2 * tfcrypt -- high security Threefish encryption tool.
4 * tfcrypt is copyrighted:
5 * Copyright (C) 2012-2019 Andrey Rys. All rights reserved.
7 * tfcrypt is licensed to you under the terms of std. MIT/X11 license:
9 * Permission is hereby granted, free of charge, to any person obtaining
10 * a copy of this software and associated documentation files (the
11 * "Software"), to deal in the Software without restriction, including
12 * without limitation the rights to use, copy, modify, merge, publish,
13 * distribute, sublicense, and/or sell copies of the Software, and to
14 * permit persons to whom the Software is furnished to do so, subject to
15 * the following conditions:
17 * The above copyright notice and this permission notice shall be
18 * included in all copies or substantial portions of the Software.
20 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
21 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
22 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
23 * IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
24 * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
25 * TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
26 * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
32 void skein(void *hash, size_t bits, const void *key, const void *data, size_t szdata)
36 if (key) skein_init_key(&sk, key, bits);
37 else skein_init(&sk, bits);
38 skein_update(&sk, data, szdata);
39 skein_final(hash, &sk);
42 tfc_yesno skeinfd(void *hash, size_t bits, const void *key, int fd, tfc_fsize offset, tfc_fsize readto)
44 static tfc_byte skblk[TFC_BLKSIZE];
48 size_t ldone, lblock, lrem, lio;
52 if (ctr_mode == TFC_MODE_SKSUM) total_processed_src = total_processed_dst = delta_processed = 0;
54 if (fd == -1) goto _fail;
56 if (readto == NOFSIZE) {
57 readto = tfc_fdsize(fd);
58 if (readto == NOFSIZE) goto _fail;
60 if (offset != 0 && offset != NOFSIZE) {
61 if (lseek(fd, (off_t)offset, SEEK_SET) == -1) {
62 if (ignore_seek_errors == NO) goto _fail;
67 if (key) skein_init_key(&sk, key, bits);
68 else skein_init(&sk, bits);
75 lblock = lrem = blk_len_adj(readto, total, TFC_BLKSIZE);
77 if (error_action == TFC_ERRACT_SYNC) rdpos = tfc_fdgetpos(fd);
78 _again: lio = xread(fd, pblk, lrem);
79 if (lio == 0) stop = YES;
80 if (lio != NOSIZE) ldone += lio;
82 if (errno != EIO && catch_all_errors != YES) goto _fail;
83 switch (error_action) {
84 case TFC_ERRACT_CONT: xerror(YES, NO, NO, "skeinfd: %d", fd); goto _again; break;
86 case TFC_ERRACT_LSYNC:
87 xerror(YES, NO, NO, "skeinfd: %d", fd);
88 lio = lrem = ldone = lblock;
90 memset(skblk, 0, lio);
91 if (rdpos == NOFSIZE) lseek(fd, lio, SEEK_CUR);
92 else lseek(fd, rdpos + lio, SEEK_SET);
94 default: goto _fail; break;
97 if (lio && lio < lrem) {
103 if (ctr_mode == TFC_MODE_SKSUM) {
104 total_processed_src = total_processed_dst = total;
105 delta_processed += ldone;
107 skein_update(&sk, skblk, ldone);
108 if (readto != NOFSIZE && total >= readto) break;
111 if (fd > 2) lseek(fd, (off_t)readto, SEEK_SET);
113 skein_final(hash, &sk);
114 if (ctr_mode == TFC_MODE_SKSUM) {
115 if (verbose || status_timer) print_crypt_status(-1);
116 total_processed_src = total_processed_dst = delta_processed = 0;
118 memset(skblk, 0, TFC_BLKSIZE);
122 memset(&sk, 0, sizeof(struct skein));
123 memset(hash, 0, SKEIN_DIGEST_SIZE);
124 memset(skblk, 0, TFC_BLKSIZE);
128 void do_sksum(char *spec, char **fargv)
130 static char sksblk[TFC_BLKSIZE / 2], tmp[TFC_TMPSIZE];
131 tfc_byte hash[SKEIN_DIGEST_SIZE];
136 if (macbits < TF_MAX_BITS) {
141 if (!strcmp(spec, "sksum")) {
