diff options
Diffstat (limited to 'src/lib/libcrypto/dh')
-rw-r--r-- | src/lib/libcrypto/dh/dh.h | 162 | ||||
-rw-r--r-- | src/lib/libcrypto/dh/dh_check.c | 120 | ||||
-rw-r--r-- | src/lib/libcrypto/dh/dh_err.c | 96 | ||||
-rw-r--r-- | src/lib/libcrypto/dh/dh_gen.c | 150 | ||||
-rw-r--r-- | src/lib/libcrypto/dh/dh_key.c | 142 | ||||
-rw-r--r-- | src/lib/libcrypto/dh/dh_lib.c | 100 |
6 files changed, 770 insertions, 0 deletions
diff --git a/src/lib/libcrypto/dh/dh.h b/src/lib/libcrypto/dh/dh.h new file mode 100644 index 0000000000..4cc1df2650 --- /dev/null +++ b/src/lib/libcrypto/dh/dh.h | |||
@@ -0,0 +1,162 @@ | |||
1 | /* crypto/dh/dh.h */ | ||
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | ||
3 | * All rights reserved. | ||
4 | * | ||
5 | * This package is an SSL implementation written | ||
6 | * by Eric Young (eay@cryptsoft.com). | ||
7 | * The implementation was written so as to conform with Netscapes SSL. | ||
8 | * | ||
9 | * This library is free for commercial and non-commercial use as long as | ||
10 | * the following conditions are aheared to. The following conditions | ||
11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
13 | * included with this distribution is covered by the same copyright terms | ||
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
15 | * | ||
16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
17 | * the code are not to be removed. | ||
18 | * If this package is used in a product, Eric Young should be given attribution | ||
19 | * as the author of the parts of the library used. | ||
20 | * This can be in the form of a textual message at program startup or | ||
21 | * in documentation (online or textual) provided with the package. | ||
22 | * | ||
23 | * Redistribution and use in source and binary forms, with or without | ||
24 | * modification, are permitted provided that the following conditions | ||
25 | * are met: | ||
26 | * 1. Redistributions of source code must retain the copyright | ||
27 | * notice, this list of conditions and the following disclaimer. | ||
28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
29 | * notice, this list of conditions and the following disclaimer in the | ||
30 | * documentation and/or other materials provided with the distribution. | ||
31 | * 3. All advertising materials mentioning features or use of this software | ||
32 | * must display the following acknowledgement: | ||
33 | * "This product includes cryptographic software written by | ||
34 | * Eric Young (eay@cryptsoft.com)" | ||
35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
36 | * being used are not cryptographic related :-). | ||
37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
38 | * the apps directory (application code) you must include an acknowledgement: | ||
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
40 | * | ||
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
51 | * SUCH DAMAGE. | ||
52 | * | ||
53 | * The licence and distribution terms for any publically available version or | ||
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
55 | * copied and put under another distribution licence | ||
56 | * [including the GNU Public Licence.] | ||
57 | */ | ||
58 | |||
59 | #ifndef HEADER_DH_H | ||
60 | #define HEADER_DH_H | ||
61 | |||
62 | #ifdef __cplusplus | ||
63 | extern "C" { | ||
64 | #endif | ||
65 | |||
66 | #ifndef HEADER_BN_H | ||
67 | #define BIGNUM char | ||
68 | #endif | ||
69 | |||
70 | typedef struct dh_st | ||
71 | { | ||
72 | /* This first argument is used to pick up errors when | ||
73 | * a DH is passed instead of a EVP_PKEY */ | ||
74 | int pad; | ||
75 | int version; | ||
76 | BIGNUM *p; | ||
77 | BIGNUM *g; | ||
78 | int length; /* optional */ | ||
79 | BIGNUM *pub_key; /* y */ | ||
80 | BIGNUM *priv_key; /* x */ | ||
81 | } DH; | ||
82 | |||
83 | #define DH_GENERATOR_2 2 | ||
