2 * tfcrypt -- high security Threefish encryption tool.
4 * tfcrypt is copyrighted:
5 * Copyright (C) 2012-2018 Andrey Rys. All rights reserved.
7 * tfcrypt is licensed to you under the terms of std. MIT/X11 license:
9 * Permission is hereby granted, free of charge, to any person obtaining
10 * a copy of this software and associated documentation files (the
11 * "Software"), to deal in the Software without restriction, including
12 * without limitation the rights to use, copy, modify, merge, publish,
13 * distribute, sublicense, and/or sell copies of the Software, and to
14 * permit persons to whom the Software is furnished to do so, subject to
15 * the following conditions:
17 * The above copyright notice and this permission notice shall be
18 * included in all copies or substantial portions of the Software.
20 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
21 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
22 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
23 * IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
24 * CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
25 * TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
26 * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
32 void skein(void *hash, size_t bits, const void *key, const void *data, size_t szdata)
36 if (key) skein_init_key(&sk, key, bits);
37 else skein_init(&sk, bits);
38 skein_update(&sk, data, szdata);
39 skein_final(hash, &sk);
42 void tf_key_tweak_compat(void *key)
44 TF_UNIT_TYPE *ukey = key, c = THREEFISH_CONST;
47 for (x = 0; x < TF_NR_BLOCK_UNITS; x++) c ^= ukey[x];
49 ukey[TF_TWEAK_WORD3] = ukey[TF_TWEAK_WORD1] ^ ukey[TF_TWEAK_WORD2];
52 tfc_yesno skeinfd(void *hash, size_t bits, const void *key, int fd, tfc_fsize offset, tfc_fsize readto)
54 static tfc_byte skblk[TFC_BLKSIZE];
58 size_t ldone, lblock, lrem, lio;
62 if (ctr_mode == TFC_MODE_SKSUM) total_processed_src = total_processed_dst = delta_processed = 0;
64 if (fd == -1) goto _fail;
66 if (readto == NOFSIZE) {
67 readto = tfc_fdsize(fd);
68 if (readto == NOFSIZE) goto _fail;
70 if (offset != 0 && offset != NOFSIZE) {
71 if (lseek(fd, (off_t)offset, SEEK_SET) == -1) goto _fail;
75 if (key) skein_init_key(&sk, key, bits);
76 else skein_init(&sk, bits);
83 lblock = lrem = blk_len_adj(readto, total, TFC_BLKSIZE);
85 if (error_action == TFC_ERRACT_SYNC) rdpos = tfc_fdgetpos(fd);
86 _again: lio = xread(fd, pblk, lrem);
87 if (lio == 0) stop = YES;
88 if (lio != NOSIZE) ldone += lio;
90 if (errno != EIO && catch_all_errors != YES) goto _fail;
91 switch (error_action) {
92 case TFC_ERRACT_CONT: xerror(YES, NO, NO, "skeinfd: %d", fd); goto _again; break;
94 case TFC_ERRACT_LSYNC:
95 xerror(YES, NO, NO, "skeinfd: %d", fd);
96 lio = lrem = ldone = lblock;
98 memset(skblk, 0, lio);
99 if (rdpos == NOFSIZE) lseek(fd, lio, SEEK_CUR);
100 else lseek(fd, rdpos + lio, SEEK_SET);
102 default: goto _fail; break;
105 if (lio && lio < lrem) {
111 if (ctr_mode == TFC_MODE_SKSUM) {
112 total_processed_src = total_processed_dst = total;
113 delta_processed += ldone;
115 skein_update(&sk, skblk, ldone);
116 if (readto != NOFSIZE && total >= readto) break;
119 if (fd > 2) lseek(fd, (off_t)readto, SEEK_SET);
121 skein_final(hash, &sk);
122 if (ctr_mode == TFC_MODE_SKSUM) {
123 if (verbose || status_timer) print_crypt_status(-1);
124 total_processed_src = total_processed_dst = delta_processed = 0;
126 memset(skblk, 0, TFC_BLKSIZE);
130 memset(&sk, 0, sizeof(struct skein));
131 memset(hash, 0, SKEIN_DIGEST_SIZE);
132 memset(skblk, 0, TFC_BLKSIZE);
136 void do_sksum(char *spec, char **fargv)
138 static char sksblk[TFC_BLKSIZE / 2], tmp[TFC_TMPSIZE];
