aa92d0e676
- M0: libghostty SSH 终端（渲染/输入/连接）+ 白屏修复(OutputGate) + 会话状态机/自动重连 - M1: tsnet 用户态组网 + SSH-over-tsnet(fd 桥)，shell 级真机验证；R5(Go+gvisor+C+++Swift 同进程) retire - M1.5: tmux -CC 原生 tab（MVP） - 结构: packages/(TXCore·TXTransport), apps/TerminalX, vendor/(libghostty-spm/libssh2/mbedtls/tsnet-bridge), artifacts/ - 文档: CLAUDE.md + docs/HANDOFF.md（新会话入口） - 环境: 认证代理→依赖 vendor 本地化；Go 在 ~/.local/go；仅模拟器/未签名 - 待续: M2 mosh, tmux 多 pane, M4 安全(host key/SE) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
112 lines
3.2 KiB
C
112 lines
3.2 KiB
C
/**
|
|
* \file padlock.h
|
|
*
|
|
* \brief VIA PadLock ACE for HW encryption/decryption supported by some
|
|
* processors
|
|
*
|
|
* \warning These functions are only for internal use by other library
|
|
* functions; you must not call them directly.
|
|
*/
|
|
/*
|
|
* Copyright The Mbed TLS Contributors
|
|
* SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
|
|
*/
|
|
#ifndef MBEDTLS_PADLOCK_H
|
|
#define MBEDTLS_PADLOCK_H
|
|
|
|
#include "mbedtls/build_info.h"
|
|
|
|
#include "mbedtls/aes.h"
|
|
|
|
#define MBEDTLS_ERR_PADLOCK_DATA_MISALIGNED -0x0030 /**< Input data should be aligned. */
|
|
|
|
#if defined(__has_feature)
|
|
#if __has_feature(address_sanitizer)
|
|
#define MBEDTLS_HAVE_ASAN
|
|
#endif
|
|
#endif
|
|
|
|
/*
|
|
* - `padlock` is implements with GNUC assembly for x86 target.
|
|
* - Some versions of ASan result in errors about not enough registers.
|
|
*/
|
|
#if defined(MBEDTLS_PADLOCK_C) && \
|
|
defined(__GNUC__) && defined(MBEDTLS_ARCH_IS_X86) && \
|
|
defined(MBEDTLS_HAVE_ASM) && \
|
|
!defined(MBEDTLS_HAVE_ASAN)
|
|
|
|
#define MBEDTLS_VIA_PADLOCK_HAVE_CODE
|
|
|
|
#include <stdint.h>
|
|
|
|
#define MBEDTLS_PADLOCK_RNG 0x000C
|
|
#define MBEDTLS_PADLOCK_ACE 0x00C0
|
|
#define MBEDTLS_PADLOCK_PHE 0x0C00
|
|
#define MBEDTLS_PADLOCK_PMM 0x3000
|
|
|
|
#define MBEDTLS_PADLOCK_ALIGN16(x) (uint32_t *) (16 + ((int32_t) (x) & ~15))
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
/**
|
|
* \brief Internal PadLock detection routine
|
|
*
|
|
* \note This function is only for internal use by other library
|
|
* functions; you must not call it directly.
|
|
*
|
|
* \param feature The feature to detect
|
|
*
|
|
* \return non-zero if CPU has support for the feature, 0 otherwise
|
|
*/
|
|
int mbedtls_padlock_has_support(int feature);
|
|
|
|
/**
|
|
* \brief Internal PadLock AES-ECB block en(de)cryption
|
|
*
|
|
* \note This function is only for internal use by other library
|
|
* functions; you must not call it directly.
|
|
*
|
|
* \param ctx AES context
|
|
* \param mode MBEDTLS_AES_ENCRYPT or MBEDTLS_AES_DECRYPT
|
|
* \param input 16-byte input block
|
|
* \param output 16-byte output block
|
|
*
|
|
* \return 0 if success, 1 if operation failed
|
|
*/
|
|
int mbedtls_padlock_xcryptecb(mbedtls_aes_context *ctx,
|
|
int mode,
|
|
const unsigned char input[16],
|
|
unsigned char output[16]);
|
|
|
|
/**
|
|
* \brief Internal PadLock AES-CBC buffer en(de)cryption
|
|
*
|
|
* \note This function is only for internal use by other library
|
|
* functions; you must not call it directly.
|
|
*
|
|
* \param ctx AES context
|
|
* \param mode MBEDTLS_AES_ENCRYPT or MBEDTLS_AES_DECRYPT
|
|
* \param length length of the input data
|
|
* \param iv initialization vector (updated after use)
|
|
* \param input buffer holding the input data
|
|
* \param output buffer holding the output data
|
|
*
|
|
* \return 0 if success, 1 if operation failed
|
|
*/
|
|
int mbedtls_padlock_xcryptcbc(mbedtls_aes_context *ctx,
|
|
int mode,
|
|
size_t length,
|
|
unsigned char iv[16],
|
|
const unsigned char *input,
|
|
unsigned char *output);
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif /* HAVE_X86 */
|
|
|
|
#endif /* padlock.h */
|