]>
Commit | Line | Data |
---|---|---|
0f113f3e | 1 | /* |
fd38836b | 2 | * Copyright 1999-2018 The OpenSSL Project Authors. All Rights Reserved. |
d2e26dcc | 3 | * |
365a2d99 | 4 | * Licensed under the Apache License 2.0 (the "License"). You may not use |
2039c421 RS |
5 | * this file except in compliance with the License. You can obtain a copy |
6 | * in the file LICENSE in the source distribution or at | |
7 | * https://www.openssl.org/source/license.html | |
d2e26dcc DSH |
8 | */ |
9 | ||
10 | #include <stdio.h> | |
b39fc560 | 11 | #include "internal/cryptlib.h" |
9d6b1ce6 | 12 | #include <openssl/asn1t.h> |
f0e8ae72 | 13 | #include <openssl/x509.h> |
ec577822 | 14 | #include <openssl/rand.h> |
d2e26dcc DSH |
15 | |
16 | /* PKCS#5 v2.0 password based encryption structures */ | |
17 | ||
9d6b1ce6 | 18 | ASN1_SEQUENCE(PBE2PARAM) = { |
0f113f3e MC |
19 | ASN1_SIMPLE(PBE2PARAM, keyfunc, X509_ALGOR), |
20 | ASN1_SIMPLE(PBE2PARAM, encryption, X509_ALGOR) | |
d339187b | 21 | } ASN1_SEQUENCE_END(PBE2PARAM) |
d2e26dcc | 22 | |
9d6b1ce6 | 23 | IMPLEMENT_ASN1_FUNCTIONS(PBE2PARAM) |
d2e26dcc | 24 | |
9d6b1ce6 | 25 | ASN1_SEQUENCE(PBKDF2PARAM) = { |
0f113f3e MC |
26 | ASN1_SIMPLE(PBKDF2PARAM, salt, ASN1_ANY), |
27 | ASN1_SIMPLE(PBKDF2PARAM, iter, ASN1_INTEGER), | |
28 | ASN1_OPT(PBKDF2PARAM, keylength, ASN1_INTEGER), | |
29 | ASN1_OPT(PBKDF2PARAM, prf, X509_ALGOR) | |
d339187b | 30 | } ASN1_SEQUENCE_END(PBKDF2PARAM) |
d2e26dcc | 31 | |
9d6b1ce6 | 32 | IMPLEMENT_ASN1_FUNCTIONS(PBKDF2PARAM) |
d2e26dcc | 33 | |
0f113f3e MC |
34 | /* |
35 | * Return an algorithm identifier for a PKCS#5 v2.0 PBE algorithm: yes I know | |
36 | * this is horrible! Extended version to allow application supplied PRF NID | |
37 | * and IV. | |
8e21c146 DSH |
38 | */ |
39 | ||
ae519a24 | 40 | X509_ALGOR *PKCS5_pbe2_set_iv(const EVP_CIPHER *cipher, int iter, |
0f113f3e MC |
41 | unsigned char *salt, int saltlen, |
42 | unsigned char *aiv, int prf_nid) | |
8e21c146 | 43 | { |
2191dc84 | 44 | X509_ALGOR *scheme = NULL, *ret = NULL; |
0f113f3e | 45 | int alg_nid, keylen; |
846ec07d | 46 | EVP_CIPHER_CTX *ctx = NULL; |
0f113f3e MC |
47 | unsigned char iv[EVP_MAX_IV_LENGTH]; |
48 | PBE2PARAM *pbe2 = NULL; | |
0f113f3e MC |
49 | |
50 | alg_nid = EVP_CIPHER_type(cipher); | |
51 | if (alg_nid == NID_undef) { | |
52 | ASN1err(ASN1_F_PKCS5_PBE2_SET_IV, | |
53 | ASN1_R_CIPHER_HAS_NO_OBJECT_IDENTIFIER); | |
54 | goto err; | |
55 | } | |
0f113f3e | 56 | |
75ebbd9a | 57 | if ((pbe2 = PBE2PARAM_new()) == NULL) |
0f113f3e MC |
58 | goto merr; |
59 | ||
60 | /* Setup the AlgorithmIdentifier for the encryption scheme */ | |
61 | scheme = pbe2->encryption; | |
2191dc84 | 62 | scheme->algorithm = OBJ_nid2obj(alg_nid); |
75ebbd9a | 63 | if ((scheme->parameter = ASN1_TYPE_new()) == NULL) |
0f113f3e MC |
64 | goto merr; |
65 | ||