139 tfc_byte hash[SKEIN_DIGEST_SIZE];
144 if (macbits < TF_MAX_BITS) {
149 if (!strcmp(spec, "sksum")) {
154 if ((sscanf(spec, "sk%zusum", &bits) < 1)) {
158 if (bits < 8 || bits > TF_MAX_BITS) {
160 "%u: invalid bits number specified!\n"
161 "tfcrypt supports from 8 to %u bits, divisible by 8.",
162 bits, TFC_U(TF_MAX_BITS));
165 if (!bits || bits % 8) {
167 "%u: invalid bits number specified!\n"
168 "Number of bits must start from 8 and be divisible by 8.",
169 bits, TFC_U(TF_MAX_BITS));
173 do_edcrypt = TFC_DO_PLAIN;
174 ctr_mode = TFC_MODE_SKSUM;
176 for (x = 1; x < NSIG; x++) signal(x, SIG_IGN);
177 memset(&sigact, 0, sizeof(sigact));
178 sigact.sa_flags = SA_RESTART;
179 sigact.sa_handler = print_crypt_status;
180 sigaction(SIGUSR1, &sigact, NULL);
181 sigaction(SIGTSTP, &sigact, NULL);
182 sigaction(SIGALRM, &sigact, NULL);
183 sigact.sa_handler = change_status_width;
184 sigaction(SIGQUIT, &sigact, NULL);
185 sigact.sa_handler = change_status_timer;
186 sigaction(SIGUSR2, &sigact, NULL);
187 sigact.sa_handler = exit_sigterm;
188 sigaction(SIGINT, &sigact, NULL);
189 sigaction(SIGTERM, &sigact, NULL);
190 memset(&sigact, 0, sizeof(struct sigaction));
192 tfc_getcurtime(&delta_time);
194 if (sksum_hashlist_file) {
196 char *s, *d, *t, *shash, *fname;
197 int failed = 0, totaltested = 0;
199 if (!strcmp(sksum_hashlist_file, "-")) f = stdin;
200 else f = fopen(sksum_hashlist_file, "r");
201 if (!f) xerror(NO, NO, YES, "%s", sksum_hashlist_file);
204 memset(sksblk, 0, sizeof(sksblk));
205 x = xfgets(sksblk, sizeof(sksblk), f);
208 s = d = sksblk; t = NULL;
209 shash = fname = NULL;
210 while ((s = strtok_r(d, "\t", &t))) {
213 if (!shash) shash = s;
214 else if (shash && !fname) fname = s;
217 if (!shash || !fname) {
218 xerror(YES, NO, YES, "invalid string %s", sksblk);
223 s = strchr(shash, ' ');
224 if (s && s[1] == ' ') *s = 0;
226 fd = open(fname, O_RDONLY | O_LARGEFILE);
228 xerror(YES, NO, YES, "%s", fname);
233 if (status_timer) setup_next_alarm(status_timer);
234 if (skeinfd(hash, bits, mackey_opt ? mackey : NULL, fd, iseek, maxlen) != YES) {
235 xerror(YES, NO, YES, "%s", fname);
240 if (sksum_turns > 1) {
242 for (y = 0; y < sksum_turns; y++)
243 skein(hash, bits, mackey_opt ? mackey : NULL, hash, TF_FROM_BITS(bits));
245 if (isbase64(shash)) base64_decode(tmp, sizeof(tmp), shash, strlen(shash));
246 else hex2bin(tmp, shash);
248 if (!memcmp(hash, tmp, TF_FROM_BITS(bits))) {
249 tfc_say("%s: OK", fname);
252 tfc_say("%s: FAILED", fname);
255 memset(tmp, 0, sizeof(tmp));
256 memset(sksblk, 0, sizeof(sksblk));
262 tfc_esay("%s: WARNING: %u of %u computed checksums did NOT match",
263 progname, failed, totaltested);
269 for (xx = 0; fargv[xx]; xx++);
276 for (x = 0; fargv[x] && xx; x++) {
277 if (!strcmp(fargv[x], "-")) fd = 0;
278 else fd = open(fargv[x], O_RDONLY | O_LARGEFILE);
280 xerror(YES, NO, YES, "%s", fargv[x]);
285 _dohash: if (status_timer) setup_next_alarm(status_timer);
286 if (skeinfd(hash, bits, mackey_opt ? mackey : NULL, fd, iseek, maxlen) != YES) {
287 xerror(YES, NO, YES, "%s", fargv[x]);
292 if (sksum_turns > 1) {
294 for (y = 0; y < sksum_turns; y++) skein(hash, bits, mackey_opt ? mackey : NULL, hash, TF_FROM_BITS(bits));
296 if (do_outfmt == TFC_OUTFMT_B64) tfc_printbase64(stdout, hash, TF_FROM_BITS(bits), 0);
297 else if (do_outfmt == TFC_OUTFMT_RAW) xwrite(1, hash, TF_FROM_BITS(bits));
298 else mhexdump(hash, TF_FROM_BITS(bits), TF_FROM_BITS(bits), 0);
299 if (do_outfmt != TFC_OUTFMT_RAW) {
300 if (quiet == NO || xx > 1) tfc_say("\t%s", fargv[x] ? fargv[x] : "-");
305 memset(hash, 0, SKEIN_DIGEST_SIZE);