summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/dh/dh_ameth.c
diff options
context:
space:
mode:
authorcvs2svn <admin@example.com>2015-03-08 16:48:48 +0000
committercvs2svn <admin@example.com>2015-03-08 16:48:48 +0000
commitda1a9ad3a4a867ba6569c05e6fca66d7f296c553 (patch)
tree44872802e872bdfd60730fa9cf01d9d5751251c1 /src/lib/libcrypto/dh/dh_ameth.c
parent973703db67a8e73d70e63afa8f2cde19da09144d (diff)
downloadopenbsd-OPENBSD_5_7_BASE.tar.gz
openbsd-OPENBSD_5_7_BASE.tar.bz2
openbsd-OPENBSD_5_7_BASE.zip
This commit was manufactured by cvs2git to create tag 'OPENBSD_5_7_BASE'.OPENBSD_5_7_BASE
Diffstat (limited to 'src/lib/libcrypto/dh/dh_ameth.c')
-rw-r--r--src/lib/libcrypto/dh/dh_ameth.c493
1 files changed, 0 insertions, 493 deletions
diff --git a/src/lib/libcrypto/dh/dh_ameth.c b/src/lib/libcrypto/dh/dh_ameth.c
deleted file mode 100644
index 24c8bb25ec..0000000000
--- a/src/lib/libcrypto/dh/dh_ameth.c
+++ /dev/null
@@ -1,493 +0,0 @@
1/* $OpenBSD: dh_ameth.c,v 1.13 2015/01/08 01:44:29 doug Exp $ */
2/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
3 * project 2006.
4 */
5/* ====================================================================
6 * Copyright (c) 2006 The OpenSSL Project. All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 *
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 *
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in
17 * the documentation and/or other materials provided with the
18 * distribution.
19 *
20 * 3. All advertising materials mentioning features or use of this
21 * software must display the following acknowledgment:
22 * "This product includes software developed by the OpenSSL Project
23 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
24 *
25 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26 * endorse or promote products derived from this software without
27 * prior written permission. For written permission, please contact
28 * licensing@OpenSSL.org.
29 *
30 * 5. Products derived from this software may not be called "OpenSSL"
31 * nor may "OpenSSL" appear in their names without prior written
32 * permission of the OpenSSL Project.
33 *
34 * 6. Redistributions of any form whatsoever must retain the following
35 * acknowledgment:
36 * "This product includes software developed by the OpenSSL Project
37 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
38 *
39 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
43 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50 * OF THE POSSIBILITY OF SUCH DAMAGE.
51 * ====================================================================
52 *
53 * This product includes cryptographic software written by Eric Young
54 * (eay@cryptsoft.com). This product includes software written by Tim
55 * Hudson (tjh@cryptsoft.com).
56 *
57 */
58
59#include <stdio.h>
60
61#include <openssl/asn1.h>
62#include <openssl/bn.h>
63#include <openssl/dh.h>
64#include <openssl/err.h>
65#include <openssl/x509.h>
66
67#include "asn1_locl.h"
68
69static void
70int_dh_free(EVP_PKEY *pkey)
71{
72 DH_free(pkey->pkey.dh);
73}
74
75static int
76dh_pub_decode(EVP_PKEY *pkey, X509_PUBKEY *pubkey)
77{
