diff options
Diffstat (limited to 'src/lib/libcrypto/ec/ec_lib.c')
-rw-r--r-- | src/lib/libcrypto/ec/ec_lib.c | 678 |
1 files changed, 85 insertions, 593 deletions
diff --git a/src/lib/libcrypto/ec/ec_lib.c b/src/lib/libcrypto/ec/ec_lib.c index 5af84376c6..deb522060f 100644 --- a/src/lib/libcrypto/ec/ec_lib.c +++ b/src/lib/libcrypto/ec/ec_lib.c | |||
@@ -1,9 +1,6 @@ | |||
1 | /* crypto/ec/ec_lib.c */ | 1 | /* crypto/ec/ec_lib.c */ |
2 | /* | ||
3 | * Originally written by Bodo Moeller for the OpenSSL project. | ||
4 | */ | ||
5 | /* ==================================================================== | 2 | /* ==================================================================== |
6 | * Copyright (c) 1998-2003 The OpenSSL Project. All rights reserved. | 3 | * Copyright (c) 1998-2001 The OpenSSL Project. All rights reserved. |
7 | * | 4 | * |
8 | * Redistribution and use in source and binary forms, with or without | 5 | * Redistribution and use in source and binary forms, with or without |
9 | * modification, are permitted provided that the following conditions | 6 | * modification, are permitted provided that the following conditions |
@@ -55,11 +52,6 @@ | |||
55 | * Hudson (tjh@cryptsoft.com). | 52 | * Hudson (tjh@cryptsoft.com). |
56 | * | 53 | * |
57 | */ | 54 | */ |
58 | /* ==================================================================== | ||
59 | * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED. | ||
60 | * Binary polynomial ECC support in OpenSSL originally developed by | ||
61 | * SUN MICROSYSTEMS, INC., and contributed to the OpenSSL project. | ||
62 | */ | ||
63 | 55 | ||
64 | #include <string.h> | 56 | #include <string.h> |
65 | 57 | ||
@@ -98,18 +90,10 @@ EC_GROUP *EC_GROUP_new(const EC_METHOD *meth) | |||
98 | ret->meth = meth; | 90 | ret->meth = meth; |
99 | 91 | ||
100 | ret->extra_data = NULL; | 92 | ret->extra_data = NULL; |
101 | 93 | ret->extra_data_dup_func = 0; | |
102 | ret->generator = NULL; | 94 | ret->extra_data_free_func = 0; |
103 | BN_init(&ret->order); | 95 | ret->extra_data_clear_free_func = 0; |
104 | BN_init(&ret->cofactor); | 96 | |
105 | |||
106 | ret->curve_name = 0; | ||
107 | ret->asn1_flag = 0; | ||
108 | ret->asn1_form = POINT_CONVERSION_UNCOMPRESSED; | ||
109 | |||
110 | ret->seed = NULL; | ||
111 | ret->seed_len = 0; | ||
112 | |||
113 | if (!meth->group_init(ret)) | 97 | if (!meth->group_init(ret)) |
114 | { | 98 | { |
115 | OPENSSL_free(ret); | 99 | OPENSSL_free(ret); |
@@ -127,15 +111,7 @@ void EC_GROUP_free(EC_GROUP *group) | |||
127 | if (group->meth->group_finish != 0) | 111 | if (group->meth->group_finish != 0) |
128 | group->meth->group_finish(group); | 112 | group->meth->group_finish(group); |
129 | 113 | ||
130 | EC_EX_DATA_free_all_data(&group->extra_data); | 114 | EC_GROUP_free_extra_data(group); |
131 | |||
132 | if (group->generator != NULL) | ||
133 | EC_POINT_free(group->generator); | ||
134 | BN_free(&group->order); | ||
135 | BN_free(&group->cofactor); | ||
136 | |||
137 | if (group->seed) | ||
138 | OPENSSL_free(group->seed); | ||
139 | 115 | ||
140 | OPENSSL_free(group); | 116 | OPENSSL_free(group); |
141 | } | 117 | } |
@@ -147,21 +123,10 @@ void EC_GROUP_clear_free(EC_GROUP *group) | |||
147 | 123 | ||
148 | if (group->meth->group_clear_finish != 0) | 124 | if (group->meth->group_clear_finish != 0) |
149 | group->meth->group_clear_finish(group); | 125 | group->meth->group_clear_finish(group); |
150 | else if (group->meth->group_finish != 0) | 126 | else if (group->meth != NULL && group->meth->group_finish != 0) |
151 | group->meth->group_finish(group); | 127 | group->meth->group_finish(group); |
152 | 128 | ||
153 | EC_EX_DATA_clear_free_all_data(&group->extra_data); | 129 | EC_GROUP_clear_free_extra_data(group); |
154 | |||
155 | if (group->generator != NULL) | ||
156 | EC_POINT_clear_free(group->generator); | ||
157 | BN_clear_free(&group->order); | ||
158 | BN_clear_free(&group->cofactor); | ||
159 | |||
160 | if (group->seed) | ||
161 | { | ||
162 | OPENSSL_cleanse(group->seed, group->seed_len); | ||
163 | OPENSSL_free(group->seed); | ||
164 | } | ||
165 | 130 | ||
166 | OPENSSL_cleanse(group, sizeof *group); | 131 | OPENSSL_cleanse(group, sizeof *group); |
167 | OPENSSL_free(group); | 132 | OPENSSL_free(group); |
@@ -170,8 +135,6 @@ void EC_GROUP_clear_free(EC_GROUP *group) | |||
170 | 135 | ||