84 | /* #define DH_GENERATOR_3 3 */ | ||
85 | #define DH_GENERATOR_5 5 | ||
86 | |||
87 | /* DH_check error codes */ | ||
88 | #define DH_CHECK_P_NOT_PRIME 0x01 | ||
89 | #define DH_CHECK_P_NOT_STRONG_PRIME 0x02 | ||
90 | #define DH_UNABLE_TO_CHECK_GENERATOR 0x04 | ||
91 | #define DH_NOT_SUITABLE_GENERATOR 0x08 | ||
92 | |||
93 | #define DHparams_dup(x) (DH *)ASN1_dup((int (*)())i2d_DHparams, \ | ||
94 | (char *(*)())d2i_DHparams,(char *)(x)) | ||
95 | #define d2i_DHparams_fp(fp,x) (DH *)ASN1_d2i_fp((char *(*)())DH_new, \ | ||
96 | (char *(*)())d2i_DHparams,(fp),(unsigned char **)(x)) | ||
97 | #define i2d_DHparams_fp(fp,x) ASN1_i2d_fp(i2d_DHparams,(fp), \ | ||
98 | (unsigned char *)(x)) | ||
99 | #define d2i_DHparams_bio(bp,x) (DH *)ASN1_d2i_bio((char *(*)())DH_new, \ | ||
100 | (char *(*)())d2i_DHparams,(bp),(unsigned char **)(x)) | ||
101 | #define i2d_DHparams_bio(bp,x) ASN1_i2d_bio(i2d_DHparams,(bp), \ | ||
102 | (unsigned char *)(x)) | ||
103 | |||
104 | #ifndef NOPROTO | ||
105 | DH * DH_new(void); | ||
106 | void DH_free(DH *dh); | ||
107 | int DH_size(DH *dh); | ||
108 | DH * DH_generate_parameters(int prime_len,int generator, | ||
109 | void (*callback)(int,int,char *),char *cb_arg); | ||
110 | int DH_check(DH *dh,int *codes); | ||
111 | int DH_generate_key(DH *dh); | ||
112 | int DH_compute_key(unsigned char *key,BIGNUM *pub_key,DH *dh); | ||
113 | DH * d2i_DHparams(DH **a,unsigned char **pp, long length); | ||
114 | int i2d_DHparams(DH *a,unsigned char **pp); | ||
115 | #ifndef NO_FP_API | ||
116 | int DHparams_print_fp(FILE *fp, DH *x); | ||
117 | #endif | ||
118 | #ifdef HEADER_BIO_H | ||
119 | int DHparams_print(BIO *bp, DH *x); | ||
120 | #else | ||
121 | int DHparams_print(char *bp, DH *x); | ||
122 | #endif | ||
123 | void ERR_load_DH_strings(void ); | ||
124 | |||
125 | #else | ||
126 | |||
127 | DH * DH_new(); | ||
128 | void DH_free(); | ||
129 | int DH_size(); | ||
130 | DH * DH_generate_parameters(); | ||
131 | int DH_check(); | ||
132 | int DH_generate_key(); | ||
133 | int DH_compute_key(); | ||
134 | DH * d2i_DHparams(); | ||
135 | int i2d_DHparams(); | ||
136 | #ifndef NO_FP_API | ||
137 | int DHparams_print_fp(); | ||
138 | #endif | ||
139 | int DHparams_print(); | ||
140 | void ERR_load_DH_strings(); | ||
141 | |||
142 | #endif | ||
143 | |||
144 | /* BEGIN ERROR CODES */ | ||
145 | /* Error codes for the DH functions. */ | ||
146 | |||
147 | /* Function codes. */ | ||
148 | #define DH_F_DHPARAMS_PRINT 100 | ||
149 | #define DH_F_DHPARAMS_PRINT_FP 101 | ||
150 | #define DH_F_DH_COMPUTE_KEY 102 | ||
151 | #define DH_F_DH_GENERATE_KEY 103 | ||
152 | #define DH_F_DH_GENERATE_PARAMETERS 104 | ||
153 | #define DH_F_DH_NEW 105 | ||
154 | |||
155 | /* Reason codes. */ | ||
156 | #define DH_R_NO_PRIVATE_VALUE 100 | ||
157 | |||
158 | #ifdef __cplusplus | ||
159 | } | ||
160 | #endif | ||
161 | #endif | ||
162 | |||
diff --git a/src/lib/libcrypto/dh/dh_check.c b/src/lib/libcrypto/dh/dh_check.c new file mode 100644 index 0000000000..65602e494f --- /dev/null +++ b/src/lib/libcrypto/dh/dh_check.c | |||
@@ -0,0 +1,120 @@ | |||
1 | /* crypto/dh/dh_check.c */ | ||
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | ||
3 | * All rights reserved. | ||
4 | * | ||
5 | * This package is an SSL implementation written | ||
6 | * by Eric Young (eay@cryptsoft.com). | ||
7 | * The implementation was written so as to conform with Netscapes SSL. | ||
8 | * | ||
9 | * This library is free for commercial and non-commercial use as long as | ||
10 | * the following conditions are aheared to. The following conditions | ||
11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
13 | * included with this distribution is covered by the same copyright terms | ||
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
15 | * | ||
16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
