diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/libcrypto/ec/ec_lib.c | 76 | ||||
| -rw-r--r-- | src/lib/libcrypto/ec/ec_local.h | 11 | ||||
| -rw-r--r-- | src/lib/libcrypto/ec/ecp_methods.c | 79 |
3 files changed, 16 insertions, 150 deletions
diff --git a/src/lib/libcrypto/ec/ec_lib.c b/src/lib/libcrypto/ec/ec_lib.c index d961ad0ee4..03c6f3aa90 100644 --- a/src/lib/libcrypto/ec/ec_lib.c +++ b/src/lib/libcrypto/ec/ec_lib.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ec_lib.c,v 1.94 2025/01/05 16:07:08 tb Exp $ */ | 1 | /* $OpenBSD: ec_lib.c,v 1.95 2025/01/06 10:56:46 tb Exp $ */ |
| 2 | /* | 2 | /* |
| 3 | * Originally written by Bodo Moeller for the OpenSSL project. | 3 | * Originally written by Bodo Moeller for the OpenSSL project. |
| 4 | */ | 4 | */ |
| @@ -908,78 +908,11 @@ EC_POINT_set_to_infinity(const EC_GROUP *group, EC_POINT *point) | |||
| 908 | LCRYPTO_ALIAS(EC_POINT_set_to_infinity); | 908 | LCRYPTO_ALIAS(EC_POINT_set_to_infinity); |
| 909 | 909 | ||
| 910 | int | 910 | int |
| 911 | EC_POINT_set_Jprojective_coordinates(const EC_GROUP *group, EC_POINT *point, | ||
| 912 | const BIGNUM *x, const BIGNUM *y, const BIGNUM *z, BN_CTX *ctx_in) | ||
| 913 | { | ||
| 914 | BN_CTX *ctx; | ||
| 915 | int ret = 0; | ||
| 916 | |||
| 917 | if ((ctx = ctx_in) == NULL) | ||
| 918 | ctx = BN_CTX_new(); | ||
| 919 | if (ctx == NULL) | ||
| 920 | goto err; | ||
| 921 | |||
| 922 | if (group->meth->point_set_Jprojective_coordinates == NULL) { | ||
| 923 | ECerror(ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | ||
| 924 | goto err; | ||
| 925 | } | ||
| 926 | if (group->meth != point->meth) { | ||
| 927 | ECerror(EC_R_INCOMPATIBLE_OBJECTS); | ||
| 928 | goto err; | ||
| 929 | } | ||
| 930 | if (!group->meth->point_set_Jprojective_coordinates(group, point, | ||
| 931 | x, y, z, ctx)) | ||
| 932 | goto err; | ||
| 933 | |||
| 934 | if (EC_POINT_is_on_curve(group, point, ctx) <= 0) { | ||
| 935 | ECerror(EC_R_POINT_IS_NOT_ON_CURVE); | ||
| 936 | goto err; | ||
| 937 | } | ||
| 938 | |||
| 939 | ret = 1; | ||
| 940 | |||
| 941 | err: | ||
| 942 | if (ctx != ctx_in) | ||
| 943 | BN_CTX_free(ctx); | ||
| 944 | |||
| 945 | return ret; | ||
| 946 | } | ||
| 947 | |||
| 948 | int | ||
| 949 | EC_POINT_get_Jprojective_coordinates(const EC_GROUP *group, | ||
| 950 | const EC_POINT *point, BIGNUM *x, BIGNUM *y, BIGNUM *z, BN_CTX *ctx_in) | ||
| 951 | { | ||
| 952 | BN_CTX *ctx; | ||
| 953 | int ret = 0; | ||
| 954 | |||
| 955 | if ((ctx = ctx_in) == NULL) | ||
| 956 | ctx = BN_CTX_new(); | ||
| 957 | if (ctx == NULL) | ||
| 958 | goto err; | ||
| 959 | |||
| 960 | if (group->meth->point_get_Jprojective_coordinates == NULL) { | ||
| 961 | ECerror(ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); | ||
| 962 | goto err; | ||
| 963 | } | ||
| 964 | if (group->meth != point->meth) { | ||
| 965 | ECerror(EC_R_INCOMPATIBLE_OBJECTS); | ||
| 966 | goto err; | ||
| 967 | } | ||
| 968 | ret = group->meth->point_get_Jprojective_coordinates(group, point, | ||
| 969 | x, y, z, ctx); | ||
| 970 | |||
| 971 | err: | ||
| 972 | if (ctx != ctx_in) | ||
| 973 | BN_CTX_free(ctx); | ||
| 974 | |||
| 975 | return ret; | ||
| 976 | } | ||
| 977 | |||
| 978 | int | ||
| 979 | EC_POINT_set_Jprojective_coordinates_GFp(const EC_GROUP *group, EC_POINT *point, | 911 | EC_POINT_set_Jprojective_coordinates_GFp(const EC_GROUP *group, EC_POINT *point, |
| 980 | const BIGNUM *x, const BIGNUM *y, const BIGNUM *z, BN_CTX *ctx) | 912 | const BIGNUM *x, const BIGNUM *y, const BIGNUM *z, BN_CTX *ctx) |
