diff options
Diffstat (limited to 'src/lib/libcrypto/asn1/a_sign.c')
-rw-r--r-- | src/lib/libcrypto/asn1/a_sign.c | 240 |
1 files changed, 0 insertions, 240 deletions
diff --git a/src/lib/libcrypto/asn1/a_sign.c b/src/lib/libcrypto/asn1/a_sign.c deleted file mode 100644 index d9385312a7..0000000000 --- a/src/lib/libcrypto/asn1/a_sign.c +++ /dev/null | |||
@@ -1,240 +0,0 @@ | |||
1 | /* $OpenBSD: a_sign.c,v 1.20 2015/07/19 18:29:31 miod Exp $ */ | ||
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | ||
3 | * All rights reserved. | ||
4 | * | ||
5 | * This package is an SSL implementation written | ||
6 | * by Eric Young (eay@cryptsoft.com). | ||
7 | * The implementation was written so as to conform with Netscapes SSL. | ||
8 | * | ||
9 | * This library is free for commercial and non-commercial use as long as | ||
10 | * the following conditions are aheared to. The following conditions | ||
11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
13 | * included with this distribution is covered by the same copyright terms | ||
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
15 | * | ||
16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
17 | * the code are not to be removed. | ||
18 | * If this package is used in a product, Eric Young should be given attribution | ||
19 | * as the author of the parts of the library used. | ||
20 | * This can be in the form of a textual message at program startup or | ||
21 | * in documentation (online or textual) provided with the package. | ||
22 | * | ||
23 | * Redistribution and use in source and binary forms, with or without | ||
24 | * modification, are permitted provided that the following conditions | ||
25 | * are met: | ||
26 | * 1. Redistributions of source code must retain the copyright | ||
27 | * notice, this list of conditions and the following disclaimer. | ||
28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
29 | * notice, this list of conditions and the following disclaimer in the | ||
30 | * documentation and/or other materials provided with the distribution. | ||
31 | * 3. All advertising materials mentioning features or use of this software | ||
32 | * must display the following acknowledgement: | ||
33 | * "This product includes cryptographic software written by | ||
34 | * Eric Young (eay@cryptsoft.com)" | ||
35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
36 | * being used are not cryptographic related :-). | ||
37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
38 | * the apps directory (application code) you must include an acknowledgement: | ||
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
40 | * | ||
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
51 | * SUCH DAMAGE. | ||
52 | * | ||
53 | * The licence and distribution terms for any publically available version or | ||
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
55 | * copied and put under another distribution licence | ||
56 | * [including the GNU Public Licence.] | ||
57 | */ | ||
58 | /* ==================================================================== | ||
59 | * Copyright (c) 1998-2003 The OpenSSL Project. All rights reserved. | ||
60 | * | ||
61 | * Redistribution and use in source and binary forms, with or without | ||
62 | * modification, are permitted provided that the following conditions | ||
63 | * are met: | ||
64 | * | ||
65 | * 1. Redistributions of source code must retain the above copyright | ||
66 | * notice, this list of conditions and the following disclaimer. | ||
67 | * | ||
68 | * 2. Redistributions in binary form must reproduce the above copyright | ||
69 | * notice, this list of conditions and the following disclaimer in | ||
70 | * the documentation and/or other materials provided with the | ||
71 | * distribution. | ||
72 | * | ||
73 | * 3. All advertising materials mentioning features or use of this | ||
74 | * software must display the following acknowledgment: | ||
75 | * "This product includes software developed by the OpenSSL Project | ||
76 | * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" | ||
77 | * | ||
78 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
79 | * endorse or promote products derived from this software without | ||
80 | * prior written permission. For written permission, please contact | ||
81 | * openssl-core@openssl.org. | ||
82 | * | ||
83 | * 5. Products derived from this software may not be called "OpenSSL" | ||
84 | * nor may "OpenSSL" appear in their names without prior written | ||
85 | * permission of the OpenSSL Project. | ||
86 | * | ||
87 | * 6. Redistributions of any form whatsoever must retain the following | ||
88 | * acknowledgment: | ||
89 | * "This product includes software developed by the OpenSSL Project | ||
90 | * for use in the OpenSSL Toolkit (http://www.openssl.org/)" | ||
91 | * | ||
92 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
93 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
94 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
95 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
96 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