17 | * the code are not to be removed. | ||
18 | * If this package is used in a product, Eric Young should be given attribution | ||
19 | * as the author of the parts of the library used. | ||
20 | * This can be in the form of a textual message at program startup or | ||
21 | * in documentation (online or textual) provided with the package. | ||
22 | * | ||
23 | * Redistribution and use in source and binary forms, with or without | ||
24 | * modification, are permitted provided that the following conditions | ||
25 | * are met: | ||
26 | * 1. Redistributions of source code must retain the copyright | ||
27 | * notice, this list of conditions and the following disclaimer. | ||
28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
29 | * notice, this list of conditions and the following disclaimer in the | ||
30 | * documentation and/or other materials provided with the distribution. | ||
31 | * 3. All advertising materials mentioning features or use of this software | ||
32 | * must display the following acknowledgement: | ||
33 | * "This product includes cryptographic software written by | ||
34 | * Eric Young (eay@cryptsoft.com)" | ||
35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
36 | * being used are not cryptographic related :-). | ||
37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
38 | * the apps directory (application code) you must include an acknowledgement: | ||
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
40 | * | ||
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
51 | * SUCH DAMAGE. | ||
52 | * | ||
53 | * The licence and distribution terms for any publically available version or | ||
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
55 | * copied and put under another distribution licence | ||
56 | * [including the GNU Public Licence.] | ||
57 | */ | ||
58 | |||
59 | #include <stdio.h> | ||
60 | #include "cryptlib.h" | ||
61 | #include "bn.h" | ||
62 | #include "dh.h" | ||
63 | |||
64 | /* Check that p is a strong prime and | ||
65 | * if g is 2, 3 or 5, check that is is a suitable generator | ||
66 | * where | ||
67 | * for 2, p mod 24 == 11 | ||
68 | * for 3, p mod 12 == 5 | ||
69 | * for 5, p mod 10 == 3 or 7 | ||
70 | * should hold. | ||
71 | */ | ||
72 | |||
73 | int DH_check(dh,ret) | ||
74 | DH *dh; | ||
75 | int *ret; | ||
76 | { | ||
77 | int ok=0; | ||
78 | BN_CTX *ctx=NULL; | ||
79 | BN_ULONG l; | ||
80 | BIGNUM *q=NULL; | ||
81 | |||
82 | *ret=0; | ||
83 | ctx=BN_CTX_new(); | ||
84 | if (ctx == NULL) goto err; | ||
85 | q=BN_new(); | ||
86 | if (q == NULL) goto err; | ||
87 | |||
88 | if (BN_is_word(dh->g,DH_GENERATOR_2)) | ||
89 | { | ||
90 | l=BN_mod_word(dh->p,24); | ||
91 | if (l != 11) *ret|=DH_NOT_SUITABLE_GENERATOR; | ||
92 | } | ||
93 | /* else if (BN_is_word(dh->g,DH_GENERATOR_3)) | ||
94 | { | ||
95 | l=BN_mod_word(dh->p,12); | ||
96 | if (l != 5) *ret|=DH_NOT_SUITABLE_GENERATOR; | ||
97 | }*/ | ||
98 | else if (BN_is_word(dh->g,DH_GENERATOR_5)) | ||
99 | { | ||
100 | l=BN_mod_word(dh->p,10); | ||
101 | if ((l != 3) && (l != 7)) | ||
102 | *ret|=DH_NOT_SUITABLE_GENERATOR; | ||
103 | } | ||
104 | else | ||
105 | *ret|=DH_UNABLE_TO_CHECK_GENERATOR; | ||
106 | |||
107 | if (!BN_is_prime(dh->p,BN_prime_checks,NULL,ctx,NULL)) | ||
108 | *ret|=DH_CHECK_P_NOT_PRIME; | ||
109 | else | ||
110 | { | ||
111 | if (!BN_rshift1(q,dh->p)) goto err; | ||
112 | if (!BN_is_prime(q,BN_prime_checks,NULL,ctx,NULL)) | ||
113 | *ret|=DH_CHECK_P_NOT_STRONG_PRIME; | ||
114 | } | ||
115 | ok=1; | ||
116 | err: | ||
117 | if (ctx != NULL) BN_CTX_free(ctx); | ||
118 | if (q != NULL) BN_free(q); | ||
119 | return(ok); | ||
120 | } | ||
diff --git a/src/lib/libcrypto/dh/dh_err.c b/src/lib/libcrypto/dh/dh_err.c new file mode 100644 index 0000000000..9d5c06ac24 --- /dev/null +++ b/src/lib/libcrypto/dh/dh_err.c | |||
@@ -0,0 +1,96 @@ | |||
1 | /* lib/dh/dh_err.c */ | ||
