summaryrefslogtreecommitdiff
path: root/src/lib/libssl/tls13_key_share.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/lib/libssl/tls13_key_share.c')
-rw-r--r--src/lib/libssl/tls13_key_share.c324
1 files changed, 0 insertions, 324 deletions
diff --git a/src/lib/libssl/tls13_key_share.c b/src/lib/libssl/tls13_key_share.c
deleted file mode 100644
index 0d1c091462..0000000000
--- a/src/lib/libssl/tls13_key_share.c
+++ /dev/null
@@ -1,324 +0,0 @@
1/* $OpenBSD: tls13_key_share.c,v 1.6 2020/04/18 14:07:56 jsing Exp $ */
2/*
3 * Copyright (c) 2020 Joel Sing <jsing@openbsd.org>
4 *
5 * Permission to use, copy, modify, and distribute this software for any
6 * purpose with or without fee is hereby granted, provided that the above
7 * copyright notice and this permission notice appear in all copies.
8 *
9 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16 */
17
18#include <stdlib.h>
19
20#include <openssl/curve25519.h>
21
22#include "bytestring.h"
23#include "ssl_locl.h"
24#include "tls13_internal.h"
25
26struct tls13_key_share {
27 int nid;
28 uint16_t group_id;
29
30 EC_KEY *ecdhe;
31 EC_KEY *ecdhe_peer;
32
33 uint8_t *x25519_public;
34 uint8_t *x25519_private;
35 uint8_t *x25519_peer_public;
36};
37
38struct tls13_key_share *
39tls13_key_share_new(uint16_t group_id)
40{
41 struct tls13_key_share *ks;
42 int nid;
43
44 if ((nid = tls1_ec_curve_id2nid(group_id)) == 0)
45 return NULL;
46
47 if ((ks = calloc(1, sizeof(struct tls13_key_share))) == NULL)
48 return NULL;
49
50 ks->group_id = group_id;
51 ks->nid = nid;
52
53 return ks;
54}
55
56struct tls13_key_share *
57tls13_key_share_new_nid(int nid)
58{
59 uint16_t group_id;
60
61 if ((group_id = tls1_ec_nid2curve_id(nid)) == 0)
62 return NULL;
63
64 return tls13_key_share_new(group_id);
65}
66
67void
68tls13_key_share_free(struct tls13_key_share *ks)
69{
70 if (ks == NULL)
71 return;
72
73 EC_KEY_free(ks->ecdhe);
74 EC_KEY_free(ks->ecdhe_peer);
75
76 freezero(ks->x25519_public, X25519_KEY_LENGTH);
77 freezero(ks->x25519_private, X25519_KEY_LENGTH);
78 freezero(ks->x25519_peer_public, X25519_KEY_LENGTH);
79
80 freezero(ks, sizeof(*ks));
81}
82
83uint16_t
84tls13_key_share_group(struct tls13_key_share *ks)
85{
86 return ks->group_id;
87}
88
89int
90tls13_key_share_peer_pkey(struct tls13_key_share *ks, EVP_PKEY *pkey)
91{
92 if (ks->nid == NID_X25519 && ks->x25519_peer_public != NULL) {
93 if (!ssl_kex_dummy_ecdhe_x25519(pkey))
94 return 0;
95 } else if (ks->ecdhe_peer != NULL) {
96 if (!EVP_PKEY_set1_EC_KEY(pkey, ks->ecdhe_peer))
97 return 0;
98 } else {
99 return 0;
100 }
101
102 return 1;
103}
104
105static int
106tls13_key_share_generate_ecdhe_ecp(struct tls13_key_share *ks)
107{
108 EC_KEY *ecdhe = NULL;
109 int ret = 0;
110
111 if (ks->ecdhe != NULL)
112 goto err;
113
114 if ((ecdhe = EC_KEY_new()) == NULL)
115 goto err;
116 if (!ssl_kex_generate_ecdhe_ecp(ecdhe, ks->nid))
117 goto err;
118
119 ks->ecdhe = ecdhe;
120 ecdhe = NULL;
121
122 ret = 1;
123
124 err:
125 EC_KEY_free(ecdhe);
126
127 return ret;
128}
129
130static int
131tls13_key_share_generate_x25519(struct tls13_key_share *ks)
132{
133 uint8_t *public = NULL, *private = NULL;
134 int ret = 0;
135
136 if (ks->x25519_public != NULL || ks->x25519_private != NULL)
137 goto err;
138
139 if ((public = calloc(1, X25519_KEY_LENGTH)) == NULL)
140 goto err;
141 if ((private = calloc(1, X25519_KEY_LENGTH)) == NULL)
142 goto err;
143
144 X25519_keypair(public, private);
145
146 ks->x25519_public = public;
147 ks->x25519_private = private;
148 public = NULL;
149 private = NULL;
150
151 ret = 1;
152
153 err:
154 freezero(public, X25519_KEY_LENGTH);
155 freezero(private, X25519_KEY_LENGTH);
156
157 return ret;