| 981 | { | 913 | { |
| 982 | return EC_POINT_set_Jprojective_coordinates(group, point, x, y, z, ctx); | 914 | ECerror(ERR_R_DISABLED); |
| 915 | return 0; | ||
| 983 | } | 916 | } |
| 984 | LCRYPTO_ALIAS(EC_POINT_set_Jprojective_coordinates_GFp); | 917 | LCRYPTO_ALIAS(EC_POINT_set_Jprojective_coordinates_GFp); |
| 985 | 918 | ||
| @@ -987,7 +920,8 @@ int | |||
| 987 | EC_POINT_get_Jprojective_coordinates_GFp(const EC_GROUP *group, | 920 | EC_POINT_get_Jprojective_coordinates_GFp(const EC_GROUP *group, |
| 988 | const EC_POINT *point, BIGNUM *x, BIGNUM *y, BIGNUM *z, BN_CTX *ctx) | 921 | const EC_POINT *point, BIGNUM *x, BIGNUM *y, BIGNUM *z, BN_CTX *ctx) |
| 989 | { | 922 | { |
| 990 | return EC_POINT_get_Jprojective_coordinates(group, point, x, y, z, ctx); | 923 | ECerror(ERR_R_DISABLED); |
| 924 | return 0; | ||
| 991 | } | 925 | } |
| 992 | LCRYPTO_ALIAS(EC_POINT_get_Jprojective_coordinates_GFp); | 926 | LCRYPTO_ALIAS(EC_POINT_get_Jprojective_coordinates_GFp); |
| 993 | 927 | ||
diff --git a/src/lib/libcrypto/ec/ec_local.h b/src/lib/libcrypto/ec/ec_local.h index 0d734351de..2bddaddd8a 100644 --- a/src/lib/libcrypto/ec/ec_local.h +++ b/src/lib/libcrypto/ec/ec_local.h | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ec_local.h,v 1.46 2025/01/05 16:07:08 tb Exp $ */ | 1 | /* $OpenBSD: ec_local.h,v 1.47 2025/01/06 10:56:46 tb Exp $ */ |
| 2 | /* | 2 | /* |
| 3 | * Originally written by Bodo Moeller for the OpenSSL project. | 3 | * Originally written by Bodo Moeller for the OpenSSL project. |
| 4 | */ | 4 | */ |
| @@ -99,10 +99,6 @@ struct ec_method_st { | |||
| 99 | int (*group_order_bits)(const EC_GROUP *); | 99 | int (*group_order_bits)(const EC_GROUP *); |
| 100 | int (*group_check_discriminant)(const EC_GROUP *, BN_CTX *); | 100 | int (*group_check_discriminant)(const EC_GROUP *, BN_CTX *); |
| 101 | 101 | ||
| 102 | int (*point_set_Jprojective_coordinates)(const EC_GROUP *, EC_POINT *, | ||
| 103 | const BIGNUM *x, const BIGNUM *y, const BIGNUM *z, BN_CTX *); | ||
| 104 | int (*point_get_Jprojective_coordinates)(const EC_GROUP *, | ||
| 105 | const EC_POINT *, BIGNUM *x, BIGNUM *y, BIGNUM *z, BN_CTX *); | ||
| 106 | int (*point_set_affine_coordinates)(const EC_GROUP *, EC_POINT *, | 102 | int (*point_set_affine_coordinates)(const EC_GROUP *, EC_POINT *, |
| 107 | const BIGNUM *x, const BIGNUM *y, BN_CTX *); | 103 | const BIGNUM *x, const BIGNUM *y, BN_CTX *); |
| 108 | int (*point_get_affine_coordinates)(const EC_GROUP *, const EC_POINT *, | 104 | int (*point_get_affine_coordinates)(const EC_GROUP *, const EC_POINT *, |
| @@ -277,11 +273,6 @@ int ecdsa_verify_sig(const unsigned char *dgst, int dgst_len, | |||
| 277 | int ecdh_KDF_X9_63(unsigned char *out, size_t outlen, const unsigned char *Z, | 273 | int ecdh_KDF_X9_63(unsigned char *out, size_t outlen, const unsigned char *Z, |
| 278 | size_t Zlen, const unsigned char *sinfo, size_t sinfolen, const EVP_MD *md); | 274 | size_t Zlen, const unsigned char *sinfo, size_t sinfolen, const EVP_MD *md); |
| 279 | 275 | ||
| 280 | int EC_POINT_set_Jprojective_coordinates(const EC_GROUP *group, EC_POINT *p, | ||
| 281 | const BIGNUM *x, const BIGNUM *y, const BIGNUM *z, BN_CTX *ctx); | ||
| 282 | int EC_POINT_get_Jprojective_coordinates(const EC_GROUP *group, | ||
| 283 | const EC_POINT *p, BIGNUM *x, BIGNUM *y, BIGNUM *z, BN_CTX *ctx); | ||
| 284 | |||
| 285 | int ec_group_is_builtin_curve(const EC_GROUP *group, int *out_nid); | 276 | int ec_group_is_builtin_curve(const EC_GROUP *group, int *out_nid); |