2 | /* Copyright (C) 1995-1997 Eric Young (eay@cryptsoft.com) | ||
3 | * All rights reserved. | ||
4 | * | ||
5 | * This package is an SSL implementation written | ||
6 | * by Eric Young (eay@cryptsoft.com). | ||
7 | * The implementation was written so as to conform with Netscapes SSL. | ||
8 | * | ||
9 | * This library is free for commercial and non-commercial use as long as | ||
10 | * the following conditions are aheared to. The following conditions | ||
11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
13 | * included with this distribution is covered by the same copyright terms | ||
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
15 | * | ||
16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
17 | * the code are not to be removed. | ||
18 | * If this package is used in a product, Eric Young should be given attribution | ||
19 | * as the author of the parts of the library used. | ||
20 | * This can be in the form of a textual message at program startup or | ||
21 | * in documentation (online or textual) provided with the package. | ||
22 | * | ||
23 | * Redistribution and use in source and binary forms, with or without | ||
24 | * modification, are permitted provided that the following conditions | ||
25 | * are met: | ||
26 | * 1. Redistributions of source code must retain the copyright | ||
27 | * notice, this list of conditions and the following disclaimer. | ||
28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
29 | * notice, this list of conditions and the following disclaimer in the | ||
30 | * documentation and/or other materials provided with the distribution. | ||
31 | * 3. All advertising materials mentioning features or use of this software | ||
32 | * must display the following acknowledgement: | ||
33 | * "This product includes cryptographic software written by | ||
34 | * Eric Young (eay@cryptsoft.com)" | ||
35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
36 | * being used are not cryptographic related :-). | ||
37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
38 | * the apps directory (application code) you must include an acknowledgement: | ||
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
40 | * | ||
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
51 | * SUCH DAMAGE. | ||
52 | * | ||
53 | * The licence and distribution terms for any publically available version or | ||
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
55 | * copied and put under another distribution licence | ||
56 | * [including the GNU Public Licence.] | ||
57 | */ | ||
58 | #include <stdio.h> | ||
59 | #include "err.h" | ||
60 | #include "dh.h" | ||
61 | |||
62 | /* BEGIN ERROR CODES */ | ||
63 | #ifndef NO_ERR | ||
64 | static ERR_STRING_DATA DH_str_functs[]= | ||
65 | { | ||
66 | {ERR_PACK(0,DH_F_DHPARAMS_PRINT,0), "DHparams_print"}, | ||
67 | {ERR_PACK(0,DH_F_DHPARAMS_PRINT_FP,0), "DHparams_print_fp"}, | ||
68 | {ERR_PACK(0,DH_F_DH_COMPUTE_KEY,0), "DH_compute_key"}, | ||
69 | {ERR_PACK(0,DH_F_DH_GENERATE_KEY,0), "DH_generate_key"}, | ||
70 | {ERR_PACK(0,DH_F_DH_GENERATE_PARAMETERS,0), "DH_generate_parameters"}, | ||
71 | {ERR_PACK(0,DH_F_DH_NEW,0), "DH_new"}, | ||
72 | {0,NULL}, | ||
73 | }; | ||
74 | |||
75 | static ERR_STRING_DATA DH_str_reasons[]= | ||
76 | { | ||
77 | {DH_R_NO_PRIVATE_VALUE ,"no private value"}, | ||
78 | {0,NULL}, | ||
79 | }; | ||
80 | |||
81 | #endif | ||
82 | |||
83 | void ERR_load_DH_strings() | ||
84 | { | ||
85 | static int init=1; | ||
86 | |||
87 | if (init); | ||
88 | {; | ||
89 | init=0; | ||
90 | #ifndef NO_ERR | ||
91 | ERR_load_strings(ERR_LIB_DH,DH_str_functs); | ||
92 | ERR_load_strings(ERR_LIB_DH,DH_str_reasons); | ||
93 | #endif | ||
94 | |||
95 | } | ||
96 | } | ||
diff --git a/src/lib/libcrypto/dh/dh_gen.c b/src/lib/libcrypto/dh/dh_gen.c new file mode 100644 index 0000000000..04c7046a7b --- /dev/null +++ b/src/lib/libcrypto/dh/dh_gen.c | |||
