summaryrefslogtreecommitdiff
path: root/src/usr.bin/openssl/dh.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/usr.bin/openssl/dh.c')
-rw-r--r--src/usr.bin/openssl/dh.c308
1 files changed, 308 insertions, 0 deletions
diff --git a/src/usr.bin/openssl/dh.c b/src/usr.bin/openssl/dh.c
new file mode 100644
index 0000000000..447b4c800f
--- /dev/null
+++ b/src/usr.bin/openssl/dh.c
@@ -0,0 +1,308 @@
1/* $OpenBSD: dh.c,v 1.1 2014/08/26 17:47:24 jsing Exp $ */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved.
4 *
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
8 *
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to. The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 *
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
22 *
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
25 * are met:
26 * 1. Redistributions of source code must retain the copyright
27 * notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 * notice, this list of conditions and the following disclaimer in the
30 * documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 * must display the following acknowledgement:
33 * "This product includes cryptographic software written by
34 * Eric Young (eay@cryptsoft.com)"
35 * The word 'cryptographic' can be left out if the rouines from the library
36 * being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 * the apps directory (application code) you must include an acknowledgement:
39 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 *
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51 * SUCH DAMAGE.
52 *
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed. i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
57 */
58
59#include <openssl/opensslconf.h> /* for OPENSSL_NO_DH */
60
61#ifndef OPENSSL_NO_DH
62
63#include <stdio.h>
64#include <stdlib.h>
65#include <string.h>
66#include <time.h>
67
68#include "apps.h"
69
70#include <openssl/bio.h>
71#include <openssl/bn.h>
72#include <openssl/err.h>
73#include <openssl/dh.h>
74#include <openssl/pem.h>
75#include <openssl/x509.h>
76
77/* -inform arg - input format - default PEM (DER or PEM)
78 * -outform arg - output format - default PEM
79 * -in arg - input file - default stdin
80 * -out arg - output file - default stdout
81 * -check - check the parameters are ok
82 * -noout
83 * -text
84 * -C
85 */
86
87int dh_main(int, char **);
88
89int
90dh_main(int argc, char **argv)
91{
92 DH *dh = NULL;
93 int i, badops = 0, text = 0;
94 BIO *in = NULL, *out = NULL;
95 int informat, outformat, check = 0, noout = 0, C = 0, ret = 1;
96 char *infile, *outfile, *prog;
97#ifndef OPENSSL_NO_ENGINE
98 char *engine;
99#endif
100
101#ifndef OPENSSL_NO_ENGINE
102 engine = NULL;
103#endif
104 infile = NULL;
105 outfile = NULL;
106 informat = FORMAT_PEM;
107 outformat = FORMAT_PEM;
108
109 prog = argv[0];
110 argc--;
111 argv++;
112 while (argc >= 1) {
113 if (strcmp(*argv, "-inform") == 0) {
114 if (--argc < 1)
115 goto bad;
116 informat = str2fmt(*(++argv));
117 } else if (strcmp(*argv, "-outform") == 0) {
118 if (--argc < 1)
119 goto bad;
120 outformat = str2fmt(*(++argv));
121 } else if (strcmp(*argv, "-in") == 0) {
122 if (--argc < 1)
123 goto bad;
124 infile = *(++argv);
125 } else if (strcmp(*argv, "-out") == 0) {
126 if (--argc < 1)
127 goto bad;
128 outfile = *(++argv);
129 }
130#ifndef OPENSSL_NO_ENGINE
131 else if (strcmp(*argv, "-engine") == 0) {
132 if (--argc < 1)
133 goto bad;
134 engine = *(++argv);
135 }
136#endif
137 else if (strcmp(*argv, "-check") == 0)
138 check = 1;
139 else if (strcmp(*argv, "-text") == 0)
140 text = 1;
141 else if (strcmp(*argv, "-C") == 0)
142 C = 1;
143 else if (strcmp(*argv, "-noout") == 0)
144 noout = 1;
145 else {
146 BIO_printf(bio_err, "unknown option %s\n", *argv);
147 badops = 1;
148 break;
149 }
150 argc--;
151 argv++;
152 }
153
154 if (badops) {
155bad:
156 BIO_printf(bio_err, "%s [options] <infile >outfile\n", prog);
157 BIO_printf(bio_err, "where options are\n");
158 BIO_printf(bio_err, " -inform arg input format - one of DER PEM\n");
