#pragma once
/*
* This file is part of fastboot 3DS
* Copyright (C) 2017 derrek, profi200
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#include "types.h"
//////////////////////////////////
// AES //
//////////////////////////////////
#define AES_MAX_BLOCKS (0xFFFF)
#define AES_WRITE_FIFO_COUNT (REG_AESCNT & 0x1F)
#define AES_READ_FIFO_COUNT (REG_AESCNT & 0x3E0)
#define AES_FLUSH_READ_FIFO (1u<<10)
#define AES_FLUSH_WRITE_FIFO (1u<<11)
#define AES_MAC_SIZE(n) (((n - 2) / 2)<<16)
#define AES_PASS_PAYLOARD (1u<<19) // Passes the associated data to REG_AESRDFIFO
#define AES_MAC_SRC_REG (1u<<20)
#define AES_IS_MAC_VALID ((bool)(REG_AESCNT>>21 & 1u))
#define AES_OUTPUT_BIG (1u)
#define AES_OUTPUT_LITTLE (0u)
#define AES_INPUT_BIG (1u)
#define AES_INPUT_LITTLE (0u)
#define AES_OUTPUT_NORMAL (4u)
#define AES_OUTPUT_REVERSED (0u)
#define AES_INPUT_NORMAL (4u)
#define AES_INPUT_REVERSED (0u)
#define AES_UPDATE_KEYSLOT (1u<<26)
#define AES_IRQ_ENABLE (1u<<30)
#define AES_ENABLE (1u<<31)
#define AES_MODE_CCM_DECRYPT (0u)
#define AES_MODE_CCM_ENCRYPT (1u<<27)
#define AES_MODE_CTR (2u<<27)
#define AES_MODE_CBC_DECRYPT (4u<<27)
#define AES_MODE_CBC_ENCRYPT (5u<<27)
#define AES_MODE_ECB_DECRYPT (6u<<27)
#define AES_MODE_ECB_ENCRYPT (7u<<27)
typedef enum
{
AES_KEY_NORMAL = 0,
AES_KEY_X = 1,
AES_KEY_Y = 2,
} AesKeyType;
typedef struct
{
u32 ctrIvNonceParams;
u32 ctrIvNonce[4];
u32 aesParams;
} AES_ctx;
/**
* @brief Initializes the AES hardware and the NDMA channels used by it.
*/
void AES_init(void);
/**
* @brief Deinits AES to workaround a K9L bug.
*/
void AES_deinit(void);
/**
* @brief Sets a AES key in the specified keyslot.
*
* @param[in] keyslot The keyslot this key will be set for.
* @param[in] type The key type. Can be AES_KEY_NORMAL/X/Y.
* @param[in] orderEndianess Word order and endianess bitmask.
* @param[in] twlScrambler Set to true to use the TWL keyscrambler for keyslots > 0x03.
* @param[in] key Pointer to 128-bit AES key data.
*/
void AES_setKey(u8 keyslot, AesKeyType type, u8 orderEndianess, bool twlScrambler, const u32 key[4]);
/**
* @brief Selects the given keyslot for all following crypto operations.
*
* @param[in] keyslot The keyslot to select.
*/
void AES_selectKeyslot(u8 keyslot);
/**
* @brief Copies the given nonce into internal state.
*
* @param ctx Pointer to AES_ctx (AES context).
* @param[in] orderEndianess Word order and endianess bitmask.
* @param[in] nonce Pointer to the nonce data.
*/
void AES_setNonce(AES_ctx *const ctx, u8 orderEndianess, const u32 nonce[3]);
/**
* @brief Copies the given counter/initialization vector into internal state.
*
* @param ctx Pointer to AES_ctx (AES context).
* @param[in] orderEndianess Word order and endianess bitmask.
* @param[in] ctrIv Pointer to the counter/initialization vector data.
*/
void AES_setCtrIv(AES_ctx *const ctx, u8 orderEndianess, const u32 ctrIv[4]);
/**
* @brief Increments the internal counter with the given value (CTR mode).
*
* @param ctr Pointer to the counter data.
* @param[in] val Value to increment the counter with.
*/
void AES_addCounter(u32 ctr[4], u32 val);
/**
* @brief Decrements the internal counter with the given value (CTR mode).
*
* @param ctr Pointer to the counter data.
* @param[in] val Value to decrement the counter with.
*/
void AES_subCounter(u32 ctr[4], u32 val);
/**
* @brief Sets params in the AES context for all following crypto operations.
*
* @param ctx Pointer to AES_ctx (AES context).
* @param[in] inEndianessOrder Input endianess and word order bitmask.
* @param[in] outEndianessOrder Output endianess and word order bitmask.
*/
void AES_setCryptParams(AES_ctx *const ctx, u8 inEndianessOrder, u8 outEndianessOrder);
/**
* @brief En-/decrypts data with AES CTR.
*
* @param ctx Pointer to AES_ctx (AES context).
* @param[in] in In data pointer. Can be the same as out.
* @param out Out data pointer. Can be the same as in.
* @param[in] blocks Number of blocks to process. 1 block is 16 bytes.
* @param[in] dma Set to true to enable DMA.
*/
void AES_ctr(AES_ctx *const ctx, const u32 *in, u32 *out, u32 blocks, bool dma);
/**
* @brief En-/decrypts data with AES CBC.
* @brief Note: With DMA the output buffer must be invalidated
* @brief after this function, not before.
*
* @param ctx Pointer to AES_ctx (AES context).
* @param[in] in In data pointer. Can be the same as out.
* @param out Out data pointer. Can be the same as in.
* @param[in] blocks Number of blocks to process. 1 block is 16 bytes.
