mirror of
https://github.com/openssl/openssl.git
synced 2024-12-21 06:09:35 +08:00
ec27e619e8
For CBC ciphersuites using Mac-then-encrypt we have to be careful about removing the MAC from the record in constant time. Currently that happens immediately before MAC verification. Instead we move this responsibility to the various protocol "enc" functions so that MAC removal is handled at the same time as padding removal. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/12288)
123 lines
6.5 KiB
C
123 lines
6.5 KiB
C
/*
|
|
* Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*/
|
|
|
|
/*****************************************************************************
|
|
* *
|
|
* The following macros/functions are PRIVATE to the record layer. They *
|
|
* should NOT be used outside of the record layer. *
|
|
* *
|
|
*****************************************************************************/
|
|
|
|
#define MAX_WARN_ALERT_COUNT 5
|
|
|
|
/* Functions/macros provided by the RECORD_LAYER component */
|
|
|
|
#define RECORD_LAYER_get_rrec(rl) ((rl)->rrec)
|
|
#define RECORD_LAYER_set_packet(rl, p) ((rl)->packet = (p))
|
|
#define RECORD_LAYER_reset_packet_length(rl) ((rl)->packet_length = 0)
|
|
#define RECORD_LAYER_get_rstate(rl) ((rl)->rstate)
|
|
#define RECORD_LAYER_set_rstate(rl, st) ((rl)->rstate = (st))
|
|
#define RECORD_LAYER_get_read_sequence(rl) ((rl)->read_sequence)
|
|
#define RECORD_LAYER_get_write_sequence(rl) ((rl)->write_sequence)
|
|
#define RECORD_LAYER_get_numrpipes(rl) ((rl)->numrpipes)
|
|
#define RECORD_LAYER_set_numrpipes(rl, n) ((rl)->numrpipes = (n))
|
|
#define RECORD_LAYER_inc_empty_record_count(rl) ((rl)->empty_record_count++)
|
|
#define RECORD_LAYER_reset_empty_record_count(rl) \
|
|
((rl)->empty_record_count = 0)
|
|
#define RECORD_LAYER_get_empty_record_count(rl) ((rl)->empty_record_count)
|
|
#define RECORD_LAYER_is_first_record(rl) ((rl)->is_first_record)
|
|
#define RECORD_LAYER_set_first_record(rl) ((rl)->is_first_record = 1)
|
|
#define RECORD_LAYER_clear_first_record(rl) ((rl)->is_first_record = 0)
|
|
#define DTLS_RECORD_LAYER_get_r_epoch(rl) ((rl)->d->r_epoch)
|
|
|
|
__owur int ssl3_read_n(SSL *s, size_t n, size_t max, int extend, int clearold,
|
|
size_t *readbytes);
|
|
|
|
DTLS1_BITMAP *dtls1_get_bitmap(SSL *s, SSL3_RECORD *rr,
|
|
unsigned int *is_next_epoch);
|
|
int dtls1_process_buffered_records(SSL *s);
|
|
int dtls1_retrieve_buffered_record(SSL *s, record_pqueue *queue);
|
|
int dtls1_buffer_record(SSL *s, record_pqueue *q, unsigned char *priority);
|
|
void ssl3_record_sequence_update(unsigned char *seq);
|
|
|
|
/* Functions provided by the DTLS1_BITMAP component */
|
|
|
|
int dtls1_record_replay_check(SSL *s, DTLS1_BITMAP *bitmap);
|
|
void dtls1_record_bitmap_update(SSL *s, DTLS1_BITMAP *bitmap);
|
|
|
|
/* Macros/functions provided by the SSL3_BUFFER component */
|
|
|
|
#define SSL3_BUFFER_get_buf(b) ((b)->buf)
|
|
#define SSL3_BUFFER_set_buf(b, n) ((b)->buf = (n))
|
|
#define SSL3_BUFFER_get_len(b) ((b)->len)
|
|
#define SSL3_BUFFER_set_len(b, l) ((b)->len = (l))
|
|
