/* * Copyright 2014-2024 The GmSSL Project. All Rights Reserved. * * Licensed under the Apache License, Version 2.0 (the License); you may * not use this file except in compliance with the License. * * http://www.apache.org/licenses/LICENSE-2.0 */ #include #include #include #include #include #include #include #include static const char *usage = "[-encrypt|-decrypt] -key hex -iv hex [-in file] [-out file]"; static const char *options = "Options\n" "\n" " -encrypt Encrypt\n" " -decrypt Decrypt\n" " -key hex Symmetric key in HEX format\n" " -iv hex IV in HEX format\n" " -in file | stdin Input data\n" " -out file | stdout Output data\n" "\n" "Examples" "\n" " echo \"hello\" | gmssl sm4_ctr -key 11223344556677881122334455667788 -iv 112233445566778811223344 -out ciphertext.bin\n" "\n"; int sm4_ctr_main(int argc, char **argv) { int ret = 1; char *prog = argv[0]; char *keyhex = NULL; char *ivhex = NULL; char *infile = NULL; char *outfile = NULL; uint8_t key[16]; size_t keylen; uint8_t iv[16]; size_t ivlen; FILE *infp = stdin; FILE *outfp = stdout; SM4_CTR_CTX ctx; uint8_t buf[4096]; size_t inlen; size_t outlen; argc--; argv++; if (argc < 1) { fprintf(stderr, "usage: gmssl %s %s\n", prog, usage); return 1; } while (argc > 0) { if (!strcmp(*argv, "-help")) { printf("usage: gmssl %s %s\n", prog, usage); printf("%s\n", options); ret = 0; goto end; } else if (!strcmp(*argv, "-encrypt")) { // ignore this option } else if (!strcmp(*argv, "-decrypt")) { // ignore this option } else if (!strcmp(*argv, "-key")) { if (--argc < 1) goto bad; keyhex = *(++argv); if (strlen(keyhex) != sizeof(key) * 2) { fprintf(stderr, "gmssl %s: invalid key length\n", prog); goto end; } if (hex_to_bytes(keyhex, strlen(keyhex), key, &keylen) != 1) { fprintf(stderr, "gmssl %s: invalid key hex digits\n", prog); goto end; } } else if (!strcmp(*argv, "-iv")) { if (--argc < 1) goto bad; ivhex = *(++argv); if (strlen(ivhex) != sizeof(iv) * 2) { fprintf(stderr, "gmssl %s: invalid IV length\n", prog); goto end; } if (hex_to_bytes(ivhex, strlen(ivhex), iv, &ivlen) != 1) { fprintf(stderr, "gmssl %s: invalid IV hex digits\n", prog); goto end; } } else if (!strcmp(*argv, "-in")) { if (--argc < 1) goto bad; infile = *(++argv); if (!(infp = fopen(infile, "rb"))) { fprintf(stderr, "gmssl %s: open '%s' failure : %s\n", prog, infile, strerror(errno)); goto end; } } else if (!strcmp(*argv, "-out")) { if (--argc < 1) goto bad; outfile = *(++argv); if (!(outfp = fopen(outfile, "wb"))) { fprintf(stderr, "gmssl %s: open '%s' failure : %s\n", prog, outfile, strerror(errno)); goto end; } } else { fprintf(stderr, "gmssl %s: illegal option `%s`\n", prog, *argv); goto end; bad: fprintf(stderr, "gmssl %s: `%s` option value missing\n", prog, *argv); goto end; } argc--; argv++; } if (!keyhex) { fprintf(stderr, "gmssl %s: option `-key` missing\n", prog); goto end; } if (!ivhex) { fprintf(stderr, "gmssl %s: option `-iv` missing\n", prog); goto end; } if (sm4_ctr_encrypt_init(&ctx, key, iv) != 1) { error_print(); goto end; } while ((inlen = fread(buf, 1, sizeof(buf), infp)) > 0) { if (sm4_ctr_encrypt_update(&ctx, buf, inlen, buf, &outlen) != 1) { error_print(); goto end; } if (fwrite(buf, 1, outlen, outfp) != outlen) { fprintf(stderr, "gmssl %s: output failure : %s\n", prog, strerror(errno)); goto end; } } if (sm4_ctr_encrypt_finish(&ctx, buf, &outlen) != 1) { error_print(); goto end; } if (fwrite(buf, 1, outlen, outfp) != outlen) { fprintf(stderr, "gmssl %s: output failure : %s\n", prog, strerror(errno)); goto end; } ret = 0; end: gmssl_secure_clear(key, sizeof(key)); gmssl_secure_clear(iv, sizeof(iv)); gmssl_secure_clear(&ctx, sizeof(ctx)); gmssl_secure_clear(buf, sizeof(buf)); if (infile && infp) fclose(infp); if (outfile && outfp) fclose(outfp); return ret; }