Change TLS session encryption to use AES-256/GCM instead of CBC+HMAC

3 files changed, 0 insertions, 190 deletions

diff --git a/src/lib/constructs/cryptobox_psk/cryptobox_psk.cpp b/src/lib/constructs/cryptobox_psk/cryptobox_psk.cpp
deleted file mode 100644
index 8fb3a9aae..000000000
--- a/src/lib/constructs/cryptobox_psk/cryptobox_psk.cpp
+++ /dev/null
@@ -1,133 +0,0 @@
-/*
-* Cryptobox Message Routines
-* (C) 2013 Jack Lloyd
-*
-* Distributed under the terms of the Botan license
-*/
-
-#include <botan/cryptobox_psk.h>
-#include <botan/pipe.h>
-#include <botan/lookup.h>
-#include <botan/loadstor.h>
-
-namespace Botan {
-
-namespace CryptoBox {
-
-namespace {
-
-const u32bit CRYPTOBOX_MAGIC = 0x571B0E4F;
-const std::string CRYPTOBOX_CIPHER = "AES-256/CBC";
-const std::string CRYPTOBOX_MAC = "HMAC(SHA-256)";
-const std::string CRYPTOBOX_KDF = "KDF2(SHA-256)";
-
-const size_t MAGIC_LENGTH = 4;
-const size_t KEY_KDF_SALT_LENGTH = 10;
-const size_t MAC_KEY_LENGTH = 32;
-const size_t CIPHER_KEY_LENGTH = 32;
-const size_t CIPHER_IV_LENGTH = 16;
-const size_t MAC_OUTPUT_LENGTH = 32;
-
-}
-
-std::vector<byte> encrypt(const byte input[], size_t input_len,
-                          const SymmetricKey& master_key,
-                          RandomNumberGenerator& rng)
-   {
-   std::unique_ptr<KDF> kdf(get_kdf(CRYPTOBOX_KDF));
-
-   const secure_vector<byte> cipher_key_salt =
-      rng.random_vec(KEY_KDF_SALT_LENGTH);
-
-   const secure_vector<byte> mac_key_salt =
-      rng.random_vec(KEY_KDF_SALT_LENGTH);
-
-   SymmetricKey cipher_key =
-      kdf->derive_key(CIPHER_KEY_LENGTH,
-                      master_key.bits_of(),
-                      cipher_key_salt);
-
-   SymmetricKey mac_key =
-      kdf->derive_key(MAC_KEY_LENGTH,
-                      master_key.bits_of(),
-                      mac_key_salt);
-
-   InitializationVector cipher_iv(rng, 16);
-
-   std::unique_ptr<MessageAuthenticationCode> mac(get_mac(CRYPTOBOX_MAC));
-   mac->set_key(mac_key);
-
-   Pipe pipe(get_cipher(CRYPTOBOX_CIPHER, cipher_key, cipher_iv, ENCRYPTION));
-   pipe.process_msg(input, input_len);
-   secure_vector<byte> ctext = pipe.read_all(0);
-
-   std::vector<byte> out(MAGIC_LENGTH);
-   store_be(CRYPTOBOX_MAGIC, &out[0]);
-   out += cipher_key_salt;
-   out += mac_key_salt;
-   out += cipher_iv.bits_of();
-   out += ctext;
-
-   mac->update(out);
-
-   out += mac->final();
-   return out;
-   }
-
-secure_vector<byte> decrypt(const byte input[], size_t input_len,
-                            const SymmetricKey& master_key)
-   {
-   const size_t MIN_CTEXT_SIZE = 16; // due to using CBC with padding
-
-   const size_t MIN_POSSIBLE_LENGTH =
-      MAGIC_LENGTH +
-      2 * KEY_KDF_SALT_LENGTH +
-      CIPHER_IV_LENGTH +
-      MIN_CTEXT_SIZE +
-      MAC_OUTPUT_LENGTH;
-
-   if(input_len < MIN_POSSIBLE_LENGTH)
-      throw Decoding_Error("Encrypted input too short to be valid");
-
-   if(load_be<u32bit>(input, 0) != CRYPTOBOX_MAGIC)
-      throw Decoding_Error("Unknown header value in cryptobox");
-
-   std::unique_ptr<KDF> kdf(get_kdf(CRYPTOBOX_KDF));
-
-   const byte* cipher_key_salt = &input[MAGIC_LENGTH];
-