| 286 | int ec_group_get_field_type(const EC_GROUP *group); | 277 | int ec_group_get_field_type(const EC_GROUP *group); |
| 287 | 278 | ||
diff --git a/src/lib/libcrypto/ec/ecp_methods.c b/src/lib/libcrypto/ec/ecp_methods.c index b2ecc7e17a..7bdeb351da 100644 --- a/src/lib/libcrypto/ec/ecp_methods.c +++ b/src/lib/libcrypto/ec/ecp_methods.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ecp_methods.c,v 1.18 2025/01/05 16:07:08 tb Exp $ */ | 1 | /* $OpenBSD: ecp_methods.c,v 1.19 2025/01/06 10:56:46 tb Exp $ */ |
| 2 | /* Includes code written by Lenka Fibikova <fibikova@exp-math.uni-essen.de> | 2 | /* Includes code written by Lenka Fibikova <fibikova@exp-math.uni-essen.de> |
| 3 | * for the OpenSSL project. | 3 | * for the OpenSSL project. |
| 4 | * Includes code written by Bodo Moeller for the OpenSSL project. | 4 | * Includes code written by Bodo Moeller for the OpenSSL project. |
| @@ -124,23 +124,6 @@ ec_encode_scalar(const EC_GROUP *group, BIGNUM *bn, const BIGNUM *x, BN_CTX *ctx | |||
| 124 | } | 124 | } |
| 125 | 125 | ||
| 126 | static int | 126 | static int |
| 127 | ec_encode_z_coordinate(const EC_GROUP *group, BIGNUM *bn, int *is_one, | ||
| 128 | const BIGNUM *z, BN_CTX *ctx) | ||
| 129 | { | ||
| 130 | if (!BN_nnmod(bn, z, group->p, ctx)) | ||
| 131 | return 0; | ||
| 132 | |||
| 133 | *is_one = BN_is_one(bn); | ||
| 134 | if (*is_one && group->meth->field_set_to_one != NULL) | ||
| 135 | return group->meth->field_set_to_one(group, bn, ctx); | ||
| 136 | |||
| 137 | if (group->meth->field_encode != NULL) | ||
| 138 | return group->meth->field_encode(group, bn, bn, ctx); | ||
| 139 | |||
| 140 | return 1; | ||
| 141 | } | ||
| 142 | |||
| 143 | static int | ||
| 144 | ec_group_set_curve(EC_GROUP *group, | 127 | ec_group_set_curve(EC_GROUP *group, |
| 145 | const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) | 128 | const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) |
| 146 | { | 129 | { |
| @@ -262,48 +245,23 @@ ec_group_check_discriminant(const EC_GROUP *group, BN_CTX *ctx) | |||
| 262 | } | 245 | } |
| 263 | 246 | ||
| 264 | static int | 247 | static int |
| 265 | ec_set_Jprojective_coordinates(const EC_GROUP *group, EC_POINT *point, | 248 | ec_point_set_affine_coordinates(const EC_GROUP *group, EC_POINT *point, |
| 266 | const BIGNUM *x, const BIGNUM *y, const BIGNUM *z, BN_CTX *ctx) | 249 | const BIGNUM *x, const BIGNUM *y, BN_CTX *ctx) |
| 267 | { | 250 | { |
| 268 | int ret = 0; | 251 | int ret = 0; |
| 269 | 252 | ||
| 270 | /* | 253 | if (x == NULL || y == NULL) { |
| 271 | * Setting individual coordinates allows the creation of bad points. | 254 | ECerror(ERR_R_PASSED_NULL_PARAMETER); |
| 272 | * EC_POINT_set_Jprojective_coordinates() checks at the API boundary. | 255 | goto err; |
| 273 | */ | ||
| 274 | |||
| 275 | if (x != NULL) { | ||
| 276 | if (!ec_encode_scalar(group, point->X, x, ctx)) | ||
| 277 | goto err; | ||
| 278 | } | ||
| 279 | if (y != NULL) { | ||
| 280 | if (!ec_encode_scalar(group, point->Y, y, ctx)) | ||
| 281 | goto err; | ||
| 282 | } | ||
| 283 | if (z != NULL) { | ||
| 284 | if (!ec_encode_z_coordinate(group, point->Z, &point->Z_is_one, | ||
| 285 | z, ctx)) | ||
| 286 | goto err; | ||
| 287 | } | 256 | } |
| 288 | 257 | ||
| 289 | ret = 1; | 258 | if (!ec_encode_scalar(group, point->X, x, ctx)) |
| 290 | |||
| 291 | err: | ||
| 292 | return ret; | ||
| 293 | } | ||
| 294 | |||
| 295 | static int | ||
| 296 | ec_get_Jprojective_coordinates(const EC_GROUP *group, const EC_POINT *point, | ||
| 297 | BIGNUM *x, BIGNUM *y, BIGNUM *z, BN_CTX *ctx) | ||