@@ -0,0 +1,150 @@ | |||
1 | /* crypto/dh/dh_gen.c */ | ||
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | ||
3 | * All rights reserved. | ||
4 | * | ||
5 | * This package is an SSL implementation written | ||
6 | * by Eric Young (eay@cryptsoft.com). | ||
7 | * The implementation was written so as to conform with Netscapes SSL. | ||
8 | * | ||
9 | * This library is free for commercial and non-commercial use as long as | ||
10 | * the following conditions are aheared to. The following conditions | ||
11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
13 | * included with this distribution is covered by the same copyright terms | ||
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
15 | * | ||
16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
17 | * the code are not to be removed. | ||
18 | * If this package is used in a product, Eric Young should be given attribution | ||
19 | * as the author of the parts of the library used. | ||
20 | * This can be in the form of a textual message at program startup or | ||
21 | * in documentation (online or textual) provided with the package. | ||
22 | * | ||
23 | * Redistribution and use in source and binary forms, with or without | ||
24 | * modification, are permitted provided that the following conditions | ||
25 | * are met: | ||
26 | * 1. Redistributions of source code must retain the copyright | ||
27 | * notice, this list of conditions and the following disclaimer. | ||
28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
29 | * notice, this list of conditions and the following disclaimer in the | ||
30 | * documentation and/or other materials provided with the distribution. | ||
31 | * 3. All advertising materials mentioning features or use of this software | ||
32 | * must display the following acknowledgement: | ||
33 | * "This product includes cryptographic software written by | ||
34 | * Eric Young (eay@cryptsoft.com)" | ||
35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
36 | * being used are not cryptographic related :-). | ||
37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
38 | * the apps directory (application code) you must include an acknowledgement: | ||
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
40 | * | ||
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
51 | * SUCH DAMAGE. | ||
52 | * | ||
53 | * The licence and distribution terms for any publically available version or | ||
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
55 | * copied and put under another distribution licence | ||
56 | * [including the GNU Public Licence.] | ||
57 | */ | ||
58 | |||
59 | #include <stdio.h> | ||
60 | #include "cryptlib.h" | ||
61 | #include "bn.h" | ||
62 | #include "dh.h" | ||
63 | |||
64 | /* We generate DH parameters as follows | ||
65 | * find a prime q which is prime_len/2 bits long. | ||
66 | * p=(2*q)+1 or (p-1)/2 = q | ||
67 | * For this case, g is a generator if | ||
68 | * g^((p-1)/q) mod p != 1 for values of q which are the factors of p-1. | ||
69 | * Since the factors of p-1 are q and 2, we just need to check | ||
70 | * g^2 mod p != 1 and g^q mod p != 1. | ||
71 | * | ||
72 | * Having said all that, | ||
73 | * there is another special case method for the generators 2, 3 and 5. | ||
74 | * for 2, p mod 24 == 11 | ||
75 | * for 3, p mod 12 == 5 <<<<< does not work for strong primes. | ||
76 | * for 5, p mod 10 == 3 or 7 | ||
77 | * | ||
78 | * Thanks to Phil Karn <karn@qualcomm.com> for the pointers about the | ||
79 | * special generators and for answering some of my questions. | ||
80 | * | ||
81 | * I've implemented the second simple method :-). | ||
82 | * Since DH should be using a strong prime (both p and q are prime), | ||
83 | * this generator function can take a very very long time to run. | ||
84 | */ | ||
85 | |||