-   const byte* mac_key_salt = &input[MAGIC_LENGTH + KEY_KDF_SALT_LENGTH];
-
-   SymmetricKey mac_key = kdf->derive_key(MAC_KEY_LENGTH,
-                                          master_key.bits_of(),
-                                          mac_key_salt,
-                                          KEY_KDF_SALT_LENGTH);
-
-   std::unique_ptr<MessageAuthenticationCode> mac(get_mac(CRYPTOBOX_MAC));
-   mac->set_key(mac_key);
-
-   mac->update(&input[0], input_len - MAC_OUTPUT_LENGTH);
-   secure_vector<byte> computed_mac = mac->final();
-
-   if(!same_mem(&input[input_len - MAC_OUTPUT_LENGTH], &computed_mac[0], computed_mac.size()))
-      throw Decoding_Error("MAC verification failed");
-
-   SymmetricKey cipher_key =
-      kdf->derive_key(CIPHER_KEY_LENGTH,
-                      master_key.bits_of(),
-                      cipher_key_salt, KEY_KDF_SALT_LENGTH);
-
-   InitializationVector cipher_iv(&input[MAGIC_LENGTH+2*KEY_KDF_SALT_LENGTH],
-                                  CIPHER_IV_LENGTH);
-
-   const size_t CTEXT_OFFSET = MAGIC_LENGTH + 2 * KEY_KDF_SALT_LENGTH + CIPHER_IV_LENGTH;
-
-   Pipe pipe(get_cipher(CRYPTOBOX_CIPHER, cipher_key, cipher_iv, DECRYPTION));
-   pipe.process_msg(&input[CTEXT_OFFSET],
-                    input_len - (MAC_OUTPUT_LENGTH + CTEXT_OFFSET));
-   return pipe.read_all();
-   }
-
-}
-
-}
diff --git a/src/lib/constructs/cryptobox_psk/cryptobox_psk.h b/src/lib/constructs/cryptobox_psk/cryptobox_psk.h
deleted file mode 100644
index 2f16ee461..000000000
--- a/src/lib/constructs/cryptobox_psk/cryptobox_psk.h
+++ /dev/null
@@ -1,47 +0,0 @@
-/*
-* Cryptobox Message Routines
-* (C) 2009,2013 Jack Lloyd
-*
-* Distributed under the terms of the Botan license
-*/
-
-#ifndef BOTAN_CRYPTOBOX_PSK_H__
-#define BOTAN_CRYPTOBOX_PSK_H__
-
-#include <string>
-#include <botan/rng.h>
-#include <botan/symkey.h>
-
-namespace Botan {
-
-/**
-* This namespace holds various high-level crypto functions
-*/
-namespace CryptoBox {
-
-/**
-* Encrypt a message using a shared secret key
-* @param input the input data
-* @param input_len the length of input in bytes
-* @param key the key used to encrypt the message
-* @param rng a ref to a random number generator, such as AutoSeeded_RNG
-*/
-BOTAN_DLL std::vector<byte> encrypt(const byte input[], size_t input_len,
-                                    const SymmetricKey& key,
-                                    RandomNumberGenerator& rng);
-
-/**
-* Encrypt a message using a shared secret key
-* @param input the input data
-* @param input_len the length of input in bytes
-* @param key the key used to encrypt the message
-* @param rng a ref to a random number generator, such as AutoSeeded_RNG
-*/
-BOTAN_DLL secure_vector<byte> decrypt(const byte input[], size_t input_len,
-                                      const SymmetricKey& key);
-
-}
-
-}
-
-#endif
diff --git a/src/lib/constructs/cryptobox_psk/info.txt b/src/lib/constructs/cryptobox_psk/info.txt
deleted file mode 100644
index 03f7525f5..000000000
--- a/src/lib/constructs/cryptobox_psk/info.txt
+++ /dev/null
@@ -1,10 +0,0 @@
-define CRYPTOBOX_PSK 20131128
-
-<requires>
-aes
-cbc
-hmac
-kdf2
-rng
-sha2_64
-</requires>