| 298 | { | ||
| 299 | int ret = 0; | ||
| 300 | |||
| 301 | if (!ec_decode_scalar(group, x, point->X, ctx)) | ||
| 302 | goto err; | 259 | goto err; |
| 303 | if (!ec_decode_scalar(group, y, point->Y, ctx)) | 260 | if (!ec_encode_scalar(group, point->Y, y, ctx)) |
| 304 | goto err; | 261 | goto err; |
| 305 | if (!ec_decode_scalar(group, z, point->Z, ctx)) | 262 | if (!ec_encode_scalar(group, point->Z, BN_value_one(), ctx)) |
| 306 | goto err; | 263 | goto err; |
| 264 | point->Z_is_one = 1; | ||
| 307 | 265 | ||
| 308 | ret = 1; | 266 | ret = 1; |
| 309 | 267 | ||
| @@ -312,19 +270,6 @@ ec_get_Jprojective_coordinates(const EC_GROUP *group, const EC_POINT *point, | |||
| 312 | } | 270 | } |
| 313 | 271 | ||
| 314 | static int | 272 | static int |
| 315 | ec_point_set_affine_coordinates(const EC_GROUP *group, EC_POINT *point, | ||
| 316 | const BIGNUM *x, const BIGNUM *y, BN_CTX *ctx) | ||
| 317 | { | ||
| 318 | if (x == NULL || y == NULL) { | ||
| 319 | /* unlike for projective coordinates, we do not tolerate this */ | ||
| 320 | ECerror(ERR_R_PASSED_NULL_PARAMETER); | ||
| 321 | return 0; | ||
| 322 | } | ||
| 323 | return EC_POINT_set_Jprojective_coordinates(group, point, x, y, | ||
| 324 | BN_value_one(), ctx); | ||
| 325 | } | ||
| 326 | |||
| 327 | static int | ||
| 328 | ec_point_get_affine_coordinates(const EC_GROUP *group, const EC_POINT *point, | 273 | ec_point_get_affine_coordinates(const EC_GROUP *group, const EC_POINT *point, |
| 329 | BIGNUM *x, BIGNUM *y, BN_CTX *ctx) | 274 | BIGNUM *x, BIGNUM *y, BN_CTX *ctx) |
| 330 | { | 275 | { |
| @@ -1652,8 +1597,6 @@ static const EC_METHOD ec_GFp_simple_method = { | |||
| 1652 | .group_get_degree = ec_group_get_degree, | 1597 | .group_get_degree = ec_group_get_degree, |
| 1653 | .group_order_bits = ec_group_simple_order_bits, | 1598 | .group_order_bits = ec_group_simple_order_bits, |
| 1654 | .group_check_discriminant = ec_group_check_discriminant, | 1599 | .group_check_discriminant = ec_group_check_discriminant, |
| 1655 | .point_set_Jprojective_coordinates = ec_set_Jprojective_coordinates, | ||
| 1656 | .point_get_Jprojective_coordinates = ec_get_Jprojective_coordinates, | ||
| 1657 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, | 1600 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, |
| 1658 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, | 1601 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, |
| 1659 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, | 1602 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, |
| @@ -1687,8 +1630,6 @@ static const EC_METHOD ec_GFp_mont_method = { | |||
| 1687 | .group_get_degree = ec_group_get_degree, | 1630 | .group_get_degree = ec_group_get_degree, |
| 1688 | .group_order_bits = ec_group_simple_order_bits, | 1631 | .group_order_bits = ec_group_simple_order_bits, |
| 1689 | .group_check_discriminant = ec_group_check_discriminant, | 1632 | .group_check_discriminant = ec_group_check_discriminant, |
| 1690 | .point_set_Jprojective_coordinates = ec_set_Jprojective_coordinates, | ||
| 1691 | .point_get_Jprojective_coordinates = ec_get_Jprojective_coordinates, | ||
| 1692 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, | 1633 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, |
| 1693 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, | 1634 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, |
| 1694 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, | 1635 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, |
