[thirdparty/openssl.git] / crypto / dsa / dsa.h

/* crypto/dsa/dsa.h */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
 * All rights reserved.
 *
 * This package is an SSL implementation written
 * by Eric Young (eay@cryptsoft.com).
 * The implementation was written so as to conform with Netscapes SSL.
 * 
 * This library is free for commercial and non-commercial use as long as
 * the following conditions are aheared to.  The following conditions
 * apply to all code found in this distribution, be it the RC4, RSA,
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 * included with this distribution is covered by the same copyright terms
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
 * 
 * Copyright remains Eric Young's, and as such any Copyright notices in
 * the code are not to be removed.
 * If this package is used in a product, Eric Young should be given attribution
 * as the author of the parts of the library used.
 * This can be in the form of a textual message at program startup or
 * in documentation (online or textual) provided with the package.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *    "This product includes cryptographic software written by
 *     Eric Young (eay@cryptsoft.com)"
 *    The word 'cryptographic' can be left out if the rouines from the library
 *    being used are not cryptographic related :-).
 * 4. If you include any Windows specific code (or a derivative thereof) from 
 *    the apps directory (application code) you must include an acknowledgement:
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
 * 
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 * 
 * The licence and distribution terms for any publically available version or
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
 * copied and put under another distribution licence
 * [including the GNU Public Licence.]
 */

/*
 * The DSS routines are based on patches supplied by
 * Steven Schoch <schoch@sheba.arc.nasa.gov>.  He basically did the
 * work and I have just tweaked them a little to fit into my
 * stylistic vision for SSLeay :-) */

#ifndef HEADER_DSA_H
#define HEADER_DSA_H

#include <openssl/e_os2.h>

#ifdef OPENSSL_NO_DSA
#error DSA is disabled.
#endif

#ifndef OPENSSL_NO_BIO
#include <openssl/bio.h>
#endif
#include <openssl/crypto.h>
#include <openssl/ossl_typ.h>

#ifndef OPENSSL_NO_DEPRECATED
#include <openssl/bn.h>
#ifndef OPENSSL_NO_DH
# include <openssl/dh.h>
#endif
#endif

#ifndef OPENSSL_DSA_MAX_MODULUS_BITS
# define OPENSSL_DSA_MAX_MODULUS_BITS	10000
#endif

#define OPENSSL_DSA_FIPS_MIN_MODULUS_BITS 1024

#define DSA_FLAG_CACHE_MONT_P	0x01
#define DSA_FLAG_NO_EXP_CONSTTIME       0x02 /* new with 0.9.7h; the
                                              * built-in DSA
                                              * implementation now
                                              * uses constant time
                                              * modular exponentiation
                                              * for secret exponents
                                              * by default. This flag
                                              * causes the faster
                                              * variable sliding
                                              * window method to be
                                              * used for all
                                              * exponents.
                                              */
#define DSA_FLAG_NONCE_FROM_HASH	0x04 /* Causes the DSA nonce
					      * to be calculated from
					      * SHA512(private_key +
					      * H(message) +
					      * random). This
					      * strengthens DSA
					      * against a weak
					      * PRNG. */

/* If this flag is set the DSA method is FIPS compliant and can be used
 * in FIPS mode. This is set in the validated module method. If an
 * application sets this flag in its own methods it is its reposibility
 * to ensure the result is compliant.
 */

#define DSA_FLAG_FIPS_METHOD			0x0400

/* If this flag is set the operations normally disabled in FIPS mode are
 * permitted it is then the applications responsibility to ensure that the
 * usage is compliant.
 */

#define DSA_FLAG_NON_FIPS_ALLOW			0x0400
#define DSA_FLAG_FIPS_CHECKED			0x0800

#ifdef  __cplusplus
extern "C" {
#endif

/* Already defined in ossl_typ.h */
/* typedef struct dsa_st DSA; */
/* typedef struct dsa_method DSA_METHOD; */

typedef struct DSA_SIG_st
	{
	BIGNUM *r;
	BIGNUM *s;
	} DSA_SIG;

struct dsa_method
	{
	const char *name;
	DSA_SIG * (*dsa_do_sign)(const unsigned char *dgst, int dlen, DSA *dsa);
	int (*dsa_sign_setup)(DSA *dsa, BN_CTX *ctx_in,
			      BIGNUM **kinvp, BIGNUM **rp,
			      const unsigned char *dgst, int dlen);
	int (*dsa_do_verify)(const unsigned char *dgst, int dgst_len,
			     DSA_SIG *sig, DSA *dsa);
	int (*dsa_mod_exp)(DSA *dsa, BIGNUM *rr, BIGNUM *a1, BIGNUM *p1,
			BIGNUM *a2, BIGNUM *p2, BIGNUM *m, BN_CTX *ctx,
			BN_MONT_CTX *in_mont);
	int (*bn_mod_exp)(DSA *dsa, BIGNUM *r, BIGNUM *a, const BIGNUM *p,
				const BIGNUM *m, BN_CTX *ctx,
				BN_MONT_CTX *m_ctx); /* Can be null */
	int (*init)(DSA *dsa);
	int (*finish)(DSA *dsa);
	int flags;
	char *app_data;
	/* If this is non-NULL, it is used to generate DSA parameters */
	int (*dsa_paramgen)(DSA *dsa, int bits,
			const unsigned char *seed, int seed_len,
			int *counter_ret, unsigned long *h_ret,
			BN_GENCB *cb);
	/* If this is non-NULL, it is used to generate DSA keys */
	int (*dsa_keygen)(DSA *dsa);
	};

struct dsa_st
	{
	/* This first variable is used to pick up errors where
	 * a DSA is passed instead of of a EVP_PKEY */
	int pad;
	long version;
	int write_params;
	BIGNUM *p;
	BIGNUM *q;	/* == 20 */
	BIGNUM *g;

	BIGNUM *pub_key;  /* y public key */
	BIGNUM *priv_key; /* x private key */

	BIGNUM *kinv;	/* Signing pre-calc */
	BIGNUM *r;	/* Signing pre-calc */

	int flags;
	/* Normally used to cache montgomery values */
	BN_MONT_CTX *method_mont_p;
	int references;
	CRYPTO_EX_DATA ex_data;
	const DSA_METHOD *meth;
	/* functional reference if 'meth' is ENGINE-provided */
	ENGINE *engine;
	};

#define d2i_DSAparams_fp(fp,x) (DSA *)ASN1_d2i_fp((char *(*)())DSA_new, \
		(char *(*)())d2i_DSAparams,(fp),(unsigned char **)(x))
#define i2d_DSAparams_fp(fp,x) ASN1_i2d_fp(i2d_DSAparams,(fp), \
		(unsigned char *)(x))
#define d2i_DSAparams_bio(bp,x) ASN1_d2i_bio_of(DSA,DSA_new,d2i_DSAparams,bp,x)
#define i2d_DSAparams_bio(bp,x) ASN1_i2d_bio_of_const(DSA,i2d_DSAparams,bp,x)


DSA *DSAparams_dup(DSA *x);
DSA_SIG * DSA_SIG_new(void);
void	DSA_SIG_free(DSA_SIG *a);
int	i2d_DSA_SIG(const DSA_SIG *a, unsigned char **pp);
DSA_SIG * d2i_DSA_SIG(DSA_SIG **v, const unsigned char **pp, long length);

DSA_SIG * DSA_do_sign(const unsigned char *dgst,int dlen,DSA *dsa);
int	DSA_do_verify(const unsigned char *dgst,int dgst_len,
		      DSA_SIG *sig,DSA *dsa);

const DSA_METHOD *DSA_OpenSSL(void);

void	DSA_set_default_method(const DSA_METHOD *);
const DSA_METHOD *DSA_get_default_method(void);
int	DSA_set_method(DSA *dsa, const DSA_METHOD *);

#ifdef OPENSSL_FIPS
DSA *	FIPS_dsa_new(void);
void	FIPS_dsa_free (DSA *r);
DSA_SIG * FIPS_dsa_sign_digest(DSA *dsa, const unsigned char *dig, int dlen);
DSA_SIG * FIPS_dsa_sign_ctx(DSA *dsa, EVP_MD_CTX *ctx);
int FIPS_dsa_verify_digest(DSA *dsa,
				const unsigned char *dig, int dlen, DSA_SIG *s);
int FIPS_dsa_verify_ctx(DSA *dsa, EVP_MD_CTX *ctx, DSA_SIG *s);
int FIPS_dsa_verify(DSA *dsa, const unsigned char *msg, size_t msglen,
			const EVP_MD *mhash, DSA_SIG *s);
DSA_SIG * FIPS_dsa_sign(DSA *dsa, const unsigned char *msg, size_t msglen,
			const EVP_MD *mhash);

