]> git.ipfire.org Git - thirdparty/openssl.git/blame - crypto/dh/dh_lib.c
TEST: Adapt test/errtest for the 'no-err' configuration
[thirdparty/openssl.git] / crypto / dh / dh_lib.c
CommitLineData
aa6bb135 1/*
7165593c 2 * Copyright 1995-2020 The OpenSSL Project Authors. All Rights Reserved.
d02b48c6 3 *
e38873f5 4 * Licensed under the Apache License 2.0 (the "License"). You may not use
aa6bb135
RS
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
d02b48c6
RE
8 */
9
ada66e78
P
10/*
11 * DH low level APIs are deprecated for public use, but still ok for
12 * internal use.
13 */
14#include "internal/deprecated.h"
15
d02b48c6 16#include <stdio.h>
ec577822 17#include <openssl/bn.h>
3c27208f 18#include <openssl/engine.h>
5a778ce5 19#include <openssl/obj_mac.h>
7165593c 20#include <openssl/core_names.h>
5a778ce5
DG
21#include "internal/cryptlib.h"
22#include "internal/refcount.h"
7165593c 23#include "crypto/evp.h"
dc8de3e6 24#include "crypto/dh.h"
5a778ce5 25#include "dh_local.h"
d02b48c6 26
b4250010 27static DH *dh_new_intern(ENGINE *engine, OSSL_LIB_CTX *libctx);
8083fd3a 28
f844f9eb 29#ifndef FIPS_MODULE
cb78486d 30int DH_set_method(DH *dh, const DH_METHOD *meth)
0f113f3e
MC
31{
32 /*
33 * NB: The caller is specifically setting a method, so it's not up to us
34 * to deal with which ENGINE it comes from.
35 */
36 const DH_METHOD *mtmp;
37 mtmp = dh->meth;
38 if (mtmp->finish)
39 mtmp->finish(dh);
0b13e9f0 40#ifndef OPENSSL_NO_ENGINE
7c96dbcd
RS
41 ENGINE_finish(dh->engine);
42 dh->engine = NULL;
0b13e9f0 43#endif
0f113f3e
MC
44 dh->meth = meth;
45 if (meth->init)
46 meth->init(dh);
47 return 1;
48}
13066cee 49
c518117b
RL
50const DH_METHOD *dh_get_method(const DH *dh)
51{
52 return dh->meth;
53}
54
6b691a5c 55DH *DH_new(void)
0f113f3e 56{
8083fd3a 57 return dh_new_intern(NULL, NULL);
0f113f3e 58}
13066cee 59
5270e702 60DH *DH_new_method(ENGINE *engine)
8083fd3a
SL
61{
62 return dh_new_intern(engine, NULL);
63}
f844f9eb 64#endif /* !FIPS_MODULE */
8083fd3a 65
b4250010 66DH *dh_new_ex(OSSL_LIB_CTX *libctx)
8083fd3a
SL
67{
68 return dh_new_intern(NULL, libctx);
69}
70
b4250010 71static DH *dh_new_intern(ENGINE *engine, OSSL_LIB_CTX *libctx)
0f113f3e 72{
64b25758 73 DH *ret = OPENSSL_zalloc(sizeof(*ret));
13066cee 74
0f113f3e 75 if (ret == NULL) {
9311d0c4 76 ERR_raise(ERR_LIB_DH, ERR_R_MALLOC_FAILURE);
d188a536 77 return NULL;
0f113f3e 78 }
0c9de428 79
2bbf0baa
F
80 ret->references = 1;
81 ret->lock = CRYPTO_THREAD_lock_new();
82 if (ret->lock == NULL) {
9311d0c4 83 ERR_raise(ERR_LIB_DH, ERR_R_MALLOC_FAILURE);
2bbf0baa
F
84 OPENSSL_free(ret);
85 return NULL;
86 }
87
8083fd3a 88 ret->libctx = libctx;
0f113f3e 89 ret->meth = DH_get_default_method();
f844f9eb 90#if !defined(FIPS_MODULE) && !defined(OPENSSL_NO_ENGINE)
2bbf0baa 91 ret->flags = ret->meth->flags; /* early default init */
0f113f3e
MC
92 if (engine) {
93 if (!ENGINE_init(engine)) {
9311d0c4 94 ERR_raise(ERR_LIB_DH, ERR_R_ENGINE_LIB);
2bbf0baa 95 goto err;
0f113f3e
MC
96 }
97 ret->engine = engine;
98 } else
99 ret->engine = ENGINE_get_default_DH();
100 if (ret->engine) {
101 ret->meth = ENGINE_get_DH(ret->engine);
7c96dbcd 102 if (ret->meth == NULL) {
