![[BACK]](/cvsweb/icons/back.gif){kind=icon}
Return to crypto.h CVS log ![[TXT]](/cvsweb/icons/text.gif){kind=icon}
![[DIR]](/cvsweb/icons/dir.gif){kind=icon}
Up to [truecrypt] / truecrypt / common|
Return to crypto.h CVS log | Up to [truecrypt] / truecrypt / common |
1.1.1.11 root 1: /*
2: Legal Notice: The source code contained in this file has been derived from
3: the source code of Encryption for the Masses 2.02a, which is Copyright (c)
4: Paul Le Roux and which is covered by the 'License Agreement for Encryption
5: for the Masses'. Modifications and additions to that source code contained
6: in this file are Copyright (c) TrueCrypt Foundation and are covered by the
1.1.1.12! root 7: TrueCrypt License 2.3 the full text of which is contained in the file
1.1.1.11 root 8: License.txt included in TrueCrypt binary and source code distribution
9: packages. */
1.1 root 10:
1.1.1.5 root 11: /* Update the following when adding a new cipher or EA:
12:
13: Crypto.h:
14: ID #define
15: MAX_EXPANDED_KEY #define
16:
17: Crypto.c:
18: Ciphers[]
19: EncryptionAlgorithms[]
20: CipherInit()
21: EncipherBlock()
22: DecipherBlock()
1.1.1.7 root 23:
1.1.1.5 root 24: */
1.1 root 25:
1.1.1.7 root 26: #ifndef CRYPTO_H
27: #define CRYPTO_H
28:
29: // Header key derivation
1.1.1.8 root 30: #define PKCS5_SALT_SIZE 64
1.1 root 31:
1.1.1.8 root 32: // Master key + secondary key (LRW mode)
33: #define DISKKEY_SIZE 256
34: #define DISK_IV_SIZE 32
1.1 root 35:
36: // Volume header byte offsets
37: #define HEADER_USERKEY_SALT 0
1.1.1.7 root 38: #define HEADER_ENCRYPTEDDATA PKCS5_SALT_SIZE
1.1 root 39: #define HEADER_DISKKEY 256
40:
41: // Volume header sizes
42: #define HEADER_SIZE 512
43: #define HEADER_ENCRYPTEDDATASIZE (HEADER_SIZE - HEADER_ENCRYPTEDDATA)
44:
1.1.1.5 root 45: /* The offset, in bytes, of the hidden volume header position from the end of the file (a positive value).
46: The extra offset (SECTOR_SIZE * 2) was added because FAT file system fills the last sector with zeroes
47: (marked as free; observed when quick format was performed using the OS format tool). One extra sector was
48: added to the offset for future expandability (should the header size increase, or should header backup be
49: introduced). */
50: #define HIDDEN_VOL_HEADER_OFFSET (HEADER_SIZE + SECTOR_SIZE * 2)
51:
1.1.1.7 root 52: // Hash algorithms
53: #define RIPEMD160 1
54: #define SHA1 2
55: #define WHIRLPOOL 3
56: #define LAST_PRF_ID 3 // The number of implemented/available pseudo-random functions (PKCS #5 v2.0)
57:
58: #define SHA1_BLOCKSIZE 64
59: #define SHA1_DIGESTSIZE 20
60: #define RIPEMD160_BLOCKSIZE 64
61: #define RIPEMD160_DIGESTSIZE 20
62: #define WHIRLPOOL_BLOCKSIZE 64
63: #define WHIRLPOOL_DIGESTSIZE 64
64: #define MAX_DIGESTSIZE WHIRLPOOL_DIGESTSIZE
65:
66: #define DEFAULT_HASH_ALGORITHM RIPEMD160
1.1.1.5 root 67:
68: // Modes of operation
69: enum
70: {
1.1.1.8 root 71: LRW = 1,
72: CBC, // Deprecated/legacy
73: OUTER_CBC, // Deprecated/legacy
74: INNER_CBC, // Deprecated/legacy
75: INVALID_MODE
1.1.1.5 root 76: };
1.1 root 77:
1.1.1.5 root 78: // Cipher IDs
1.1 root 79: #define NONE 0
1.1.1.5 root 80: #define AES 1
1.1.1.12! root 81: #define BLOWFISH 2 // Deprecated/legacy