146 if ((sscanf(spec, "sk%zusum", &bits) < 1)) {
150 if (bits < 8 || bits > TF_MAX_BITS) {
152 "%u: invalid bits number specified!\n"
153 "tfcrypt supports from 8 to %u bits, divisible by 8.",
154 bits, TFC_U(TF_MAX_BITS));
157 if (!bits || bits % 8) {
159 "%u: invalid bits number specified!\n"
160 "Number of bits must start from 8 and be divisible by 8.",
161 bits, TFC_U(TF_MAX_BITS));
165 do_edcrypt = TFC_DO_PLAIN;
166 ctr_mode = TFC_MODE_SKSUM;
168 for (x = 1; x < NSIG; x++) signal(x, SIG_IGN);
169 memset(&sigact, 0, sizeof(sigact));
170 sigact.sa_flags = SA_RESTART;
171 sigact.sa_handler = print_crypt_status;
172 sigaction(SIGUSR1, &sigact, NULL);
173 sigaction(SIGALRM, &sigact, NULL);
174 sigact.sa_handler = change_status_width;
175 sigaction(SIGQUIT, &sigact, NULL);
176 sigact.sa_handler = change_status_timer;
177 sigaction(SIGUSR2, &sigact, NULL);
178 sigact.sa_handler = exit_sigterm;
179 sigaction(SIGINT, &sigact, NULL);
180 sigaction(SIGTERM, &sigact, NULL);
181 sigact.sa_handler = handle_sigtstp;
182 sigaction(SIGTSTP, &sigact, NULL);
183 memset(&sigact, 0, sizeof(struct sigaction));
185 tfc_getcurtime(&delta_time);
187 if (sksum_hashlist_file) {
189 char *s, *d, *t, *shash, *fname;
190 int failed = 0, totaltested = 0;
192 if (!strcmp(sksum_hashlist_file, "-")) f = stdin;
193 else f = fopen(sksum_hashlist_file, "r");
194 if (!f) xerror(NO, NO, YES, "%s", sksum_hashlist_file);
197 memset(sksblk, 0, sizeof(sksblk));
198 if (xfgets(sksblk, sizeof(sksblk), f) != YES) break;
200 s = d = sksblk; t = NULL;
201 shash = fname = NULL;
202 while ((s = strtok_r(d, "\t", &t))) {
205 if (!shash) shash = s;
206 else if (shash && !fname) fname = s;
209 if (!shash || !fname) {
210 xerror(YES, NO, YES, "invalid string %s", sksblk);
215 s = strchr(shash, ' ');
216 if (s && s[1] == ' ') *s = 0;
218 fd = open(fname, O_RDONLY | O_LARGEFILE);
220 xerror(YES, NO, YES, "%s", fname);
225 if (status_timer) setup_next_alarm(status_timer);
226 if (skeinfd(hash, bits, mackey_opt ? mackey : NULL, fd, iseek, maxlen) != YES) {
227 xerror(YES, NO, YES, "%s", fname);
232 if (sksum_turns > 1) {
234 for (y = 0; y < sksum_turns; y++)
235 skein(hash, bits, mackey_opt ? mackey : NULL, hash, TF_FROM_BITS(bits));
237 if (isbase64(shash)) base64_decode(tmp, sizeof(tmp), shash, strlen(shash));
238 else hex2bin(tmp, shash);
240 if (!memcmp(hash, tmp, TF_FROM_BITS(bits))) {
241 tfc_say("%s: OK", fname);
244 tfc_say("%s: FAILED", fname);
247 memset(tmp, 0, sizeof(tmp));
248 memset(sksblk, 0, sizeof(sksblk));
254 tfc_esay("%s: WARNING: %u of %u computed checksums did NOT match",
255 progname, failed, totaltested);
261 for (xx = 0; fargv[xx]; xx++);
268 for (x = 0; fargv[x] && xx; x++) {
269 if (!strcmp(fargv[x], "-")) fd = 0;
270 else fd = open(fargv[x], O_RDONLY | O_LARGEFILE);
272 xerror(YES, NO, YES, "%s", fargv[x]);
277 _dohash: if (status_timer) setup_next_alarm(status_timer);
278 if (skeinfd(hash, bits, mackey_opt ? mackey : NULL, fd, iseek, maxlen) != YES) {
279 xerror(YES, NO, YES, "%s", fargv[x]);
284 if (sksum_turns > 1) {
286 for (y = 0; y < sksum_turns; y++) skein(hash, bits, mackey_opt ? mackey : NULL, hash, TF_FROM_BITS(bits));
288 if (do_outfmt == TFC_OUTFMT_B64) tfc_printbase64(stdout, hash, TF_FROM_BITS(bits), 0);
289 else if (do_outfmt == TFC_OUTFMT_RAW) xwrite(1, hash, TF_FROM_BITS(bits));
290 else mhexdump(hash, TF_FROM_BITS(bits), TF_FROM_BITS(bits), 0);
291 if (do_outfmt != TFC_OUTFMT_RAW) {
292 if (quiet == NO || xx > 1) tfc_say("\t%s", fargv[x] ? fargv[x] : "-");
297 memset(hash, 0, SKEIN_DIGEST_SIZE);