9311d0c4 103 ERR_raise(ERR_LIB_DH, ERR_R_ENGINE_LIB);
2bbf0baa 104 goto err;
0f113f3e
MC
105 }
106 }
0b13e9f0 107#endif
cb78486d 108
0f113f3e 109 ret->flags = ret->meth->flags;
d188a536 110
f844f9eb 111#ifndef FIPS_MODULE
2bbf0baa
F
112 if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_DH, ret, &ret->ex_data))
113 goto err;
f844f9eb 114#endif /* FIPS_MODULE */
d188a536
AG
115
116 if ((ret->meth->init != NULL) && !ret->meth->init(ret)) {
9311d0c4 117 ERR_raise(ERR_LIB_DH, ERR_R_INIT_FAIL);
544648a8 118 goto err;
0f113f3e 119 }
d188a536
AG
120
121 return ret;
544648a8
NT
122
123 err:
124 DH_free(ret);
125 return NULL;
0f113f3e 126}
d02b48c6 127
6b691a5c 128void DH_free(DH *r)
0f113f3e
MC
129{
130 int i;
d6407083 131
0f113f3e
MC
132 if (r == NULL)
133 return;
d188a536 134
2f545ae4 135 CRYPTO_DOWN_REF(&r->references, &i, r->lock);
f3f1cf84 136 REF_PRINT_COUNT("DH", r);
0f113f3e
MC
137 if (i > 0)
138 return;
f3f1cf84 139 REF_ASSERT_ISNT(i < 0);
13066cee 140
0c5d725e 141 if (r->meth != NULL && r->meth->finish != NULL)
0f113f3e 142 r->meth->finish(r);
f844f9eb 143#if !defined(FIPS_MODULE)
62f49b90 144# if !defined(OPENSSL_NO_ENGINE)
7c96dbcd 145 ENGINE_finish(r->engine);
62f49b90 146# endif
0f113f3e 147 CRYPTO_free_ex_data(CRYPTO_EX_INDEX_DH, r, &r->ex_data);
a3327784 148#endif
d50f1bdf 149
d188a536
AG
150 CRYPTO_THREAD_lock_free(r->lock);
151
5357c106 152 ossl_ffc_params_cleanup(&r->params);
23a1d5e9
RS
153 BN_clear_free(r->pub_key);
154 BN_clear_free(r->priv_key);
0f113f3e
MC
155 OPENSSL_free(r);
156}
d02b48c6 157
dc2a33d6 158int DH_up_ref(DH *r)
0f113f3e 159{
d188a536
AG
160 int i;
161
2f545ae4 162 if (CRYPTO_UP_REF(&r->references, &i, r->lock) <= 0)
d188a536 163 return 0;
f3f1cf84
RS
164
165 REF_PRINT_COUNT("DH", r);
166 REF_ASSERT_ISNT(i < 2);
0f113f3e
MC
167 return ((i > 1) ? 1 : 0);
168}
5cbc2e8b 169
f844f9eb 170#ifndef FIPS_MODULE
dd9d233e 171int DH_set_ex_data(DH *d, int idx, void *arg)
0f113f3e 172{
26a7d938 173 return CRYPTO_set_ex_data(&d->ex_data, idx, arg);
0f113f3e 174}
13066cee 175
8cc86b81 176void *DH_get_ex_data(const DH *d, int idx)
0f113f3e 177{
26a7d938 178 return CRYPTO_get_ex_data(&d->ex_data, idx);
0f113f3e 179}
a3327784 180#endif
13066cee 181
26c79d56
KR
182int DH_bits(const DH *dh)
183{
dc8de3e6 184 return BN_num_bits(dh->params.p);
26c79d56
KR
185}
186
f971ccb2 187int DH_size(const DH *dh)
0f113f3e 188{
dc8de3e6 189 return BN_num_bytes(dh->params.p);
0f113f3e 190}
2514fa79
DSH
191
192int DH_security_bits(const DH *dh)
0f113f3e
MC
193{
194 int N;
dc8de3e6
SL
195 if (dh->params.q != NULL)
196 N = BN_num_bits(dh->params.q);
0f113f3e
MC
197 else if (dh->length)
198 N = dh->length;
199 else
200 N = -1;
dc8de3e6 201 return BN_security_bits(BN_num_bits(dh->params.p), N);
0f113f3e 202}
0aeddcfa 203
fd809cfd
RL
204void DH_get0_pqg(const DH *dh,
205 const BIGNUM **p, const BIGNUM **q, const BIGNUM **g)
0aeddcfa 206{
5357c106 207 ossl_ffc_params_get0_pqg(&dh->params, p, q, g);
0aeddcfa
MC
208}
209
210int DH_set0_pqg(DH *dh, BIGNUM *p, BIGNUM *q, BIGNUM *g)
211{
738ee181
SL
212 /*
213 * If the fields p and g in d are NULL, the corresponding input
1da12e34 214 * parameters MUST be non-NULL. q may remain NULL.