158}
159
160int
161tls13_key_share_generate(struct tls13_key_share *ks)
162{
163 if (ks->nid == NID_X25519)
164 return tls13_key_share_generate_x25519(ks);
165
166 return tls13_key_share_generate_ecdhe_ecp(ks);
167}
168
169static int
170tls13_key_share_public_ecdhe_ecp(struct tls13_key_share *ks, CBB *cbb)
171{
172 if (ks->ecdhe == NULL)
173 return 0;
174
175 return ssl_kex_public_ecdhe_ecp(ks->ecdhe, cbb);
176}
177
178static int
179tls13_key_share_public_x25519(struct tls13_key_share *ks, CBB *cbb)
180{
181 if (ks->x25519_public == NULL)
182 return 0;
183
184 return CBB_add_bytes(cbb, ks->x25519_public, X25519_KEY_LENGTH);
185}
186
187int
188tls13_key_share_public(struct tls13_key_share *ks, CBB *cbb)
189{
190 CBB key_exchange;
191
192 if (!CBB_add_u16(cbb, ks->group_id))
193 goto err;
194 if (!CBB_add_u16_length_prefixed(cbb, &key_exchange))
195 goto err;
196
197 if (ks->nid == NID_X25519) {
198 if (!tls13_key_share_public_x25519(ks, &key_exchange))
199 goto err;
200 } else {
201 if (!tls13_key_share_public_ecdhe_ecp(ks, &key_exchange))
202 goto err;
203 }
204
205 if (!CBB_flush(cbb))
206 goto err;
207
208 return 1;
209
210 err:
211 return 0;
212}
213
214static int
215tls13_key_share_peer_public_ecdhe_ecp(struct tls13_key_share *ks, CBS *cbs)
216{
217 EC_KEY *ecdhe = NULL;
218 int ret = 0;
219
220 if (ks->ecdhe_peer != NULL)
221 goto err;
222
223 if ((ecdhe = EC_KEY_new()) == NULL)
224 goto err;
225 if (!ssl_kex_peer_public_ecdhe_ecp(ecdhe, ks->nid, cbs))
226 goto err;
227
228 ks->ecdhe_peer = ecdhe;
229 ecdhe = NULL;
230
231 ret = 1;
232
233 err:
234 EC_KEY_free(ecdhe);
235
236 return ret;
237}
238
239static int
240tls13_key_share_peer_public_x25519(struct tls13_key_share *ks, CBS *cbs)
241{
242 size_t out_len;
243
244 if (ks->x25519_peer_public != NULL)
245 return 0;
246
247 if (CBS_len(cbs) != X25519_KEY_LENGTH)
248 return 0;
249
250 return CBS_stow(cbs, &ks->x25519_peer_public, &out_len);
251}
252
253int
254tls13_key_share_peer_public(struct tls13_key_share *ks, uint16_t group,
255 CBS *cbs)
256{
257 if (ks->group_id != group)
258 return 0;
259
260 if (ks->nid == NID_X25519) {
261 if (!tls13_key_share_peer_public_x25519(ks, cbs))
262 return 0;
263 } else {
264 if (!tls13_key_share_peer_public_ecdhe_ecp(ks, cbs))
265 return 0;
266 }
267
268 return 1;
269}
270
271static int
272tls13_key_share_derive_ecdhe_ecp(struct tls13_key_share *ks,
273 uint8_t **shared_key, size_t *shared_key_len)
274{
275 if (ks->ecdhe == NULL || ks->ecdhe_peer == NULL)
276 return 0;
277
278 return ssl_kex_derive_ecdhe_ecp(ks->ecdhe, ks->ecdhe_peer,
279 shared_key, shared_key_len);
280}
281
282static int
283tls13_key_share_derive_x25519(struct tls13_key_share *ks,
284 uint8_t **shared_key, size_t *shared_key_len)
285{
286 uint8_t *sk = NULL;
287 int ret = 0;
288
289 if (ks->x25519_private == NULL || ks->x25519_peer_public == NULL)
290 goto err;
291
292 if ((sk = calloc(1, X25519_KEY_LENGTH)) == NULL)
293 goto err;
294 if (!X25519(sk, ks->x25519_private, ks->x25519_peer_public))
295 goto err;
296
297 *shared_key = sk;
298 *shared_key_len = X25519_KEY_LENGTH;
299 sk = NULL;
300
301 ret = 1;
302
303 err:
304 freezero(sk, X25519_KEY_LENGTH);
305
306 return ret;
307}
308
309int
310tls13_key_share_derive(struct tls13_key_share *ks, uint8_t **shared_key,
311 size_t *shared_key_len)
312{
313 if (*shared_key != NULL)
314 return 0;
315
316 *shared_key_len = 0;
317
318 if (ks->nid == NID_X25519)
319 return tls13_key_share_derive_x25519(ks, shared_key,
320 shared_key_len);
321
322 return tls13_key_share_derive_ecdhe_ecp(ks, shared_key,
323 shared_key_len);
324}
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2026-02-12 15:43:53 +0000