#define SSL3_BUFFER_get_left(b) ((b)->left)
|
|
#define SSL3_BUFFER_set_left(b, l) ((b)->left = (l))
|
|
#define SSL3_BUFFER_sub_left(b, l) ((b)->left -= (l))
|
|
#define SSL3_BUFFER_get_offset(b) ((b)->offset)
|
|
#define SSL3_BUFFER_set_offset(b, o) ((b)->offset = (o))
|
|
#define SSL3_BUFFER_add_offset(b, o) ((b)->offset += (o))
|
|
#define SSL3_BUFFER_is_initialised(b) ((b)->buf != NULL)
|
|
#define SSL3_BUFFER_set_default_len(b, l) ((b)->default_len = (l))
|
|
#define SSL3_BUFFER_set_app_buffer(b, l) ((b)->app_buffer = (l))
|
|
#define SSL3_BUFFER_is_app_buffer(b) ((b)->app_buffer)
|
|
|
|
void SSL3_BUFFER_clear(SSL3_BUFFER *b);
|
|
void SSL3_BUFFER_set_data(SSL3_BUFFER *b, const unsigned char *d, size_t n);
|
|
void SSL3_BUFFER_release(SSL3_BUFFER *b);
|
|
__owur int ssl3_setup_read_buffer(SSL *s);
|
|
__owur int ssl3_setup_write_buffer(SSL *s, size_t numwpipes, size_t len);
|
|
int ssl3_release_read_buffer(SSL *s);
|
|
int ssl3_release_write_buffer(SSL *s);
|
|
|
|
/* Macros/functions provided by the SSL3_RECORD component */
|
|
|
|
#define SSL3_RECORD_get_type(r) ((r)->type)
|
|
#define SSL3_RECORD_set_type(r, t) ((r)->type = (t))
|
|
#define SSL3_RECORD_set_rec_version(r, v) ((r)->rec_version = (v))
|
|
#define SSL3_RECORD_get_length(r) ((r)->length)
|
|
#define SSL3_RECORD_set_length(r, l) ((r)->length = (l))
|
|
#define SSL3_RECORD_add_length(r, l) ((r)->length += (l))
|
|
#define SSL3_RECORD_sub_length(r, l) ((r)->length -= (l))
|
|
#define SSL3_RECORD_get_data(r) ((r)->data)
|
|
#define SSL3_RECORD_set_data(r, d) ((r)->data = (d))
|
|
#define SSL3_RECORD_get_input(r) ((r)->input)
|
|
#define SSL3_RECORD_set_input(r, i) ((r)->input = (i))
|
|
#define SSL3_RECORD_reset_input(r) ((r)->input = (r)->data)
|
|
#define SSL3_RECORD_reset_data(r) ((r)->data = (r)->input)
|
|
#define SSL3_RECORD_get_seq_num(r) ((r)->seq_num)
|
|
#define SSL3_RECORD_get_off(r) ((r)->off)
|
|
#define SSL3_RECORD_set_off(r, o) ((r)->off = (o))
|
|
#define SSL3_RECORD_add_off(r, o) ((r)->off += (o))
|
|
#define SSL3_RECORD_get_epoch(r) ((r)->epoch)
|
|
#define SSL3_RECORD_is_sslv2_record(r) \
|
|
((r)->rec_version == SSL2_VERSION)
|
|
#define SSL3_RECORD_is_read(r) ((r)->read)
|
|
#define SSL3_RECORD_set_read(r) ((r)->read = 1)
|
|
|
|
void SSL3_RECORD_clear(SSL3_RECORD *r, size_t);
|
|
void SSL3_RECORD_release(SSL3_RECORD *r, size_t num_recs);
|
|
void SSL3_RECORD_set_seq_num(SSL3_RECORD *r, const unsigned char *seq_num);
|
|
int ssl3_get_record(SSL *s);
|
|
__owur int ssl3_do_compress(SSL *ssl, SSL3_RECORD *wr);
|
|
__owur int ssl3_do_uncompress(SSL *ssl, SSL3_RECORD *rr);
|
|
__owur int ssl3_cbc_remove_padding_and_mac(SSL *s,
|
|
SSL3_RECORD *rec,
|
|
unsigned char **mac,
|
|
int *alloced,
|
|
size_t block_size, size_t mac_size);
|
|
__owur int tls1_cbc_remove_padding_and_mac(const SSL *s,
|
|
SSL3_RECORD *rec,
|
|
unsigned char **mac,
|
|
int *alloced,
|
|
size_t block_size, size_t mac_size);
|
|
int dtls1_process_record(SSL *s, DTLS1_BITMAP *bitmap);
|
|
__owur int dtls1_get_record(SSL *s);
|
|
int early_data_count_ok(SSL *s, size_t length, size_t overhead, int send);
|