66 | /* Create random IV */ | |
67 | if (EVP_CIPHER_iv_length(cipher)) { | |
68 | if (aiv) | |
69 | memcpy(iv, aiv, EVP_CIPHER_iv_length(cipher)); | |
266483d2 | 70 | else if (RAND_bytes(iv, EVP_CIPHER_iv_length(cipher)) <= 0) |
0f113f3e MC |
71 | goto err; |
72 | } | |
73 | ||
846ec07d RL |
74 | ctx = EVP_CIPHER_CTX_new(); |
75 | if (ctx == NULL) | |
76 | goto merr; | |
0f113f3e MC |
77 | |
78 | /* Dummy cipherinit to just setup the IV, and PRF */ | |
846ec07d | 79 | if (!EVP_CipherInit_ex(ctx, cipher, NULL, NULL, iv, 0)) |
0f113f3e | 80 | goto err; |
49c9c1b3 | 81 | if (EVP_CIPHER_param_to_asn1(ctx, scheme->parameter) <= 0) { |
0f113f3e | 82 | ASN1err(ASN1_F_PKCS5_PBE2_SET_IV, ASN1_R_ERROR_SETTING_CIPHER_PARAMS); |
0f113f3e MC |
83 | goto err; |
84 | } | |
85 | /* | |
86 | * If prf NID unspecified see if cipher has a preference. An error is OK | |
87 | * here: just means use default PRF. | |
88 | */ | |
89 | if ((prf_nid == -1) && | |
846ec07d | 90 | EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_PBE_PRF_NID, 0, &prf_nid) <= 0) { |
0f113f3e | 91 | ERR_clear_error(); |
8fc06e88 | 92 | prf_nid = NID_hmacWithSHA256; |
0f113f3e | 93 | } |
846ec07d RL |
94 | EVP_CIPHER_CTX_free(ctx); |
95 | ctx = NULL; | |
0f113f3e MC |
96 | |
97 | /* If its RC2 then we'd better setup the key length */ | |
98 | ||
99 | if (alg_nid == NID_rc2_cbc) | |
100 | keylen = EVP_CIPHER_key_length(cipher); | |
101 | else | |
102 | keylen = -1; | |
103 | ||
104 | /* Setup keyfunc */ | |
105 | ||
106 | X509_ALGOR_free(pbe2->keyfunc); | |
107 | ||
108 | pbe2->keyfunc = PKCS5_pbkdf2_set(iter, salt, saltlen, prf_nid, keylen); | |
109 | ||
110 | if (!pbe2->keyfunc) | |
111 | goto merr; | |
112 | ||
113 | /* Now set up top level AlgorithmIdentifier */ | |
114 | ||
75ebbd9a | 115 | if ((ret = X509_ALGOR_new()) == NULL) |
0f113f3e | 116 | goto merr; |
0f113f3e MC |
117 | |
118 | ret->algorithm = OBJ_nid2obj(NID_pbes2); | |
119 | ||
120 | /* Encode PBE2PARAM into parameter */ | |
121 | ||
e93c8748 DSH |
122 | if (!ASN1_TYPE_pack_sequence(ASN1_ITEM_rptr(PBE2PARAM), pbe2, |
123 | &ret->parameter)) | |
0f113f3e | 124 | goto merr; |
0f113f3e MC |
125 | |
126 | PBE2PARAM_free(pbe2); | |
127 | pbe2 = NULL; | |
128 | ||
129 | return ret; | |
130 | ||
131 | merr: | |
132 | ASN1err(ASN1_F_PKCS5_PBE2_SET_IV, ERR_R_MALLOC_FAILURE); | |
133 | ||
134 | err: | |
846ec07d | 135 | EVP_CIPHER_CTX_free(ctx); |
0f113f3e MC |
136 | PBE2PARAM_free(pbe2); |
137 | /* Note 'scheme' is freed as part of pbe2 */ | |
0f113f3e MC |
138 | X509_ALGOR_free(ret); |
139 | ||
140 | return NULL; | |
0f113f3e | 141 | } |
8e21c146 | 142 | |
0f113f3e MC |
143 | X509_ALGOR *PKCS5_pbe2_set(const EVP_CIPHER *cipher, int iter, |
144 | unsigned char *salt, int saltlen) | |
145 | { | |
146 | return PKCS5_pbe2_set_iv(cipher, iter, salt, saltlen, NULL, -1); | |
