1*90e502c7SAndroid Build Coastguard Worker /*
2*90e502c7SAndroid Build Coastguard Worker * key.c
3*90e502c7SAndroid Build Coastguard Worker *
4*90e502c7SAndroid Build Coastguard Worker * key usage limits enforcement
5*90e502c7SAndroid Build Coastguard Worker *
6*90e502c7SAndroid Build Coastguard Worker * David A. Mcgrew
7*90e502c7SAndroid Build Coastguard Worker * Cisco Systems, Inc.
8*90e502c7SAndroid Build Coastguard Worker */
9*90e502c7SAndroid Build Coastguard Worker /*
10*90e502c7SAndroid Build Coastguard Worker *
11*90e502c7SAndroid Build Coastguard Worker * Copyright (c) 2001-2017 Cisco Systems, Inc.
12*90e502c7SAndroid Build Coastguard Worker * All rights reserved.
13*90e502c7SAndroid Build Coastguard Worker *
14*90e502c7SAndroid Build Coastguard Worker * Redistribution and use in source and binary forms, with or without
15*90e502c7SAndroid Build Coastguard Worker * modification, are permitted provided that the following conditions
16*90e502c7SAndroid Build Coastguard Worker * are met:
17*90e502c7SAndroid Build Coastguard Worker *
18*90e502c7SAndroid Build Coastguard Worker * Redistributions of source code must retain the above copyright
19*90e502c7SAndroid Build Coastguard Worker * notice, this list of conditions and the following disclaimer.
20*90e502c7SAndroid Build Coastguard Worker *
21*90e502c7SAndroid Build Coastguard Worker * Redistributions in binary form must reproduce the above
22*90e502c7SAndroid Build Coastguard Worker * copyright notice, this list of conditions and the following
23*90e502c7SAndroid Build Coastguard Worker * disclaimer in the documentation and/or other materials provided
24*90e502c7SAndroid Build Coastguard Worker * with the distribution.
25*90e502c7SAndroid Build Coastguard Worker *
26*90e502c7SAndroid Build Coastguard Worker * Neither the name of the Cisco Systems, Inc. nor the names of its
27*90e502c7SAndroid Build Coastguard Worker * contributors may be used to endorse or promote products derived
28*90e502c7SAndroid Build Coastguard Worker * from this software without specific prior written permission.
29*90e502c7SAndroid Build Coastguard Worker *
30*90e502c7SAndroid Build Coastguard Worker * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
31*90e502c7SAndroid Build Coastguard Worker * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
32*90e502c7SAndroid Build Coastguard Worker * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
33*90e502c7SAndroid Build Coastguard Worker * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
34*90e502c7SAndroid Build Coastguard Worker * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
35*90e502c7SAndroid Build Coastguard Worker * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
36*90e502c7SAndroid Build Coastguard Worker * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
37*90e502c7SAndroid Build Coastguard Worker * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
38*90e502c7SAndroid Build Coastguard Worker * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
39*90e502c7SAndroid Build Coastguard Worker * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
40*90e502c7SAndroid Build Coastguard Worker * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
41*90e502c7SAndroid Build Coastguard Worker * OF THE POSSIBILITY OF SUCH DAMAGE.
42*90e502c7SAndroid Build Coastguard Worker *
43*90e502c7SAndroid Build Coastguard Worker */
44*90e502c7SAndroid Build Coastguard Worker
45*90e502c7SAndroid Build Coastguard Worker #ifdef HAVE_CONFIG_H
46*90e502c7SAndroid Build Coastguard Worker #include <config.h>
47*90e502c7SAndroid Build Coastguard Worker #endif
48*90e502c7SAndroid Build Coastguard Worker
49*90e502c7SAndroid Build Coastguard Worker #include "key.h"
50*90e502c7SAndroid Build Coastguard Worker
51*90e502c7SAndroid Build Coastguard Worker #define soft_limit 0x10000
52*90e502c7SAndroid Build Coastguard Worker
srtp_key_limit_set(srtp_key_limit_t key,const srtp_xtd_seq_num_t s)53*90e502c7SAndroid Build Coastguard Worker srtp_err_status_t srtp_key_limit_set(srtp_key_limit_t key,
54*90e502c7SAndroid Build Coastguard Worker const srtp_xtd_seq_num_t s)
55*90e502c7SAndroid Build Coastguard Worker {
56*90e502c7SAndroid Build Coastguard Worker #ifdef NO_64BIT_MATH
57*90e502c7SAndroid Build Coastguard Worker if (high32(s) == 0 && low32(s) < soft_limit) {
58*90e502c7SAndroid Build Coastguard Worker return srtp_err_status_bad_param;
59*90e502c7SAndroid Build Coastguard Worker }