78 const unsigned char *p, *pm;
79 int pklen, pmlen;
80 int ptype;
81 void *pval;
82 ASN1_STRING *pstr;
83 X509_ALGOR *palg;
84 ASN1_INTEGER *public_key = NULL;
85 DH *dh = NULL;
86
87 if (!X509_PUBKEY_get0_param(NULL, &p, &pklen, &palg, pubkey))
88 return 0;
89 X509_ALGOR_get0(NULL, &ptype, &pval, palg);
90
91 if (ptype != V_ASN1_SEQUENCE) {
92 DHerr(DH_F_DH_PUB_DECODE, DH_R_PARAMETER_ENCODING_ERROR);
93 goto err;
94 }
95
96 pstr = pval;
97 pm = pstr->data;
98 pmlen = pstr->length;
99
100 if (!(dh = d2i_DHparams(NULL, &pm, pmlen))) {
101 DHerr(DH_F_DH_PUB_DECODE, DH_R_DECODE_ERROR);
102 goto err;
103 }
104
105 if (!(public_key=d2i_ASN1_INTEGER(NULL, &p, pklen))) {
106 DHerr(DH_F_DH_PUB_DECODE, DH_R_DECODE_ERROR);
107 goto err;
108 }
109
110 /* We have parameters now set public key */
111 if (!(dh->pub_key = ASN1_INTEGER_to_BN(public_key, NULL))) {
112 DHerr(DH_F_DH_PUB_DECODE, DH_R_BN_DECODE_ERROR);
113 goto err;
114 }
115
116 ASN1_INTEGER_free(public_key);
117 EVP_PKEY_assign_DH(pkey, dh);
118 return 1;
119
120err:
121 if (public_key)
122 ASN1_INTEGER_free(public_key);
123 DH_free(dh);
124 return 0;
125}
126
127static int
128dh_pub_encode(X509_PUBKEY *pk, const EVP_PKEY *pkey)
129{
130 DH *dh;
131 int ptype;
132 unsigned char *penc = NULL;
133 int penclen;
134 ASN1_STRING *str;
135 ASN1_INTEGER *pub_key = NULL;
136
137 dh=pkey->pkey.dh;
138
139 str = ASN1_STRING_new();
140 if (str == NULL) {
141 DHerr(DH_F_DH_PUB_ENCODE, ERR_R_MALLOC_FAILURE);
142 goto err;
143 }
144
145 str->length = i2d_DHparams(dh, &str->data);
146 if (str->length <= 0) {
147 DHerr(DH_F_DH_PUB_ENCODE, ERR_R_MALLOC_FAILURE);
148 goto err;
149 }
150 ptype = V_ASN1_SEQUENCE;
151
152 pub_key = BN_to_ASN1_INTEGER(dh->pub_key, NULL);
153 if (!pub_key)
154 goto err;
155
156 penclen = i2d_ASN1_INTEGER(pub_key, &penc);
157
158 ASN1_INTEGER_free(pub_key);
159
160 if (penclen <= 0) {
161 DHerr(DH_F_DH_PUB_ENCODE, ERR_R_MALLOC_FAILURE);
162 goto err;
163 }
164
165 if (X509_PUBKEY_set0_param(pk, OBJ_nid2obj(EVP_PKEY_DH), ptype,
166 (void *)str, penc, penclen))
167 return 1;
168
169err:
170 free(penc);
171 ASN1_STRING_free(str);
172
173 return 0;
174}
175
176/*
177 * PKCS#8 DH is defined in PKCS#11 of all places. It is similar to DH in
178 * that the AlgorithmIdentifier contains the paramaters, the private key
179 * is explcitly included and the pubkey must be recalculated.
180 */
181
182static int
183dh_priv_decode(EVP_PKEY *pkey, PKCS8_PRIV_KEY_INFO *p8)
184{
185 const unsigned char *p, *pm;
186 int pklen, pmlen;
187 int ptype;
188 void *pval;
189 ASN1_STRING *pstr;
190 X509_ALGOR *palg;
191 ASN1_INTEGER *privkey = NULL;
192 DH *dh = NULL;
193
194 if (!PKCS8_pkey_get0(NULL, &p, &pklen, &palg, p8))
195 return 0;
196
197 X509_ALGOR_get0(NULL, &ptype, &pval, palg);
198
199 if (ptype != V_ASN1_SEQUENCE)
200 goto decerr;
201
202 if (!(privkey=d2i_ASN1_INTEGER(NULL, &p, pklen)))
203 goto decerr;
204
205 pstr = pval;
206 pm = pstr->data;
207 pmlen = pstr->length;
208 if (!(dh = d2i_DHparams(NULL, &pm, pmlen)))
209 goto decerr;
210 /* We have parameters now set private key */
211 if (!(dh->priv_key = ASN1_INTEGER_to_BN(privkey, NULL))) {
