implemented aes-ige block mode (#211)

Author: razielgn

Cargo.lock

@@ -12,6 +12,7 @@ keywords = ["crypto", "block-cipher", "ciphers"]
 
 [dependencies]
 block-padding = "0.2"
+byte-tools = "0.3"
 cipher = "=0.3.0-pre"
 
 [dev-dependencies]

block-modes/Cargo.toml

@@ -0,0 +1,92 @@
+use crate::{
+    traits::BlockMode,
+    utils::{xor, Block},
+};
+use block_padding::Padding;
+use byte_tools::copy;
+use cipher::{
+    block::{BlockCipher, BlockDecrypt, BlockEncrypt, NewBlockCipher},
+    generic_array::{
+        typenum::{Prod, UInt, UTerm, Unsigned, B0, B1, U2},
+        ArrayLength, GenericArray,
+    },
+};
+use core::{marker::PhantomData, ops::Mul};
+
+type IgeIvBlockSize<C> = Prod<<C as BlockCipher>::BlockSize, U2>;
+
+/// [Infinite Garble Extension][1] (IGE) block cipher mode instance.
+///
+/// [1]: https://www.links.org/files/openssl-ige.pdf
+pub struct Ige<C, P>
+where
+    C: BlockCipher + NewBlockCipher + BlockEncrypt + BlockDecrypt,
+    P: Padding,
+    C::BlockSize: Mul<UInt<UInt<UTerm, B1>, B0>>,
+    <C::BlockSize as Mul<UInt<UInt<UTerm, B1>, B0>>>::Output: ArrayLength<u8>,
+{
+    cipher: C,
+    iv: GenericArray<u8, IgeIvBlockSize<C>>,
+    _p: PhantomData<P>,
+}
+
+// Implementation derived from:
+// https://mgp25.com/AESIGE/
+
+impl<C, P> BlockMode<C, P> for Ige<C, P>
+where
+    C: BlockCipher + NewBlockCipher + BlockEncrypt + BlockDecrypt,
+    P: Padding,
+    C::BlockSize: Mul<UInt<UInt<UTerm, B1>, B0>>,
+    <C::BlockSize as Mul<UInt<UInt<UTerm, B1>, B0>>>::Output: ArrayLength<u8>,
+{
+    type IvSize = IgeIvBlockSize<C>;
+
+    fn new(cipher: C, iv: &GenericArray<u8, Self::IvSize>) -> Self {
+        Ige {
+            cipher,
+            iv: iv.clone(),
+            _p: Default::default(),
+        }
+    }
+
+    fn encrypt_blocks(&mut self, blocks: &mut [Block<C>]) {
+        let block_size = C::BlockSize::to_usize();
+
+        let (mut y_prev, x_prev) = self.iv.split_at_mut(block_size);
+        let mut x_temp = GenericArray::<u8, C::BlockSize>::default();
+
+        for block in blocks {
+            copy(block, &mut x_temp);
+
+            xor(block, y_prev);
+
+            self.cipher.encrypt_block(block);
+
+            xor(block, x_prev);
+
+            copy(&x_temp, x_prev);
+            y_prev = block;
+        }
+    }
+
+    fn decrypt_blocks(&mut self, blocks: &mut [Block<C>]) {
+        let block_size = C::BlockSize::to_usize();
+
+        let (x_prev, mut y_prev) = self.iv.split_at_mut(block_size);
+        let mut x_temp = GenericArray::<u8, C::BlockSize>::default();
+
+        for block in blocks {
+            copy(block, &mut x_temp);
+
+            xor(block, y_prev);
+
+            self.cipher.decrypt_block(block);
+
+            xor(block, x_prev);
+
+            copy(&x_temp, x_prev);
+            y_prev = block;
+        }
+    }
+}

block-modes/src/ige.rs

@@ -91,6 +91,7 @@ mod cbc;
 mod cfb;
 mod cfb8;
 mod ecb;
+mod ige;
 mod ofb;
 mod pcbc;
 
@@ -103,6 +104,7 @@ pub use crate::{
     cfb8::Cfb8,
     ecb::Ecb,
     errors::{BlockModeError, InvalidKeyIvLength},
+    ige::Ige,
     ofb::Ofb,
     pcbc::Pcbc,
     traits::BlockMode,

block-modes/src/lib.rs

@@ -0,0 +1 @@
+��U{�R�ڎC�N�E<�V��H���ǜ��G��

block-modes/tests/data/ige-aes128-1.ciphertext.bin

@@ -0,0 +1 @@
+L. Let's hope Ben got it right!

block-modes/tests/data/ige-aes128-1.iv.bin

@@ -0,0 +1 @@
+mentation of IGE mode for OpenSS

block-modes/tests/data/ige-aes128-1.key.bin

@@ -0,0 +1 @@
+This is an imple

block-modes/tests/data/ige-aes128-1.plaintext.bin

@@ -0,0 +1 @@
+�pd�����m��Kz�Hȹ�@>4g��ؓ@�;

block-modes/tests/data/ige-aes128-2.ciphertext.bin

@@ -1,9 +1,10 @@
 //! Test vectors generated with OpenSSL
 
 use aes::Aes128;
-use block_modes::block_padding::ZeroPadding;
+use block_modes::block_padding::{NoPadding, ZeroPadding};
 use block_modes::BlockMode;
-use block_modes::{Cbc, Ecb};
+use block_modes::{Cbc, Ecb, Ige};
+use cipher::generic_array::GenericArray;
 
 #[test]
 fn ecb_aes128() {
@@ -69,3 +70,31 @@ fn par_blocks() {
     run::<block_modes::Ofb<_, _>>();
     run::<block_modes::Pcbc<_, _>>();
 }
+
+#[test]
+fn ige_aes256_1() {
+    let key = GenericArray::from_slice(include_bytes!("data/ige-aes128-1.key.bin"));
+    let iv = GenericArray::from_slice(include_bytes!("data/ige-aes128-1.iv.bin"));
+    let plaintext = include_bytes!("data/ige-aes128-1.plaintext.bin");
+    let ciphertext = include_bytes!("data/ige-aes128-1.ciphertext.bin");
+
+    let mode = Ige::<Aes128, NoPadding>::new_fix(key, iv);
+    assert_eq!(mode.encrypt_vec(plaintext), &ciphertext[..]);
+
+    let mode = Ige::<Aes128, NoPadding>::new_fix(key, iv);
+    assert_eq!(mode.decrypt_vec(ciphertext).unwrap(), &plaintext[..]);
+}
+
+#[test]
+fn ige_aes256_2() {
+    let key = GenericArray::from_slice(include_bytes!("data/ige-aes128-2.key.bin"));
+    let iv = GenericArray::from_slice(include_bytes!("data/ige-aes128-2.iv.bin"));
+    let plaintext = include_bytes!("data/ige-aes128-2.plaintext.bin");
+    let ciphertext = include_bytes!("data/ige-aes128-2.ciphertext.bin");
+
+    let mode = Ige::<Aes128, NoPadding>::new_fix(key, iv);
+    assert_eq!(mode.encrypt_vec(plaintext), &ciphertext[..]);
+
+    let mode = Ige::<Aes128, NoPadding>::new_fix(key, iv);
+    assert_eq!(mode.decrypt_vec(ciphertext).unwrap(), &plaintext[..]);
+}