1 files changed, 103 insertions, 1 deletions

diff --git a/src/lib/libcrypto/evp/p_legacy.c b/src/lib/libcrypto/evp/p_legacy.c
index a88393a849..f73a6a9dae 100644
--- a/src/lib/libcrypto/evp/p_legacy.c
+++ b/src/lib/libcrypto/evp/p_legacy.c
@@ -1,4 +1,4 @@
-/*      $OpenBSD: p_legacy.c,v 1.1 2023/12/20 13:46:05 tb Exp $ */
+/*      $OpenBSD: p_legacy.c,v 1.2 2023/12/20 13:52:17 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -56,6 +56,8 @@
  * [including the GNU Public Licence.]
  */
 
+#include <stdlib.h>
+
 #include <openssl/evp.h>
 #include <openssl/err.h>
 
@@ -88,3 +90,103 @@ EVP_PKEY_encrypt_old(unsigned char *to, const unsigned char *from, int from_len,
         return RSA_public_encrypt(from_len, from, to, pkey->pkey.rsa,
             RSA_PKCS1_PADDING);
 }
+
+int
+EVP_OpenInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
+    const unsigned char *ek, int ekl, const unsigned char *iv, EVP_PKEY *priv)
+{
+        unsigned char *key = NULL;
+        int i, size = 0, ret = 0;
+
+        if (type) {
+                EVP_CIPHER_CTX_init(ctx);
+                if (!EVP_DecryptInit_ex(ctx, type, NULL, NULL, NULL))
+                        return 0;
+        }
+
+        if (!priv)
+                return 1;
+
+        if (priv->type != EVP_PKEY_RSA) {
+                EVPerror(EVP_R_PUBLIC_KEY_NOT_RSA);
+                goto err;
+        }
+
+        size = RSA_size(priv->pkey.rsa);
+        key = malloc(size + 2);
+        if (key == NULL) {
+                /* ERROR */
+                EVPerror(ERR_R_MALLOC_FAILURE);
+                goto err;
+        }
+
+        i = EVP_PKEY_decrypt_old(key, ek, ekl, priv);
+        if ((i <= 0) || !EVP_CIPHER_CTX_set_key_length(ctx, i)) {
+                /* ERROR */
+                goto err;
+        }
+        if (!EVP_DecryptInit_ex(ctx, NULL, NULL, key, iv))
+                goto err;
+
+        ret = 1;
+
+err:
+        freezero(key, size);
+        return (ret);
+}
+
+int
+EVP_OpenFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
+{
+        int i;
+
+        i = EVP_DecryptFinal_ex(ctx, out, outl);
+        if (i)
+                i = EVP_DecryptInit_ex(ctx, NULL, NULL, NULL, NULL);
+        return (i);
+}
+
+int
+EVP_SealInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type, unsigned char **ek,
+    int *ekl, unsigned char *iv, EVP_PKEY **pubk, int npubk)
+{
+        unsigned char key[EVP_MAX_KEY_LENGTH];
+        int i, iv_len;
+
+        if (type) {
+                EVP_CIPHER_CTX_init(ctx);
+                if (!EVP_EncryptInit_ex(ctx, type, NULL, NULL, NULL))
+                        return 0;
+        }
+        if ((npubk <= 0) || !pubk)
+                return 1;
+        if (EVP_CIPHER_CTX_rand_key(ctx, key) <= 0)
+                return 0;
+        /* XXX - upper bound? */
+        if ((iv_len = EVP_CIPHER_CTX_iv_length(ctx)) < 0)
+                return 0;
+        if (iv_len > 0)
+                arc4random_buf(iv, iv_len);
+
+        if (!EVP_EncryptInit_ex(ctx, NULL, NULL, key, iv))
+                return 0;
+
+        for (i = 0; i < npubk; i++) {
+                ekl[i] = EVP_PKEY_encrypt_old(ek[i], key,
+                    EVP_CIPHER_CTX_key_length(ctx), pubk[i]);
+                if (ekl[i] <= 0)
+                        return (-1);
+        }
+        return (npubk);
+}
+
+int
+EVP_SealFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
+{
+        int i;
+
+        i = EVP_EncryptFinal_ex(ctx, out, outl);
+        if (i)
+                i = EVP_EncryptInit_ex(ctx, NULL, NULL, NULL, NULL);
+        return i;
+}