212 DHerr(DH_F_DH_PRIV_DECODE, DH_R_BN_ERROR);
213 goto dherr;
214 }
215 /* Calculate public key */
216 if (!DH_generate_key(dh))
217 goto dherr;
218
219 EVP_PKEY_assign_DH(pkey, dh);
220
221 ASN1_INTEGER_free(privkey);
222
223 return 1;
224
225decerr:
226 DHerr(DH_F_DH_PRIV_DECODE, EVP_R_DECODE_ERROR);
227dherr:
228 DH_free(dh);
229 return 0;
230}
231
232static int
233dh_priv_encode(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pkey)
234{
235 ASN1_STRING *params = NULL;
236 ASN1_INTEGER *prkey = NULL;
237 unsigned char *dp = NULL;
238 int dplen;
239
240 params = ASN1_STRING_new();
241
242 if (!params) {
243 DHerr(DH_F_DH_PRIV_ENCODE, ERR_R_MALLOC_FAILURE);
244 goto err;
245 }
246
247 params->length = i2d_DHparams(pkey->pkey.dh, &params->data);
248 if (params->length <= 0) {
249 DHerr(DH_F_DH_PRIV_ENCODE,ERR_R_MALLOC_FAILURE);
250 goto err;
251 }
252 params->type = V_ASN1_SEQUENCE;
253
254 /* Get private key into integer */
255 prkey = BN_to_ASN1_INTEGER(pkey->pkey.dh->priv_key, NULL);
256
257 if (!prkey) {
258 DHerr(DH_F_DH_PRIV_ENCODE, DH_R_BN_ERROR);
259 goto err;
260 }
261
262 dplen = i2d_ASN1_INTEGER(prkey, &dp);
263
264 ASN1_INTEGER_free(prkey);
265 prkey = NULL;
266
267 if (!PKCS8_pkey_set0(p8, OBJ_nid2obj(NID_dhKeyAgreement), 0,
268 V_ASN1_SEQUENCE, params, dp, dplen))
269 goto err;
270
271 return 1;
272
273err:
274 free(dp);
275 ASN1_STRING_free(params);
276 ASN1_INTEGER_free(prkey);
277 return 0;
278}
279
280static void
281update_buflen(const BIGNUM *b, size_t *pbuflen)
282{
283 size_t i;
284
285 if (!b)
286 return;
287 if (*pbuflen < (i = (size_t)BN_num_bytes(b)))
288 *pbuflen = i;
289}
290
291static int
292dh_param_decode(EVP_PKEY *pkey, const unsigned char **pder, int derlen)
293{
294 DH *dh;
295
296 if (!(dh = d2i_DHparams(NULL, pder, derlen))) {
297 DHerr(DH_F_DH_PARAM_DECODE, ERR_R_DH_LIB);
298 return 0;
299 }
300 EVP_PKEY_assign_DH(pkey, dh);
301 return 1;
302}
303
304static int
305dh_param_encode(const EVP_PKEY *pkey, unsigned char **pder)
306{
307 return i2d_DHparams(pkey->pkey.dh, pder);
308}
309
310static int
311do_dh_print(BIO *bp, const DH *x, int indent, ASN1_PCTX *ctx, int ptype)
312{
313 unsigned char *m = NULL;
314 int reason = ERR_R_BUF_LIB, ret = 0;
315 size_t buf_len = 0;
316 const char *ktype = NULL;
317 BIGNUM *priv_key, *pub_key;
318
319 if (ptype == 2)
320 priv_key = x->priv_key;
321 else
322 priv_key = NULL;
323
324 if (ptype > 0)
325 pub_key = x->pub_key;
326 else
327 pub_key = NULL;
328
329 update_buflen(x->p, &buf_len);
330
331 if (buf_len == 0) {
332 reason = ERR_R_PASSED_NULL_PARAMETER;
333 goto err;
334 }
335
336 update_buflen(x->g, &buf_len);
337 update_buflen(pub_key, &buf_len);
338 update_buflen(priv_key, &buf_len);
339
340 if (ptype == 2)
341 ktype = "PKCS#3 DH Private-Key";
342 else if (ptype == 1)
343 ktype = "PKCS#3 DH Public-Key";
344 else
345 ktype = "PKCS#3 DH Parameters";
346
347 m= malloc(buf_len + 10);
348 if (m == NULL) {
349 reason = ERR_R_MALLOC_FAILURE;
350 goto err;
351 }
352
353 BIO_indent(bp, indent, 128);
354 if (BIO_printf(bp, "%s: (%d bit)\n", ktype, BN_num_bits(x->p)) <= 0)
355 goto err;
356 indent += 4;
357