#endif

DSA *	DSA_new(void);
DSA *	DSA_new_method(ENGINE *engine);
void	DSA_free (DSA *r);
/* "up" the DSA object's reference count */
int	DSA_up_ref(DSA *r);
int	DSA_size(const DSA *);
	/* next 4 return -1 on error */
int	DSA_sign_setup( DSA *dsa,BN_CTX *ctx_in,BIGNUM **kinvp,BIGNUM **rp);
int	DSA_sign(int type,const unsigned char *dgst,int dlen,
		unsigned char *sig, unsigned int *siglen, DSA *dsa);
int	DSA_verify(int type,const unsigned char *dgst,int dgst_len,
		const unsigned char *sigbuf, int siglen, DSA *dsa);
int DSA_get_ex_new_index(long argl, void *argp, CRYPTO_EX_new *new_func,
	     CRYPTO_EX_dup *dup_func, CRYPTO_EX_free *free_func);
int DSA_set_ex_data(DSA *d, int idx, void *arg);
void *DSA_get_ex_data(DSA *d, int idx);

DSA *	d2i_DSAPublicKey(DSA **a, const unsigned char **pp, long length);
DSA *	d2i_DSAPrivateKey(DSA **a, const unsigned char **pp, long length);
DSA * 	d2i_DSAparams(DSA **a, const unsigned char **pp, long length);

/* Deprecated version */
#ifndef OPENSSL_NO_DEPRECATED
DSA *	DSA_generate_parameters(int bits,
		unsigned char *seed,int seed_len,
		int *counter_ret, unsigned long *h_ret,void
		(*callback)(int, int, void *),void *cb_arg);
#endif /* !defined(OPENSSL_NO_DEPRECATED) */

/* New version */
int	DSA_generate_parameters_ex(DSA *dsa, int bits,
		const unsigned char *seed,int seed_len,
		int *counter_ret, unsigned long *h_ret, BN_GENCB *cb);

int	DSA_generate_key(DSA *a);
int	i2d_DSAPublicKey(const DSA *a, unsigned char **pp);
int 	i2d_DSAPrivateKey(const DSA *a, unsigned char **pp);
int	i2d_DSAparams(const DSA *a,unsigned char **pp);

#ifndef OPENSSL_NO_BIO
int	DSAparams_print(BIO *bp, const DSA *x);
int	DSA_print(BIO *bp, const DSA *x, int off);
#endif
#ifndef OPENSSL_NO_FP_API
int	DSAparams_print_fp(FILE *fp, const DSA *x);
int	DSA_print_fp(FILE *bp, const DSA *x, int off);
#endif

#define DSS_prime_checks 50
/* Primality test according to FIPS PUB 186[-1], Appendix 2.1:
 * 50 rounds of Rabin-Miller */
#define DSA_is_prime(n, callback, cb_arg) \
	BN_is_prime(n, DSS_prime_checks, callback, NULL, cb_arg)

#ifndef OPENSSL_NO_DH
/* Convert DSA structure (key or just parameters) into DH structure
 * (be careful to avoid small subgroup attacks when using this!) */
DH *DSA_dup_DH(const DSA *r);
#endif

#define EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx, nbits) \
	EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN, \
				EVP_PKEY_CTRL_DSA_PARAMGEN_BITS, nbits, NULL)

#define	EVP_PKEY_CTRL_DSA_PARAMGEN_BITS		(EVP_PKEY_ALG_CTRL + 1)
#define	EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS	(EVP_PKEY_ALG_CTRL + 2)
#define	EVP_PKEY_CTRL_DSA_PARAMGEN_MD		(EVP_PKEY_ALG_CTRL + 3)

/* BEGIN ERROR CODES */
/* The following lines are auto generated by the script mkerr.pl. Any changes
 * made after this point may be overwritten when the script is next run.
 */
void ERR_load_DSA_strings(void);

/* Error codes for the DSA functions. */

/* Function codes. */
#define DSA_F_D2I_DSA_SIG				 110
#define DSA_F_DO_DSA_PRINT				 104
#define DSA_F_DSAPARAMS_PRINT				 100
#define DSA_F_DSAPARAMS_PRINT_FP			 101
#define DSA_F_DSA_BUILTIN_KEYGEN			 124
#define DSA_F_DSA_BUILTIN_PARAMGEN			 125
#define DSA_F_DSA_BUILTIN_PARAMGEN2			 126
#define DSA_F_DSA_DO_SIGN				 112
#define DSA_F_DSA_DO_VERIFY				 113
#define DSA_F_DSA_NEW_METHOD				 103
#define DSA_F_DSA_PARAM_DECODE				 119
#define DSA_F_DSA_PRINT_FP				 105
#define DSA_F_DSA_PRIV_DECODE				 115
#define DSA_F_DSA_PRIV_ENCODE				 116
#define DSA_F_DSA_PUB_DECODE				 117
#define DSA_F_DSA_PUB_ENCODE				 118
#define DSA_F_DSA_SIGN					 106
#define DSA_F_DSA_SIGN_SETUP				 107
#define DSA_F_DSA_SIG_NEW				 109
#define DSA_F_DSA_SIG_PRINT				 123
#define DSA_F_DSA_VERIFY				 108
#define DSA_F_I2D_DSA_SIG				 111
#define DSA_F_OLD_DSA_PRIV_DECODE			 122
#define DSA_F_PKEY_DSA_CTRL				 120
#define DSA_F_PKEY_DSA_KEYGEN				 121
#define DSA_F_SIG_CB					 114