171 | int EC_GROUP_copy(EC_GROUP *dest, const EC_GROUP *src) | 136 | int EC_GROUP_copy(EC_GROUP *dest, const EC_GROUP *src) |
172 | { | 137 | { |
173 | EC_EXTRA_DATA *d; | ||
174 | |||
175 | if (dest->meth->group_copy == 0) | 138 | if (dest->meth->group_copy == 0) |
176 | { | 139 | { |
177 | ECerr(EC_F_EC_GROUP_COPY, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | 140 | ECerr(EC_F_EC_GROUP_COPY, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); |
@@ -185,507 +148,161 @@ int EC_GROUP_copy(EC_GROUP *dest, const EC_GROUP *src) | |||
185 | if (dest == src) | 148 | if (dest == src) |
186 | return 1; | 149 | return 1; |
187 | 150 | ||
188 | EC_EX_DATA_free_all_data(&dest->extra_data); | 151 | EC_GROUP_clear_free_extra_data(dest); |
189 | 152 | if (src->extra_data_dup_func) | |
190 | for (d = src->extra_data; d != NULL; d = d->next) | ||
191 | { | 153 | { |
192 | void *t = d->dup_func(d->data); | 154 | if (src->extra_data != NULL) |
193 | |||
194 | if (t == NULL) | ||
195 | return 0; | ||
196 | if (!EC_EX_DATA_set_data(&dest->extra_data, t, d->dup_func, d->free_func, d->clear_free_func)) | ||
197 | return 0; | ||
198 | } | ||
199 | |||
200 | if (src->generator != NULL) | ||
201 | { | ||
202 | if (dest->generator == NULL) | ||
203 | { | ||
204 | dest->generator = EC_POINT_new(dest); | ||
205 | if (dest->generator == NULL) return 0; | ||
206 | } | ||
207 | if (!EC_POINT_copy(dest->generator, src->generator)) return 0; | ||
208 | } | ||
209 | else | ||
210 | { | ||
211 | /* src->generator == NULL */ | ||
212 | if (dest->generator != NULL) | ||
213 | { | 155 | { |
214 | EC_POINT_clear_free(dest->generator); | 156 | dest->extra_data = src->extra_data_dup_func(src->extra_data); |
215 | dest->generator = NULL; | 157 | if (dest->extra_data == NULL) |
158 | return 0; | ||
216 | } | 159 | } |
217 | } | ||
218 | |||
219 | if (!BN_copy(&dest->order, &src->order)) return 0; | ||
220 | if (!BN_copy(&dest->cofactor, &src->cofactor)) return 0; | ||
221 | 160 | ||
222 | dest->curve_name = src->curve_name; | 161 | dest->extra_data_dup_func = src->extra_data_dup_func; |
223 | dest->asn1_flag = src->asn1_flag; | 162 | dest->extra_data_free_func = src->extra_data_free_func; |
224 | dest->asn1_form = src->asn1_form; | 163 | dest->extra_data_clear_free_func = src->extra_data_clear_free_func; |
225 | |||
226 | if (src->seed) | ||
227 | { | ||
228 | if (dest->seed) | ||
229 | OPENSSL_free(dest->seed); | ||
230 | dest->seed = OPENSSL_malloc(src->seed_len); | ||
231 | if (dest->seed == NULL) | ||
232 | return 0; | ||
233 | if (!memcpy(dest->seed, src->seed, src->seed_len)) | ||
234 | return 0; | ||
235 | dest->seed_len = src->seed_len; | ||
236 | } | ||
237 | else | ||
238 | { | ||
239 | if (dest->seed) | ||
240 | OPENSSL_free(dest->seed); | ||
241 | dest->seed = NULL; | ||
242 | dest->seed_len = 0; | ||
243 | } | 164 | } |
244 | |||
245 | 165 | ||
246 | return dest->meth->group_copy(dest, src); | 166 | return dest->meth->group_copy(dest, src); |
247 | } | 167 | } |
248 | 168 | ||
249 | 169 | ||
250 | EC_GROUP *EC_GROUP_dup(const EC_GROUP *a) | ||
251 | { | ||
252 | EC_GROUP *t = NULL; | ||
253 | int ok = 0; | ||
254 | |||
255 | if (a == NULL) return NULL; | ||
256 | |||
257 | if ((t = EC_GROUP_new(a->meth)) == NULL) return(NULL); | ||
258 | if (!EC_GROUP_copy(t, a)) goto err; | ||
259 | |||
260 | ok = 1; | ||
261 | |||
262 | err: | ||
263 | if (!ok) | ||
264 | { | ||
265 | if (t) EC_GROUP_free(t); | ||
266 | return NULL; | ||
267 | } | ||
268 | else return t; | ||
269 | } | ||
270 | |||
271 | |||
272 | const EC_METHOD *EC_GROUP_method_of(const EC_GROUP *group) | 170 | const EC_METHOD *EC_GROUP_method_of(const EC_GROUP *group) |
273 | { | 171 | { |
274 | return group->meth; | 172 | return group->meth; |
275 | } | 173 | } |
276 | 174 | ||
277 | 175 | ||
278 | int EC_METHOD_get_field_type(const EC_METHOD *meth) | ||
279 | { | ||
280 | return meth->field_type; | ||
281 | } | ||
282 | |||
283 | |||
284 | int EC_GROUP_set_generator(EC_GROUP *group, const EC_POINT *generator, const BIGNUM *order, const BIGNUM *cofactor) | ||
285 | { | ||
286 | if (generator == NULL) | ||
287 | { | ||
288 | ECerr(EC_F_EC_GROUP_SET_GENERATOR, ERR_R_PASSED_NULL_PARAMETER); | ||
289 | return 0 ; | ||
290 | } | ||
291 | |||
292 | if (group->generator == NULL) | ||
293 | { | ||
294 | group->generator = EC_POINT_new(group); | ||
295 | if (group->generator == NULL) return 0; | ||
296 | } | ||
297 | if (!EC_POINT_copy(group->generator, generator)) return 0; | ||
