/* * Copyright 2014-2024 The GmSSL Project. All Rights Reserved. * * Licensed under the Apache License, Version 2.0 (the License); you may * not use this file except in compliance with the License. * * http://www.apache.org/licenses/LICENSE-2.0 */ #include #include #include #include #include #include #include #include static const char *usage = "{-encrypt|-decrypt} -key hex -iv hex [-aad str| -aad_hex hex] [-taglen num] [-in file] [-out file]"; static const char *options = "Options\n" "\n" " -encrypt Encrypt\n" " -decrypt Decrypt\n" " -key hex Symmetric key in HEX format\n" " -iv hex IV in HEX format, 12 bytes (24 hex digits) is recommended\n" " -aad str Authenticated-only message\n" " -aad_hex hex Authenticated-only data in HEX format\n" " -taglen num MAC tag length, default 16 bytes\n" " -in file | stdin Input data\n" " -out file | stdout Output data\n" "\n" "Examples\n" "\n" " $ TEXT=`gmssl rand -outlen 20 -hex`\n" " $ KEY=`gmssl rand -outlen 16 -hex`\n" " $ IV=`gmssl rand -outlen 12 -hex`\n" " $ AAD=\"The AAD Data\"\n" " $ echo -n $TEXT | gmssl sm4_gcm -encrypt -key $KEY -iv $IV -aad $AAD -out sm4_gcm_ciphertext.bin\n" " $ gmssl sm4_gcm -decrypt -key $KEY -iv $IV -aad $AAD -in sm4_gcm_ciphertext.bin\n" "\n"; int sm4_gcm_main(int argc, char **argv) { int ret = 1; char *prog = argv[0]; int enc = -1; char *keyhex = NULL; char *ivhex = NULL; uint8_t *aad = NULL; uint8_t *aad_buf = NULL; size_t aadlen = 0; int taglen = SM4_GCM_DEFAULT_TAG_SIZE; char *infile = NULL; char *outfile = NULL; uint8_t key[16]; size_t keylen; uint8_t iv[SM4_GCM_MAX_IV_SIZE]; size_t ivlen; FILE *infp = stdin; FILE *outfp = stdout; SM4_GCM_CTX ctx; uint8_t buf[4096]; size_t inlen; size_t outlen; argc--; argv++; if (argc < 1) { fprintf(stderr, "usage: gmssl %s %s\n", prog, usage); return 1; } while (argc > 0) { if (!strcmp(*argv, "-help")) { printf("usage: gmssl %s %s\n", prog, usage); printf("%s\n", options); ret = 0; goto end; } else if (!strcmp(*argv, "-encrypt")) { if (enc == 0) { fprintf(stderr, "gmssl %s: `-encrypt` `-decrypt` should not be used together\n", prog); goto end; } enc = 1; } else if (!strcmp(*argv, "-decrypt")) { if (enc == 1) { fprintf(stderr, "gmssl %s: `-encrypt` `-decrypt` should not be used together\n", prog); goto end; } enc = 0; } else if (!strcmp(*argv, "-key")) { if (--argc < 1) goto bad; keyhex = *(++argv); if (strlen(keyhex) != sizeof(key) * 2) { fprintf(stderr, "gmssl %s: invalid key length\n", prog); goto end; } if (hex_to_bytes(keyhex, strlen(keyhex), key, &keylen) != 1) { fprintf(stderr, "gmssl %s: invalid key hex digits\n", prog); goto end; } } else if (!strcmp(*argv, "-iv")) { if (--argc < 1) goto bad; ivhex = *(++argv); if (strlen(ivhex) > sizeof(iv) * 2) { fprintf(stderr, "gmssl %s: invalid IV length\n", prog); goto end; } if (hex_to_bytes(ivhex, strlen(ivhex), iv, &ivlen) != 1) { fprintf(stderr, "gmssl %s: invalid IV hex digits\n", prog); goto end; } } else if (!strcmp(*argv, "-aad")) { if (--argc < 1) goto bad; if (aad) { fprintf(stderr, "gmssl %s: `-aad` or `aad_hex` has been specified\n", prog); goto bad; } aad = (uint8_t *)(*(++argv)); aadlen = strlen((char *)aad); } else if (!strcmp(*argv, "-aad_hex")) { if (--argc < 1) goto bad; if (aad) { fprintf(stderr, "gmssl %s: `-aad` or `aad_hex` has been specified\n", prog); goto bad; } aad = (uint8_t *)(*(++argv)); if (!