60*90e502c7SAndroid Build Coastguard Worker #else
61*90e502c7SAndroid Build Coastguard Worker if (s < soft_limit) {
62*90e502c7SAndroid Build Coastguard Worker return srtp_err_status_bad_param;
63*90e502c7SAndroid Build Coastguard Worker }
64*90e502c7SAndroid Build Coastguard Worker #endif
65*90e502c7SAndroid Build Coastguard Worker key->num_left = s;
66*90e502c7SAndroid Build Coastguard Worker key->state = srtp_key_state_normal;
67*90e502c7SAndroid Build Coastguard Worker return srtp_err_status_ok;
68*90e502c7SAndroid Build Coastguard Worker }
69*90e502c7SAndroid Build Coastguard Worker
srtp_key_limit_clone(srtp_key_limit_t original,srtp_key_limit_t * new_key)70*90e502c7SAndroid Build Coastguard Worker srtp_err_status_t srtp_key_limit_clone(srtp_key_limit_t original,
71*90e502c7SAndroid Build Coastguard Worker srtp_key_limit_t *new_key)
72*90e502c7SAndroid Build Coastguard Worker {
73*90e502c7SAndroid Build Coastguard Worker if (original == NULL) {
74*90e502c7SAndroid Build Coastguard Worker return srtp_err_status_bad_param;
75*90e502c7SAndroid Build Coastguard Worker }
76*90e502c7SAndroid Build Coastguard Worker *new_key = original;
77*90e502c7SAndroid Build Coastguard Worker return srtp_err_status_ok;
78*90e502c7SAndroid Build Coastguard Worker }
79*90e502c7SAndroid Build Coastguard Worker
srtp_key_limit_check(const srtp_key_limit_t key)80*90e502c7SAndroid Build Coastguard Worker srtp_err_status_t srtp_key_limit_check(const srtp_key_limit_t key)
81*90e502c7SAndroid Build Coastguard Worker {
82*90e502c7SAndroid Build Coastguard Worker if (key->state == srtp_key_state_expired) {
83*90e502c7SAndroid Build Coastguard Worker return srtp_err_status_key_expired;
84*90e502c7SAndroid Build Coastguard Worker }
85*90e502c7SAndroid Build Coastguard Worker return srtp_err_status_ok;
86*90e502c7SAndroid Build Coastguard Worker }
87*90e502c7SAndroid Build Coastguard Worker
srtp_key_limit_update(srtp_key_limit_t key)88*90e502c7SAndroid Build Coastguard Worker srtp_key_event_t srtp_key_limit_update(srtp_key_limit_t key)
89*90e502c7SAndroid Build Coastguard Worker {
90*90e502c7SAndroid Build Coastguard Worker #ifdef NO_64BIT_MATH
91*90e502c7SAndroid Build Coastguard Worker if (low32(key->num_left) == 0) {
92*90e502c7SAndroid Build Coastguard Worker // carry
93*90e502c7SAndroid Build Coastguard Worker key->num_left =
94*90e502c7SAndroid Build Coastguard Worker make64(high32(key->num_left) - 1, low32(key->num_left) - 1);
95*90e502c7SAndroid Build Coastguard Worker } else {
96*90e502c7SAndroid Build Coastguard Worker // no carry
97*90e502c7SAndroid Build Coastguard Worker key->num_left = make64(high32(key->num_left), low32(key->num_left) - 1);
98*90e502c7SAndroid Build Coastguard Worker }
99*90e502c7SAndroid Build Coastguard Worker if (high32(key->num_left) != 0 || low32(key->num_left) >= soft_limit) {
100*90e502c7SAndroid Build Coastguard Worker return srtp_key_event_normal; /* we're above the soft limit */
101*90e502c7SAndroid Build Coastguard Worker }
102*90e502c7SAndroid Build Coastguard Worker #else
103*90e502c7SAndroid Build Coastguard Worker key->num_left--;
104*90e502c7SAndroid Build Coastguard Worker if (key->num_left >= soft_limit) {
105*90e502c7SAndroid Build Coastguard Worker return srtp_key_event_normal; /* we're above the soft limit */
106*90e502c7SAndroid Build Coastguard Worker }
107*90e502c7SAndroid Build Coastguard Worker #endif
108*90e502c7SAndroid Build Coastguard Worker if (key->state == srtp_key_state_normal) {
109*90e502c7SAndroid Build Coastguard Worker /* we just passed the soft limit, so change the state */
110*90e502c7SAndroid Build Coastguard Worker key->state = srtp_key_state_past_soft_limit;
111*90e502c7SAndroid Build Coastguard Worker }
112*90e502c7SAndroid Build Coastguard Worker #ifdef NO_64BIT_MATH
113*90e502c7SAndroid Build Coastguard Worker if (low32(key->num_left) == 0 && high32(key->num_left == 0))
114*90e502c7SAndroid Build Coastguard Worker #else
115*90e502c7SAndroid Build Coastguard Worker if (key->num_left < 1)
116*90e502c7SAndroid Build Coastguard Worker #endif
117*90e502c7SAndroid Build Coastguard Worker { /* we just hit the hard limit */
118*90e502c7SAndroid Build Coastguard Worker key->state = srtp_key_state_expired;
119*90e502c7SAndroid Build Coastguard Worker return srtp_key_event_hard_limit;
120*90e502c7SAndroid Build Coastguard Worker }
121*90e502c7SAndroid Build Coastguard Worker return srtp_key_event_soft_limit;
122*90e502c7SAndroid Build Coastguard Worker }
123