Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
nrf_security: drivers: cracen: Adding support for ed25519 without sic…
…rypto Adding support for directly using silexpk and sxsymcrypt files for ed25519 This bypasses sicrypto, which saves on flash usage This is a prototype, not ready for use Signed-off-by: Dag Erik Gjørvad <[email protected]>
- Loading branch information
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,216 @@ | ||
| /* | ||
| * Copyright (c) 2024 Nordic Semiconductor ASA | ||
| * | ||
| * SPDX-License-Identifier: LicenseRef-Nordic-5-Clause | ||
| */ | ||
| #include <string.h> | ||
| #include <sxsymcrypt/sha2.h> | ||
| #include <silexpk/ed25519.h> | ||
| #include <cracen/ec_helpers.h> | ||
| #include <sxsymcrypt/hash.h> | ||
| #include <cracen/mem_helpers.h> | ||
|
|
||
| int no_si_ed25519_sign(const uint8_t *ed25519, char *signature, const uint8_t *message) | ||
| { | ||
| char workmem[160]; | ||
| struct sxhash hashopctx; | ||
| char pointr_buffer[64]; | ||
| char *pointr = pointr_buffer; | ||
| int r; | ||
|
|
||
| /*Hash the private key, the digest is stored in the first 64 bytes of workmem*/ | ||
| r = sx_hash_create(&hashopctx, &sxhashalg_sha2_512, sizeof(hashopctx)); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_feed(&hashopctx, ed25519, 32); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_digest(&hashopctx, workmem); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| /*Wait to make sure hash operation is finished before doing calculations on it*/ | ||
| r = sx_hash_wait(&hashopctx); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| /* Obtain r by hashing (prefix || message), where prefix is the second | ||
| * half of the private key digest. | ||
| */ | ||
|
|
||
| r = sx_hash_create(&hashopctx, &sxhashalg_sha2_512, sizeof(hashopctx)); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_feed(&hashopctx, workmem+32, 32); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_feed(&hashopctx, message, 100); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_digest(&hashopctx, workmem+96); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
|
|
||
| /* Perform point multiplication R = [r]B. This is the encoded point R, | ||
| * which is the first part of the signature. | ||
| */ | ||
| r = sx_ed25519_ptmult((const struct sx_ed25519_dgst *)(workmem + 96), (struct sx_ed25519_pt *)pointr); | ||
|
Check warning on line 63 in subsys/nrf_security/src/drivers/cracen/cracenpsa/src/ed25519_test.c
|
||
| if (r != 0) { | ||
| return r; | ||
|
|
||
| } | ||
| /* The secret scalar s is computed in place from the first half of the | ||
| * private key digest. | ||
| */ | ||
| decode_scalar_25519(workmem); | ||
|
|
||
| /* Clear second half of private key digest: sx_async_ed25519_ptmult_go() | ||
| * works on an input of SX_ED25519_DGST_SZ bytes. | ||
| */ | ||
| safe_memset(workmem + 32, 128, 0, 32); | ||
|
|
||
| /* Perform point multiplication A = [s]B, to obtain the public key A. which is stored in workmem[32:63] */ | ||
|
Check warning on line 78 in subsys/nrf_security/src/drivers/cracen/cracenpsa/src/ed25519_test.c
|
||
| r = sx_ed25519_ptmult((const struct sx_ed25519_dgst *)(workmem), (struct sx_ed25519_pt *)(struct sx_ed25519_pt *)((char *)workmem + 32)); | ||
|
Check warning on line 79 in subsys/nrf_security/src/drivers/cracen/cracenpsa/src/ed25519_test.c
|
||
| if (r != 0) { | ||
| return r; | ||
| } | ||
|
|
||
| /* Obtain k by hashing (R || A || message). */ | ||
| r = sx_hash_create(&hashopctx, &sxhashalg_sha2_512, sizeof(hashopctx)); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_feed(&hashopctx, pointr, 32); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_feed(&hashopctx, workmem+32, 32); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_feed(&hashopctx, message, 100); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_digest(&hashopctx, workmem+32); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