1da12e34 215 */
dc8de3e6
SL
216 if ((dh->params.p == NULL && p == NULL)
217 || (dh->params.g == NULL && g == NULL))
0aeddcfa 218 return 0;
1da12e34 219
5357c106 220 ossl_ffc_params_set0_pqg(&dh->params, p, q, g);
738ee181 221 dh_cache_named_group(dh);
8b84b075 222 dh->dirty_cnt++;
0aeddcfa
MC
223 return 1;
224}
225
226long DH_get_length(const DH *dh)
227{
228 return dh->length;
229}
230
231int DH_set_length(DH *dh, long length)
232{
233 dh->length = length;
ee55a207 234 dh->dirty_cnt++;
0aeddcfa
MC
235 return 1;
236}
237
fd809cfd 238void DH_get0_key(const DH *dh, const BIGNUM **pub_key, const BIGNUM **priv_key)
0aeddcfa
MC
239{
240 if (pub_key != NULL)
241 *pub_key = dh->pub_key;
242 if (priv_key != NULL)
243 *priv_key = dh->priv_key;
244}
245
246int DH_set0_key(DH *dh, BIGNUM *pub_key, BIGNUM *priv_key)
247{
1da12e34 248 if (pub_key != NULL) {
fa01370f 249 BN_clear_free(dh->pub_key);
1da12e34
RL
250 dh->pub_key = pub_key;
251 }
252 if (priv_key != NULL) {
fa01370f 253 BN_clear_free(dh->priv_key);
1da12e34
RL
254 dh->priv_key = priv_key;
255 }
0aeddcfa 256
8b84b075 257 dh->dirty_cnt++;
0aeddcfa
MC
258 return 1;
259}
260
6db7fadf
DMSP
261const BIGNUM *DH_get0_p(const DH *dh)
262{
dc8de3e6 263 return dh->params.p;
6db7fadf
DMSP
264}
265
266const BIGNUM *DH_get0_q(const DH *dh)
267{
dc8de3e6 268 return dh->params.q;
6db7fadf
DMSP
269}
270
271const BIGNUM *DH_get0_g(const DH *dh)
272{
dc8de3e6 273 return dh->params.g;
6db7fadf
DMSP
274}
275
276const BIGNUM *DH_get0_priv_key(const DH *dh)
277{
278 return dh->priv_key;
279}
280
281const BIGNUM *DH_get0_pub_key(const DH *dh)
282{
283 return dh->pub_key;
284}
285
0aeddcfa
MC
286void DH_clear_flags(DH *dh, int flags)
287{
288 dh->flags &= ~flags;
289}
290
291int DH_test_flags(const DH *dh, int flags)
292{
293 return dh->flags & flags;
294}
295
296void DH_set_flags(DH *dh, int flags)
297{
298 dh->flags |= flags;
299}
300
f844f9eb 301#ifndef FIPS_MODULE
0aeddcfa
MC
302ENGINE *DH_get0_engine(DH *dh)
303{
304 return dh->engine;
305}
f844f9eb 306#endif /*FIPS_MODULE */
dc8de3e6
SL
307
308FFC_PARAMS *dh_get0_params(DH *dh)
309{
310 return &dh->params;
311}
ca2bf555
SL
312int dh_get0_nid(const DH *dh)
313{
314 return dh->params.nid;
315}