
|
||||
@param[in] OutSize Size of hkdf bytes to generate.
|
||||
|
||||
@retval TRUE Hkdf generated successfully.
|
||||
@retval FALSE Hkdf generation failed.
|
||||
|
||||
**/
|
||||
BOOLEAN
|
||||
EFIAPI
|
||||
CryptoServiceHkdfSha384Expand (
|
||||
IN CONST UINT8 *Prk,
|
||||
IN UINTN PrkSize,
|
||||
IN CONST UINT8 *Info,
|
||||
IN UINTN InfoSize,
|
||||
OUT UINT8 *Out,
|
||||
IN UINTN OutSize
|
||||
)
|
||||
{
|
||||
return CALL_BASECRYPTLIB (Hkdf.Services.Sha384Expand, HkdfSha384Expand, (Prk, PrkSize, Info, InfoSize, Out, OutSize), FALSE);
|
||||
}
|
||||
|
||||
/**
|
||||
Initializes the OpenSSL library.
|
||||
|
||||
|
|
@ -5009,5 +5153,11 @@ const EDKII_CRYPTO_PROTOCOL mEdkiiCrypto = {
|
|||
CryptoServiceHmacSha384Duplicate,
|
||||
CryptoServiceHmacSha384Update,
|
||||
CryptoServiceHmacSha384Final,
|
||||
CryptoServiceHmacSha384All
|
||||
CryptoServiceHmacSha384All,
|
||||
/// HKDF (continued)
|
||||
CryptoServiceHkdfSha256Extract,
|
||||
CryptoServiceHkdfSha256Expand,
|
||||
CryptoServiceHkdfSha384ExtractAndExpand,
|
||||
CryptoServiceHkdfSha384Extract,
|
||||
CryptoServiceHkdfSha384Expand
|
||||
};
|
||||
|
|
|
|||
|
|
@ -2913,6 +2913,150 @@ HkdfSha256ExtractAndExpand (
|
|||
CALL_CRYPTO_SERVICE (HkdfSha256ExtractAndExpand, (Key, KeySize, Salt, SaltSize, Info, InfoSize, Out, OutSize), FALSE);
|
||||
}
|
||||
|
||||
/**
|
||||
Derive SHA256 HMAC-based Extract key Derivation Function (HKDF).
|
||||
|
||||
@param[in] Key Pointer to the user-supplied key.
|
||||
@param[in] KeySize key size in bytes.
|
||||
@param[in] Salt Pointer to the salt(non-secret) value.
|
||||
@param[in] SaltSize salt size in bytes.
|
||||
@param[out] PrkOut Pointer to buffer to receive hkdf value.
|
||||
@param[in] PrkOutSize size of hkdf bytes to generate.
|
||||
|
||||
@retval true Hkdf generated successfully.
|
||||
@retval false Hkdf generation failed.
|
||||
|
||||
**/
|
||||
BOOLEAN
|
||||
EFIAPI
|
||||
HkdfSha256Extract (
|
||||
IN CONST UINT8 *Key,
|
||||
IN UINTN KeySize,
|
||||
IN CONST UINT8 *Salt,
|
||||
IN UINTN SaltSize,
|
||||
OUT UINT8 *PrkOut,
|
||||
UINTN PrkOutSize
|
||||
)
|
||||
{
|
||||
CALL_CRYPTO_SERVICE (HkdfSha256Extract, (Key, KeySize, Salt, SaltSize, PrkOut, PrkOutSize), FALSE);
|
||||
}
|
||||
|
||||
/**
|
||||
Derive SHA256 HMAC-based Expand Key Derivation Function (HKDF).
|
||||
|
||||
@param[in] Prk Pointer to the user-supplied key.
|
||||
@param[in] PrkSize Key size in bytes.
|
||||
@param[in] Info Pointer to the application specific info.
|
||||
@param[in] InfoSize Info size in bytes.
|
||||
@param[out] Out Pointer to buffer to receive hkdf value.
|
||||
@param[in] OutSize Size of hkdf bytes to generate.
|
||||
|
||||
@retval TRUE Hkdf generated successfully.
|
||||
@retval FALSE Hkdf generation failed.
|
||||
|
||||
**/
|
||||
BOOLEAN
|
||||
EFIAPI
|
||||
HkdfSha256Expand (
|
||||
IN CONST UINT8 *Prk,
|
||||
IN UINTN PrkSize,
|
||||
IN CONST UINT8 *Info,
|
||||
IN UINTN InfoSize,
|
||||
OUT UINT8 *Out,
|
||||
IN UINTN OutSize
|
||||
)
|
||||
{
|
||||
CALL_CRYPTO_SERVICE (HkdfSha256Expand, (Prk, PrkSize, Info, InfoSize, Out, OutSize), FALSE);
|
||||
}
|
||||
|
||||
/**
|
||||
Derive SHA384 HMAC-based Extract-and-Expand Key Derivation Function (HKDF).