86 | DH *DH_generate_parameters(prime_len,generator,callback,cb_arg) | ||
87 | int prime_len; | ||
88 | int generator; | ||
89 | void (*callback)(P_I_I_P); | ||
90 | char *cb_arg; | ||
91 | { | ||
92 | BIGNUM *p=NULL,*t1,*t2; | ||
93 | DH *ret=NULL; | ||
94 | int g,ok= -1; | ||
95 | BN_CTX *ctx=NULL; | ||
96 | |||
97 | ret=DH_new(); | ||
98 | ctx=BN_CTX_new(); | ||
99 | if (ctx == NULL) goto err; | ||
100 | t1=ctx->bn[0]; | ||
101 | t2=ctx->bn[1]; | ||
102 | ctx->tos=2; | ||
103 | |||
104 | if (generator == DH_GENERATOR_2) | ||
105 | { | ||
106 | BN_set_word(t1,24); | ||
107 | BN_set_word(t2,11); | ||
108 | g=2; | ||
109 | } | ||
110 | #ifdef undef /* does not work for strong primes */ | ||
111 | else if (generator == DH_GENERATOR_3) | ||
112 | { | ||
113 | BN_set_word(t1,12); | ||
114 | BN_set_word(t2,5); | ||
115 | g=3; | ||
116 | } | ||
117 | #endif | ||
118 | else if (generator == DH_GENERATOR_5) | ||
119 | { | ||
120 | BN_set_word(t1,10); | ||
121 | BN_set_word(t2,3); | ||
122 | /* BN_set_word(t3,7); just have to miss | ||
123 | * out on these ones :-( */ | ||
124 | g=5; | ||
125 | } | ||
126 | else | ||
127 | g=generator; | ||
128 | |||
129 | p=BN_generate_prime(prime_len,1,t1,t2,callback,cb_arg); | ||
130 | if (p == NULL) goto err; | ||
131 | if (callback != NULL) callback(3,0,cb_arg); | ||
132 | ret->p=p; | ||
133 | ret->g=BN_new(); | ||
134 | if (!BN_set_word(ret->g,g)) goto err; | ||
135 | ok=1; | ||
136 | err: | ||
137 | if (ok == -1) | ||
138 | { | ||
139 | DHerr(DH_F_DH_GENERATE_PARAMETERS,ERR_R_BN_LIB); | ||
140 | ok=0; | ||
141 | } | ||
142 | |||
143 | if (ctx != NULL) BN_CTX_free(ctx); | ||
144 | if (!ok && (ret != NULL)) | ||
145 | { | ||
146 | DH_free(ret); | ||
147 | ret=NULL; | ||
148 | } | ||
149 | return(ret); | ||
150 | } | ||
diff --git a/src/lib/libcrypto/dh/dh_key.c b/src/lib/libcrypto/dh/dh_key.c new file mode 100644 index 0000000000..7576772bcd --- /dev/null +++ b/src/lib/libcrypto/dh/dh_key.c | |||
@@ -0,0 +1,142 @@ | |||
1 | /* crypto/dh/dh_key.c */ | ||
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | ||
3 | * All rights reserved. | ||
4 | * | ||
5 | * This package is an SSL implementation written | ||
6 | * by Eric Young (eay@cryptsoft.com). | ||
7 | * The implementation was written so as to conform with Netscapes SSL. | ||
8 | * | ||
9 | * This library is free for commercial and non-commercial use as long as | ||
10 | * the following conditions are aheared to. The following conditions | ||
11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
13 | * included with this distribution is covered by the same copyright terms | ||
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
15 | * | ||
16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
17 | * the code are not to be removed. | ||
18 | * If this package is used in a product, Eric Young should be given attribution | ||
19 | * as the author of the parts of the library used. | ||
20 | * This can be in the form of a textual message at program startup or | ||
21 | * in documentation (online or textual) provided with the package. | ||
22 | * | ||
23 | * Redistribution and use in source and binary forms, with or without | ||
24 | * modification, are permitted provided that the following conditions | ||
25 | * are met: | ||
26 | * 1. Redistributions of source code must retain the copyright | ||
27 | * notice, this list of conditions and the following disclaimer. | ||
28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
29 | * notice, this list of conditions and the following disclaimer in the | ||
30 | * documentation and/or other materials provided with the distribution. | ||
31 | * 3. All advertising materials mentioning features or use of this software | ||
32 | * must display the following acknowledgement: | ||
33 | * "This product includes cryptographic software written by | ||
34 | * Eric Young (eay@cryptsoft.com)" | ||