/* Reason codes. */
#define DSA_R_BAD_Q_VALUE				 102
#define DSA_R_BN_DECODE_ERROR				 108
#define DSA_R_BN_ERROR					 109
#define DSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE		 100
#define DSA_R_DECODE_ERROR				 104
#define DSA_R_INVALID_DIGEST_TYPE			 106
#define DSA_R_INVALID_PARAMETERS			 112
#define DSA_R_KEY_SIZE_TOO_SMALL			 111
#define DSA_R_MISSING_PARAMETERS			 101
#define DSA_R_MODULUS_TOO_LARGE				 103
#define DSA_R_NEED_NEW_SETUP_VALUES			 110
#define DSA_R_NONCE_CANNOT_BE_PRECOMPUTED		 114
#define DSA_R_NO_PARAMETERS_SET				 107
#define DSA_R_PARAMETER_ENCODING_ERROR			 105
#define DSA_R_Q_NOT_PRIME				 113

#ifdef  __cplusplus
}
#endif
#endif
Commit	Line	Data
d02b48c6	1	/* crypto/dsa/dsa.h */
58964a49	2	/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
d02b48c6 RE	3	* All rights reserved.
	4	*
	5	* This package is an SSL implementation written
	6	* by Eric Young (eay@cryptsoft.com).
	7	* The implementation was written so as to conform with Netscapes SSL.
	8	*
	9	* This library is free for commercial and non-commercial use as long as
	10	* the following conditions are aheared to. The following conditions
	11	* apply to all code found in this distribution, be it the RC4, RSA,
	12	* lhash, DES, etc., code; not just the SSL code. The SSL documentation
	13	* included with this distribution is covered by the same copyright terms
	14	* except that the holder is Tim Hudson (tjh@cryptsoft.com).
	15	*
	16	* Copyright remains Eric Young's, and as such any Copyright notices in
	17	* the code are not to be removed.
	18	* If this package is used in a product, Eric Young should be given attribution
	19	* as the author of the parts of the library used.
	20	* This can be in the form of a textual message at program startup or
	21	* in documentation (online or textual) provided with the package.
	22	*
	23	* Redistribution and use in source and binary forms, with or without
	24	* modification, are permitted provided that the following conditions
	25	* are met:
	26	* 1. Redistributions of source code must retain the copyright
	27	* notice, this list of conditions and the following disclaimer.
	28	* 2. Redistributions in binary form must reproduce the above copyright
	29	* notice, this list of conditions and the following disclaimer in the
	30	* documentation and/or other materials provided with the distribution.
	31	* 3. All advertising materials mentioning features or use of this software
	32	* must display the following acknowledgement:
	33	* "This product includes cryptographic software written by
	34	* Eric Young (eay@cryptsoft.com)"
	35	* The word 'cryptographic' can be left out if the rouines from the library
	36	* being used are not cryptographic related :-).
	37	* 4. If you include any Windows specific code (or a derivative thereof) from
	38	* the apps directory (application code) you must include an acknowledgement:
	39	* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
	40	*
	41	* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
	42	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	43	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	44	* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