|
||||
|
||||
@param[in] Key Pointer to the user-supplied key.
|
||||
@param[in] KeySize Key size in bytes.
|
||||
@param[in] Salt Pointer to the salt(non-secret) value.
|
||||
@param[in] SaltSize Salt size in bytes.
|
||||
@param[in] Info Pointer to the application specific info.
|
||||
@param[in] InfoSize Info size in bytes.
|
||||
@param[out] Out Pointer to buffer to receive hkdf value.
|
||||
@param[in] OutSize Size of hkdf bytes to generate.
|
||||
|
||||
@retval TRUE Hkdf generated successfully.
|
||||
@retval FALSE Hkdf generation failed.
|
||||
|
||||
**/
|
||||
BOOLEAN
|
||||
EFIAPI
|
||||
HkdfSha384ExtractAndExpand (
|
||||
IN CONST UINT8 *Key,
|
||||
IN UINTN KeySize,
|
||||
IN CONST UINT8 *Salt,
|
||||
IN UINTN SaltSize,
|
||||
IN CONST UINT8 *Info,
|
||||
IN UINTN InfoSize,
|
||||
OUT UINT8 *Out,
|
||||
IN UINTN OutSize
|
||||
)
|
||||
{
|
||||
CALL_CRYPTO_SERVICE (HkdfSha384ExtractAndExpand, (Key, KeySize, Salt, SaltSize, Info, InfoSize, Out, OutSize), FALSE);
|
||||
}
|
||||
|
||||
/**
|
||||
Derive SHA384 HMAC-based Extract key Derivation Function (HKDF).
|
||||
|
||||
@param[in] Key Pointer to the user-supplied key.
|
||||
@param[in] KeySize key size in bytes.
|
||||
@param[in] Salt Pointer to the salt(non-secret) value.
|
||||
@param[in] SaltSize salt size in bytes.
|
||||
@param[out] PrkOut Pointer to buffer to receive hkdf value.
|
||||
@param[in] PrkOutSize size of hkdf bytes to generate.
|
||||
|
||||
@retval true Hkdf generated successfully.
|
||||
@retval false Hkdf generation failed.
|
||||
|
||||
**/
|
||||
BOOLEAN
|
||||
EFIAPI
|
||||
HkdfSha384Extract (
|
||||
IN CONST UINT8 *Key,
|
||||
IN UINTN KeySize,
|
||||
IN CONST UINT8 *Salt,
|
||||
IN UINTN SaltSize,
|
||||
OUT UINT8 *PrkOut,
|
||||
UINTN PrkOutSize
|
||||
)
|
||||
{
|
||||
CALL_CRYPTO_SERVICE (HkdfSha384Extract, (Key, KeySize, Salt, SaltSize, PrkOut, PrkOutSize), FALSE);
|
||||
}
|
||||
|
||||
/**
|
||||
Derive SHA384 HMAC-based Expand Key Derivation Function (HKDF).
|
||||
|
||||
@param[in] Prk Pointer to the user-supplied key.
|
||||
@param[in] PrkSize Key size in bytes.
|
||||
@param[in] Info Pointer to the application specific info.
|
||||
@param[in] InfoSize Info size in bytes.
|
||||
@param[out] Out Pointer to buffer to receive hkdf value.
|
||||
@param[in] OutSize Size of hkdf bytes to generate.
|
||||
|
||||
@retval TRUE Hkdf generated successfully.
|
||||
@retval FALSE Hkdf generation failed.
|
||||
|
||||
**/
|
||||
BOOLEAN
|
||||
EFIAPI
|
||||
HkdfSha384Expand (
|
||||
IN CONST UINT8 *Prk,
|
||||
IN UINTN PrkSize,
|
||||
IN CONST UINT8 *Info,
|
||||
IN UINTN InfoSize,
|
||||
OUT UINT8 *Out,
|
||||
IN UINTN OutSize
|
||||
)
|
||||
{
|
||||
CALL_CRYPTO_SERVICE (HkdfSha384Expand, (Prk, PrkSize, Info, InfoSize, Out, OutSize), FALSE);
|
||||
}
|
||||
|
||||
/**
|
||||
Initializes the OpenSSL library.
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue