Skip to content

Extend/Add label/id extension functions #10072

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
night1rider wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Extend/Add label/id extension functions #10072

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
3321d70
Extend CMAC API to pull in label/id extension functions to pass down …
night1rider Mar 4, 2026
a472c74
Add WC_TEST_SKIP_RSA_PRIVATE_EXPORT to test.c
night1rider Mar 26, 2026
95059b0
change WC_TEST_NO_ECC_CHECK_KEY to WC_TEST_SKIP_ECC_CHECK_KEY
night1rider Mar 26, 2026
cafea6b
Add test/bench_AesEcbInit helper
night1rider Mar 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
167 changes: 155 additions & 12 deletions wolfcrypt/benchmark/benchmark.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4992,6 +4992,145 @@ void bench_rng(void)
#endif /* WC_NO_RNG */


/* ============================================================================
* Benchmark init helpers -- use id[] when WC_TEST_*_ID is defined and
* useDeviceID is true, else plain init.
* ========================================================================= */

/* --- AES CBC --- */
#if !defined(NO_AES) && defined(HAVE_AES_CBC)
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_AES_CBC_ID)
static unsigned char benchAesCbcId[] = WC_TEST_AES_CBC_ID;
static int benchAesCbcIdLen = (int)sizeof(benchAesCbcId);
#endif

static WC_MAYBE_UNUSED int bench_AesCbcInit(Aes* aes, void* heap,
int declaredDevId)
{
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_AES_CBC_ID)
return wc_AesInit_Id(aes, benchAesCbcId, benchAesCbcIdLen, heap,
declaredDevId);
#else
return wc_AesInit(aes, heap, declaredDevId);
#endif
}
#endif /* !NO_AES && HAVE_AES_CBC */

/* --- AES GCM --- */
#if !defined(NO_AES) && defined(HAVE_AESGCM)
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_AES_GCM_ID)
static unsigned char benchAesGcmId[] = WC_TEST_AES_GCM_ID;
static int benchAesGcmIdLen = (int)sizeof(benchAesGcmId);
#endif

static WC_MAYBE_UNUSED int bench_AesGcmInit(Aes* aes, void* heap,
int declaredDevId)
{
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_AES_GCM_ID)
return wc_AesInit_Id(aes, benchAesGcmId, benchAesGcmIdLen, heap,
declaredDevId);
#else
return wc_AesInit(aes, heap, declaredDevId);
#endif
}
#endif /* !NO_AES && HAVE_AESGCM */

/* --- RSA --- */
#if !defined(NO_RSA)
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_RSA_PRIV_ID)
static unsigned char benchRsaPrivId[] = WC_TEST_RSA_PRIV_ID;
static int benchRsaPrivIdLen = (int)sizeof(benchRsaPrivId);
#endif

static WC_MAYBE_UNUSED int bench_RsaInit(RsaKey* key, void* heap,
int declaredDevId)
{
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_RSA_PRIV_ID)
return wc_InitRsaKey_Id(key, benchRsaPrivId, benchRsaPrivIdLen, heap,
declaredDevId);
#else
return wc_InitRsaKey_ex(key, heap, declaredDevId);
#endif
}
#endif /* !NO_RSA */

/* --- CMAC --- */
#ifdef WOLFSSL_CMAC
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_CMAC_ID)
static unsigned char benchCmacId[] = WC_TEST_CMAC_ID;
static int benchCmacIdLen = (int)sizeof(benchCmacId);
#endif

static WC_MAYBE_UNUSED int bench_CmacInit(Cmac* cmac, const byte* key,
word32 keySz, int type,
void* unused, void* heap,
int declaredDevId)
{
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_CMAC_ID)
return wc_InitCmac_Id(cmac, key, keySz, type, unused,
benchCmacId, benchCmacIdLen, heap, declaredDevId);
#elif !defined(HAVE_FIPS)
return wc_InitCmac_ex(cmac, key, keySz, type, unused, heap, declaredDevId);
#else
(void)heap;
(void)declaredDevId;
return wc_InitCmac(cmac, key, keySz, type, unused);
#endif
}
#endif /* WOLFSSL_CMAC */

/* --- AES ECB --- */
#if defined(HAVE_AES_ECB) || \
(defined(HAVE_FIPS) && defined(WOLFSSL_AES_DIRECT))
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_AES_ECB_ID)
static unsigned char benchAesEcbId[] = WC_TEST_AES_ECB_ID;
static int benchAesEcbIdLen = (int)sizeof(benchAesEcbId);
#endif

static WC_MAYBE_UNUSED int bench_AesEcbInit(Aes* aes, void* heap,
int declaredDevId)
{
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_AES_ECB_ID)
return wc_AesInit_Id(aes, benchAesEcbId, benchAesEcbIdLen, heap,
declaredDevId);
#else
return wc_AesInit(aes, heap, declaredDevId);
#endif
}
#endif /* HAVE_AES_ECB || (HAVE_FIPS && WOLFSSL_AES_DIRECT) */

/* --- ECC --- */
#ifdef HAVE_ECC
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_ECC_PAIR_P256_ID)
static unsigned char benchEccPairP256Id[] = WC_TEST_ECC_PAIR_P256_ID;
static int benchEccPairP256IdLen = (int)sizeof(benchEccPairP256Id);
#endif
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_ECC_PAIR_P521_ID)
static unsigned char benchEccPairP521Id[] = WC_TEST_ECC_PAIR_P521_ID;
static int benchEccPairP521IdLen = (int)sizeof(benchEccPairP521Id);
#endif

static WC_MAYBE_UNUSED int bench_EccInit_Pair(ecc_key* key, int keySize,
void* heap, int declaredDevId)
{
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_ECC_PAIR_P256_ID)
if (keySize == 32) {
return wc_ecc_init_id(key, benchEccPairP256Id,
benchEccPairP256IdLen, heap, declaredDevId);
}
#endif
#if defined(WOLF_PRIVATE_KEY_ID) && defined(WC_TEST_ECC_PAIR_P521_ID)
if (keySize == 66) {
return wc_ecc_init_id(key, benchEccPairP521Id,
benchEccPairP521IdLen, heap, declaredDevId);
}
#endif
(void)keySize;
return wc_ecc_init_ex(key, heap, declaredDevId);
}
#endif /* HAVE_ECC */


#ifndef NO_AES

#ifdef HAVE_AES_CBC
Expand All @@ -5015,8 +5154,9 @@ static void bench_aescbc_internal(int useDeviceID,

/* init keys */
for (i = 0; i < BENCH_MAX_PENDING; i++) {
if ((ret = wc_AesInit(enc[i], HEAP_HINT,
useDeviceID ? devId: INVALID_DEVID)) != 0) {
ret = bench_AesCbcInit(enc[i], HEAP_HINT,
useDeviceID ? devId : INVALID_DEVID);
if (ret != 0) {
printf("AesInit failed at L%d, ret = %d\n", __LINE__, ret);
goto exit;
}
Expand Down Expand Up @@ -5084,8 +5224,8 @@ static void bench_aescbc_internal(int useDeviceID,

/* init keys */
for (i = 0; i < BENCH_MAX_PENDING; i++) {
ret = wc_AesInit(enc[i], HEAP_HINT,
useDeviceID ? devId: INVALID_DEVID);
ret = bench_AesCbcInit(enc[i], HEAP_HINT,
useDeviceID ? devId : INVALID_DEVID);
if (ret != 0) {
printf("AesInit failed at L%d, ret = %d\n", __LINE__, ret);
goto exit;
Expand Down Expand Up @@ -5206,8 +5346,9 @@ static void bench_aesgcm_internal(int useDeviceID,

/* init keys */
for (i = 0; i < BENCH_MAX_PENDING; i++) {
if ((ret = wc_AesInit(enc[i], HEAP_HINT,
useDeviceID ? devId: INVALID_DEVID)) != 0) {
ret = bench_AesGcmInit(enc[i], HEAP_HINT,
useDeviceID ? devId : INVALID_DEVID);
if (ret != 0) {
printf("AesInit failed at L%d, ret = %d\n", __LINE__, ret);
goto exit;
}
Expand Down Expand Up @@ -5291,8 +5432,9 @@ static void bench_aesgcm_internal(int useDeviceID,

/* init keys */
for (i = 0; i < BENCH_MAX_PENDING; i++) {
if ((ret = wc_AesInit(dec[i], HEAP_HINT,
useDeviceID ? devId: INVALID_DEVID)) != 0) {
ret = bench_AesGcmInit(dec[i], HEAP_HINT,
useDeviceID ? devId : INVALID_DEVID);
if (ret != 0) {
printf("AesInit failed at L%d, ret = %d\n", __LINE__, ret);
goto exit;
}
Expand Down Expand Up @@ -5704,7 +5846,7 @@ static void bench_aesecb_internal(int useDeviceID,

/* init keys */
for (i = 0; i < BENCH_MAX_PENDING; i++) {
if ((ret = wc_AesInit(enc[i], HEAP_HINT,
if ((ret = bench_AesEcbInit(enc[i], HEAP_HINT,
useDeviceID ? devId: INVALID_DEVID)) != 0) {
printf("AesInit failed at L%d, ret = %d\n", __LINE__, ret);
goto exit;
Expand Down Expand Up @@ -9099,7 +9241,7 @@ static void bench_cmac_helper(word32 keySz, const char* outMsg, int useDeviceID)
#ifdef HAVE_FIPS
ret = wc_InitCmac(&cmac, bench_key, keySz, WC_CMAC_AES, NULL);
#else
ret = wc_InitCmac_ex(&cmac, bench_key, keySz, WC_CMAC_AES, NULL,
ret = bench_CmacInit(&cmac, bench_key, keySz, WC_CMAC_AES, NULL,
HEAP_HINT, useDeviceID ? devId : INVALID_DEVID);
#endif
if (ret != 0) {
Expand Down Expand Up @@ -10163,7 +10305,7 @@ void bench_rsa(int useDeviceID)
/* init keys */
for (i = 0; i < BENCH_MAX_PENDING; i++) {
/* setup an async context for each key */
ret = wc_InitRsaKey_ex(rsaKey[i], HEAP_HINT,
ret = bench_RsaInit(rsaKey[i], HEAP_HINT,
useDeviceID ? devId : INVALID_DEVID);
if (ret < 0) {
goto exit;
Expand Down Expand Up @@ -12347,7 +12489,8 @@ void bench_ecc(int useDeviceID, int curveId)
/* init keys */
for (i = 0; i < BENCH_MAX_PENDING; i++) {
/* setup an context for each key */
if ((ret = wc_ecc_init_ex(genKey[i], HEAP_HINT, deviceID)) < 0) {
if ((ret = bench_EccInit_Pair(genKey[i], keySize, HEAP_HINT,
deviceID)) < 0) {
goto exit;
}
ret = wc_ecc_make_key_ex(&gRng, keySize, genKey[i], curveId);
Expand Down
55 changes: 52 additions & 3 deletions wolfcrypt/src/aes.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13555,27 +13555,76 @@ int wc_AesCcmEncrypt_ex(Aes* aes, byte* out, const byte* in, word32 sz,
#endif /* HAVE_AESCCM */

#ifndef WC_NO_CONSTRUCTORS
Aes* wc_AesNew(void* heap, int devId, int *result_code)

#define AES_NEW_INIT_PLAIN 0
#ifdef WOLF_PRIVATE_KEY_ID
#define AES_NEW_INIT_ID 1
#define AES_NEW_INIT_LABEL 2
#endif

static Aes* _AesNew_common(void* heap, int devId, int *result_code,
int aesInitType, void* aesInitData,
int aesInitDataLen)
{
int ret;
Aes* aes = (Aes*)XMALLOC(sizeof(Aes), heap, DYNAMIC_TYPE_AES);
if (aes == NULL) {
ret = MEMORY_E;
}
else {
ret = wc_AesInit(aes, heap, devId);
switch (aesInitType) {
#ifdef WOLF_PRIVATE_KEY_ID
case AES_NEW_INIT_ID:
ret = wc_AesInit_Id(aes, (unsigned char*)aesInitData,
aesInitDataLen, heap, devId);
break;
case AES_NEW_INIT_LABEL:
ret = wc_AesInit_Label(aes, (const char*)aesInitData,
heap, devId);
break;
#endif
default:
ret = wc_AesInit(aes, heap, devId);
break;
}
if (ret != 0) {
XFREE(aes, heap, DYNAMIC_TYPE_AES);
aes = NULL;
}
}
(void)aesInitType;
(void)aesInitData;
(void)aesInitDataLen;

if (result_code != NULL)
if (result_code != NULL) {
*result_code = ret;
}

return aes;
}

Aes* wc_AesNew(void* heap, int devId, int *result_code)
{
return _AesNew_common(heap, devId, result_code,
AES_NEW_INIT_PLAIN, NULL, 0);
}

#ifdef WOLF_PRIVATE_KEY_ID
Aes* wc_AesNew_Id(unsigned char* id, int len, void* heap, int devId,
int *result_code)
{
return _AesNew_common(heap, devId, result_code,
AES_NEW_INIT_ID, id, len);
}

Aes* wc_AesNew_Label(const char* label, void* heap, int devId,
int *result_code)
{
return _AesNew_common(heap, devId, result_code,
AES_NEW_INIT_LABEL, (void*)label, 0);
}
#endif /* WOLF_PRIVATE_KEY_ID */

int wc_AesDelete(Aes *aes, Aes** aes_p)
{
if (aes == NULL)
Expand Down
Loading
Loading