147 | } | |
8e21c146 | 148 | |
0f113f3e MC |
149 | X509_ALGOR *PKCS5_pbkdf2_set(int iter, unsigned char *salt, int saltlen, |
150 | int prf_nid, int keylen) | |
151 | { | |
152 | X509_ALGOR *keyfunc = NULL; | |
153 | PBKDF2PARAM *kdf = NULL; | |
154 | ASN1_OCTET_STRING *osalt = NULL; | |
0fccb00b | 155 | |
75ebbd9a | 156 | if ((kdf = PBKDF2PARAM_new()) == NULL) |
0f113f3e | 157 | goto merr; |
75ebbd9a | 158 | if ((osalt = ASN1_OCTET_STRING_new()) == NULL) |
0f113f3e | 159 | goto merr; |
8e21c146 | 160 | |
0f113f3e MC |
161 | kdf->salt->value.octet_string = osalt; |
162 | kdf->salt->type = V_ASN1_OCTET_STRING; | |
8e21c146 | 163 | |
75ebbd9a | 164 | if (saltlen == 0) |
0f113f3e | 165 | saltlen = PKCS5_SALT_LEN; |
75ebbd9a | 166 | if ((osalt->data = OPENSSL_malloc(saltlen)) == NULL) |
0f113f3e | 167 | goto merr; |
8e21c146 | 168 | |
0f113f3e | 169 | osalt->length = saltlen; |
8e21c146 | 170 | |
0f113f3e MC |
171 | if (salt) |
172 | memcpy(osalt->data, salt, saltlen); | |
266483d2 | 173 | else if (RAND_bytes(osalt->data, saltlen) <= 0) |
0f113f3e | 174 | goto merr; |
f9678b8b | 175 | |
0f113f3e MC |
176 | if (iter <= 0) |
177 | iter = PKCS5_DEFAULT_ITER; | |
8e21c146 | 178 | |
0f113f3e MC |
179 | if (!ASN1_INTEGER_set(kdf->iter, iter)) |
180 | goto merr; | |
8e21c146 | 181 | |
0f113f3e | 182 | /* If have a key len set it up */ |
8e21c146 | 183 | |
0f113f3e | 184 | if (keylen > 0) { |
75ebbd9a | 185 | if ((kdf->keylength = ASN1_INTEGER_new()) == NULL) |
0f113f3e MC |
186 | goto merr; |
187 | if (!ASN1_INTEGER_set(kdf->keylength, keylen)) | |
188 | goto merr; | |
189 | } | |
8e21c146 | 190 | |
0f113f3e MC |
191 | /* prf can stay NULL if we are using hmacWithSHA1 */ |
192 | if (prf_nid > 0 && prf_nid != NID_hmacWithSHA1) { | |
193 | kdf->prf = X509_ALGOR_new(); | |
90945fa3 | 194 | if (kdf->prf == NULL) |
0f113f3e MC |
195 | goto merr; |
196 | X509_ALGOR_set0(kdf->prf, OBJ_nid2obj(prf_nid), V_ASN1_NULL, NULL); | |
197 | } | |
8e21c146 | 198 | |
0f113f3e | 199 | /* Finally setup the keyfunc structure */ |
8e21c146 | 200 | |
0f113f3e | 201 | keyfunc = X509_ALGOR_new(); |
90945fa3 | 202 | if (keyfunc == NULL) |
0f113f3e | 203 | goto merr; |
8e21c146 | 204 | |
0f113f3e | 205 | keyfunc->algorithm = OBJ_nid2obj(NID_id_pbkdf2); |
8e21c146 | 206 | |
0f113f3e | 207 | /* Encode PBKDF2PARAM into parameter of pbe2 */ |
8e21c146 | 208 | |
e93c8748 DSH |
209 | if (!ASN1_TYPE_pack_sequence(ASN1_ITEM_rptr(PBKDF2PARAM), kdf, |
210 | &keyfunc->parameter)) | |
0f113f3e | 211 | goto merr; |
8e21c146 | 212 | |
0f113f3e MC |
213 | PBKDF2PARAM_free(kdf); |
214 | return keyfunc; | |
8e21c146 | 215 | |
0f113f3e MC |
216 | merr: |
217 | ASN1err(ASN1_F_PKCS5_PBKDF2_SET, ERR_R_MALLOC_FAILURE); | |
218 | PBKDF2PARAM_free(kdf); | |
219 | X509_ALGOR_free(keyfunc); | |
220 | return NULL; | |
8e21c146 | 221 | } |