2 * Copyright 2020-2023 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
10 #include <openssl/crypto.h>
11 #include <openssl/core_dispatch.h>
12 #include <openssl/core_names.h>
13 #include <openssl/params.h>
14 #include <openssl/err.h>
15 #include <openssl/proverr.h>
16 #include "internal/cryptlib.h"
17 #include "crypto/ecx.h"
18 #include "prov/implementations.h"
19 #include "prov/providercommon.h"
21 static OSSL_FUNC_keyexch_newctx_fn x25519_newctx
;
22 static OSSL_FUNC_keyexch_newctx_fn x448_newctx
;
23 static OSSL_FUNC_keyexch_init_fn ecx_init
;
24 static OSSL_FUNC_keyexch_set_peer_fn ecx_set_peer
;
25 static OSSL_FUNC_keyexch_derive_fn ecx_derive
;
26 static OSSL_FUNC_keyexch_freectx_fn ecx_freectx
;
27 static OSSL_FUNC_keyexch_dupctx_fn ecx_dupctx
;
30 * What's passed as an actual key is defined by the KEYMGMT interface.
31 * We happen to know that our KEYMGMT simply passes ECX_KEY structures, so
32 * we use that here too.
41 static void *ecx_newctx(void *provctx
, size_t keylen
)
45 if (!ossl_prov_is_running())
48 ctx
= OPENSSL_zalloc(sizeof(PROV_ECX_CTX
));
57 static void *x25519_newctx(void *provctx
)
59 return ecx_newctx(provctx
, X25519_KEYLEN
);
62 static void *x448_newctx(void *provctx
)
64 return ecx_newctx(provctx
, X448_KEYLEN
);
67 static int ecx_init(void *vecxctx
, void *vkey
,
68 ossl_unused
const OSSL_PARAM params
[])
70 PROV_ECX_CTX
*ecxctx
= (PROV_ECX_CTX
*)vecxctx
;
73 if (!ossl_prov_is_running())
78 || key
->keylen
!= ecxctx
->keylen
79 || !ossl_ecx_key_up_ref(key
)) {
80 ERR_raise(ERR_LIB_PROV
, ERR_R_INTERNAL_ERROR
);
84 ossl_ecx_key_free(ecxctx
->key
);
90 static int ecx_set_peer(void *vecxctx
, void *vkey
)
92 PROV_ECX_CTX
*ecxctx
= (PROV_ECX_CTX
*)vecxctx
;
95 if (!ossl_prov_is_running())
100 || key
->keylen
!= ecxctx
->keylen
101 || !ossl_ecx_key_up_ref(key
)) {
102 ERR_raise(ERR_LIB_PROV
, ERR_R_INTERNAL_ERROR
);
105 ossl_ecx_key_free(ecxctx
->peerkey
);
106 ecxctx
->peerkey
= key
;
111 static int ecx_derive(void *vecxctx
, unsigned char *secret
, size_t *secretlen
,
114 PROV_ECX_CTX
*ecxctx
= (PROV_ECX_CTX
*)vecxctx
;
116 if (!ossl_prov_is_running())
118 return ossl_ecx_compute_key(ecxctx
->peerkey
, ecxctx
->key
, ecxctx
->keylen
,
119 secret
, secretlen
, outlen
);
122 static void ecx_freectx(void *vecxctx
)
124 PROV_ECX_CTX
*ecxctx
= (PROV_ECX_CTX
*)vecxctx
;
126 ossl_ecx_key_free(ecxctx
->key
);
127 ossl_ecx_key_free(ecxctx
->peerkey
);
129 OPENSSL_free(ecxctx
);
132 static void *ecx_dupctx(void *vecxctx
)
134 PROV_ECX_CTX
*srcctx
= (PROV_ECX_CTX
*)vecxctx
;
135 PROV_ECX_CTX
*dstctx
;
137 if (!ossl_prov_is_running())
140 dstctx
= OPENSSL_zalloc(sizeof(*srcctx
));
145 if (dstctx
->key
!= NULL
&& !ossl_ecx_key_up_ref(dstctx
->key
)) {
146 ERR_raise(ERR_LIB_PROV
, ERR_R_INTERNAL_ERROR
);
147 OPENSSL_free(dstctx
);
151 if (dstctx
->peerkey
!= NULL
&& !ossl_ecx_key_up_ref(dstctx
->peerkey
)) {
152 ERR_raise(ERR_LIB_PROV
, ERR_R_INTERNAL_ERROR
);
153 ossl_ecx_key_free(dstctx
->key
);
154 OPENSSL_free(dstctx
);
161 const OSSL_DISPATCH ossl_x25519_keyexch_functions
[] = {
162 { OSSL_FUNC_KEYEXCH_NEWCTX
, (void (*)(void))x25519_newctx
},
163 { OSSL_FUNC_KEYEXCH_INIT
, (void (*)(void))ecx_init
},
164 { OSSL_FUNC_KEYEXCH_DERIVE
, (void (*)(void))ecx_derive
},
165 { OSSL_FUNC_KEYEXCH_SET_PEER
, (void (*)(void))ecx_set_peer
},
166 { OSSL_FUNC_KEYEXCH_FREECTX
, (void (*)(void))ecx_freectx
},
167 { OSSL_FUNC_KEYEXCH_DUPCTX
, (void (*)(void))ecx_dupctx
},
171 const OSSL_DISPATCH ossl_x448_keyexch_functions
[] = {
172 { OSSL_FUNC_KEYEXCH_NEWCTX
, (void (*)(void))x448_newctx
},
173 { OSSL_FUNC_KEYEXCH_INIT
, (void (*)(void))ecx_init
},
174 { OSSL_FUNC_KEYEXCH_DERIVE
, (void (*)(void))ecx_derive
},
175 { OSSL_FUNC_KEYEXCH_SET_PEER
, (void (*)(void))ecx_set_peer
},
176 { OSSL_FUNC_KEYEXCH_FREECTX
, (void (*)(void))ecx_freectx
},
177 { OSSL_FUNC_KEYEXCH_DUPCTX
, (void (*)(void))ecx_dupctx
},