	45	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	46	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	47	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	48	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	49	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	50	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	51	* SUCH DAMAGE.
	52	*
	53	* The licence and distribution terms for any publically available version or
	54	* derivative of this code cannot be changed. i.e. this code cannot simply be
	55	* copied and put under another distribution licence
	56	* [including the GNU Public Licence.]
	57	*/
	58
	59	/*
	60	* The DSS routines are based on patches supplied by
	61	* Steven Schoch <schoch@sheba.arc.nasa.gov>. He basically did the
	62	* work and I have just tweaked them a little to fit into my
	63	* stylistic vision for SSLeay :-) */
	64
	65	#ifndef HEADER_DSA_H
	66	#define HEADER_DSA_H
67
751ff1d3 RL	68	#include <openssl/e_os2.h>
751ff1d3 RL	69
cf1b7d96	70	#ifdef OPENSSL_NO_DSA
f5d7a031 UM	71	#error DSA is disabled.
	72	#endif
	73
cf1b7d96	74	#ifndef OPENSSL_NO_BIO
ef33b970 RL	75	#include <openssl/bio.h>
ef33b970 RL	76	#endif
c0711f7f	77	#include <openssl/crypto.h>
2aa9043a	78	#include <openssl/ossl_typ.h>
60a938c6 GT	79
60a938c6 GT	80	#ifndef OPENSSL_NO_DEPRECATED
0f814687	81	#include <openssl/bn.h>
cf1b7d96	82	#ifndef OPENSSL_NO_DH
48c843c3 BM	83	# include <openssl/dh.h>
48c843c3 BM	84	#endif
60a938c6	85	#endif
d02b48c6	86
5e3225cc BM	87	#ifndef OPENSSL_DSA_MAX_MODULUS_BITS
	88	# define OPENSSL_DSA_MAX_MODULUS_BITS 10000
	89	#endif
	90
20818e00 DSH	91	#define OPENSSL_DSA_FIPS_MIN_MODULUS_BITS 1024
20818e00 DSH	92
dfeab068	93	#define DSA_FLAG_CACHE_MONT_P 0x01
8a99cb29 AL	94	#define DSA_FLAG_NO_EXP_CONSTTIME 0x02 /* new with 0.9.7h; the
	95	* built-in DSA
	96	* implementation now
	97	* uses constant time
	98	* modular exponentiation
	99	* for secret exponents
	100	* by default. This flag
	101	* causes the faster
	102	* variable sliding
	103	* window method to be
	104	* used for all
	105	* exponents.
46a64376	106	*/
8a99cb29 AL	107	#define DSA_FLAG_NONCE_FROM_HASH 0x04 /* Causes the DSA nonce
	108	* to be calculated from
	109	* SHA512(private_key +
	110	* H(message) +
	111	* random). This
	112	* strengthens DSA
	113	* against a weak
	114	* PRNG. */
dfeab068	115
20818e00 DSH	116	/* If this flag is set the DSA method is FIPS compliant and can be used
	117	* in FIPS mode. This is set in the validated module method. If an
	118	* application sets this flag in its own methods it is its reposibility
	119	* to ensure the result is compliant.
	120	*/
	121
	122	#define DSA_FLAG_FIPS_METHOD 0x0400
	123
	124	/* If this flag is set the operations normally disabled in FIPS mode are
	125	* permitted it is then the applications responsibility to ensure that the
	126	* usage is compliant.
	127	*/
	128
	129	#define DSA_FLAG_NON_FIPS_ALLOW 0x0400
cac4fb58	130	#define DSA_FLAG_FIPS_CHECKED 0x0800
20818e00	131
82271cee RL	132	#ifdef __cplusplus
	133	extern "C" {
	134	#endif
	135
3a87a9b9 GT	136	/* Already defined in ossl_typ.h */
	137	/* typedef struct dsa_st DSA; */
	138	/* typedef struct dsa_method DSA_METHOD; */
c0711f7f DSH	139
	140	typedef struct DSA_SIG_st
	141	{
	142	BIGNUM *r;
	143	BIGNUM *s;
	144	} DSA_SIG;
	145
