请注意，本文内容源自机器翻译，可能存在语法或其它翻译错误，仅供参考。如需获取准确内容，请参阅链接中的英语原文或自行翻译。
器件型号：AM2612 Thread 中讨论的其他器件：AM2632、 AM2732
工具/软件：
大家好：
本月、我们对 AM6212（和 AM2632）HSM 芯片的 GCM 算法有紧急要求。 我们不能等待官方发布,你能尽快发布一个测试版的 CGM 演示 RoboSense .
此致
ZX
您好、
根据下面的 GCM NIST 规范、需要在中进行小幅更新、以支持 96 位以外的 IV
我将在明天之前向您分享更新的补丁、它将支持此功能。
谢谢。此致、
Nikhil Dasan
您好、
请在此处找到更新的补丁、以支持 IV 的未对齐长度（即非 96 位）
即、使用下面的计算哈希值和 Y0、然后使用 GCM 模式 2 传递预先计算的 H 和 Y0
您可以参考下面的测试用例作为示例
static void test_aes_gcm_nist_unaligned_iv(DTHE_Handle aesHandle)
{
DTHE_AES_Return_t status;
DTHE_AES_Params aesParams;
uint32_t aesResultEnc[APP_CRYPTO_AES_GCM_MAX_BUFF_SIZE/4U];
uint32_t aesGcmTagEnc[4U];
uint8_t zero_arr[] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
uint8_t key_unaligned_iv_tc[] = {
0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c,
0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08
};
uint8_t data_in_unaligned_iv_tc[] = {
0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5,
0xa5, 0x59, 0x09, 0xc5, 0xaf, 0xf5, 0x26, 0x9a,
0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72,
0x1c, 0x3c, 0x0c, 0x95, 0x95, 0x68, 0x09, 0x53,
0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57,
0xba, 0x63, 0x7b, 0x39
};
uint8_t data_out_unaligned_iv_tc[] = {
0x61, 0x35, 0x3b, 0x4c, 0x28, 0x06, 0x93, 0x4a,
0x77, 0x7f, 0xf5, 0x1f, 0xa2, 0x2a, 0x47, 0x55,
0x69, 0x9b, 0x2a, 0x71, 0x4f, 0xcd, 0xc6, 0xf8,
0x37, 0x66, 0xe5, 0xf9, 0x7b, 0x6c, 0x74, 0x23,
0x73, 0x80, 0x69, 0x00, 0xe4, 0x9f, 0x24, 0xb2,
0x2b, 0x09, 0x75, 0x44, 0xd4, 0x89, 0x6b, 0x42,
0x49, 0x89, 0xb5, 0xe1, 0xeb, 0xac, 0x0f, 0x07,
0xc2, 0x3f, 0x45, 0x98
};
uint8_t unaligned_iv[] = {
0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad
};
uint8_t tag_out_unaligned_iv_tc[] = {
0x36, 0x12, 0xd2, 0xe7, 0x9e, 0x3b, 0x07, 0x85,
0x56, 0x1b, 0xe1, 0x4a, 0xac, 0xa2, 0xfc, 0xcb
};
uint8_t aad_in_unaligned_iv_tc[] = {
0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef,
0xab, 0xad, 0xda, 0xd2
};
uint8_t temp_buff[16U] __attribute__((aligned(128)));
uint8_t calculated_H[16U] __attribute__((aligned(128)));
uint8_t calculated_Y0[16U] __attribute__((aligned(128)));
/* Initialize the AES Parameters */
(void)memset ((void *)&aesParams, 0, sizeof(DTHE_AES_Params));
(void)memset ((void *)zero_arr, 0, 16U);
/* Initialize the encryption parameters */
aesParams.algoType = DTHE_AES_ECB_MODE;
aesParams.opType = DTHE_AES_ENCRYPT;
aesParams.useKEKMode = FALSE;
aesParams.ptrKey = (uint32_t*)&key_unaligned_iv_tc[0];
aesParams.keyLen = DTHE_AES_KEY_128_SIZE;
aesParams.ptrPlainTextData = (uint32_t*)SOC_virtToPhy(zero_arr);
aesParams.dataLenBytes = 16U;
aesParams.ptrEncryptedData = (uint32_t*)SOC_virtToPhy(calculated_H);
/* Encryption */
status = DTHE_AES_execute(aesHandle, &aesParams);
DebugP_assert(DTHE_AES_RETURN_SUCCESS == status);
/* Initialize the AES Parameters */