298 | |||
299 | if (order != NULL) | ||
300 | { if (!BN_copy(&group->order, order)) return 0; } | ||
301 | else | ||
302 | BN_zero(&group->order); | ||
303 | |||
304 | if (cofactor != NULL) | ||
305 | { if (!BN_copy(&group->cofactor, cofactor)) return 0; } | ||
306 | else | ||
307 | BN_zero(&group->cofactor); | ||
308 | |||
309 | return 1; | ||
310 | } | ||
311 | |||
312 | |||
313 | const EC_POINT *EC_GROUP_get0_generator(const EC_GROUP *group) | ||
314 | { | ||
315 | return group->generator; | ||
316 | } | ||
317 | |||
318 | |||
319 | int EC_GROUP_get_order(const EC_GROUP *group, BIGNUM *order, BN_CTX *ctx) | ||
320 | { | ||
321 | if (!BN_copy(order, &group->order)) | ||
322 | return 0; | ||
323 | |||
324 | return !BN_is_zero(order); | ||
325 | } | ||
326 | |||
327 | |||
328 | int EC_GROUP_get_cofactor(const EC_GROUP *group, BIGNUM *cofactor, BN_CTX *ctx) | ||
329 | { | ||
330 | if (!BN_copy(cofactor, &group->cofactor)) | ||
331 | return 0; | ||
332 | |||
333 | return !BN_is_zero(&group->cofactor); | ||
334 | } | ||
335 | |||
336 | |||
337 | void EC_GROUP_set_curve_name(EC_GROUP *group, int nid) | ||
338 | { | ||
339 | group->curve_name = nid; | ||
340 | } | ||
341 | |||
342 | |||
343 | int EC_GROUP_get_curve_name(const EC_GROUP *group) | ||
344 | { | ||
345 | return group->curve_name; | ||
346 | } | ||
347 | |||
348 | |||
349 | void EC_GROUP_set_asn1_flag(EC_GROUP *group, int flag) | ||
350 | { | ||
351 | group->asn1_flag = flag; | ||
352 | } | ||
353 | |||
354 | |||
355 | int EC_GROUP_get_asn1_flag(const EC_GROUP *group) | ||
356 | { | ||
357 | return group->asn1_flag; | ||
358 | } | ||
359 | |||
360 | |||
361 | void EC_GROUP_set_point_conversion_form(EC_GROUP *group, | ||
362 | point_conversion_form_t form) | ||
363 | { | ||
364 | group->asn1_form = form; | ||
365 | } | ||
366 | |||
367 | |||
368 | point_conversion_form_t EC_GROUP_get_point_conversion_form(const EC_GROUP *group) | ||
369 | { | ||
370 | return group->asn1_form; | ||
371 | } | ||
372 | |||
373 | |||
374 | size_t EC_GROUP_set_seed(EC_GROUP *group, const unsigned char *p, size_t len) | ||
375 | { | ||
376 | if (group->seed) | ||
377 | { | ||
378 | OPENSSL_free(group->seed); | ||
379 | group->seed = NULL; | ||
380 | group->seed_len = 0; | ||
381 | } | ||
382 | |||
383 | if (!len || !p) | ||
384 | return 1; | ||
385 | |||
386 | if ((group->seed = OPENSSL_malloc(len)) == NULL) | ||
387 | return 0; | ||
388 | memcpy(group->seed, p, len); | ||
389 | group->seed_len = len; | ||
390 | |||
391 | return len; | ||
392 | } | ||
393 | |||
394 | |||
395 | unsigned char *EC_GROUP_get0_seed(const EC_GROUP *group) | ||
396 | { | ||
397 | return group->seed; | ||
398 | } | ||
399 | |||
400 | |||
401 | size_t EC_GROUP_get_seed_len(const EC_GROUP *group) | ||
402 | { | ||
403 | return group->seed_len; | ||
404 | } | ||
405 | |||
406 | |||
407 | int EC_GROUP_set_curve_GFp(EC_GROUP *group, const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) | 176 | int EC_GROUP_set_curve_GFp(EC_GROUP *group, const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) |
408 | { | 177 | { |
409 | if (group->meth->group_set_curve == 0) | 178 | if (group->meth->group_set_curve_GFp == 0) |
410 | { | 179 | { |
411 | ECerr(EC_F_EC_GROUP_SET_CURVE_GFP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | 180 | ECerr(EC_F_EC_GROUP_SET_CURVE_GFP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); |
412 | return 0; | 181 | return 0; |
413 | } | 182 | } |
414 | return group->meth->group_set_curve(group, p, a, b, ctx); | 183 | return group->meth->group_set_curve_GFp(group, p, a, b, ctx); |
415 | } | 184 | } |
416 | 185 | ||
417 | 186 | ||
418 | int EC_GROUP_get_curve_GFp(const EC_GROUP *group, BIGNUM *p, BIGNUM *a, BIGNUM *b, BN_CTX *ctx) | 187 | int EC_GROUP_get_curve_GFp(const EC_GROUP *group, BIGNUM *p, BIGNUM *a, BIGNUM *b, BN_CTX *ctx) |
419 | { | 188 | { |
420 | if (group->meth->group_get_curve == 0) | 189 | if (group->meth->group_get_curve_GFp == 0) |
421 | { | 190 | { |
422 | ECerr(EC_F_EC_GROUP_GET_CURVE_GFP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | 191 | ECerr(EC_F_EC_GROUP_GET_CURVE_GFP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); |
423 | return 0; | 192 | return 0; |
424 | } | 193 | } |
425 | return group->meth->group_get_curve(group, p, a, b, ctx); | 194 | return group->meth->group_get_curve_GFp(group, p, a, b, ctx); |
426 | } | 195 | } |
