#include "vmdh.h"
#include <CommonCrypto/CommonCryptor.h>
#include <utilities/debugging.h>
#include <string.h>
#include <Security/SecInternal.h>
#include <Security/SecDH.h>
vmdh_t vmdh_create(uint32_t g, const uint8_t *p, size_t p_len,
const uint8_t *recip, size_t recip_len) {
SecDHContext dh;
if (SecDHCreate(g, p, p_len, 0, recip, recip_len, &dh))
return NULL;
return (vmdh_t)dh;
}
bool vmdh_generate_key(vmdh_t vmdh, uint8_t *pub_key, size_t *pub_key_len) {
return !SecDHGenerateKeypair((SecDHContext)vmdh, pub_key, pub_key_len);
}
bool vmdh_encrypt_password(vmdh_t vmdh,
const uint8_t *pub_key, size_t pub_key_len,
const uint8_t *pw, size_t pw_len, uint8_t *encpw, size_t *encpw_len) {
uint8_t aes_key[kCCKeySizeAES128];
size_t aes_key_len = kCCKeySizeAES128;
if (SecDHComputeKey((SecDHContext)vmdh, pub_key, pub_key_len,
aes_key, &aes_key_len)) {
return false;
}
if (CCCrypt(kCCEncrypt, kCCAlgorithmAES128,
kCCOptionPKCS7Padding, aes_key, kCCKeySizeAES128, NULL,
pw, pw_len, encpw, *encpw_len, encpw_len)) {
return false;
}
bzero(aes_key, kCCKeySizeAES128);
return true;
}
void vmdh_destroy(vmdh_t vmdh) {
return SecDHDestroy((SecDHContext)vmdh);
}