35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
36 | * being used are not cryptographic related :-). | ||
37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
38 | * the apps directory (application code) you must include an acknowledgement: | ||
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
40 | * | ||
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
51 | * SUCH DAMAGE. | ||
52 | * | ||
53 | * The licence and distribution terms for any publically available version or | ||
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
55 | * copied and put under another distribution licence | ||
56 | * [including the GNU Public Licence.] | ||
57 | */ | ||
58 | |||
59 | #include <stdio.h> | ||
60 | #include "cryptlib.h" | ||
61 | #include "bn.h" | ||
62 | #include "rand.h" | ||
63 | #include "dh.h" | ||
64 | |||
65 | int DH_generate_key(dh) | ||
66 | DH *dh; | ||
67 | { | ||
68 | int ok=0; | ||
69 | unsigned int i; | ||
70 | BN_CTX *ctx=NULL; | ||
71 | BIGNUM *pub_key=NULL,*priv_key=NULL; | ||
72 | |||
73 | ctx=BN_CTX_new(); | ||
74 | if (ctx == NULL) goto err; | ||
75 | |||
76 | if (dh->priv_key == NULL) | ||
77 | { | ||
78 | i=dh->length; | ||
79 | if (i == 0) | ||
80 | { | ||
81 | /* Make the number p-1 bits long */ | ||
82 | i=BN_num_bits(dh->p)-1; | ||
83 | } | ||
84 | priv_key=BN_new(); | ||
85 | if (priv_key == NULL) goto err; | ||
86 | if (!BN_rand(priv_key,i,0,0)) goto err; | ||
87 | } | ||
88 | else | ||
89 | priv_key=dh->priv_key; | ||
90 | |||
91 | if (dh->pub_key == NULL) | ||
92 | { | ||
93 | pub_key=BN_new(); | ||
94 | if (pub_key == NULL) goto err; | ||
95 | } | ||
96 | else | ||
97 | pub_key=dh->pub_key; | ||
98 | |||
99 | if (!BN_mod_exp(pub_key,dh->g,priv_key,dh->p,ctx)) goto err; | ||
100 | |||
101 | dh->pub_key=pub_key; | ||
102 | dh->priv_key=priv_key; | ||
103 | ok=1; | ||
104 | err: | ||
105 | if (ok != 1) | ||
106 | DHerr(DH_F_DH_GENERATE_KEY,ERR_R_BN_LIB); | ||
107 | |||
108 | if ((pub_key != NULL) && (dh->pub_key == NULL)) BN_free(pub_key); | ||
109 | if ((priv_key != NULL) && (dh->priv_key == NULL)) BN_free(priv_key); | ||
110 | if (ctx != NULL) BN_CTX_free(ctx); | ||
111 | return(ok); | ||
112 | } | ||
113 | |||
114 | int DH_compute_key(key,pub_key,dh) | ||
115 | unsigned char *key; | ||
116 | BIGNUM *pub_key; | ||
117 | DH *dh; | ||
118 | { | ||
119 | BN_CTX *ctx; | ||
120 | BIGNUM *tmp; | ||
121 | int ret= -1; | ||
122 | |||
123 | ctx=BN_CTX_new(); | ||
124 | if (ctx == NULL) goto err; | ||
125 | tmp=ctx->bn[ctx->tos++]; | ||
126 | |||
127 | if (dh->priv_key == NULL) | ||
128 | { | ||
129 | DHerr(DH_F_DH_COMPUTE_KEY,DH_R_NO_PRIVATE_VALUE); | ||
130 | goto err; | ||
131 | } | ||
132 | if (!BN_mod_exp(tmp,pub_key,dh->priv_key,dh->p,ctx)) | ||
133 | { | ||
134 | DHerr(DH_F_DH_COMPUTE_KEY,ERR_R_BN_LIB); | ||
135 | goto err; | ||
136 | } | ||
137 | |||
138 | ret=BN_bn2bin(tmp,key); | ||
139 | err: | ||
140 | if (ctx != NULL) BN_CTX_free(ctx); | ||
141 | return(ret); | ||
142 | } | ||
diff --git a/src/lib/libcrypto/dh/dh_lib.c b/src/lib/libcrypto/dh/dh_lib.c new file mode 100644 index 0000000000..a300b38396 --- /dev/null +++ b/src/lib/libcrypto/dh/dh_lib.c | |||
@@ -0,0 +1,100 @@ | |||
1 | /* crypto/dh/dh_lib.c */ | ||
2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | ||
3 | * All rights reserved. | ||
4 | * | ||
5 | * This package is an SSL implementation written | ||
6 | * by Eric Young (eay@cryptsoft.com). | ||
7 | * The implementation was written so as to conform with Netscapes SSL. | ||
8 | * | ||
9 | * This library is free for commercial and non-commercial use as long as | ||
10 | * the following conditions are aheared to. The following conditions | ||
11 | * apply to all code found in this distribution, be it the RC4, RSA, | ||
12 | * lhash, DES, etc., code; not just the SSL code. The SSL documentation | ||
