Initial commit

2016-10-21 14:56:47 +02:00
commit 6635448be6
28 changed files with 10334 additions and 0 deletions
--- a/src/fr/anssi/smartpgp/CmacKey.java
+++ b/src/fr/anssi/smartpgp/CmacKey.java
@@ -0,0 +1,81 @@
+/*
+  SmartPGP : JavaCard implementation of OpenPGP card v3 specification
+  https://github.com/ANSSI-FR/smartpgp
+  Copyright (C) 2016 ANSSI
+
+  This program is free software; you can redistribute it and/or
+  modify it under the terms of the GNU General Public License
+  as published by the Free Software Foundation; either version 2
+  of the License, or (at your option) any later version.
+
+  This program is distributed in the hope that it will be useful,
+  but WITHOUT ANY WARRANTY; without even the implied warranty of
+  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+  GNU General Public License for more details.
+
+  You should have received a copy of the GNU General Public License
+  along with this program; if not, write to the Free Software
+  Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+*/
+
+package fr.anssi.smartpgp;
+
+import javacard.framework.*;
+import javacard.security.*;
+import javacardx.apdu.*;
+import javacardx.crypto.*;
+
+public final class CmacKey {
+
+    protected final AESKey key;
+    protected final byte[] k1;
+    protected final byte[] k2;
+
+    protected CmacKey() {
+        key = (AESKey)KeyBuilder.buildKey(KeyBuilder.TYPE_AES_TRANSIENT_DESELECT,
+                                          (short)(Constants.aesKeyLength() * 8),
+                                          false);
+
+        k1 = JCSystem.makeTransientByteArray(Constants.AES_BLOCK_SIZE, JCSystem.CLEAR_ON_DESELECT);
+
+        k2 = JCSystem.makeTransientByteArray(Constants.AES_BLOCK_SIZE, JCSystem.CLEAR_ON_DESELECT);
+    }
+
+    protected final boolean isInitialized() {
+        return key.isInitialized();
+    }
+
+    protected final void clearKey() {
+        key.clearKey();
+        Util.arrayFillNonAtomic(k1, (short)0, (short)k1.length, (byte)0);
+        Util.arrayFillNonAtomic(k2, (short)0, (short)k2.length, (byte)0);
+    }
+
+    protected final void setKey(final byte[] buf, final short bufOff) {
+        key.setKey(buf, bufOff);
+
+        final Cipher cipher = Cipher.getInstance(Cipher.ALG_AES_BLOCK_128_CBC_NOPAD, false);
+
+        cipher.init(key, Cipher.MODE_ENCRYPT);
+
+        Util.arrayFillNonAtomic(k2, (short)0, Constants.AES_BLOCK_SIZE, (byte)0);
+        cipher.doFinal(k2, (short)0, Constants.AES_BLOCK_SIZE,
+                       k1, (short)0);
+
+        final boolean mark = ((k1[0] & (byte)0x80) != (byte)0);
+        Common.arrayLeftShift(k1, (short)0,
+                              k1, (short)0,
+                              Constants.AES_BLOCK_SIZE);
+        if(mark) {
+            k1[(short)(Constants.AES_BLOCK_SIZE - 1)] = (byte)(k1[(short)(Constants.AES_BLOCK_SIZE - 1)] ^ (byte)0x87);
+        }
+
+        Common.arrayLeftShift(k1, (short)0,
+                              k2, (short)0,
+                              Constants.AES_BLOCK_SIZE);
+        if((k1[0] & (byte)0x80) != (byte)0) {
+            k2[(short)(Constants.AES_BLOCK_SIZE - 1)] = (byte)(k2[(short)(Constants.AES_BLOCK_SIZE - 1)] ^ (byte)0x87);
+        }
+    }
+
+}