159 BIO_printf(bio_err, " -outform arg output format - one of DER PEM\n");
160 BIO_printf(bio_err, " -in arg input file\n");
161 BIO_printf(bio_err, " -out arg output file\n");
162 BIO_printf(bio_err, " -check check the DH parameters\n");
163 BIO_printf(bio_err, " -text print a text form of the DH parameters\n");
164 BIO_printf(bio_err, " -C Output C code\n");
165 BIO_printf(bio_err, " -noout no output\n");
166#ifndef OPENSSL_NO_ENGINE
167 BIO_printf(bio_err, " -engine e use engine e, possibly a hardware device.\n");
168#endif
169 goto end;
170 }
171 ERR_load_crypto_strings();
172
173#ifndef OPENSSL_NO_ENGINE
174 setup_engine(bio_err, engine, 0);
175#endif
176
177 in = BIO_new(BIO_s_file());
178 out = BIO_new(BIO_s_file());
179 if ((in == NULL) || (out == NULL)) {
180 ERR_print_errors(bio_err);
181 goto end;
182 }
183 if (infile == NULL)
184 BIO_set_fp(in, stdin, BIO_NOCLOSE);
185 else {
186 if (BIO_read_filename(in, infile) <= 0) {
187 perror(infile);
188 goto end;
189 }
190 }
191 if (outfile == NULL) {
192 BIO_set_fp(out, stdout, BIO_NOCLOSE);
193 } else {
194 if (BIO_write_filename(out, outfile) <= 0) {
195 perror(outfile);
196 goto end;
197 }
198 }
199
200 if (informat == FORMAT_ASN1)
201 dh = d2i_DHparams_bio(in, NULL);
202 else if (informat == FORMAT_PEM)
203 dh = PEM_read_bio_DHparams(in, NULL, NULL, NULL);
204 else {
205 BIO_printf(bio_err, "bad input format specified\n");
206 goto end;
207 }
208 if (dh == NULL) {
209 BIO_printf(bio_err, "unable to load DH parameters\n");
210 ERR_print_errors(bio_err);
211 goto end;
212 }
213 if (text) {
214 DHparams_print(out, dh);
215#ifdef undef
216 printf("p=");
217 BN_print(stdout, dh->p);
218 printf("\ng=");
219 BN_print(stdout, dh->g);
220 printf("\n");
221 if (dh->length != 0)
222 printf("recommended private length=%ld\n", dh->length);
223#endif
224 }
225 if (check) {
226 if (!DH_check(dh, &i)) {
227 ERR_print_errors(bio_err);
228 goto end;
229 }
230 if (i & DH_CHECK_P_NOT_PRIME)
231 printf("p value is not prime\n");
232 if (i & DH_CHECK_P_NOT_SAFE_PRIME)
233 printf("p value is not a safe prime\n");
234 if (i & DH_UNABLE_TO_CHECK_GENERATOR)
235 printf("unable to check the generator value\n");
236 if (i & DH_NOT_SUITABLE_GENERATOR)
237 printf("the g value is not a generator\n");
238 if (i == 0)
239 printf("DH parameters appear to be ok.\n");
240 }
241 if (C) {
242 unsigned char *data;
243 int len, l, bits;
244
245 len = BN_num_bytes(dh->p);
246 bits = BN_num_bits(dh->p);
247 data = malloc(len);
248 if (data == NULL) {
249 perror("malloc");
250 goto end;
251 }
252 l = BN_bn2bin(dh->p, data);
253 printf("static unsigned char dh%d_p[] = {", bits);
254 for (i = 0; i < l; i++) {
255 if ((i % 12) == 0)
256 printf("\n\t");
257 printf("0x%02X, ", data[i]);
258 }
259 printf("\n\t};\n");
260
261 l = BN_bn2bin(dh->g, data);
262 printf("static unsigned char dh%d_g[] = {", bits);
263 for (i = 0; i < l; i++) {
264 if ((i % 12) == 0)
265 printf("\n\t");
266 printf("0x%02X, ", data[i]);
267 }
268 printf("\n\t};\n\n");
269
270 printf("DH *get_dh%d()\n\t{\n", bits);
271 printf("\tDH *dh;\n\n");
272 printf("\tif ((dh = DH_new()) == NULL) return(NULL);\n");
273 printf("\tdh->p = BN_bin2bn(dh%d_p, sizeof(dh%d_p), NULL);\n",
274 bits, bits);
275 printf("\tdh->g = BN_bin2bn(dh%d_g, sizeof(dh%d_g), NULL);\n",
276 bits, bits);
277 printf("\tif ((dh->p == NULL) || (dh->g == NULL))\n");
278 printf("\t\treturn(NULL);\n");
279 printf("\treturn(dh);\n\t}\n");
280 free(data);
281 }
282 if (!noout) {
283 if (outformat == FORMAT_ASN1)
284 i = i2d_DHparams_bio(out, dh);
285 else if (outformat == FORMAT_PEM)
286 i = PEM_write_bio_DHparams(out, dh);
287 else {
288 BIO_printf(bio_err, "bad output format specified for outfile\n");
289 goto end;
290 }
291 if (!i) {
292 BIO_printf(bio_err, "unable to write DH parameters\n");
293 ERR_print_errors(bio_err);
294 goto end;
295 }
296 }
297 ret = 0;
298
299end:
300 BIO_free(in);
301 if (out != NULL)
302 BIO_free_all(out);
303 if (dh != NULL)
304 DH_free(dh);
305
306 return (ret);
307}
308#endif
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-11-25 20:50:11 +0000