1*e7b1675dSTing-Kang Chang // Copyright 2019 Google Inc.
2*e7b1675dSTing-Kang Chang //
3*e7b1675dSTing-Kang Chang // Licensed under the Apache License, Version 2.0 (the "License");
4*e7b1675dSTing-Kang Chang // you may not use this file except in compliance with the License.
5*e7b1675dSTing-Kang Chang // You may obtain a copy of the License at
6*e7b1675dSTing-Kang Chang //
7*e7b1675dSTing-Kang Chang // http://www.apache.org/licenses/LICENSE-2.0
8*e7b1675dSTing-Kang Chang //
9*e7b1675dSTing-Kang Chang // Unless required by applicable law or agreed to in writing, software
10*e7b1675dSTing-Kang Chang // distributed under the License is distributed on an "AS IS" BASIS,
11*e7b1675dSTing-Kang Chang // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12*e7b1675dSTing-Kang Chang // See the License for the specific language governing permissions and
13*e7b1675dSTing-Kang Chang // limitations under the License.
14*e7b1675dSTing-Kang Chang //
15*e7b1675dSTing-Kang Chang ///////////////////////////////////////////////////////////////////////////////
16*e7b1675dSTing-Kang Chang
17*e7b1675dSTing-Kang Chang #include "tink/streamingaead/decrypting_input_stream.h"
18*e7b1675dSTing-Kang Chang
19*e7b1675dSTing-Kang Chang #include <algorithm>
20*e7b1675dSTing-Kang Chang #include <cstring>
21*e7b1675dSTing-Kang Chang #include <memory>
22*e7b1675dSTing-Kang Chang #include <string>
23*e7b1675dSTing-Kang Chang #include <utility>
24*e7b1675dSTing-Kang Chang #include <vector>
25*e7b1675dSTing-Kang Chang
26*e7b1675dSTing-Kang Chang #include "absl/memory/memory.h"
27*e7b1675dSTing-Kang Chang #include "absl/status/status.h"
28*e7b1675dSTing-Kang Chang #include "tink/input_stream.h"
29*e7b1675dSTing-Kang Chang #include "tink/primitive_set.h"
30*e7b1675dSTing-Kang Chang #include "tink/streaming_aead.h"
31*e7b1675dSTing-Kang Chang #include "tink/streamingaead/buffered_input_stream.h"
32*e7b1675dSTing-Kang Chang #include "tink/streamingaead/shared_input_stream.h"
33*e7b1675dSTing-Kang Chang #include "tink/util/errors.h"
34*e7b1675dSTing-Kang Chang #include "tink/util/status.h"
35*e7b1675dSTing-Kang Chang #include "tink/util/statusor.h"
36*e7b1675dSTing-Kang Chang
37*e7b1675dSTing-Kang Chang namespace crypto {
38*e7b1675dSTing-Kang Chang namespace tink {
39*e7b1675dSTing-Kang Chang namespace streamingaead {
40*e7b1675dSTing-Kang Chang
41*e7b1675dSTing-Kang Chang using crypto::tink::PrimitiveSet;
42*e7b1675dSTing-Kang Chang using crypto::tink::StreamingAead;
43*e7b1675dSTing-Kang Chang using util::Status;
44*e7b1675dSTing-Kang Chang using util::StatusOr;
45*e7b1675dSTing-Kang Chang
46*e7b1675dSTing-Kang Chang using StreamingAeadEntry = PrimitiveSet<StreamingAead>::Entry<StreamingAead>;
47*e7b1675dSTing-Kang Chang
48*e7b1675dSTing-Kang Chang // static
New(std::shared_ptr<PrimitiveSet<StreamingAead>> primitives,std::unique_ptr<crypto::tink::InputStream> ciphertext_source,absl::string_view associated_data)49*e7b1675dSTing-Kang Chang StatusOr<std::unique_ptr<InputStream>> DecryptingInputStream::New(
50*e7b1675dSTing-Kang Chang std::shared_ptr<PrimitiveSet<StreamingAead>> primitives,
51*e7b1675dSTing-Kang Chang std::unique_ptr<crypto::tink::InputStream> ciphertext_source,
52*e7b1675dSTing-Kang Chang absl::string_view associated_data) {
53*e7b1675dSTing-Kang Chang std::unique_ptr<DecryptingInputStream> dec_stream(
54*e7b1675dSTing-Kang Chang new DecryptingInputStream());
55*e7b1675dSTing-Kang Chang dec_stream->primitives_ = primitives;
56*e7b1675dSTing-Kang Chang dec_stream->buffered_ct_source_ =
57*e7b1675dSTing-Kang Chang std::make_shared<BufferedInputStream>(std::move(ciphertext_source));
58*e7b1675dSTing-Kang Chang dec_stream->associated_data_ = std::string(associated_data);
59*e7b1675dSTing-Kang Chang dec_stream->attempted_matching_ = false;
60*e7b1675dSTing-Kang Chang dec_stream->matching_stream_ = nullptr;
61*e7b1675dSTing-Kang Chang return {std::move(dec_stream)};
62*e7b1675dSTing-Kang Chang }
63*e7b1675dSTing-Kang Chang
Next(const void ** data)64*e7b1675dSTing-Kang Chang util::StatusOr<int> DecryptingInputStream::Next(const void** data) {
65*e7b1675dSTing-Kang Chang if (matching_stream_ != nullptr) {
66*e7b1675dSTing-Kang Chang return matching_stream_->Next(data);
67*e7b1675dSTing-Kang Chang }
68*e7b1675dSTing-Kang Chang if (attempted_matching_) {
69*e7b1675dSTing-Kang Chang return Status(absl::StatusCode::kInvalidArgument,
70*e7b1675dSTing-Kang Chang "Could not find a decrypter matching the ciphertext stream.");
71*e7b1675dSTing-Kang Chang }
72*e7b1675dSTing-Kang Chang // Matching has not been attempted yet, so try it now.