|
|
||
| /* Compute (r + k * s) mod L. This gives the second part of the | ||
| * signature, which is the encoded S which is stored in pointr. | ||
| */ | ||
|
|
||
| r = sx_ed25519_sign( | ||
| (const struct sx_ed25519_dgst *)(workmem + 32), | ||
| (const struct sx_ed25519_dgst *)(workmem + 3 * 32), | ||
| (const struct sx_ed25519_v *)workmem, | ||
| (struct sx_ed25519_v *)(pointr + SX_ED25519_PT_SZ)); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
|
|
||
| memcpy(signature, pointr, 64); | ||
|
|
||
| return r; | ||
| /*End ed25519_sign_finish*/ | ||
|
|
||
| /*end si_sig_create_ed_25510 sign*/ | ||
|
|
||
|
|
||
| } | ||
|
|
||
| int no_si_create_ed25519_verify(const uint8_t *pubkey, const char* message, size_t message_length, const char *signature) | ||
|
Check warning on line 129 in subsys/nrf_security/src/drivers/cracen/cracenpsa/src/ed25519_test.c
|
||
| { | ||
|
|
||
| char workmem[64]; | ||
| struct sxhash hashopctx; | ||
| int r; | ||
|
|
||
|
|
||
| r = sx_hash_create(&hashopctx, &sxhashalg_sha2_512, sizeof(hashopctx)); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_feed(&hashopctx, signature, 32); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_feed(&hashopctx, pubkey, 32); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_feed(&hashopctx, message, message_length); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_digest(&hashopctx, workmem); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
|
|
||
|
|
||
| r = sx_ed25519_verify( | ||
| (struct sx_ed25519_dgst *)workmem, | ||
| (struct sx_ed25519_pt *)pubkey, | ||
| (const struct sx_ed25519_v *)(signature + 32), | ||
| (const struct sx_ed25519_pt *)signature); | ||
|
|
||
| return r; | ||
| /*end finish_ed25519_ver*/ | ||
|
|
||
| } | ||
|
|
||
| int no_si_sig_create_ed25519_pubkey(const uint8_t *ed25519, | ||
| uint8_t *pubkey) | ||
| { | ||
| /*Si_sig_create_ed_25519_sign*/ | ||
| char workmem[64]; | ||
| struct sxhash hashopctx; | ||
| int r; | ||
|
|
||
| /*ed25519_sign_hash_privkey*/ | ||
| r = sx_hash_create(&hashopctx, &sxhashalg_sha2_512, sizeof(hashopctx)); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_feed(&hashopctx, ed25519, 32); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| r = sx_hash_digest(&hashopctx, workmem); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| /*Wait to make sure hash operation is finished before doing calculations on it | ||
| * removing this breaks pubkey generation | ||
|
Check failure on line 192 in subsys/nrf_security/src/drivers/cracen/cracenpsa/src/ed25519_test.c
|
||
| */ | ||
| r = sx_hash_wait(&hashopctx); | ||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| /* The secret scalar s is computed in place from the first half of the | ||
| * private key digest. | ||
| */ | ||
| decode_scalar_25519(workmem); | ||
|
|
||
| /* Clear second half of private key digest: sx_async_ed25519_ptmult_go() | ||
| * works on an input of SX_ED25519_DGST_SZ bytes. | ||
| */ | ||
| safe_memset(workmem+32, 32, 0, 32); | ||
| /* Perform point multiplication A = [s]B, to obtain the public key A. */ | ||
| r = sx_ed25519_ptmult((const struct sx_ed25519_dgst *)(workmem), (struct sx_ed25519_pt *)(struct sx_ed25519_pt *)((char *)workmem + 32)); | ||
|
Check warning on line 208 in subsys/nrf_security/src/drivers/cracen/cracenpsa/src/ed25519_test.c
|
||
| if (r != 0) { | ||
| return r; | ||
| } | ||
| memcpy(pubkey, workmem+32, 32); | ||
|
|
||
| return r; | ||
|
|
||
| } | ||
|
Check warning on line 216 in subsys/nrf_security/src/drivers/cracen/cracenpsa/src/ed25519_test.c
|
||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters