mbedtls_pkcs12_pbe_ext() function

PKCS12 Password Based function (encryption / decryption) for cipher-based and mbedtls_md-based PBE's \warning When decrypting: - This function validates the CBC padding and returns #MBEDTLS_ERR_PKCS12_PASSWORD_MISMATCH if the padding is invalid. Note that this can help active adversaries attempting to brute-forcing the password. Note also that there is no guarantee that an invalid password will be detected (the chances of a valid padding with a random password are about 1/255).

Syntax

Show:

Summary

Declaration

Definition

from pkcs12.h:139

int mbedtls_pkcs12_pbe_ext(mbedtls_asn1_buf *pbe_params, int mode, mbedtls_cipher_type_t cipher_type, mbedtls_md_type_t md_type, const unsigned char *pwd, size_t pwdlen, const unsigned char *data, size_t len, unsigned char *output, size_t output_size, size_t *output_len);

Implemented in pkcs12.c:150

Arguments

Argument

Declared as

Description

pbe_params

mbedtls_asn1_buf *

an ASN1 buffer containing the pkcs-12 PbeParams structure

mode

int

either #MBEDTLS_PKCS12_PBE_ENCRYPT or #MBEDTLS_PKCS12_PBE_DECRYPT

cipher_type

mbedtls_cipher_type_t

the cipher used

md_type

mbedtls_md_type_t

the mbedtls_md used

pwd

const unsigned char *

Latin1-encoded password used. This may only be \c NULL when \p pwdlen is 0. No null terminator should be used.

pwdlen

size_t

length of the password (may be 0)

data

const unsigned char *

the input data

len

size_t

data length

output

unsigned char *

Output buffer. On success, it contains the encrypted or decrypted data, possibly followed by the CBC padding. On failure, the content is indeterminate. For decryption, there must be enough room for \p len bytes. For encryption, there must be enough room for \p len + 1 bytes, rounded up to the block size of the block cipher identified by \p pbe_params.

output_size

size_t

size of output buffer. This must be big enough to accommodate for output plus padding data.

output_len

size_t *

On success, length of actual data written to the output buffer.