427 | 196 | ||
428 | 197 | ||
429 | int EC_GROUP_set_curve_GF2m(EC_GROUP *group, const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) | 198 | int EC_GROUP_set_generator(EC_GROUP *group, const EC_POINT *generator, const BIGNUM *order, const BIGNUM *cofactor) |
430 | { | 199 | { |
431 | if (group->meth->group_set_curve == 0) | 200 | if (group->meth->group_set_generator == 0) |
432 | { | 201 | { |
433 | ECerr(EC_F_EC_GROUP_SET_CURVE_GF2M, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | 202 | ECerr(EC_F_EC_GROUP_SET_GENERATOR, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); |
434 | return 0; | 203 | return 0; |
435 | } | 204 | } |
436 | return group->meth->group_set_curve(group, p, a, b, ctx); | 205 | return group->meth->group_set_generator(group, generator, order, cofactor); |
437 | } | 206 | } |
438 | 207 | ||
439 | 208 | ||
440 | int EC_GROUP_get_curve_GF2m(const EC_GROUP *group, BIGNUM *p, BIGNUM *a, BIGNUM *b, BN_CTX *ctx) | 209 | EC_POINT *EC_GROUP_get0_generator(const EC_GROUP *group) |
441 | { | 210 | { |
442 | if (group->meth->group_get_curve == 0) | 211 | if (group->meth->group_get0_generator == 0) |
443 | { | 212 | { |
444 | ECerr(EC_F_EC_GROUP_GET_CURVE_GF2M, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | 213 | ECerr(EC_F_EC_GROUP_GET0_GENERATOR, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); |
445 | return 0; | 214 | return 0; |
446 | } | 215 | } |
447 | return group->meth->group_get_curve(group, p, a, b, ctx); | 216 | return group->meth->group_get0_generator(group); |
448 | } | 217 | } |
449 | 218 | ||
450 | 219 | ||
451 | int EC_GROUP_get_degree(const EC_GROUP *group) | 220 | int EC_GROUP_get_order(const EC_GROUP *group, BIGNUM *order, BN_CTX *ctx) |
452 | { | 221 | { |
453 | if (group->meth->group_get_degree == 0) | 222 | if (group->meth->group_get_order == 0) |
454 | { | 223 | { |
455 | ECerr(EC_F_EC_GROUP_GET_DEGREE, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | 224 | ECerr(EC_F_EC_GROUP_GET_ORDER, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); |
456 | return 0; | 225 | return 0; |
457 | } | 226 | } |
458 | return group->meth->group_get_degree(group); | 227 | return group->meth->group_get_order(group, order, ctx); |
459 | } | 228 | } |
460 | 229 | ||
461 | 230 | ||
462 | int EC_GROUP_check_discriminant(const EC_GROUP *group, BN_CTX *ctx) | 231 | int EC_GROUP_get_cofactor(const EC_GROUP *group, BIGNUM *cofactor, BN_CTX *ctx) |
463 | { | 232 | { |
464 | if (group->meth->group_check_discriminant == 0) | 233 | if (group->meth->group_get_cofactor == 0) |
465 | { | 234 | { |
466 | ECerr(EC_F_EC_GROUP_CHECK_DISCRIMINANT, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | 235 | ECerr(EC_F_EC_GROUP_GET_COFACTOR, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); |
467 | return 0; | 236 | return 0; |
468 | } | 237 | } |
469 | return group->meth->group_check_discriminant(group, ctx); | 238 | return group->meth->group_get_cofactor(group, cofactor, ctx); |
470 | } | 239 | } |
471 | 240 | ||
472 | 241 | ||
473 | int EC_GROUP_cmp(const EC_GROUP *a, const EC_GROUP *b, BN_CTX *ctx) | 242 | /* this has 'package' visibility */ |
243 | int EC_GROUP_set_extra_data(EC_GROUP *group, void *extra_data, void *(*extra_data_dup_func)(void *), | ||
244 | void (*extra_data_free_func)(void *), void (*extra_data_clear_free_func)(void *)) | ||
474 | { | 245 | { |
475 | int r = 0; | 246 | if ((group->extra_data != NULL) |
476 | BIGNUM *a1, *a2, *a3, *b1, *b2, *b3; | 247 | || (group->extra_data_dup_func != 0) |
477 | BN_CTX *ctx_new = NULL; | 248 | || (group->extra_data_free_func != 0) |
478 | 249 | || (group->extra_data_clear_free_func != 0)) | |
479 | /* compare the field types*/ | ||
480 | if (EC_METHOD_get_field_type(EC_GROUP_method_of(a)) != | ||
481 | EC_METHOD_get_field_type(EC_GROUP_method_of(b))) | ||
482 | return 1; | ||
483 | /* compare the curve name (if present) */ | ||
484 | if (EC_GROUP_get_curve_name(a) && EC_GROUP_get_curve_name(b) && | ||
485 | EC_GROUP_get_curve_name(a) == EC_GROUP_get_curve_name(b)) | ||
486 | return 0; | ||
487 | |||
488 | if (!ctx) | ||
489 | ctx_new = ctx = BN_CTX_new(); | ||
490 | if (!ctx) | ||
491 | return -1; | ||
492 | |||
493 | BN_CTX_start(ctx); | ||
494 | a1 = BN_CTX_get(ctx); | ||
495 | a2 = BN_CTX_get(ctx); | ||
496 | a3 = BN_CTX_get(ctx); | ||
497 | b1 = BN_CTX_get(ctx); | ||
498 | b2 = BN_CTX_get(ctx); | ||
499 | b3 = BN_CTX_get(ctx); | ||