3a87a9b9 GT	146	struct dsa_method
3a87a9b9 GT	147	{
c0711f7f DSH	148	const char *name;
c0711f7f DSH	149	DSA_SIG * (dsa_do_sign)(const unsigned char dgst, int dlen, DSA *dsa);
8a99cb29 AL	150	int (dsa_sign_setup)(DSA dsa, BN_CTX *ctx_in,
	151	BIGNUM kinvp, BIGNUM rp,
	152	const unsigned char *dgst, int dlen);
c0711f7f	153	int (dsa_do_verify)(const unsigned char dgst, int dgst_len,
84948b39	154	DSA_SIG sig, DSA dsa);
c0711f7f DSH	155	int (dsa_mod_exp)(DSA dsa, BIGNUM rr, BIGNUM a1, BIGNUM *p1,
	156	BIGNUM a2, BIGNUM p2, BIGNUM m, BN_CTX ctx,
	157	BN_MONT_CTX *in_mont);
	158	int (bn_mod_exp)(DSA dsa, BIGNUM r, BIGNUM a, const BIGNUM *p,
	159	const BIGNUM m, BN_CTX ctx,
	160	BN_MONT_CTX m_ctx); / Can be null */
	161	int (init)(DSA dsa);
	162	int (finish)(DSA dsa);
	163	int flags;
	164	char *app_data;
0e4aa0d2 GT	165	/* If this is non-NULL, it is used to generate DSA parameters */
0e4aa0d2 GT	166	int (dsa_paramgen)(DSA dsa, int bits,
1457619e	167	const unsigned char *seed, int seed_len,
0e4aa0d2 GT	168	int counter_ret, unsigned long h_ret,
	169	BN_GENCB *cb);
	170	/* If this is non-NULL, it is used to generate DSA keys */
	171	int (dsa_keygen)(DSA dsa);
3a87a9b9	172	};
c0711f7f DSH	173
c0711f7f DSH	174	struct dsa_st
d02b48c6 RE	175	{
	176	/* This first variable is used to pick up errors where
	177	* a DSA is passed instead of of a EVP_PKEY */
	178	int pad;
2c2f9e2c	179	long version;
d02b48c6 RE	180	int write_params;
	181	BIGNUM *p;
	182	BIGNUM q; / == 20 */
	183	BIGNUM *g;
	184
	185	BIGNUM pub_key; / y public key */
	186	BIGNUM priv_key; / x private key */
	187
	188	BIGNUM kinv; / Signing pre-calc */
	189	BIGNUM r; / Signing pre-calc */
	190
dfeab068 RE	191	int flags;
dfeab068 RE	192	/* Normally used to cache montgomery values */
879b1980	193	BN_MONT_CTX *method_mont_p;
d02b48c6	194	int references;
c0711f7f	195	CRYPTO_EX_DATA ex_data;
cb78486d GT	196	const DSA_METHOD *meth;
	197	/* functional reference if 'meth' is ENGINE-provided */
	198	ENGINE *engine;
c0711f7f	199	};
a8da8918	200
d02b48c6 RE	201	#define d2i_DSAparams_fp(fp,x) (DSA )ASN1_d2i_fp((char (*)())DSA_new, \
	202	(char ()())d2i_DSAparams,(fp),(unsigned char **)(x))
	203	#define i2d_DSAparams_fp(fp,x) ASN1_i2d_fp(i2d_DSAparams,(fp), \
	204	(unsigned char *)(x))
41a15c4f BL	205	#define d2i_DSAparams_bio(bp,x) ASN1_d2i_bio_of(DSA,DSA_new,d2i_DSAparams,bp,x)
41a15c4f BL	206	#define i2d_DSAparams_bio(bp,x) ASN1_i2d_bio_of_const(DSA,i2d_DSAparams,bp,x)
d02b48c6	207
d02b48c6	208
f4274da1	209	DSA DSAparams_dup(DSA x);
a8da8918 UM	210	DSA_SIG * DSA_SIG_new(void);
a8da8918 UM	211	void DSA_SIG_free(DSA_SIG *a);
a4aba800	212	int i2d_DSA_SIG(const DSA_SIG a, unsigned char *pp);
6343829a	213	DSA_SIG * d2i_DSA_SIG(DSA_SIG v, const unsigned char pp, long length);
a8da8918	214
61f5b6f3 BL	215	DSA_SIG * DSA_do_sign(const unsigned char dgst,int dlen,DSA dsa);
	216	int DSA_do_verify(const unsigned char *dgst,int dgst_len,
	217	DSA_SIG sig,DSA dsa);
a8da8918	218
a4aba800	219	const DSA_METHOD *DSA_OpenSSL(void);
c0711f7f	220
cb78486d GT	221	void DSA_set_default_method(const DSA_METHOD *);
	222	const DSA_METHOD *DSA_get_default_method(void);
	223	int DSA_set_method(DSA dsa, const DSA_METHOD );
f8463356	224
20818e00 DSH	225	#ifdef OPENSSL_FIPS
	226	DSA * FIPS_dsa_new(void);
