
/*
 * Copyright 2011-2022 Cuberite Contributors
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

// AesCfb128Decryptor.cpp

// Implements the cAesCfb128Decryptor class decrypting data using AES CFB-128

#include "Globals.h"
#include "AesCfb128Decryptor.h"





cAesCfb128Decryptor::cAesCfb128Decryptor(void) :
	m_IsValid(false)
{
#if PLATFORM_CRYPTOGRAPHY && defined(_WIN32)
	if (!CryptAcquireContext(&m_Aes, nullptr, nullptr, PROV_RSA_AES, CRYPT_VERIFYCONTEXT))
	{
		throw std::system_error(GetLastError(), std::system_category());
	}
#else
	mbedtls_aes_init(&m_Aes);
#endif
}





cAesCfb128Decryptor::~cAesCfb128Decryptor()
{
	// Clear the leftover in-memory data, so that they can't be accessed by a backdoor:
#if PLATFORM_CRYPTOGRAPHY && defined(_WIN32)
	CryptReleaseContext(m_Aes, 0);
#else
	mbedtls_aes_free(&m_Aes);
#endif
}





void cAesCfb128Decryptor::Init(const Byte a_Key[16], const Byte a_IV[16])
{
	ASSERT(!IsValid());  // Cannot Init twice

#if PLATFORM_CRYPTOGRAPHY && defined(_WIN32)
	struct Key
	{
		PUBLICKEYSTRUC Header;
		DWORD Length;
		Byte Key[16];
	} Key;

	const DWORD Mode = CRYPT_MODE_CFB;
	Key.Header = { PLAINTEXTKEYBLOB, CUR_BLOB_VERSION, 0, CALG_AES_128 };
	Key.Length = 16;
	std::copy_n(a_Key, 16, Key.Key);

	CryptImportKey(m_Aes, reinterpret_cast<const BYTE *>(&Key), sizeof(Key), 0, 0, &m_Key);
	CryptSetKeyParam(m_Key, KP_MODE, reinterpret_cast<const BYTE *>(&Mode), 0);
	CryptSetKeyParam(m_Key, KP_IV, a_IV, 0);
#else
	std::copy_n(a_IV, 16, m_IV);
	mbedtls_aes_setkey_enc(&m_Aes, a_Key, 128);
#endif

	m_IsValid = true;
}





void cAesCfb128Decryptor::ProcessData(std::byte * const a_EncryptedIn, const size_t a_Length)
{
	ASSERT(IsValid());  // Must Init() first

#if PLATFORM_CRYPTOGRAPHY && defined(_WIN32)
	ASSERT(a_Length <= std::numeric_limits<DWORD>::max());

	DWORD Length = static_cast<DWORD>(a_Length);
	CryptDecrypt(m_Key, 0, FALSE, 0, reinterpret_cast<BYTE *>(a_EncryptedIn), &Length);
#else
	mbedtls_aes_crypt_cfb8(&m_Aes, MBEDTLS_AES_DECRYPT, a_Length, m_IV, reinterpret_cast<unsigned char *>(a_EncryptedIn), reinterpret_cast<unsigned char *>(a_EncryptedIn));
#endif
}