500 | if (!b3) | ||
501 | { | 250 | { |
502 | BN_CTX_end(ctx); | 251 | ECerr(EC_F_EC_GROUP_SET_EXTRA_DATA, EC_R_SLOT_FULL); |
503 | if (ctx_new) | 252 | return 0; |
504 | BN_CTX_free(ctx); | ||
505 | return -1; | ||
506 | } | ||
507 | |||
508 | /* XXX This approach assumes that the external representation | ||
509 | * of curves over the same field type is the same. | ||
510 | */ | ||
511 | if (!a->meth->group_get_curve(a, a1, a2, a3, ctx) || | ||
512 | !b->meth->group_get_curve(b, b1, b2, b3, ctx)) | ||
513 | r = 1; | ||
514 | |||
515 | if (r || BN_cmp(a1, b1) || BN_cmp(a2, b2) || BN_cmp(a3, b3)) | ||
516 | r = 1; | ||
517 | |||
518 | /* XXX EC_POINT_cmp() assumes that the methods are equal */ | ||
519 | if (r || EC_POINT_cmp(a, EC_GROUP_get0_generator(a), | ||
520 | EC_GROUP_get0_generator(b), ctx)) | ||
521 | r = 1; | ||
522 | |||
523 | if (!r) | ||
524 | { | ||
525 | /* compare the order and cofactor */ | ||
526 | if (!EC_GROUP_get_order(a, a1, ctx) || | ||
527 | !EC_GROUP_get_order(b, b1, ctx) || | ||
528 | !EC_GROUP_get_cofactor(a, a2, ctx) || | ||
529 | !EC_GROUP_get_cofactor(b, b2, ctx)) | ||
530 | { | ||
531 | BN_CTX_end(ctx); | ||
532 | if (ctx_new) | ||
533 | BN_CTX_free(ctx); | ||
534 | return -1; | ||
535 | } | ||
536 | if (BN_cmp(a1, b1) || BN_cmp(a2, b2)) | ||
537 | r = 1; | ||
538 | } | 253 | } |
539 | 254 | ||
540 | BN_CTX_end(ctx); | 255 | group->extra_data = extra_data; |
541 | if (ctx_new) | 256 | group->extra_data_dup_func = extra_data_dup_func; |
542 | BN_CTX_free(ctx); | 257 | group->extra_data_free_func = extra_data_free_func; |
543 | 258 | group->extra_data_clear_free_func = extra_data_clear_free_func; | |
544 | return r; | 259 | return 1; |
545 | } | 260 | } |
546 | 261 | ||
547 | 262 | ||
548 | /* this has 'package' visibility */ | 263 | /* this has 'package' visibility */ |
549 | int EC_EX_DATA_set_data(EC_EXTRA_DATA **ex_data, void *data, | 264 | void *EC_GROUP_get_extra_data(const EC_GROUP *group, void *(*extra_data_dup_func)(void *), |
550 | void *(*dup_func)(void *), void (*free_func)(void *), void (*clear_free_func)(void *)) | 265 | void (*extra_data_free_func)(void *), void (*extra_data_clear_free_func)(void *)) |
551 | { | 266 | { |
552 | EC_EXTRA_DATA *d; | 267 | if ((group->extra_data_dup_func != extra_data_dup_func) |
553 | 268 | || (group->extra_data_free_func != extra_data_free_func) | |
554 | if (ex_data == NULL) | 269 | || (group->extra_data_clear_free_func != extra_data_clear_free_func)) |
555 | return 0; | ||
556 | |||
557 | for (d = *ex_data; d != NULL; d = d->next) | ||
558 | { | 270 | { |
559 | if (d->dup_func == dup_func && d->free_func == free_func && d->clear_free_func == clear_free_func) | 271 | #if 0 /* this was an error in 0.9.7, but that does not make a lot of sense */ |
560 | { | 272 | ECerr(..._F_EC_GROUP_GET_EXTRA_DATA, ..._R_NO_SUCH_EXTRA_DATA); |
561 | ECerr(EC_F_EC_EX_DATA_SET_DATA, EC_R_SLOT_FULL); | 273 | #endif |
562 | return 0; | 274 | return NULL; |
563 | } | ||
564 | } | 275 | } |
565 | 276 | ||
566 | if (data == NULL) | 277 | return group->extra_data; |
567 | /* no explicit entry needed */ | ||
568 | return 1; | ||
569 | |||
570 | d = OPENSSL_malloc(sizeof *d); | ||
571 | if (d == NULL) | ||
572 | return 0; | ||
573 | |||
574 | d->data = data; | ||
575 | d->dup_func = dup_func; | ||
576 | d->free_func = free_func; | ||
577 | d->clear_free_func = clear_free_func; | ||
578 | |||
579 | d->next = *ex_data; | ||
580 | *ex_data = d; | ||
581 | |||
582 | return 1; | ||
583 | } | 278 | } |
584 | 279 | ||
585 | /* this has 'package' visibility */ | ||
586 | void *EC_EX_DATA_get_data(const EC_EXTRA_DATA *ex_data, | ||
587 | void *(*dup_func)(void *), void (*free_func)(void *), void (*clear_free_func)(void *)) | ||
588 | { | ||
589 | const EC_EXTRA_DATA *d; | ||
590 | |||
591 | for (d = ex_data; d != NULL; d = d->next) | ||
592 | { | ||
593 | if (d->dup_func == dup_func && d->free_func == free_func && d->clear_free_func == clear_free_func) | ||
594 | return d->data; | ||
595 | } | ||
596 | |||
597 | return NULL; | ||
598 | } | ||
599 | 280 | ||
600 | /* this has 'package' visibility */ | 281 | /* this has 'package' visibility */ |
601 | void EC_EX_DATA_free_data(EC_EXTRA_DATA **ex_data, | 282 | void EC_GROUP_free_extra_data(EC_GROUP *group) |
602 | void *(*dup_func)(void *), void (*free_func)(void *), void (*clear_free_func)(void *)) | ||
603 | { | 283 | { |
