mirror of
https://github.com/AGWA/git-crypt.git
synced 2025-12-23 07:28:18 -08:00
73 lines
2.0 KiB
C++
73 lines
2.0 KiB
C++
/*
|
|
* Copyright 2012 Andrew Ayer
|
|
*
|
|
* This file is part of git-crypt.
|
|
*
|
|
* git-crypt is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* git-crypt is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with git-crypt. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#ifndef _CRYPTO_H
|
|
#define _CRYPTO_H
|
|
|
|
#include <openssl/aes.h>
|
|
#include <openssl/hmac.h>
|
|
#include <stdint.h>
|
|
#include <stddef.h>
|
|
#include <iosfwd>
|
|
|
|
enum {
|
|
SHA1_LEN = 20,
|
|
NONCE_LEN = 12,
|
|
HMAC_KEY_LEN = 64,
|
|
AES_KEY_BITS = 256,
|
|
MAX_CRYPT_BYTES = (1ULL<<32)*16 // Don't encrypt more than this or the CTR value will repeat itself
|
|
};
|
|
|
|
struct keys_t {
|
|
AES_KEY enc;
|
|
uint8_t hmac[HMAC_KEY_LEN];
|
|
};
|
|
void load_keys (const char* filepath, keys_t* keys);
|
|
|
|
class aes_ctr_state {
|
|
char nonce[NONCE_LEN];// First 96 bits of counter
|
|
uint32_t byte_counter; // How many bytes processed so far?
|
|
uint8_t otp[16]; // The current OTP that's in use
|
|
|
|
public:
|
|
aes_ctr_state (const uint8_t* arg_nonce, size_t arg_nonce_len);
|
|
|
|
void process (const AES_KEY* key, const uint8_t* in, uint8_t* out, size_t len);
|
|
};
|
|
|
|
class hmac_sha1_state {
|
|
HMAC_CTX ctx;
|
|
|
|
// disallow copy/assignment:
|
|
hmac_sha1_state (const hmac_sha1_state&) { }
|
|
hmac_sha1_state& operator= (const hmac_sha1_state&) { return *this; }
|
|
public:
|
|
hmac_sha1_state (const uint8_t* key, size_t key_len);
|
|
~hmac_sha1_state ();
|
|
|
|
void add (const uint8_t* buffer, size_t buffer_len);
|
|
void get (uint8_t*);
|
|
};
|
|
|
|
// Encrypt/decrypt an entire input stream, writing to the given output stream
|
|
void process_stream (std::istream& in, std::ostream& out, const AES_KEY* enc_key, const uint8_t* nonce);
|
|
|
|
|
|
#endif
|