CryptoPkg: Add new hash algorithm ParallelHash256HashAll in BaseCryptLib.

REF: https://bugzilla.tianocore.org/show_bug.cgi?id=3596

Parallel hash function ParallelHash256HashAll, as defined in NIST's
Special Publication 800-185, published December 2016. It utilizes
multi-process to calculate the digest.

Passed CI test.
Onprotocol version code passed test.

Cc: Jiewen Yao <jiewen.yao@intel.com>
Cc: Jian J Wang <jian.j.wang@intel.com>
Cc: Xiaoyu Lu <xiaoyu1.lu@intel.com>
Cc: Guomin Jiang <guomin.jiang@intel.com>
Cc: Siyuan Fu <siyuan.fu@intel.com>

Signed-off-by: Zhihao Li <zhihao.li@intel.com>
Reviewed-by: Jiewen Yao <jiewen.yao@intel.com>

1 files changed, 119 insertions, 2 deletions

diff --git a/CryptoPkg/Driver/Crypto.c b/CryptoPkg/Driver/Crypto.c
index d5d6aa8e58..76cb9f4da0 100644
--- a/CryptoPkg/Driver/Crypto.c
+++ b/CryptoPkg/Driver/Crypto.c
@@ -3,7 +3,7 @@
   from BaseCryptLib and TlsLib.

 

   Copyright (C) Microsoft Corporation. All rights reserved.

-  Copyright (c) 2019 - 2020, Intel Corporation. All rights reserved.<BR>

+  Copyright (c) 2019 - 2022, Intel Corporation. All rights reserved.<BR>

   SPDX-License-Identifier: BSD-2-Clause-Patent

 

 **/

@@ -4470,6 +4470,118 @@ CryptoServiceTlsGetCertRevocationList (
   return CALL_BASECRYPTLIB (TlsGet.Services.CertRevocationList, TlsGetCertRevocationList, (Data, DataSize), EFI_UNSUPPORTED);

 }

 

+/**

+  Carries out the RSA-SSA signature generation with EMSA-PSS encoding scheme.

+

+  This function carries out the RSA-SSA signature generation with EMSA-PSS encoding scheme defined in

+  RFC 8017.

+  Mask generation function is the same as the message digest algorithm.

+  If the Signature buffer is too small to hold the contents of signature, FALSE

+  is returned and SigSize is set to the required buffer size to obtain the signature.

+

+  If RsaContext is NULL, then return FALSE.

+  If Message is NULL, then return FALSE.

+  If MsgSize is zero or > INT_MAX, then return FALSE.

+  If DigestLen is NOT 32, 48 or 64, return FALSE.

+  If SaltLen is not equal to DigestLen, then return FALSE.

+  If SigSize is large enough but Signature is NULL, then return FALSE.

+  If this interface is not supported, then return FALSE.

+

+  @param[in]      RsaContext   Pointer to RSA context for signature generation.

+  @param[in]      Message      Pointer to octet message to be signed.

+  @param[in]      MsgSize      Size of the message in bytes.

+  @param[in]      DigestLen    Length of the digest in bytes to be used for RSA signature operation.

+  @param[in]      SaltLen      Length of the salt in bytes to be used for PSS encoding.

+  @param[out]     Signature    Pointer to buffer to receive RSA PSS signature.

+  @param[in, out] SigSize      On input, the size of Signature buffer in bytes.

+                               On output, the size of data returned in Signature buffer in bytes.

+

+  @retval  TRUE   Signature successfully generated in RSASSA-PSS.

+  @retval  FALSE  Signature generation failed.

+  @retval  FALSE  SigSize is too small.

+  @retval  FALSE  This interface is not supported.

+

+**/

+BOOLEAN

+EFIAPI

+CryptoServiceRsaPssSign (

+  IN      VOID         *RsaContext,

+  IN      CONST UINT8  *Message,

+  IN      UINTN        MsgSize,

+  IN      UINT16       DigestLen,

+  IN      UINT16       SaltLen,

+  OUT     UINT8        *Signature,

+  IN OUT  UINTN        *SigSize

+  )

+{

+  return CALL_BASECRYPTLIB (RsaPss.Services.Sign, RsaPssSign, (RsaContext, Message, MsgSize, DigestLen, SaltLen, Signature, SigSize), FALSE);

+}

+

+/**

+  Verifies the RSA signature with RSASSA-PSS signature scheme defined in RFC 8017.

