Include AES_CBC_ENCRYPT_DATA mechanism

cryptoki/src/mechanism/aes.rs

@@ -0,0 +1,51 @@
+// Copyright 2021 Contributors to the Parsec project.
+// SPDX-License-Identifier: Apache-2.0
+//! AES mechanism types
+
+use cryptoki_sys::CK_AES_CBC_ENCRYPT_DATA_PARAMS;
+use std::convert::TryInto;
+use std::marker::PhantomData;
+
+/// AES CBC derivation parameters.
+/// This structure wraps a CK_AES_CBC_ENCRYPT_DATA_PARAMS structure.
+#[derive(Copy, Debug, Clone)]
+#[repr(transparent)]
+pub struct AesCBCEncryptDataParams<'a> {
+    inner: CK_AES_CBC_ENCRYPT_DATA_PARAMS,
+    _marker: PhantomData<&'a [u8]>,
+}
+impl<'a> AesCBCEncryptDataParams<'a> {
+    /// Construct AES CBC ENCRYPT DATA parameters.
+    ///
+    /// # Arguments
+    ///
+    /// `iv` - The initialization vector.  This must be non-empty.
+    /// `data` - The data to cipher.
+    ///
+    /// # Panics
+    ///
+    /// This function panics if the lenght of `data` does not
+    /// fit into an [Ulong].
+    pub fn new(iv: [u8; 16], data: &'a [u8]) -> Self {
+        Self {
+            inner: CK_AES_CBC_ENCRYPT_DATA_PARAMS {
+                iv,
+                pData: data.as_ptr() as *mut _,
+                length: data
+                    .len()
+                    .try_into()
+                    .expect("data length does not fit in CK_ULONG"),
+            },
+            _marker: PhantomData,
+        }
+    }
+    /// The initialization vector.
+    pub fn iv(&self) -> &[u8] {
+        self.inner.iv.as_slice()
+    }
+
+    /// The data
+    pub fn data(&self) -> &[u8] {
+        unsafe { std::slice::from_raw_parts(self.inner.pData, self.inner.length as _) }
+    }
+}

cryptoki/src/mechanism/mod.rs

@@ -3,6 +3,7 @@
 //! Data types for mechanisms
 
 pub mod aead;
+pub mod aes;
 pub mod elliptic_curve;
 mod mechanism_info;
 pub mod rsa;
@@ -33,6 +34,10 @@ impl MechanismType {
     pub const AES_KEY_GEN: MechanismType = MechanismType {
         val: CKM_AES_KEY_GEN,
     };
+    /// AES-CBC key derivation mechanism
+    pub const AES_CBC_ENCRYPT_DATA: MechanismType = MechanismType {
+        val: CKM_AES_CBC_ENCRYPT_DATA,
+    };
     /// AES-CBC mechanism
     ///
     /// For encryption, the message length must be a multiple of the block
@@ -629,6 +634,7 @@ impl TryFrom<CK_MECHANISM_TYPE> for MechanismType {
     fn try_from(mechanism_type: CK_MECHANISM_TYPE) -> Result<Self, Self::Error> {
         match mechanism_type {
             CKM_AES_KEY_GEN => Ok(MechanismType::AES_KEY_GEN),
+            CKM_AES_CBC_ENCRYPT_DATA => Ok(MechanismType::AES_CBC_ENCRYPT_DATA),
             CKM_RSA_PKCS_KEY_PAIR_GEN => Ok(MechanismType::RSA_PKCS_KEY_PAIR_GEN),
             CKM_RSA_PKCS => Ok(MechanismType::RSA_PKCS),
             CKM_RSA_PKCS_PSS => Ok(MechanismType::RSA_PKCS_PSS),
@@ -687,6 +693,8 @@ pub enum Mechanism<'a> {
     AesKeyWrap,
     /// AES key wrap with padding block
     AesKeyWrapPad,
+    /// AES CBC Key derivation by encryption
+    AesCbcEncryptData(aes::AesCBCEncryptDataParams<'a>),
     /// AES-GCM mechanism
     AesGcm(aead::GcmParams<'a>),
 
@@ -829,6 +837,7 @@ impl Mechanism<'_> {
             Mechanism::AesKeyWrap => MechanismType::AES_KEY_WRAP,
             Mechanism::AesKeyWrapPad => MechanismType::AES_KEY_WRAP_PAD,
             Mechanism::AesGcm(_) => MechanismType::AES_GCM,
+            Mechanism::AesCbcEncryptData(_) => MechanismType::AES_CBC_ENCRYPT_DATA,
 
             Mechanism::RsaPkcsKeyPairGen => MechanismType::RSA_PKCS_KEY_PAIR_GEN,
             Mechanism::RsaPkcs => MechanismType::RSA_PKCS,
@@ -886,6 +895,7 @@ impl From<&Mechanism<'_>> for CK_MECHANISM {
             Mechanism::AesCbc(params) | Mechanism::AesCbcPad(params) => {
                 make_mechanism(mechanism, params)
             }
+            Mechanism::AesCbcEncryptData(params) => make_mechanism(mechanism, params),
             Mechanism::DesCbc(params)
             | Mechanism::Des3Cbc(params)
             | Mechanism::DesCbcPad(params)