/* deinitialization */
VOID
OnUnload(IN PDRIVER_OBJECT DriverObject)
{
#ifndef USE_TDI_HOOKING
d_n_d_device(DriverObject, g_tcpoldobj, g_tcpfltobj);
d_n_d_device(DriverObject, g_udpoldobj, g_udpfltobj);
d_n_d_device(DriverObject, g_ipoldobj, g_ipfltobj);
#else
if (g_hooked)
hook_tcpip(&g_old_DriverObject, FALSE);
#endif
// delete control device and symbolic link
if (g_devcontrol != NULL) {
UNICODE_STRING linkname;
RtlInitUnicodeString(&linkname, L"\\??\\tdifw");
IoDeleteSymbolicLink(&linkname);
IoDeleteDevice(g_devcontrol);
}
// delete info device and symbolic link
if (g_devnfo != NULL) {
UNICODE_STRING linkname;
RtlInitUnicodeString(&linkname, L"\\??\\tdifw_nfo");
IoDeleteSymbolicLink(&linkname);
IoDeleteDevice(g_devnfo);
}
filter_free();
ot_free();
conn_state_free(); // call after ot_free()
memtrack_free();
}
/*
* Runs sender operations for Naor-Pinkas semi-honest OT
*/
int
ot_np_send(struct state *st, void *msgs, int maxlength, int num_ots, int N,
ot_msg_reader ot_msg_reader, ot_item_reader ot_item_reader)
{
mpz_t r, gr, pk, pk0;
mpz_t *Cs = NULL, *Crs = NULL, *pk0s = NULL;
char buf[field_size], *msg = NULL;
int err = 0;
double start, end;
#ifdef AES_HW
fprintf(stderr, "OT-NP: Using AESNI\n");
#endif
#ifdef SHA
fprintf(stderr, "OT-NP: Using SHA-1\n");
#endif
start = current_time();
mpz_inits(r, gr, pk, pk0, NULL);
msg = (char *) ot_malloc(sizeof(char) * maxlength);
if (msg == NULL)
ERROR;
Cs = (mpz_t *) ot_malloc(sizeof(mpz_t) * (N - 1));
if (Cs == NULL)
ERROR;
Crs = (mpz_t *) ot_malloc(sizeof(mpz_t) * (N - 1));
if (Crs == NULL)
ERROR;
pk0s = (mpz_t *) ot_malloc(sizeof(mpz_t) * num_ots);
if (pk0s == NULL)
ERROR;
for (int i = 0; i < num_ots; ++i) {
mpz_init(pk0s[i]);
}
#ifdef AES_HW
AES_KEY key;
AES_set_encrypt_key((unsigned char *) "abcd", 128, &key);
#endif
// choose r \in_R Zq
random_element(r, &st->p);
// compute g^r
mpz_powm(gr, st->p.g, r, st->p.p);
// choose C_i's \in_R Zq
for (int i = 0; i < N - 1; ++i) {
mpz_inits(Cs[i], Crs[i], NULL);
random_element(Cs[i], &st->p);
}
end = current_time();
fprintf(stderr, "Initialization: %f\n", end - start);
// send g^r to receiver
start = current_time();
mpz_to_array(buf, gr, sizeof buf);
if (sendall(st->sockfd, buf, sizeof buf) == -1)
ERROR;
end = current_time();
fprintf(stderr, "Send g^r to receiver: %f\n", end - start);
// send Cs to receiver
start = current_time();
for (int i = 0; i < N - 1; ++i) {
mpz_to_array(buf, Cs[i], sizeof buf);
if (sendall(st->sockfd, buf, sizeof buf) == -1)
ERROR;
}
end = current_time();
fprintf(stderr, "Send Cs to receiver: %f\n", end - start);
start = current_time();
for (int i = 0; i < N - 1; ++i) {
// compute C_i^r
mpz_powm(Crs[i], Cs[i], r, st->p.p);
}
end = current_time();
fprintf(stderr, "Compute C_i^r: %f\n", end - start);
start = current_time();
for (int j = 0; j < num_ots; ++j) {
// get pk0 from receiver
if (recvall(st->sockfd, buf, sizeof buf) == -1)
ERROR;
array_to_mpz(pk0s[j], buf, sizeof buf);
}
end = current_time();
fprintf(stderr, "Get pk0 from receiver: %f\n", end - start);
for (int j = 0; j < num_ots; ++j) {
void *ot = ot_msg_reader(msgs, j);
for (int i = 0; i < N; ++i) {
char *item;
ssize_t itemlength;
if (i == 0) {
// compute pk0^r
mpz_powm(pk0, pk0s[j], r, st->p.p);
mpz_to_array(buf, pk0, sizeof buf);
(void) mpz_invert(pk0, pk0, st->p.p);
} else {
mpz_mul(pk, pk0, Crs[i - 1]);
mpz_mod(pk, pk, st->p.p);
mpz_to_array(buf, pk, sizeof buf);
}
#ifdef AES_HW
if (AES_encrypt_message((unsigned char *) buf, sizeof buf,
(unsigned char *) msg, maxlength, &key))
ERROR;
#endif
#ifdef SHA
(void) memset(msg, '\0', maxlength);
sha1_hash(msg, maxlength, i, (unsigned char *) buf, sizeof buf);