97 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
98 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
99 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
100 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
101 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
102 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
103 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
104 | * ==================================================================== | ||
105 | * | ||
106 | * This product includes cryptographic software written by Eric Young | ||
107 | * (eay@cryptsoft.com). This product includes software written by Tim | ||
108 | * Hudson (tjh@cryptsoft.com). | ||
109 | * | ||
110 | */ | ||
111 | |||
112 | #include <sys/types.h> | ||
113 | |||
114 | #include <stdio.h> | ||
115 | #include <time.h> | ||
116 | |||
117 | #include <openssl/bn.h> | ||
118 | #include <openssl/buffer.h> | ||
119 | #include <openssl/err.h> | ||
120 | #include <openssl/evp.h> | ||
121 | #include <openssl/objects.h> | ||
122 | #include <openssl/x509.h> | ||
123 | |||
124 | #include "asn1_locl.h" | ||
125 | |||
126 | int | ||
127 | ASN1_item_sign(const ASN1_ITEM *it, X509_ALGOR *algor1, X509_ALGOR *algor2, | ||
128 | ASN1_BIT_STRING *signature, void *asn, EVP_PKEY *pkey, const EVP_MD *type) | ||
129 | { | ||
130 | EVP_MD_CTX ctx; | ||
131 | EVP_MD_CTX_init(&ctx); | ||
132 | if (!EVP_DigestSignInit(&ctx, NULL, type, NULL, pkey)) { | ||
133 | EVP_MD_CTX_cleanup(&ctx); | ||
134 | return 0; | ||
135 | } | ||
136 | return ASN1_item_sign_ctx(it, algor1, algor2, signature, asn, &ctx); | ||
137 | } | ||
138 | |||
139 | |||
140 | int | ||
141 | ASN1_item_sign_ctx(const ASN1_ITEM *it, X509_ALGOR *algor1, X509_ALGOR *algor2, | ||
142 | ASN1_BIT_STRING *signature, void *asn, EVP_MD_CTX *ctx) | ||
143 | { | ||
144 | const EVP_MD *type; | ||
145 | EVP_PKEY *pkey; | ||
146 | unsigned char *buf_in = NULL, *buf_out = NULL; | ||
147 | size_t inl = 0, outl = 0, outll = 0; | ||
148 | int signid, paramtype; | ||
149 | int rv; | ||
150 | |||
151 | type = EVP_MD_CTX_md(ctx); | ||
152 | pkey = EVP_PKEY_CTX_get0_pkey(ctx->pctx); | ||
153 | |||
154 | if (!type || !pkey) { | ||
155 | ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX, | ||
156 | ASN1_R_CONTEXT_NOT_INITIALISED); | ||
157 | return 0; | ||
158 | } | ||
159 | |||
160 | if (pkey->ameth->item_sign) { | ||
161 | rv = pkey->ameth->item_sign(ctx, it, asn, algor1, algor2, | ||
162 | signature); | ||
163 | if (rv == 1) | ||
164 | outl = signature->length; | ||
165 | /* Return value meanings: | ||
166 | * <=0: error. | ||
167 | * 1: method does everything. | ||
168 | * 2: carry on as normal. | ||
169 | * 3: ASN1 method sets algorithm identifiers: just sign. | ||
170 | */ | ||
171 | if (rv <= 0) | ||
172 | ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX, ERR_R_EVP_LIB); | ||
173 | if (rv <= 1) | ||
174 | goto err; | ||
175 | } else | ||
176 | rv = 2; | ||
177 | |||
178 | if (rv == 2) { | ||
179 | if (type->flags & EVP_MD_FLAG_PKEY_METHOD_SIGNATURE) { | ||
180 | if (!pkey->ameth || | ||
181 | !OBJ_find_sigid_by_algs(&signid, | ||
182 | EVP_MD_nid(type), pkey->ameth->pkey_id)) { | ||
183 | ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX, | ||
184 | ASN1_R_DIGEST_AND_KEY_TYPE_NOT_SUPPORTED); | ||
185 | return 0; | ||
186 | } | ||
187 | } else | ||
188 | signid = type->pkey_type; | ||
189 | |||
190 | if (pkey->ameth->pkey_flags & ASN1_PKEY_SIGPARAM_NULL) | ||
191 | paramtype = V_ASN1_NULL; | ||
192 | else | ||
193 | paramtype = V_ASN1_UNDEF; | ||
194 | |||
195 | if (algor1) | ||
196 | X509_ALGOR_set0(algor1, | ||
197 | OBJ_nid2obj(signid), paramtype, NULL); | ||
198 | if (algor2) | ||
199 | X509_ALGOR_set0(algor2, | ||
200 | OBJ_nid2obj(signid), paramtype, NULL); | ||
201 | |||
202 | } | ||
203 | |||
204 | inl = ASN1_item_i2d(asn, &buf_in, it); | ||
205 | outll = outl = EVP_PKEY_size(pkey); | ||
206 | buf_out = malloc(outl); | ||
207 | if ((buf_in == NULL) || (buf_out == NULL)) { | ||
208 | outl = 0; | ||
209 | ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX, ERR_R_MALLOC_FAILURE); | ||
210 | goto err; | ||
211 | } | ||
212 | |||
213 | if (!EVP_DigestSignUpdate(ctx, buf_in, inl) || | ||
214 | !EVP_DigestSignFinal(ctx, buf_out, &outl)) { | ||
215 | outl = 0; | ||
216 | ASN1err(ASN1_F_ASN1_ITEM_SIGN_CTX, ERR_R_EVP_LIB); | ||
217 | goto err; | ||
218 | } | ||
219 | free(signature->data); | ||
220 | signature->data = buf_out; | ||
221 | buf_out = NULL; | ||
222 | signature->length = outl; | ||
223 | /* In the interests of compatibility, I'll make sure that | ||
224 | * the bit string has a 'not-used bits' value of 0 | ||
225 | */ | ||
226 | signature->flags &= ~(ASN1_STRING_FLAG_BITS_LEFT|0x07); | ||
227 | signature->flags |= ASN1_STRING_FLAG_BITS_LEFT; | ||
228 | |||
229 | err: | ||
230 | EVP_MD_CTX_cleanup(ctx); | ||
231 | if (buf_in != NULL) { | ||
232 | OPENSSL_cleanse((char *)buf_in, inl); | ||
233 | free(buf_in); | ||
234 | } | ||
235 | if (buf_out != NULL) { | ||
236 | OPENSSL_cleanse((char *)buf_out, outll); | ||
237 | free(buf_out); | ||
238 | } | ||
239 | return (outl); | ||
240 | } | ||