604 | EC_EXTRA_DATA **p; | 284 | if (group->extra_data_free_func) |
605 | 285 | group->extra_data_free_func(group->extra_data); | |
606 | if (ex_data == NULL) | 286 | group->extra_data = NULL; |
607 | return; | 287 | group->extra_data_dup_func = 0; |
608 | 288 | group->extra_data_free_func = 0; | |
609 | for (p = ex_data; *p != NULL; p = &((*p)->next)) | 289 | group->extra_data_clear_free_func = 0; |
610 | { | ||
611 | if ((*p)->dup_func == dup_func && (*p)->free_func == free_func && (*p)->clear_free_func == clear_free_func) | ||
612 | { | ||
613 | EC_EXTRA_DATA *next = (*p)->next; | ||
614 | |||
615 | (*p)->free_func((*p)->data); | ||
616 | OPENSSL_free(*p); | ||
617 | |||
618 | *p = next; | ||
619 | return; | ||
620 | } | ||
621 | } | ||
622 | } | 290 | } |
623 | 291 | ||
624 | /* this has 'package' visibility */ | ||
625 | void EC_EX_DATA_clear_free_data(EC_EXTRA_DATA **ex_data, | ||
626 | void *(*dup_func)(void *), void (*free_func)(void *), void (*clear_free_func)(void *)) | ||
627 | { | ||
628 | EC_EXTRA_DATA **p; | ||
629 | |||
630 | if (ex_data == NULL) | ||
631 | return; | ||
632 | |||
633 | for (p = ex_data; *p != NULL; p = &((*p)->next)) | ||
634 | { | ||
635 | if ((*p)->dup_func == dup_func && (*p)->free_func == free_func && (*p)->clear_free_func == clear_free_func) | ||
636 | { | ||
637 | EC_EXTRA_DATA *next = (*p)->next; | ||
638 | |||
639 | (*p)->clear_free_func((*p)->data); | ||
640 | OPENSSL_free(*p); | ||
641 | |||
642 | *p = next; | ||
643 | return; | ||
644 | } | ||
645 | } | ||
646 | } | ||
647 | 292 | ||
648 | /* this has 'package' visibility */ | 293 | /* this has 'package' visibility */ |
649 | void EC_EX_DATA_free_all_data(EC_EXTRA_DATA **ex_data) | 294 | void EC_GROUP_clear_free_extra_data(EC_GROUP *group) |
650 | { | 295 | { |
651 | EC_EXTRA_DATA *d; | 296 | if (group->extra_data_clear_free_func) |
652 | 297 | group->extra_data_clear_free_func(group->extra_data); | |
653 | if (ex_data == NULL) | 298 | else if (group->extra_data_free_func) |
654 | return; | 299 | group->extra_data_free_func(group->extra_data); |
655 | 300 | group->extra_data = NULL; | |
656 | d = *ex_data; | 301 | group->extra_data_dup_func = 0; |
657 | while (d) | 302 | group->extra_data_free_func = 0; |
658 | { | 303 | group->extra_data_clear_free_func = 0; |
659 | EC_EXTRA_DATA *next = d->next; | ||
660 | |||
661 | d->free_func(d->data); | ||
662 | OPENSSL_free(d); | ||
663 | |||
664 | d = next; | ||
665 | } | ||
666 | *ex_data = NULL; | ||
667 | } | 304 | } |
668 | 305 | ||
669 | /* this has 'package' visibility */ | ||
670 | void EC_EX_DATA_clear_free_all_data(EC_EXTRA_DATA **ex_data) | ||
671 | { | ||
672 | EC_EXTRA_DATA *d; | ||
673 | |||
674 | if (ex_data == NULL) | ||
675 | return; | ||
676 | |||
677 | d = *ex_data; | ||
678 | while (d) | ||
679 | { | ||
680 | EC_EXTRA_DATA *next = d->next; | ||
681 | |||
682 | d->clear_free_func(d->data); | ||
683 | OPENSSL_free(d); | ||
684 | |||
685 | d = next; | ||
686 | } | ||
687 | *ex_data = NULL; | ||
688 | } | ||
689 | 306 | ||
690 | 307 | ||
691 | /* functions for EC_POINT objects */ | 308 | /* functions for EC_POINT objects */ |
@@ -765,25 +382,6 @@ int EC_POINT_copy(EC_POINT *dest, const EC_POINT *src) | |||
765 | } | 382 | } |
766 | 383 | ||
767 | 384 | ||
768 | EC_POINT *EC_POINT_dup(const EC_POINT *a, const EC_GROUP *group) | ||
769 | { | ||
770 | EC_POINT *t; | ||
771 | int r; | ||
772 | |||
773 | if (a == NULL) return NULL; | ||
774 | |||
775 | t = EC_POINT_new(group); | ||
776 | if (t == NULL) return(NULL); | ||
777 | r = EC_POINT_copy(t, a); | ||
778 | if (!r) | ||
779 | { | ||
780 | EC_POINT_free(t); | ||
781 | return NULL; | ||
782 | } | ||
783 | else return t; | ||
784 | } | ||
785 | |||
786 | |||
787 | const EC_METHOD *EC_POINT_method_of(const EC_POINT *point) | 385 | const EC_METHOD *EC_POINT_method_of(const EC_POINT *point) |
788 | { | 386 | { |
789 | return point->meth; | 387 | return point->meth; |
@@ -843,7 +441,7 @@ int EC_POINT_get_Jprojective_coordinates_GFp(const EC_GROUP *group, const EC_POI | |||
843 | int EC_POINT_set_affine_coordinates_GFp(const EC_GROUP *group, EC_POINT *point, | 441 | int EC_POINT_set_affine_coordinates_GFp(const EC_GROUP *group, EC_POINT *point, |
844 | const BIGNUM *x, const BIGNUM *y, BN_CTX *ctx) | 442 | const BIGNUM *x, const BIGNUM *y, BN_CTX *ctx) |
845 | { | 443 | { |
846 | if (group->meth->point_set_affine_coordinates == 0) | 444 | if (group->meth->point_set_affine_coordinates_GFp == 0) |