(aad_buf = malloc(strlen((char *)aad)/2 + 1))) { fprintf(stderr, "gmssl %s: malloc failure\n", prog); goto end; } if (hex_to_bytes((char *)aad, strlen((char *)aad), aad_buf, &aadlen) != 1) { fprintf(stderr, "gmssl %s: `-aad_hex` invalid HEX format argument\n", prog); goto end; } aad = aad_buf; } else if (!strcmp(*argv, "-taglen")) { if (--argc < 1) goto bad; taglen = atoi(*(++argv)); if (taglen < SM4_GCM_MIN_TAG_SIZE || taglen > SM4_GCM_MAX_TAG_SIZE) { fprintf(stderr, "gmssl %s: `-taglen` invalid integer argument\n", prog); goto end; } } else if (!strcmp(*argv, "-in")) { if (--argc < 1) goto bad; infile = *(++argv); if (!(infp = fopen(infile, "rb"))) { fprintf(stderr, "gmssl %s: open '%s' failure : %s\n", prog, infile, strerror(errno)); goto end; } } else if (!strcmp(*argv, "-out")) { if (--argc < 1) goto bad; outfile = *(++argv); if (!(outfp = fopen(outfile, "wb"))) { fprintf(stderr, "gmssl %s: open '%s' failure : %s\n", prog, outfile, strerror(errno)); goto end; } } else { fprintf(stderr, "gmssl %s: illegal option `%s`\n", prog, *argv); goto end; bad: fprintf(stderr, "gmssl %s: `%s` option value missing\n", prog, *argv); goto end; } argc--; argv++; } if (enc < 0) { fprintf(stderr, "gmssl %s: option -encrypt or -decrypt should be set\n", prog); goto end; } if (!keyhex) { fprintf(stderr, "gmssl %s: option `-key` missing\n", prog); goto end; } if (!ivhex) { fprintf(stderr, "gmssl %s: option `-iv` missing\n", prog); goto end; } if (enc) { if (sm4_gcm_encrypt_init(&ctx, key, keylen, iv, ivlen, aad, aadlen, taglen) != 1) { error_print(); goto end; } } else { if (sm4_gcm_decrypt_init(&ctx, key, keylen, iv, ivlen, aad, aadlen, taglen) != 1) { error_print(); goto end; } } while ((inlen = fread(buf, 1, sizeof(buf), infp)) > 0) { if (enc) { if (sm4_gcm_encrypt_update(&ctx, buf, inlen, buf, &outlen) != 1) { error_print(); goto end; } } else { if (sm4_gcm_decrypt_update(&ctx, buf, inlen, buf, &outlen) != 1) { error_print(); goto end; } } if (fwrite(buf, 1, outlen, outfp) != outlen) { fprintf(stderr, "gmssl %s: output failure : %s\n", prog, strerror(errno)); goto end; } } if (enc) { if (sm4_gcm_encrypt_finish(&ctx, buf, &outlen) != 1) { error_print(); goto end; } } else { if (sm4_gcm_decrypt_finish(&ctx, buf, &outlen) != 1) { error_print(); goto end; } } if (fwrite(buf, 1, outlen, outfp) != outlen) { fprintf(stderr, "gmssl %s: output failure : %s\n", prog, strerror(errno)); goto end; } ret = 0; end: gmssl_secure_clear(key, sizeof(key)); gmssl_secure_clear(iv, sizeof(iv)); gmssl_secure_clear(&ctx, sizeof(ctx)); gmssl_secure_clear(buf, sizeof(buf)); if (infile && infp) fclose(infp); if (outfile && outfp) fclose(outfp); return ret; }