1*e7b1675dSTing-Kang Chang // Copyright 2017 Google LLC
2*e7b1675dSTing-Kang Chang //
3*e7b1675dSTing-Kang Chang // Licensed under the Apache License, Version 2.0 (the "License");
4*e7b1675dSTing-Kang Chang // you may not use this file except in compliance with the License.
5*e7b1675dSTing-Kang Chang // You may obtain a copy of the License at
6*e7b1675dSTing-Kang Chang //
7*e7b1675dSTing-Kang Chang // http://www.apache.org/licenses/LICENSE-2.0
8*e7b1675dSTing-Kang Chang //
9*e7b1675dSTing-Kang Chang // Unless required by applicable law or agreed to in writing, software
10*e7b1675dSTing-Kang Chang // distributed under the License is distributed on an "AS IS" BASIS,
11*e7b1675dSTing-Kang Chang // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12*e7b1675dSTing-Kang Chang // See the License for the specific language governing permissions and
13*e7b1675dSTing-Kang Chang // limitations under the License.
14*e7b1675dSTing-Kang Chang //
15*e7b1675dSTing-Kang Chang ///////////////////////////////////////////////////////////////////////////////
16*e7b1675dSTing-Kang Chang
17*e7b1675dSTing-Kang Chang #include "tink/aead/aead_config.h"
18*e7b1675dSTing-Kang Chang
19*e7b1675dSTing-Kang Chang #include "absl/memory/memory.h"
20*e7b1675dSTing-Kang Chang #include "absl/status/status.h"
21*e7b1675dSTing-Kang Chang #include "tink/aead/aead_wrapper.h"
22*e7b1675dSTing-Kang Chang #include "tink/aead/aes_ctr_hmac_aead_key_manager.h"
23*e7b1675dSTing-Kang Chang #include "tink/aead/aes_eax_key_manager.h"
24*e7b1675dSTing-Kang Chang #include "tink/aead/aes_gcm_key_manager.h"
25*e7b1675dSTing-Kang Chang #include "tink/aead/aes_gcm_proto_serialization.h"
26*e7b1675dSTing-Kang Chang #include "tink/aead/aes_gcm_siv_key_manager.h"
27*e7b1675dSTing-Kang Chang #include "tink/aead/kms_aead_key_manager.h"
28*e7b1675dSTing-Kang Chang #include "tink/aead/kms_envelope_aead_key_manager.h"
29*e7b1675dSTing-Kang Chang #include "tink/aead/xchacha20_poly1305_key_manager.h"
30*e7b1675dSTing-Kang Chang #include "tink/config/tink_fips.h"
31*e7b1675dSTing-Kang Chang #include "tink/mac/mac_config.h"
32*e7b1675dSTing-Kang Chang #include "tink/registry.h"
33*e7b1675dSTing-Kang Chang #include "tink/util/status.h"
34*e7b1675dSTing-Kang Chang #include "proto/config.pb.h"
35*e7b1675dSTing-Kang Chang
36*e7b1675dSTing-Kang Chang namespace crypto {
37*e7b1675dSTing-Kang Chang namespace tink {
38*e7b1675dSTing-Kang Chang // static
Register()39*e7b1675dSTing-Kang Chang util::Status AeadConfig::Register() {
40*e7b1675dSTing-Kang Chang auto status = MacConfig::Register();
41*e7b1675dSTing-Kang Chang if (!status.ok()) return status;
42*e7b1675dSTing-Kang Chang
43*e7b1675dSTing-Kang Chang // Register primitive wrapper.
44*e7b1675dSTing-Kang Chang status = Registry::RegisterPrimitiveWrapper(absl::make_unique<AeadWrapper>());
45*e7b1675dSTing-Kang Chang if (!status.ok()) return status;
46*e7b1675dSTing-Kang Chang
47*e7b1675dSTing-Kang Chang // Register key managers which utilize the FIPS validated BoringCrypto
48*e7b1675dSTing-Kang Chang // implementations.
49*e7b1675dSTing-Kang Chang status = Registry::RegisterKeyTypeManager(
50*e7b1675dSTing-Kang Chang absl::make_unique<AesCtrHmacAeadKeyManager>(), true);
51*e7b1675dSTing-Kang Chang if (!status.ok()) return status;
52*e7b1675dSTing-Kang Chang status = Registry::RegisterKeyTypeManager(
53*e7b1675dSTing-Kang Chang absl::make_unique<AesGcmKeyManager>(), true);
54*e7b1675dSTing-Kang Chang if (!status.ok()) return status;
55*e7b1675dSTing-Kang Chang
56*e7b1675dSTing-Kang Chang status = RegisterAesGcmProtoSerialization();
57*e7b1675dSTing-Kang Chang if (!status.ok()) return status;
58*e7b1675dSTing-Kang Chang
59*e7b1675dSTing-Kang Chang if (IsFipsModeEnabled()) {
60*e7b1675dSTing-Kang Chang return util::OkStatus();
61*e7b1675dSTing-Kang Chang }
62*e7b1675dSTing-Kang Chang
63*e7b1675dSTing-Kang Chang // Register all the other key managers.
64*e7b1675dSTing-Kang Chang status = Registry::RegisterKeyTypeManager(
65*e7b1675dSTing-Kang Chang absl::make_unique<AesGcmSivKeyManager>(), true);
66*e7b1675dSTing-Kang Chang if (!status.ok()) return status;
67*e7b1675dSTing-Kang Chang status = Registry::RegisterKeyTypeManager(
68*e7b1675dSTing-Kang Chang absl::make_unique<AesEaxKeyManager>(), true);
69*e7b1675dSTing-Kang Chang if (!status.ok()) return status;
70*e7b1675dSTing-Kang Chang status = Registry::RegisterKeyTypeManager(
71*e7b1675dSTing-Kang Chang absl::make_unique<XChaCha20Poly1305KeyManager>(), true);
72*e7b1675dSTing-Kang Chang if (!status.ok()) return status;
73*e7b1675dSTing-Kang Chang status = Registry::RegisterKeyTypeManager(
74*e7b1675dSTing-Kang Chang absl::make_unique<KmsAeadKeyManager>(), true);
75*e7b1675dSTing-Kang Chang if (!status.ok()) return status;
76*e7b1675dSTing-Kang Chang status = Registry::RegisterKeyTypeManager(
77*e7b1675dSTing-Kang Chang absl::make_unique<KmsEnvelopeAeadKeyManager>(), true);
78*e7b1675dSTing-Kang Chang if (!status.ok()) return status;
79*e7b1675dSTing-Kang Chang
80*e7b1675dSTing-Kang Chang return util::OkStatus();
81*e7b1675dSTing-Kang Chang }
82*e7b1675dSTing-Kang Chang
83*e7b1675dSTing-Kang Chang } // namespace tink
84*e7b1675dSTing-Kang Chang } // namespace crypto
85