847 | { | 445 | { |
848 | ECerr(EC_F_EC_POINT_SET_AFFINE_COORDINATES_GFP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | 446 | ECerr(EC_F_EC_POINT_SET_AFFINE_COORDINATES_GFP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); |
849 | return 0; | 447 | return 0; |
@@ -853,31 +451,14 @@ int EC_POINT_set_affine_coordinates_GFp(const EC_GROUP *group, EC_POINT *point, | |||
853 | ECerr(EC_F_EC_POINT_SET_AFFINE_COORDINATES_GFP, EC_R_INCOMPATIBLE_OBJECTS); | 451 | ECerr(EC_F_EC_POINT_SET_AFFINE_COORDINATES_GFP, EC_R_INCOMPATIBLE_OBJECTS); |
854 | return 0; | 452 | return 0; |
855 | } | 453 | } |
856 | return group->meth->point_set_affine_coordinates(group, point, x, y, ctx); | 454 | return group->meth->point_set_affine_coordinates_GFp(group, point, x, y, ctx); |
857 | } | ||
858 | |||
859 | |||
860 | int EC_POINT_set_affine_coordinates_GF2m(const EC_GROUP *group, EC_POINT *point, | ||
861 | const BIGNUM *x, const BIGNUM *y, BN_CTX *ctx) | ||
862 | { | ||
863 | if (group->meth->point_set_affine_coordinates == 0) | ||
864 | { | ||
865 | ECerr(EC_F_EC_POINT_SET_AFFINE_COORDINATES_GF2M, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | ||
866 | return 0; | ||
867 | } | ||
868 | if (group->meth != point->meth) | ||
869 | { | ||
870 | ECerr(EC_F_EC_POINT_SET_AFFINE_COORDINATES_GF2M, EC_R_INCOMPATIBLE_OBJECTS); | ||
871 | return 0; | ||
872 | } | ||
873 | return group->meth->point_set_affine_coordinates(group, point, x, y, ctx); | ||
874 | } | 455 | } |
875 | 456 | ||
876 | 457 | ||
877 | int EC_POINT_get_affine_coordinates_GFp(const EC_GROUP *group, const EC_POINT *point, | 458 | int EC_POINT_get_affine_coordinates_GFp(const EC_GROUP *group, const EC_POINT *point, |
878 | BIGNUM *x, BIGNUM *y, BN_CTX *ctx) | 459 | BIGNUM *x, BIGNUM *y, BN_CTX *ctx) |
879 | { | 460 | { |
880 | if (group->meth->point_get_affine_coordinates == 0) | 461 | if (group->meth->point_get_affine_coordinates_GFp == 0) |
881 | { | 462 | { |
882 | ECerr(EC_F_EC_POINT_GET_AFFINE_COORDINATES_GFP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | 463 | ECerr(EC_F_EC_POINT_GET_AFFINE_COORDINATES_GFP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); |
883 | return 0; | 464 | return 0; |
@@ -887,31 +468,14 @@ int EC_POINT_get_affine_coordinates_GFp(const EC_GROUP *group, const EC_POINT *p | |||
887 | ECerr(EC_F_EC_POINT_GET_AFFINE_COORDINATES_GFP, EC_R_INCOMPATIBLE_OBJECTS); | 468 | ECerr(EC_F_EC_POINT_GET_AFFINE_COORDINATES_GFP, EC_R_INCOMPATIBLE_OBJECTS); |
888 | return 0; | 469 | return 0; |
889 | } | 470 | } |
890 | return group->meth->point_get_affine_coordinates(group, point, x, y, ctx); | 471 | return group->meth->point_get_affine_coordinates_GFp(group, point, x, y, ctx); |
891 | } | ||
892 | |||
893 | |||
894 | int EC_POINT_get_affine_coordinates_GF2m(const EC_GROUP *group, const EC_POINT *point, | ||
895 | BIGNUM *x, BIGNUM *y, BN_CTX *ctx) | ||
896 | { | ||
897 | if (group->meth->point_get_affine_coordinates == 0) | ||
898 | { | ||
899 | ECerr(EC_F_EC_POINT_GET_AFFINE_COORDINATES_GF2M, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | ||
900 | return 0; | ||
901 | } | ||
902 | if (group->meth != point->meth) | ||
903 | { | ||
904 | ECerr(EC_F_EC_POINT_GET_AFFINE_COORDINATES_GF2M, EC_R_INCOMPATIBLE_OBJECTS); | ||
905 | return 0; | ||
906 | } | ||
907 | return group->meth->point_get_affine_coordinates(group, point, x, y, ctx); | ||
908 | } | 472 | } |
909 | 473 | ||
910 | 474 | ||
911 | int EC_POINT_set_compressed_coordinates_GFp(const EC_GROUP *group, EC_POINT *point, | 475 | int EC_POINT_set_compressed_coordinates_GFp(const EC_GROUP *group, EC_POINT *point, |
912 | const BIGNUM *x, int y_bit, BN_CTX *ctx) | 476 | const BIGNUM *x, int y_bit, BN_CTX *ctx) |
913 | { | 477 | { |
914 | if (group->meth->point_set_compressed_coordinates == 0) | 478 | if (group->meth->point_set_compressed_coordinates_GFp == 0) |
915 | { | 479 | { |
916 | ECerr(EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GFP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | 480 | ECerr(EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GFP, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); |
917 | return 0; | 481 | return 0; |
@@ -921,24 +485,7 @@ int EC_POINT_set_compressed_coordinates_GFp(const EC_GROUP *group, EC_POINT *poi | |||