+  Implementation determines salt length automatically from the signature encoding.

+  Mask generation function is the same as the message digest algorithm.

+  Salt length should be equal to digest length.

+

+  @param[in]  RsaContext      Pointer to RSA context for signature verification.

+  @param[in]  Message         Pointer to octet message to be verified.

+  @param[in]  MsgSize         Size of the message in bytes.

+  @param[in]  Signature       Pointer to RSASSA-PSS signature to be verified.

+  @param[in]  SigSize         Size of signature in bytes.

+  @param[in]  DigestLen       Length of digest for RSA operation.

+  @param[in]  SaltLen         Salt length for PSS encoding.

+

+  @retval  TRUE   Valid signature encoded in RSASSA-PSS.

+  @retval  FALSE  Invalid signature or invalid RSA context.

+

+**/

+BOOLEAN

+EFIAPI

+CryptoServiceRsaPssVerify (

+  IN  VOID         *RsaContext,

+  IN  CONST UINT8  *Message,

+  IN  UINTN        MsgSize,

+  IN  CONST UINT8  *Signature,

+  IN  UINTN        SigSize,

+  IN  UINT16       DigestLen,

+  IN  UINT16       SaltLen

+  )

+{

+  return CALL_BASECRYPTLIB (RsaPss.Services.Verify, RsaPssVerify, (RsaContext, Message, MsgSize, Signature, SigSize, DigestLen, SaltLen), FALSE);

+}

+

+/**

+  Parallel hash function ParallelHash256, as defined in NIST's Special Publication 800-185,

+  published December 2016.

+

+  @param[in]   Input            Pointer to the input message (X).

+  @param[in]   InputByteLen     The number(>0) of input bytes provided for the input data.

+  @param[in]   BlockSize        The size of each block (B).

+  @param[out]  Output           Pointer to the output buffer.

+  @param[in]   OutputByteLen    The desired number of output bytes (L).

+  @param[in]   Customization    Pointer to the customization string (S).

+  @param[in]   CustomByteLen    The length of the customization string in bytes.

+

+  @retval TRUE   ParallelHash256 digest computation succeeded.

+  @retval FALSE  ParallelHash256 digest computation failed.

+  @retval FALSE  This interface is not supported.

+

+**/

+BOOLEAN

+EFIAPI

+CryptoServiceParallelHash256HashAll (

+  IN CONST VOID   *Input,

+  IN       UINTN  InputByteLen,

+  IN       UINTN  BlockSize,

+  OUT      VOID   *Output,

+  IN       UINTN  OutputByteLen,

+  IN CONST VOID   *Customization,

+  IN       UINTN  CustomByteLen

+  )

+{

+  return CALL_BASECRYPTLIB (ParallelHash.Services.HashAll, ParallelHash256HashAll, (Input, InputByteLen, BlockSize, Output, OutputByteLen, Customization, CustomByteLen), FALSE);

+}

+

 const EDKII_CRYPTO_PROTOCOL  mEdkiiCrypto = {

   /// Version

   CryptoServiceGetCryptoVersion,

@@ -4670,5 +4782,10 @@ const EDKII_CRYPTO_PROTOCOL  mEdkiiCrypto = {
   CryptoServiceTlsGetCaCertificate,

   CryptoServiceTlsGetHostPublicCert,

   CryptoServiceTlsGetHostPrivateKey,

-  CryptoServiceTlsGetCertRevocationList

+  CryptoServiceTlsGetCertRevocationList,

+  /// RSA PSS

+  CryptoServiceRsaPssSign,

+  CryptoServiceRsaPssVerify,

+  /// Parallel hash

+  CryptoServiceParallelHash256HashAll

 };