	227	void FIPS_dsa_free (DSA *r);
a5b196a2	228	DSA_SIG * FIPS_dsa_sign_digest(DSA dsa, const unsigned char dig, int dlen);
20818e00	229	DSA_SIG * FIPS_dsa_sign_ctx(DSA dsa, EVP_MD_CTX ctx);
a5b196a2 DSH	230	int FIPS_dsa_verify_digest(DSA *dsa,
a5b196a2 DSH	231	const unsigned char dig, int dlen, DSA_SIG s);
20818e00	232	int FIPS_dsa_verify_ctx(DSA dsa, EVP_MD_CTX ctx, DSA_SIG *s);
f4324e51 DSH	233	int FIPS_dsa_verify(DSA dsa, const unsigned char msg, size_t msglen,
	234	const EVP_MD mhash, DSA_SIG s);
	235	DSA_SIG * FIPS_dsa_sign(DSA dsa, const unsigned char msg, size_t msglen,
	236	const EVP_MD *mhash);
	237
20818e00 DSH	238	#endif
20818e00 DSH	239
d02b48c6	240	DSA * DSA_new(void);
cb78486d	241	DSA * DSA_new_method(ENGINE *engine);
5cbc2e8b GT	242	void DSA_free (DSA *r);
5cbc2e8b GT	243	/* "up" the DSA object's reference count */
6ac4e8bd	244	int DSA_up_ref(DSA *r);
a4aba800	245	int DSA_size(const DSA *);
d02b48c6 RE	246	/* next 4 return -1 on error */
d02b48c6 RE	247	int DSA_sign_setup( DSA dsa,BN_CTX ctx_in,BIGNUM kinvp,BIGNUM rp);
61f5b6f3	248	int DSA_sign(int type,const unsigned char *dgst,int dlen,
d02b48c6	249	unsigned char sig, unsigned int siglen, DSA *dsa);
61f5b6f3	250	int DSA_verify(int type,const unsigned char *dgst,int dgst_len,
a4aba800	251	const unsigned char sigbuf, int siglen, DSA dsa);
dd9d233e DSH	252	int DSA_get_ex_new_index(long argl, void argp, CRYPTO_EX_new new_func,
	253	CRYPTO_EX_dup dup_func, CRYPTO_EX_free free_func);
	254	int DSA_set_ex_data(DSA d, int idx, void arg);
	255	void DSA_get_ex_data(DSA d, int idx);
d02b48c6	256
6343829a GT	257	DSA * d2i_DSAPublicKey(DSA a, const unsigned char pp, long length);
	258	DSA * d2i_DSAPrivateKey(DSA a, const unsigned char pp, long length);
	259	DSA * d2i_DSAparams(DSA a, const unsigned char pp, long length);
e9224c71 GT	260
	261	/* Deprecated version */
	262	#ifndef OPENSSL_NO_DEPRECATED
a4aba800 RL	263	DSA * DSA_generate_parameters(int bits,
a4aba800 RL	264	unsigned char *seed,int seed_len,
58964a49	265	int counter_ret, unsigned long h_ret,void
82fc1d9c	266	(callback)(int, int, void ),void *cb_arg);
e9224c71 GT	267	#endif /* !defined(OPENSSL_NO_DEPRECATED) */
	268
	269	/* New version */
	270	int DSA_generate_parameters_ex(DSA *dsa, int bits,
1457619e	271	const unsigned char *seed,int seed_len,
e9224c71 GT	272	int counter_ret, unsigned long h_ret, BN_GENCB *cb);
e9224c71 GT	273
d02b48c6	274	int DSA_generate_key(DSA *a);
a4aba800 RL	275	int i2d_DSAPublicKey(const DSA a, unsigned char *pp);
	276	int i2d_DSAPrivateKey(const DSA a, unsigned char *pp);
	277	int i2d_DSAparams(const DSA a,unsigned char *pp);
d02b48c6	278
cf1b7d96	279	#ifndef OPENSSL_NO_BIO
a4aba800 RL	280	int DSAparams_print(BIO bp, const DSA x);
a4aba800 RL	281	int DSA_print(BIO bp, const DSA x, int off);
d02b48c6	282	#endif
cf1b7d96	283	#ifndef OPENSSL_NO_FP_API
a4aba800 RL	284	int DSAparams_print_fp(FILE fp, const DSA x);
a4aba800 RL	285	int DSA_print_fp(FILE bp, const DSA x, int off);
d02b48c6 RE	286	#endif
d02b48c6 RE	287
a87030a1 BM	288	#define DSS_prime_checks 50
	289	/* Primality test according to FIPS PUB 186[-1], Appendix 2.1:
	290	* 50 rounds of Rabin-Miller */
	291	#define DSA_is_prime(n, callback, cb_arg) \
	292	BN_is_prime(n, DSS_prime_checks, callback, NULL, cb_arg)