(void)memset ((void *)&aesParams, 0, sizeof(DTHE_AES_Params));
(void)memset ((void *)zero_arr, 0, 16U);
/* Initialize the encryption parameters */
aesParams.algoType = DTHE_AES_GHASH_ONLY_MODE;
aesParams.gcmModeSelect = DTHE_AES_GCM_MODE_1;
aesParams.opType = DTHE_AES_DECRYPT;
aesParams.useKEKMode = FALSE;
aesParams.ptrKey = (uint32_t*)&key_unaligned_iv_tc[0];
aesParams.ptrKey1 = (uint32_t*)&calculated_H[0];
aesParams.keyLen = DTHE_AES_KEY_128_SIZE;
aesParams.ptrIV = (uint32_t*)NULL;
aesParams.ptrEncryptedData = (uint32_t*)SOC_virtToPhy(unaligned_iv);
aesParams.ptrPlainTextData = (uint32_t*)SOC_virtToPhy(temp_buff);
aesParams.dataLenBytes = sizeof(unaligned_iv);
aesParams.ptrTag = (uint32_t*)&calculated_Y0[0];
aesParams.ptrAAD = (uint32_t*)SOC_virtToPhy(zero_arr);
aesParams.aadLength = 0U;
/* Encryption */
status = DTHE_AES_execute(aesHandle, &aesParams);
DebugP_assert(DTHE_AES_RETURN_SUCCESS == status);
/* Initialize the AES Parameters */
(void)memset ((void *)&aesParams, 0, sizeof(DTHE_AES_Params));
/* Initialize the encryption parameters */
aesParams.algoType = DTHE_AES_GCM_MODE;
aesParams.gcmModeSelect = DTHE_AES_GCM_MODE_2;
aesParams.opType = DTHE_AES_ENCRYPT;
aesParams.useKEKMode = FALSE;
aesParams.ptrKey = (uint32_t*)&key_unaligned_iv_tc[0];
aesParams.ptrKey1 = (uint32_t*)&calculated_H[0];
aesParams.keyLen = DTHE_AES_KEY_128_SIZE;
aesParams.ptrIV = (uint32_t*)&calculated_Y0[0];
aesParams.ptrPlainTextData = (uint32_t*)SOC_virtToPhy(data_in_unaligned_iv_tc);
aesParams.dataLenBytes = sizeof(data_in_unaligned_iv_tc);
aesParams.ptrEncryptedData = (uint32_t*)SOC_virtToPhy(aesResultEnc);
aesParams.ptrTag = (uint32_t*)&aesGcmTagEnc[0];
aesParams.ptrAAD = (uint32_t*)SOC_virtToPhy(aad_in_unaligned_iv_tc);
aesParams.aadLength = sizeof(aad_in_unaligned_iv_tc);
/* Encryption */
status = DTHE_AES_execute(aesHandle, &aesParams);
DebugP_assert(DTHE_AES_RETURN_SUCCESS == status);
status = memcmp(aesResultEnc, data_out_unaligned_iv_tc, sizeof(data_in_unaligned_iv_tc));
if(status == SystemP_SUCCESS)
{
DebugP_log("[CRYPTO] DTHE AES GCM Encryption Unaligned Success!\r\n");
}
else
{
DebugP_log("[CRYPTO] DTHE AES GCM Encryption Unaligned Failed!\r\n");
}
/* comparing Tag result for authentication and verification */
status = memcmp(aesGcmTagEnc, tag_out_unaligned_iv_tc, 16U);
if(status == SystemP_SUCCESS)
{
DebugP_log("[CRYPTO] DTHE AES GCM Tag generation Unaligned Success!\r\n");
}
else
{
DebugP_log("[CRYPTO] DTHE AES GCM Tag generation Unaligned Failed!\r\n");
}
}您好、
对于 GHASH、我们不使用 dthe_AES_controlMode () API 设置任何特定的模式 、因为我们在这里不使用 AES 的加密块。
但是、我们仅将此处所示的 GCM 设置为相同的 CTRL 寄存器的模式 1、这意味着不进行加密（仅 GHASH）
我们仅使用 AES 内核的 GHASH 块来计算 Y0 值。
从上面的配置中、您可以看到 dthe_AES_GHASH_ONLY_mode 和 dthe_AES_GCM_MODE_1 和 dthe_AES_DECRYPT、这意味着不进行加密
谢谢。此致、
Nikhil Dasan