! 82: #define CAST 3 // Deprecated/legacy
1.1.1.5 root 83: #define SERPENT 4
1.1.1.12! root 84: #define TRIPLEDES 5 // Deprecated/legacy
1.1.1.5 root 85: #define TWOFISH 6
1.1.1.12! root 86: #define DES56 7 // Deprecated/legacy (used only by Triple DES)
1.1 root 87:
1.1.1.5 root 88: typedef struct
89: {
90: int Id; // Cipher ID
91: char *Name; // Name
92: int BlockSize; // Block size (bytes)
93: int KeySize; // Key size (bytes)
94: int KeyScheduleSize; // Scheduled key size (bytes)
95: } Cipher;
1.1 root 96:
1.1.1.5 root 97: typedef struct
98: {
99: int Ciphers[4]; // Null terminated array of ciphers used by encryption algorithm
1.1.1.8 root 100: int Modes[3]; // Null terminated array of modes of operation
1.1.1.11 root 101: int FormatEnabled;
1.1.1.5 root 102: } EncryptionAlgorithm;
103:
1.1.1.9 root 104: typedef struct
105: {
106: int Id; // Hash ID
107: char *Name; // Name
108: } Hash;
109:
1.1.1.5 root 110: // Maxium length of scheduled key
111: #define AES_KS (sizeof(aes_encrypt_ctx) + sizeof(aes_decrypt_ctx))
112: #define SERPENT_KS (140 * 4)
113: #define MAX_EXPANDED_KEY (AES_KS + SERPENT_KS + TWOFISH_KS)
1.1 root 114:
1.1.1.11 root 115: #define DISK_WIPE_PASSES 36 // "Gutmann"
1.1.1.9 root 116:
1.1.1.7 root 117: #include "Aes.h"
118: #include "Blowfish.h"
119: #include "Cast.h"
120: #include "Des.h"
121: #include "Serpent.h"
122: #include "Twofish.h"
123:
124: #ifndef LINUX_DRIVER
125: #include "Rmd160.h"
126: #include "Sha1.h"
127: #include "Whirlpool.h"
128: #endif
1.1 root 129:
1.1.1.8 root 130: #include "GfMul.h"
1.1.1.11 root 131: #include "Password.h"
1.1.1.8 root 132:
1.1 root 133: typedef struct keyInfo_t
134: {
135: int noIterations; /* No.of times to iterate setup */
136: int keyLength; /* Length of the key */
1.1.1.8 root 137: __int8 userKey[MAX_PASSWORD]; /* Password (to which keyfiles may have been applied). Max pass, WITHOUT +1 for the NULL */
138: __int8 key_salt[PKCS5_SALT_SIZE]; /* PKCS-5 salt */
139: __int8 key[DISKKEY_SIZE]; /* The actual encryption key */
1.1 root 140: } KEY_INFO, *PKEY_INFO;
141:
142: typedef struct CRYPTO_INFO_t
143: {
1.1.1.8 root 144: int ea; /* Encryption algorithm ID */
145: int mode; /* Mode of operation (e.g., LRW) */
146: unsigned __int8 iv[DISK_IV_SIZE]; /* For LRW mode this contains the secondary key; for CBC it contains the IV (deprecated/legacy) */
147: unsigned __int8 ks[MAX_EXPANDED_KEY];
148: GfCtx gf_ctx;
1.1.1.5 root 149:
1.1.1.8 root 150: unsigned __int8 master_key[DISKKEY_SIZE];
151: unsigned __int8 key_salt[PKCS5_SALT_SIZE];
1.1 root 152: int noIterations;
153: int pkcs5;
154:
155: unsigned __int64 volume_creation_time;
156: unsigned __int64 header_creation_time;
157:
1.1.1.5 root 158: // Hidden volume status & parameters
1.1.1.7 root 159: BOOL hiddenVolume; // Indicates whether the volume is mounted/mountable as hidden volume
1.1.1.8 root 160: BOOL bProtectHiddenVolume; // Indicates whether the volume contains a hidden volume to be protected against overwriting
1.1.1.7 root 161: BOOL bHiddenVolProtectionAction; // TRUE if a write operation has been denied by the driver in order to prevent the hidden volume from being overwritten (set to FALSE upon volume mount).
