]> git.ipfire.org Git - people/ms/u-boot.git/blame - include/uboot_aes.h
dfu: Fix up the Kconfig mess
[people/ms/u-boot.git] / include / uboot_aes.h
CommitLineData
5b1a5451
YL
1/*
2 * Copyright (c) 2011 The Chromium OS Authors.
3 * (C) Copyright 2010 - 2011 NVIDIA Corporation <www.nvidia.com>
4 *
1a459660 5 * SPDX-License-Identifier: GPL-2.0+
5b1a5451
YL
6 */
7
8#ifndef _AES_REF_H_
9#define _AES_REF_H_
10
a8a752c0
MV
11#ifdef USE_HOSTCC
12/* Define compat stuff for use in fw_* tools. */
13typedef unsigned char u8;
14typedef unsigned int u32;
15#define debug(...) do {} while (0)
16#endif
17
5b1a5451
YL
18/*
19 * AES encryption library, with small code size, supporting only 128-bit AES
20 *
21 * AES is a stream cipher which works a block at a time, with each block
22 * in this case being AES_KEY_LENGTH bytes.
23 */
24
25enum {
26 AES_STATECOLS = 4, /* columns in the state & expanded key */
27 AES_KEYCOLS = 4, /* columns in a key */
28 AES_ROUNDS = 10, /* rounds in encryption */
29
30 AES_KEY_LENGTH = 128 / 8,
31 AES_EXPAND_KEY_LENGTH = 4 * AES_STATECOLS * (AES_ROUNDS + 1),
32};
33
34/**
957ba85c
MV
35 * aes_expand_key() - Expand the AES key
36 *
5b1a5451
YL
37 * Expand a key into a key schedule, which is then used for the other
38 * operations.
39 *
957ba85c
MV
40 * @key Key, of length AES_KEY_LENGTH bytes
41 * @expkey Buffer to place expanded key, AES_EXPAND_KEY_LENGTH
5b1a5451
YL
42 */
43void aes_expand_key(u8 *key, u8 *expkey);
44
45/**
957ba85c 46 * aes_encrypt() - Encrypt single block of data with AES 128
5b1a5451 47 *
957ba85c
MV
48 * @in Input data
49 * @expkey Expanded key to use for encryption (from aes_expand_key())
50 * @out Output data
5b1a5451
YL
51 */
52void aes_encrypt(u8 *in, u8 *expkey, u8 *out);
53
54/**
957ba85c 55 * aes_decrypt() - Decrypt single block of data with AES 128
5b1a5451 56 *
957ba85c
MV
57 * @in Input data
58 * @expkey Expanded key to use for decryption (from aes_expand_key())
59 * @out Output data
5b1a5451
YL
60 */
61void aes_decrypt(u8 *in, u8 *expkey, u8 *out);
62
53eb768d
SW
63/**
64 * Apply chain data to the destination using EOR
65 *
66 * Each array is of length AES_KEY_LENGTH.
67 *
68 * @cbc_chain_data Chain data
69 * @src Source data
70 * @dst Destination data, which is modified here
71 */
72void aes_apply_cbc_chain_data(u8 *cbc_chain_data, u8 *src, u8 *dst);
73
6e7b9f4f
MV
74/**
75 * aes_cbc_encrypt_blocks() - Encrypt multiple blocks of data with AES CBC.
76 *
77 * @key_exp Expanded key to use
af09eba6 78 * @iv Initialization vector
6e7b9f4f
MV
79 * @src Source data to encrypt
80 * @dst Destination buffer
81 * @num_aes_blocks Number of AES blocks to encrypt
82 */
af09eba6
АМ
83void aes_cbc_encrypt_blocks(u8 *key_exp, u8 *iv, u8 *src, u8 *dst,
84 u32 num_aes_blocks);
6e7b9f4f 85
dc24bb6d
MV
86/**
87 * Decrypt multiple blocks of data with AES CBC.
88 *
89 * @key_exp Expanded key to use
af09eba6 90 * @iv Initialization vector
dc24bb6d
MV
91 * @src Source data to decrypt
92 * @dst Destination buffer
93 * @num_aes_blocks Number of AES blocks to decrypt
94 */
af09eba6
АМ
95void aes_cbc_decrypt_blocks(u8 *key_exp, u8 *iv, u8 *src, u8 *dst,
96 u32 num_aes_blocks);
dc24bb6d 97
5b1a5451 98#endif /* _AES_REF_H_ */