#endif
ot_item_reader(ot, i, &item, &itemlength);
assert(itemlength <= maxlength);
xorarray((unsigned char *) msg, maxlength,
(unsigned char *) item, itemlength);
if (sendall(st->sockfd, msg, maxlength) == -1)
ERROR;
}
}
cleanup:
mpz_clears(r, gr, pk, pk0, NULL);
if (pk0s) {
for (int i = 0; i < num_ots; ++i) {
mpz_clear(pk0s[i]);
}
ot_free(pk0s);
}
if (Crs) {
for (int i = 0; i < N - 1; ++i)
mpz_clear(Crs[i]);
ot_free(Crs);
}
if (Cs) {
for (int i = 0; i < N - 1; ++i)
mpz_clear(Cs[i]);
ot_free(Cs);
}
if (msg)
ot_free(msg);
return err;
}
int
ot_np_recv(struct state *st, void *choices, int nchoices, int maxlength, int N,
void *out,
ot_choice_reader ot_choice_reader, ot_msg_writer ot_msg_writer)
{
mpz_t gr, pk0, pks;
mpz_t *Cs = NULL, *ks = NULL;
char buf[field_size], *from = NULL, *msg = NULL;
int err = 0;
double start, end;
#ifdef AES_HW
fprintf(stderr, "OT-NP: Using AESNI\n");
#endif
#ifdef SHA
fprintf(stderr, "OT-NP: Using SHA-1\n");
#endif
mpz_inits(gr, pk0, pks, NULL);
msg = (char *) ot_malloc(sizeof(char) * maxlength);
if (msg == NULL)
ERROR;
from = (char *) ot_malloc(sizeof(char) * maxlength);
if (from == NULL)
ERROR;
Cs = (mpz_t *) ot_malloc(sizeof(mpz_t) * (N - 1));
if (Cs == NULL)
ERROR;
for (int i = 0; i < N - 1; ++i) {
mpz_init(Cs[i]);
}
ks = (mpz_t *) ot_malloc(sizeof(mpz_t) * nchoices);
if (ks == NULL)
ERROR;
for (int j = 0; j < nchoices; ++j) {
mpz_init(ks[j]);
}
#ifdef AES_HW
AES_KEY key;
AES_set_encrypt_key((unsigned char *) "abcd", 128, &key);
#endif
// get g^r from sender
start = current_time();
if (recvall(st->sockfd, buf, sizeof buf) == -1)
ERROR;
array_to_mpz(gr, buf, sizeof buf);
end = current_time();
fprintf(stderr, "Get g^r from sender: %f\n", end - start);
// get Cs from sender
start = current_time();
for (int i = 0; i < N - 1; ++i) {
if (recvall(st->sockfd, buf, sizeof buf) == -1)
ERROR;
array_to_mpz(Cs[i], buf, sizeof buf);
}
end = current_time();
fprintf(stderr, "Get Cs from sender: %f\n", end - start);
start = current_time();
for (int j = 0; j < nchoices; ++j) {
long choice;
choice = ot_choice_reader(choices, j);
// choose random k
mpz_urandomb(ks[j], st->p.rnd, sizeof buf * 8);
mpz_mod(ks[j], ks[j], st->p.q);
// compute pks = g^k
mpz_powm(pks, st->p.g, ks[j], st->p.p);
// compute pk0 = C_1 / g^k regardless of whether our choice is 0 or 1 to
// avoid a potential side-channel attack
(void) mpz_invert(pk0, pks, st->p.p);
mpz_mul(pk0, pk0, Cs[0]);
mpz_mod(pk0, pk0, st->p.p);
mpz_set(pk0, choice == 0 ? pks : pk0);
mpz_to_array(buf, pk0, sizeof buf);
// send pk0 to sender
if (sendall(st->sockfd, buf, sizeof buf) == -1)
ERROR;
}
end = current_time();
fprintf(stderr, "Send pk0s to sender: %f\n", end - start);
for (int j = 0; j < nchoices; ++j) {
long choice;
choice = ot_choice_reader(choices, j);
// compute decryption key (g^r)^k
mpz_powm(ks[j], gr, ks[j], st->p.p);
for (int i = 0; i < N; ++i) {
mpz_to_array(buf, ks[j], sizeof buf);
// get H xor M0 from sender
if (recvall(st->sockfd, msg, maxlength) == -1)
ERROR;
#ifdef AES_HW
if (AES_encrypt_message((unsigned char *) buf, sizeof buf,
(unsigned char *) from, maxlength, &key))
ERROR;
#endif
#ifdef SHA
(void) memset(from, '\0', maxlength);
sha1_hash(from, maxlength, i, (unsigned char *) buf, sizeof buf);
#endif
xorarray((unsigned char *) msg, maxlength,
(unsigned char *) from, maxlength);
if (i == choice) {
ot_msg_writer(out, j, msg, maxlength);
}
}
}
cleanup:
mpz_clears(gr, pk0, pks, NULL);
if (ks) {
for (int j = 0; j < nchoices; ++j) {
mpz_clear(ks[j]);
}
ot_free(ks);
}
if (Cs) {
for (int i = 0; i < N - 1; ++i)
mpz_clear(Cs[i]);
ot_free(Cs);
}
if (msg)
ot_free(msg);
if (from)
ot_free(from);
return err;
}