1.1.1.5 root 162: unsigned __int64 hiddenVolumeSize; // Size of the hidden volume excluding the header (in bytes). Set to 0 for standard volumes.
1.1.1.7 root 163: unsigned __int64 hiddenVolumeOffset; // Absolute position, in bytes, of the first hidden volume data sector within the host volume (provided that there is a hidden volume within). This must be set for all hidden volumes; in case of a normal volume, this variable is only used when protecting a hidden volume within it.
1.1 root 164:
1.1.1.5 root 165: } CRYPTO_INFO, *PCRYPTO_INFO;
1.1 root 166:
167: PCRYPTO_INFO crypto_open (void);
168: void crypto_loadkey (PKEY_INFO keyInfo, char *lpszUserKey, int nUserKeyLen);
169: void crypto_close (PCRYPTO_INFO cryptoInfo);
1.1.1.5 root 170:
171: int CipherGetBlockSize (int cipher);
172: int CipherGetKeySize (int cipher);
173: int CipherGetKeyScheduleSize (int cipher);
174: char * CipherGetName (int cipher);
175:
1.1.1.7 root 176: int CipherInit (int cipher, unsigned char *key, unsigned char *ks);
177: int EAInit (int ea, unsigned char *key, unsigned char *ks);
1.1.1.8 root 178: int EAInitMode (PCRYPTO_INFO ci);
1.1.1.5 root 179: void EncipherBlock(int cipher, void *data, void *ks);
180: void DecipherBlock(int cipher, void *data, void *ks);
181:
182: int EAGetFirst ();
183: int EAGetCount (void);
184: int EAGetNext (int previousEA);
185: char * EAGetName (char *buf, int ea);
1.1.1.8 root 186: int EAGetByName (char *name);
1.1.1.5 root 187: int EAGetKeySize (int ea);
1.1.1.8 root 188: int EAGetFirstMode (int ea);
189: int EAGetNextMode (int ea, int previousModeId);
190: char * EAGetModeName (int ea, int mode, BOOL capitalLetters);
1.1.1.5 root 191: int EAGetKeyScheduleSize (int ea);
192: int EAGetLargestKey ();
193:
194: int EAGetCipherCount (int ea);
195: int EAGetFirstCipher (int ea);
196: int EAGetLastCipher (int ea);
197: int EAGetNextCipher (int ea, int previousCipherId);
198: int EAGetPreviousCipher (int ea, int previousCipherId);
1.1.1.11 root 199: int EAIsFormatEnabled (int ea);
1.1.1.5 root 200:
1.1.1.8 root 201: void EncryptBuffer (unsigned __int32 *buf, unsigned __int64 len, PCRYPTO_INFO cryptoInfo);
202: void DecryptBuffer (unsigned __int32 *buf, unsigned __int64 len, PCRYPTO_INFO cryptoInfo);
203: void EncryptBufferLRW128 (unsigned __int8 *plainText, unsigned int length, unsigned __int64 blockIndex, PCRYPTO_INFO cryptoInfo);
204: void DecryptBufferLRW128 (unsigned __int8 *plainText, int length, unsigned __int64 blockIndex, PCRYPTO_INFO cryptoInfo);
205: void EncryptBufferLRW64 (unsigned __int8 *plainText, unsigned int length, unsigned __int64 blockIndex, PCRYPTO_INFO cryptoInfo);
206: void DecryptBufferLRW64 (unsigned __int8 *plainText, int length, unsigned __int64 blockIndex, PCRYPTO_INFO cryptoInfo);
1.1.1.11 root 207: void EncryptSectors (unsigned __int32 *buf, unsigned __int64 secNo, unsigned __int64 noSectors, PCRYPTO_INFO cryptoInfo);
208: void DecryptSectors (unsigned __int32 *buf, unsigned __int64 secNo, unsigned __int64 noSectors, PCRYPTO_INFO cryptoInfo);
1.1.1.8 root 209:
210: unsigned __int64 LRWSector2Index (unsigned __int64 sector, int blockSize, PCRYPTO_INFO ci);
1.1.1.7 root 211:
1.1.1.9 root 212: char *HashGetName (int hash_algo_id);
213:
214: BOOL DetectWeakSecondaryKey (unsigned char *key, int len);
1.1.1.5 root 215:
1.1.1.7 root 216: #endif /* CRYPTO_H */
This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.