keepassxc/src/streams/SymmetricCipherStream.cpp

/*
 *  Copyright (C) 2010 Felix Geyer <debfx@fobos.de>
 *
 *  This program is free software: you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation, either version 2 or (at your option)
 *  version 3 of the License.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License
 *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

#include "SymmetricCipherStream.h"

SymmetricCipherStream::SymmetricCipherStream(QIODevice* baseDevice, SymmetricCipher::Algorithm algo,
                                             SymmetricCipher::Mode mode, SymmetricCipher::Direction direction,
                                             const QByteArray& key, const QByteArray& iv)
    : LayeredStream(baseDevice)
    , m_cipher(new SymmetricCipher(algo, mode, direction, key, iv))
    , m_bufferPos(0)
    , m_bufferFilling(false)
    , m_error(false)
{
}

SymmetricCipherStream::~SymmetricCipherStream()
{
    close();
}

bool SymmetricCipherStream::reset()
{
    if (isWritable()) {
        if (!writeBlock(true)) {
            return false;
        }
    }

    m_buffer.clear();
    m_bufferPos = 0;
    m_bufferFilling = false;
    m_error = false;
    m_cipher->reset();

    return true;
}

void SymmetricCipherStream::close()
{
    if (isWritable()) {
        writeBlock(true);
    }

    LayeredStream::close();
}

qint64 SymmetricCipherStream::readData(char* data, qint64 maxSize)
{
    Q_ASSERT(maxSize >= 0);

    if (m_error) {
        return -1;
    }

    qint64 bytesRemaining = maxSize;
    qint64 offset = 0;

    while (bytesRemaining > 0) {
        if ((m_bufferPos == m_buffer.size()) || m_bufferFilling) {
            if (!readBlock()) {
                if (m_error) {
                    return -1;
                }
                else {
                    return maxSize - bytesRemaining;
                }
            }
        }

        int bytesToCopy = qMin(bytesRemaining, static_cast<qint64>(m_buffer.size() - m_bufferPos));

        memcpy(data + offset, m_buffer.constData() + m_bufferPos, bytesToCopy);

        offset += bytesToCopy;
        m_bufferPos += bytesToCopy;
        bytesRemaining -= bytesToCopy;
    }

    return maxSize;
}

bool SymmetricCipherStream::readBlock()
{
    if (m_bufferFilling) {
        m_buffer.append(m_baseDevice->read(m_cipher->blockSize() - m_buffer.size()));
    }
    else {
        m_buffer = m_baseDevice->read(m_cipher->blockSize());
    }

    if (m_buffer.size() != m_cipher->blockSize()) {
        m_bufferFilling = true;
        return false;
    }
    else {
        m_cipher->processInPlace(m_buffer);
        m_bufferPos = 0;
        m_bufferFilling = false;

        if (m_baseDevice->atEnd()) {
            // PKCS7 padding
            quint8 padLength = m_buffer.at(m_buffer.size() - 1);

            if (padLength == m_cipher->blockSize()) {
                Q_ASSERT(m_buffer == QByteArray(m_cipher->blockSize(), m_cipher->blockSize()));
                // full block with just padding: discard
                m_buffer.clear();
                return false;
            }
            else if (padLength > m_cipher->blockSize()) {
                // invalid padding
                m_error = true;
                return false;
            }
            else {
                Q_ASSERT(m_buffer.right(padLength) == QByteArray(padLength, padLength));
                // resize buffer to strip padding
                m_buffer.resize(m_cipher->blockSize() - padLength);
                return true;
            }
        }
        else {
            return true;
        }
    }
}

qint64 SymmetricCipherStream::writeData(const char* data, qint64 maxSize)
{
    Q_ASSERT(maxSize >= 0);

    if (m_error) {
        return -1;
    }

    qint64 bytesRemaining = maxSize;
    qint64 offset = 0;

    while (bytesRemaining > 0) {
        int bytesToCopy = qMin(bytesRemaining, static_cast<qint64>(m_cipher->blockSize() - m_buffer.size()));

        m_buffer.append(data + offset, bytesToCopy);

        offset += bytesToCopy;
        bytesRemaining -= bytesToCopy;

        if (m_buffer.size() == m_cipher->blockSize()) {
            if (!writeBlock(false)) {
                if (m_error) {
                    return -1;
                }
                else {
                    return maxSize - bytesRemaining;
                }
            }
        }
    }

    return maxSize;
}

bool SymmetricCipherStream::writeBlock(bool lastBlock)
{
    if (lastBlock) {
        // PKCS7 padding
        int padLen = m_cipher->blockSize() - m_buffer.size();
        for (int i = 0; i < padLen; i++) {
            m_buffer.append(static_cast<char>(padLen));
        }
    }
    else if (m_buffer.isEmpty()) {
        return true;
    }

    m_cipher->processInPlace(m_buffer);

    if (m_baseDevice->write(m_buffer) != m_buffer.size()) {
        m_error = true;
        // TODO: copy error string
        return false;
    }
    else {
        m_buffer.clear();
        return true;
    }
}