* @param[in] enc Set to true to encrypt and false to decrypt.
* @param[in] dma Set to true to enable DMA.
*/
//void AES_cbc(AES_ctx *const ctx, const u32 *in, u32 *out, u32 blocks, bool enc, bool dma);
/**
* @brief En-/decrypts data with AES ECB.
*
* @param ctx Pointer to AES_ctx (AES context).
* @param[in] in In data pointer. Can be the same as out.
* @param out Out data pointer. Can be the same as in.
* @param[in] blocks Number of blocks to process. 1 block is 16 bytes.
* @param[in] enc Set to true to encrypt and false to decrypt.
* @param[in] dma Set to true to enable DMA.
*/
void AES_ecb(AES_ctx *const ctx, const u32 *in, u32 *out, u32 blocks, bool enc, bool dma);
/**
* @brief En-/decrypts data with AES CCM.
* @brief Note: The AES hardware implements this in a non-standard way
* @brief limiting it to 1 nonce for 1 MB.
*
* @param ctx Pointer to AES_ctx (AES context).
* @param[in] in In data pointer. Can be the same as out.
* @param out Out data pointer. Can be the same as in.
* @param[in] macSize The AES MAC size in bytes.
* @param mac Pointer to in/out AES MAC. The MAC must/will be padded
* with zeros (non-standard).
* @param[in] blocks Number of blocks to process. 1 block is 16 bytes.
* @param[in] enc Set to true to encrypt and false to decrypt.
*
* @return Returns true in decryption mode if the AES MAC is valid. Otherwise true.
*/
bool AES_ccm(const AES_ctx *const ctx, const u32 *const in, u32 *const out, u32 macSize,
u32 mac[4], u16 blocks, bool enc);
//////////////////////////////////
// SHA //
//////////////////////////////////
#define SHA_ENABLE (1u) // Also used as busy flag
#define SHA_PAD_INPUT (1u<<1)
#define SHA_INPUT_BIG (1u<<3)
#define SHA_INPUT_LITTLE (0u)
#define SHA_OUTPUT_BIG (SHA_INPUT_BIG)
#define SHA_OUTPUT_LITTLE (SHA_INPUT_LITTLE)
#define SHA_MODE_256 (0u)
#define SHA_MODE_224 (1u<<4)
#define SHA_MODE_1 (2u<<4)
/**
* @brief Sets input mode, endianess and starts the hash operation.
*
* @param[in] params Mode and input endianess bitmask.
*/
void SHA_start(u8 params);
/**
* @brief Hashes the data pointed to.
*
* @param[in] data Pointer to data to hash.
* @param[in] size Size of the data to hash.
*/
void SHA_update(const u32 *data, u32 size);
/**
* @brief Generates the final hash.
*
* @param hash Pointer to memory to copy the hash to.
* @param[in] endianess Endianess bitmask for the hash.
*/
void SHA_finish(u32 *const hash, u8 endianess);
/**
* @brief Hashes a single block of data and outputs the hash.
*
* @param[in] data Pointer to data to hash.
* @param[in] size Size of the data to hash.
* @param hash Pointer to memory to copy the hash to.
* @param[in] params Mode and input endianess bitmask.
* @param[in] hashEndianess Endianess bitmask for the hash.
*/
void sha(const u32 *data, u32 size, u32 *const hash, u8 params, u8 hashEndianess);
//////////////////////////////////
// RSA //
//////////////////////////////////
// REG_RSA_CNT
#define RSA_ENABLE (1u)
#define RSA_UNK_BIT1 (1u<<1)
#define RSA_KEYSLOT(k) ((k)<<4)
#define RSA_INPUT_BIG (1u<<8)
#define RSA_INPUT_LITTLE (0u)
#define RSA_INPUT_NORMAL (1u<<9)
#define RSA_INPUT_REVERSED (0u)
// RSA_SLOTCNT
#define RSA_KEY_STAT_SET (1u)
#define RSA_KEY_WR_PROT (1u<<1)
#define RSA_KEY_UNK_BIT31 (1u<<31)
// RSA_SLOTSIZE
#define RSA_SLOTSIZE_2048 (0x40u)
/**
* @brief Initializes the RSA hardware.
*/
void RSA_init(void);
/**
* @brief Selects the given keyslot for all following RSA operations.
*
* @param[in] keyslot The keyslot to select.
*/
void RSA_selectKeyslot(u8 keyslot);
/**
* @brief Sets a RSA modulus + exponent in the specified keyslot.
*
* @param[in] keyslot The keyslot this key will be set for.
* @param[in] mod Pointer to 2048-bit RSA modulus data.
* @param[in] exp The exponent to set.
*
* @return Returns true on success, false otherwise.
*/
bool RSA_setKey2048(u8 keyslot, const u8 *const mod, u32 exp);
/**
* @brief Decrypts a RSA 2048 signature.
*
* @param decSig Pointer to decrypted destination signature.
* @param[in] encSig Pointer to encrypted source signature.
*
* @return Returns true on success, false otherwise.
*/
bool RSA_decrypt2048(void *const decSig, const void *const encSig);
/**
* @brief Verifies a RSA 2048 SHA 256 signature.
* @brief Note: This function skips the ASN.1 data and is therefore not safe.
*
* @param[in] encSig Pointer to encrypted source signature.
* @param[in] data Pointer to the data to hash.
* @param[in] size The hash data size.
* @param[in] keyslot The RSA keyslot to use. Must be <4.
*
* @return Returns true if the signature is valid, false otherwise.
*/
bool RSA_verify2048(const u32 *const encSig, const u32 *const data, u32 size, u8 keyslot);
