crypto: forward auth tag to OpenSSL immediately · nodejs/node@cec9d9d

ASSIGN_OR_RETURN_UNWRAP(&cipher, args.This());

// Only callable after Final and if encrypting.

if (cipher->ctx_ ||

cipher->kind_ != kCipher ||

cipher->auth_tag_len_ == kNoAuthTagLength) {

if (cipher->ctx_ || cipher->kind_ != kCipher ||

cipher->auth_tag_len_ == kNoAuthTagLength ||

cipher->auth_tag_state_ != kAuthTagComputed) {

return;

}

}

cipher->auth_tag_len_ = tag_len;

cipher->auth_tag_state_ = kAuthTagKnown;

CHECK_LE(cipher->auth_tag_len_, sizeof(cipher->auth_tag_));

CHECK_LE(cipher->auth_tag_len_, ncrypto::Cipher::MAX_AUTH_TAG_LENGTH);

memset(cipher->auth_tag_, 0, sizeof(cipher->auth_tag_));

auth_tag.CopyTo(cipher->auth_tag_, cipher->auth_tag_len_);

if (!cipher->ctx_.setAeadTag({auth_tag.data(), cipher->auth_tag_len_})) {

return args.GetReturnValue().Set(false);

}

cipher->auth_tag_state_ = kAuthTagSetByUser;

args.GetReturnValue().Set(true);

}

bool CipherBase::MaybePassAuthTagToOpenSSL() {

if (auth_tag_state_ == kAuthTagKnown) {

ncrypto::Buffer<const char> buffer{

.data = auth_tag_,

.len = auth_tag_len_,

};

if (!ctx_.setAeadTag(buffer)) {

return false;

}

auth_tag_state_ = kAuthTagPassedToOpenSSL;

}

return true;

}

bool CipherBase::SetAAD(

const ArrayBufferOrViewContents<unsigned char>& data,

int plaintext_len) {

return false;

}

if (kind_ == kDecipher && !MaybePassAuthTagToOpenSSL()) {

return false;

}

ncrypto::Buffer<const unsigned char> buffer{

.data = nullptr,

.len = static_cast<size_t>(plaintext_len),

return kErrorMessageSize;

}

// Pass the authentication tag to OpenSSL if possible. This will only happen

// once, usually on the first update.

if (kind_ == kDecipher && IsAuthenticatedMode()) {

CHECK(MaybePassAuthTagToOpenSSL());

}

const int block_size = ctx_.getBlockSize();

CHECK_GT(block_size, 0);

if (len + block_size > INT_MAX) return kErrorState;

static_cast<size_t>(ctx_.getBlockSize()),

BackingStoreInitializationMode::kUninitialized);

if (kind_ == kDecipher &&

Cipher::FromCtx(ctx_).isSupportedAuthenticatedMode()) {

MaybePassAuthTagToOpenSSL();

}

#if (OPENSSL_VERSION_NUMBER < 0x30000000L)

// OpenSSL v1.x doesn't verify the presence of the auth tag so do

// it ourselves, see https://github.com/nodejs/node/issues/45874.

if (kind_ == kDecipher && ctx_.isChaCha20Poly1305() &&

auth_tag_state_ != kAuthTagPassedToOpenSSL) {

auth_tag_state_ != kAuthTagSetByUser) {

return false;

}

#endif

}

ok = ctx_.getAeadTag(auth_tag_len_,

reinterpret_cast<unsigned char*>(auth_tag_));

if (ok) {

auth_tag_state_ = kAuthTagComputed;

}

}

}