358 if (!ASN1_bn_print(bp, "private-key:", priv_key, m, indent))
359 goto err;
360 if (!ASN1_bn_print(bp, "public-key:", pub_key, m, indent))
361 goto err;
362
363 if (!ASN1_bn_print(bp, "prime:", x->p, m, indent))
364 goto err;
365 if (!ASN1_bn_print(bp, "generator:", x->g, m, indent))
366 goto err;
367 if (x->length != 0) {
368 BIO_indent(bp, indent, 128);
369 if (BIO_printf(bp, "recommended-private-length: %d bits\n",
370 (int)x->length) <= 0)
371 goto err;
372 }
373
374 ret = 1;
375 if (0) {
376err:
377 DHerr(DH_F_DO_DH_PRINT,reason);
378 }
379 free(m);
380 return(ret);
381}
382
383static int
384int_dh_size(const EVP_PKEY *pkey)
385{
386 return DH_size(pkey->pkey.dh);
387}
388
389static int
390dh_bits(const EVP_PKEY *pkey)
391{
392 return BN_num_bits(pkey->pkey.dh->p);
393}
394
395static int
396dh_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b)
397{
398 if (BN_cmp(a->pkey.dh->p, b->pkey.dh->p) ||
399 BN_cmp(a->pkey.dh->g, b->pkey.dh->g))
400 return 0;
401 else
402 return 1;
403}
404
405static int
406dh_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from)
407{
408 BIGNUM *a;
409
410 if ((a = BN_dup(from->pkey.dh->p)) == NULL)
411 return 0;
412 BN_free(to->pkey.dh->p);
413 to->pkey.dh->p = a;
414
415 if ((a = BN_dup(from->pkey.dh->g)) == NULL)
416 return 0;
417 BN_free(to->pkey.dh->g);
418 to->pkey.dh->g = a;
419
420 return 1;
421}
422
423static int
424dh_missing_parameters(const EVP_PKEY *a)
425{
426 if (!a->pkey.dh->p || !a->pkey.dh->g)
427 return 1;
428 return 0;
429}
430
431static int
432dh_pub_cmp(const EVP_PKEY *a, const EVP_PKEY *b)
433{
434 if (dh_cmp_parameters(a, b) == 0)
435 return 0;
436 if (BN_cmp(b->pkey.dh->pub_key, a->pkey.dh->pub_key) != 0)
437 return 0;
438 else
439 return 1;
440}
441
442static int
443dh_param_print(BIO *bp, const EVP_PKEY *pkey, int indent, ASN1_PCTX *ctx)
444{
445 return do_dh_print(bp, pkey->pkey.dh, indent, ctx, 0);
446}
447
448static int
449dh_public_print(BIO *bp, const EVP_PKEY *pkey, int indent, ASN1_PCTX *ctx)
450{
451 return do_dh_print(bp, pkey->pkey.dh, indent, ctx, 1);
452}
453
454static int
455dh_private_print(BIO *bp, const EVP_PKEY *pkey, int indent, ASN1_PCTX *ctx)
456{
457 return do_dh_print(bp, pkey->pkey.dh, indent, ctx, 2);
458}
459
460int
461DHparams_print(BIO *bp, const DH *x)
462{
463 return do_dh_print(bp, x, 4, NULL, 0);
464}
465
466const EVP_PKEY_ASN1_METHOD dh_asn1_meth = {
467 .pkey_id = EVP_PKEY_DH,
468 .pkey_base_id = EVP_PKEY_DH,
469
470 .pem_str = "DH",
471 .info = "OpenSSL PKCS#3 DH method",
472
473 .pub_decode = dh_pub_decode,
474 .pub_encode = dh_pub_encode,
475 .pub_cmp = dh_pub_cmp,
476 .pub_print = dh_public_print,
477
478 .priv_decode = dh_priv_decode,
479 .priv_encode = dh_priv_encode,
480 .priv_print = dh_private_print,
481
482 .pkey_size = int_dh_size,
483 .pkey_bits = dh_bits,
484
485 .param_decode = dh_param_decode,
486 .param_encode = dh_param_encode,
487 .param_missing = dh_missing_parameters,
488 .param_copy = dh_copy_parameters,
489 .param_cmp = dh_cmp_parameters,
490 .param_print = dh_param_print,
491
492 .pkey_free = int_dh_free,
493};
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-12-25 11:13:53 +0000