921 | ECerr(EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GFP, EC_R_INCOMPATIBLE_OBJECTS); | 485 | ECerr(EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GFP, EC_R_INCOMPATIBLE_OBJECTS); |
922 | return 0; | 486 | return 0; |
923 | } | 487 | } |
924 | return group->meth->point_set_compressed_coordinates(group, point, x, y_bit, ctx); | 488 | return group->meth->point_set_compressed_coordinates_GFp(group, point, x, y_bit, ctx); |
925 | } | ||
926 | |||
927 | |||
928 | int EC_POINT_set_compressed_coordinates_GF2m(const EC_GROUP *group, EC_POINT *point, | ||
929 | const BIGNUM *x, int y_bit, BN_CTX *ctx) | ||
930 | { | ||
931 | if (group->meth->point_set_compressed_coordinates == 0) | ||
932 | { | ||
933 | ECerr(EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GF2M, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | ||
934 | return 0; | ||
935 | } | ||
936 | if (group->meth != point->meth) | ||
937 | { | ||
938 | ECerr(EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GF2M, EC_R_INCOMPATIBLE_OBJECTS); | ||
939 | return 0; | ||
940 | } | ||
941 | return group->meth->point_set_compressed_coordinates(group, point, x, y_bit, ctx); | ||
942 | } | 489 | } |
943 | 490 | ||
944 | 491 | ||
@@ -1012,12 +559,12 @@ int EC_POINT_invert(const EC_GROUP *group, EC_POINT *a, BN_CTX *ctx) | |||
1012 | { | 559 | { |
1013 | if (group->meth->dbl == 0) | 560 | if (group->meth->dbl == 0) |
1014 | { | 561 | { |
1015 | ECerr(EC_F_EC_POINT_INVERT, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | 562 | ECerr(EC_F_EC_POINT_DBL, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); |
1016 | return 0; | 563 | return 0; |
1017 | } | 564 | } |
1018 | if (group->meth != a->meth) | 565 | if (group->meth != a->meth) |
1019 | { | 566 | { |
1020 | ECerr(EC_F_EC_POINT_INVERT, EC_R_INCOMPATIBLE_OBJECTS); | 567 | ECerr(EC_F_EC_POINT_DBL, EC_R_INCOMPATIBLE_OBJECTS); |
1021 | return 0; | 568 | return 0; |
1022 | } | 569 | } |
1023 | return group->meth->invert(group, a, ctx); | 570 | return group->meth->invert(group, a, ctx); |
@@ -1107,58 +654,3 @@ int EC_POINTs_make_affine(const EC_GROUP *group, size_t num, EC_POINT *points[], | |||
1107 | } | 654 | } |
1108 | return group->meth->points_make_affine(group, num, points, ctx); | 655 | return group->meth->points_make_affine(group, num, points, ctx); |
1109 | } | 656 | } |
1110 | |||
1111 | |||
1112 | /* Functions for point multiplication. | ||
1113 | * | ||
1114 | * If group->meth->mul is 0, we use the wNAF-based implementations in ec_mult.c; | ||
1115 | * otherwise we dispatch through methods. | ||
1116 | */ | ||
1117 | |||
1118 | int EC_POINTs_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar, | ||
1119 | size_t num, const EC_POINT *points[], const BIGNUM *scalars[], BN_CTX *ctx) | ||
1120 | { | ||
1121 | if (group->meth->mul == 0) | ||
1122 | /* use default */ | ||
1123 | return ec_wNAF_mul(group, r, scalar, num, points, scalars, ctx); | ||
1124 | |||
1125 | return group->meth->mul(group, r, scalar, num, points, scalars, ctx); | ||
1126 | } | ||
1127 | |||
1128 | int EC_POINT_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *g_scalar, | ||
1129 | const EC_POINT *point, const BIGNUM *p_scalar, BN_CTX *ctx) | ||
1130 | { | ||
1131 | /* just a convenient interface to EC_POINTs_mul() */ | ||
1132 | |||
1133 | const EC_POINT *points[1]; | ||
1134 | const BIGNUM *scalars[1]; | ||
1135 | |||
1136 | points[0] = point; | ||
1137 | scalars[0] = p_scalar; | ||
1138 | |||
1139 | return EC_POINTs_mul(group, r, g_scalar, (point != NULL && p_scalar != NULL), points, scalars, ctx); | ||
1140 | } | ||
1141 | |||
1142 | int EC_GROUP_precompute_mult(EC_GROUP *group, BN_CTX *ctx) | ||
1143 | { | ||
1144 | if (group->meth->mul == 0) | ||
1145 | /* use default */ | ||
1146 | return ec_wNAF_precompute_mult(group, ctx); | ||
1147 | |||
1148 | if (group->meth->precompute_mult != 0) | ||
1149 | return group->meth->precompute_mult(group, ctx); | ||
1150 | else | ||
1151 | return 1; /* nothing to do, so report success */ | ||
1152 | } | ||
1153 | |||
1154 | int EC_GROUP_have_precompute_mult(const EC_GROUP *group) | ||
1155 | { | ||
1156 | if (group->meth->mul == 0) | ||
1157 | /* use default */ | ||
1158 | return ec_wNAF_have_precompute_mult(group); | ||
1159 | |||
1160 | if (group->meth->have_precompute_mult != 0) | ||
1161 | return group->meth->have_precompute_mult(group); | ||
1162 | else | ||
1163 | return 0; /* cannot tell whether precomputation has been performed */ | ||
1164 | } | ||