13 | * included with this distribution is covered by the same copyright terms | ||
14 | * except that the holder is Tim Hudson (tjh@cryptsoft.com). | ||
15 | * | ||
16 | * Copyright remains Eric Young's, and as such any Copyright notices in | ||
17 | * the code are not to be removed. | ||
18 | * If this package is used in a product, Eric Young should be given attribution | ||
19 | * as the author of the parts of the library used. | ||
20 | * This can be in the form of a textual message at program startup or | ||
21 | * in documentation (online or textual) provided with the package. | ||
22 | * | ||
23 | * Redistribution and use in source and binary forms, with or without | ||
24 | * modification, are permitted provided that the following conditions | ||
25 | * are met: | ||
26 | * 1. Redistributions of source code must retain the copyright | ||
27 | * notice, this list of conditions and the following disclaimer. | ||
28 | * 2. Redistributions in binary form must reproduce the above copyright | ||
29 | * notice, this list of conditions and the following disclaimer in the | ||
30 | * documentation and/or other materials provided with the distribution. | ||
31 | * 3. All advertising materials mentioning features or use of this software | ||
32 | * must display the following acknowledgement: | ||
33 | * "This product includes cryptographic software written by | ||
34 | * Eric Young (eay@cryptsoft.com)" | ||
35 | * The word 'cryptographic' can be left out if the rouines from the library | ||
36 | * being used are not cryptographic related :-). | ||
37 | * 4. If you include any Windows specific code (or a derivative thereof) from | ||
38 | * the apps directory (application code) you must include an acknowledgement: | ||
39 | * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" | ||
40 | * | ||
41 | * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND | ||
42 | * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
43 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE | ||
44 | * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE | ||
45 | * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL | ||
46 | * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS | ||
47 | * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
48 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT | ||
49 | * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY | ||
50 | * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF | ||
51 | * SUCH DAMAGE. | ||
52 | * | ||
53 | * The licence and distribution terms for any publically available version or | ||
54 | * derivative of this code cannot be changed. i.e. this code cannot simply be | ||
55 | * copied and put under another distribution licence | ||
56 | * [including the GNU Public Licence.] | ||
57 | */ | ||
58 | |||
59 | #include <stdio.h> | ||
60 | #include "cryptlib.h" | ||
61 | #include "bn.h" | ||
62 | #include "dh.h" | ||
63 | |||
64 | char *DH_version="Diffie-Hellman part of SSLeay 0.9.0b 29-Jun-1998"; | ||
65 | |||
66 | DH *DH_new() | ||
67 | { | ||
68 | DH *ret; | ||
69 | |||
70 | ret=(DH *)Malloc(sizeof(DH)); | ||
71 | if (ret == NULL) | ||
72 | { | ||
73 | DHerr(DH_F_DH_NEW,ERR_R_MALLOC_FAILURE); | ||
74 | return(NULL); | ||
75 | } | ||
76 | ret->pad=0; | ||
77 | ret->version=0; | ||
78 | ret->p=NULL; | ||
79 | ret->g=NULL; | ||
80 | ret->length=0; | ||
81 | ret->pub_key=NULL; | ||
82 | ret->priv_key=NULL; | ||
83 | return(ret); | ||
84 | } | ||
85 | |||
86 | void DH_free(r) | ||
87 | DH *r; | ||
88 | { | ||
89 | if (r->p != NULL) BN_clear_free(r->p); | ||
90 | if (r->g != NULL) BN_clear_free(r->g); | ||
91 | if (r->pub_key != NULL) BN_clear_free(r->pub_key); | ||
92 | if (r->priv_key != NULL) BN_clear_free(r->priv_key); | ||
93 | Free(r); | ||
94 | } | ||
95 | |||
96 | int DH_size(dh) | ||
97 | DH *dh; | ||
98 | { | ||
99 | return(BN_num_bytes(dh->p)); | ||
100 | } | ||