73*e7b1675dSTing-Kang Chang attempted_matching_ = true;
74*e7b1675dSTing-Kang Chang std::vector<StreamingAeadEntry*> all_primitives = primitives_->get_all();
75*e7b1675dSTing-Kang Chang
76*e7b1675dSTing-Kang Chang for (const StreamingAeadEntry* entry : all_primitives) {
77*e7b1675dSTing-Kang Chang StreamingAead& streaming_aead = entry->get_primitive();
78*e7b1675dSTing-Kang Chang auto shared_ct = absl::make_unique<SharedInputStream>(
79*e7b1675dSTing-Kang Chang buffered_ct_source_.get());
80*e7b1675dSTing-Kang Chang auto decrypting_stream_result = streaming_aead.NewDecryptingStream(
81*e7b1675dSTing-Kang Chang std::move(shared_ct), associated_data_);
82*e7b1675dSTing-Kang Chang if (decrypting_stream_result.ok()) {
83*e7b1675dSTing-Kang Chang auto next_result = decrypting_stream_result.value()->Next(data);
84*e7b1675dSTing-Kang Chang if (next_result.status().code() == absl::StatusCode::kOutOfRange ||
85*e7b1675dSTing-Kang Chang next_result.ok()) { // Found a match.
86*e7b1675dSTing-Kang Chang buffered_ct_source_->DisableRewinding();
87*e7b1675dSTing-Kang Chang matching_stream_ = std::move(decrypting_stream_result.value());
88*e7b1675dSTing-Kang Chang return next_result;
89*e7b1675dSTing-Kang Chang }
90*e7b1675dSTing-Kang Chang }
91*e7b1675dSTing-Kang Chang // Not a match, rewind and try the next primitive.
92*e7b1675dSTing-Kang Chang Status s = buffered_ct_source_->Rewind();
93*e7b1675dSTing-Kang Chang if (!s.ok()) {
94*e7b1675dSTing-Kang Chang return s;
95*e7b1675dSTing-Kang Chang }
96*e7b1675dSTing-Kang Chang }
97*e7b1675dSTing-Kang Chang return Status(absl::StatusCode::kInvalidArgument,
98*e7b1675dSTing-Kang Chang "Could not find a decrypter matching the ciphertext stream.");
99*e7b1675dSTing-Kang Chang }
100*e7b1675dSTing-Kang Chang
BackUp(int count)101*e7b1675dSTing-Kang Chang void DecryptingInputStream::BackUp(int count) {
102*e7b1675dSTing-Kang Chang if (matching_stream_ != nullptr) {
103*e7b1675dSTing-Kang Chang matching_stream_->BackUp(count);
104*e7b1675dSTing-Kang Chang }
105*e7b1675dSTing-Kang Chang }
106*e7b1675dSTing-Kang Chang
107*e7b1675dSTing-Kang Chang
Position() const108*e7b1675dSTing-Kang Chang int64_t DecryptingInputStream::Position() const {
109*e7b1675dSTing-Kang Chang if (matching_stream_ != nullptr) {
110*e7b1675dSTing-Kang Chang return matching_stream_->Position();
111*e7b1675dSTing-Kang Chang }
112*e7b1675dSTing-Kang Chang return 0;
113*e7b1675dSTing-Kang Chang }
114*e7b1675dSTing-Kang Chang
115*e7b1675dSTing-Kang Chang } // namespace streamingaead
116*e7b1675dSTing-Kang Chang } // namespace tink
117*e7b1675dSTing-Kang Chang } // namespace crypto
118