d02b48c6	293
cf1b7d96	294	#ifndef OPENSSL_NO_DH
48c843c3 BM	295	/* Convert DSA structure (key or just parameters) into DH structure
48c843c3 BM	296	* (be careful to avoid small subgroup attacks when using this!) */
a4aba800	297	DH DSA_dup_DH(const DSA r);
48c843c3 BM	298	#endif
48c843c3 BM	299
c927df3f DSH	300	#define EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx, nbits) \
	301	EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN, \
	302	EVP_PKEY_CTRL_DSA_PARAMGEN_BITS, nbits, NULL)
	303
	304	#define EVP_PKEY_CTRL_DSA_PARAMGEN_BITS (EVP_PKEY_ALG_CTRL + 1)
357d5de5 NL	305	#define EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS (EVP_PKEY_ALG_CTRL + 2)
357d5de5 NL	306	#define EVP_PKEY_CTRL_DSA_PARAMGEN_MD (EVP_PKEY_ALG_CTRL + 3)
c927df3f	307
d02b48c6	308	/* BEGIN ERROR CODES */
6d311938 DSH	309	/* The following lines are auto generated by the script mkerr.pl. Any changes
	310	* made after this point may be overwritten when the script is next run.
	311	*/
c962479b	312	void ERR_load_DSA_strings(void);
6d311938	313
d02b48c6 RE	314	/* Error codes for the DSA functions. */
	315
	316	/* Function codes. */
6d311938	317	#define DSA_F_D2I_DSA_SIG 110
5c95c2ac	318	#define DSA_F_DO_DSA_PRINT 104
d02b48c6 RE	319	#define DSA_F_DSAPARAMS_PRINT 100
d02b48c6 RE	320	#define DSA_F_DSAPARAMS_PRINT_FP 101
20818e00 DSH	321	#define DSA_F_DSA_BUILTIN_KEYGEN 124
20818e00 DSH	322	#define DSA_F_DSA_BUILTIN_PARAMGEN 125
3dd9b31d	323	#define DSA_F_DSA_BUILTIN_PARAMGEN2 126
6d311938 DSH	324	#define DSA_F_DSA_DO_SIGN 112
6d311938 DSH	325	#define DSA_F_DSA_DO_VERIFY 113
0c372b94	326	#define DSA_F_DSA_NEW_METHOD 103
3e4585c8	327	#define DSA_F_DSA_PARAM_DECODE 119
d02b48c6	328	#define DSA_F_DSA_PRINT_FP 105
448be743 DSH	329	#define DSA_F_DSA_PRIV_DECODE 115
	330	#define DSA_F_DSA_PRIV_ENCODE 116
	331	#define DSA_F_DSA_PUB_DECODE 117
	332	#define DSA_F_DSA_PUB_ENCODE 118
d02b48c6 RE	333	#define DSA_F_DSA_SIGN 106
d02b48c6 RE	334	#define DSA_F_DSA_SIGN_SETUP 107
a8da8918	335	#define DSA_F_DSA_SIG_NEW 109
a4d9c12f	336	#define DSA_F_DSA_SIG_PRINT 123
6d311938	337	#define DSA_F_DSA_VERIFY 108
a8da8918	338	#define DSA_F_I2D_DSA_SIG 111
5c95c2ac	339	#define DSA_F_OLD_DSA_PRIV_DECODE 122
c927df3f	340	#define DSA_F_PKEY_DSA_CTRL 120
75ef7188	341	#define DSA_F_PKEY_DSA_KEYGEN 121
9d6b1ce6	342	#define DSA_F_SIG_CB 114
d02b48c6 RE	343
d02b48c6 RE	344	/* Reason codes. */
5e3225cc BM	345	#define DSA_R_BAD_Q_VALUE 102
	346	#define DSA_R_BN_DECODE_ERROR 108
	347	#define DSA_R_BN_ERROR 109
d02b48c6	348	#define DSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE 100
448be743	349	#define DSA_R_DECODE_ERROR 104
c927df3f	350	#define DSA_R_INVALID_DIGEST_TYPE 106
3dd9b31d	351	#define DSA_R_INVALID_PARAMETERS 112
20818e00	352	#define DSA_R_KEY_SIZE_TOO_SMALL 111
c962479b	353	#define DSA_R_MISSING_PARAMETERS 101
5e3225cc	354	#define DSA_R_MODULUS_TOO_LARGE 103
245a7eee	355	#define DSA_R_NEED_NEW_SETUP_VALUES 110
8a99cb29	356	#define DSA_R_NONCE_CANNOT_BE_PRECOMPUTED 114
75ef7188	357	#define DSA_R_NO_PARAMETERS_SET 107
448be743	358	#define DSA_R_PARAMETER_ENCODING_ERROR 105
3dd9b31d	359	#define DSA_R_Q_NOT_PRIME 113
6d311938	360
d02b48c6 RE	361	#ifdef __cplusplus
	362	}
	363	#endif
	364	#endif