[thirdparty/openssl.git] / crypto / dh / dh_pmeth.c

/* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
 * project 2006.
 */
/* ====================================================================
 * Copyright (c) 2006 The OpenSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer. 
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
 *
 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
 *    endorse or promote products derived from this software without
 *    prior written permission. For written permission, please contact
 *    licensing@OpenSSL.org.
 *
 * 5. Products derived from this software may not be called "OpenSSL"
 *    nor may "OpenSSL" appear in their names without prior written
 *    permission of the OpenSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 * ====================================================================
 *
 * This product includes cryptographic software written by Eric Young
 * (eay@cryptsoft.com).  This product includes software written by Tim
 * Hudson (tjh@cryptsoft.com).
 *
 */

#include <stdio.h>
#include "cryptlib.h"
#include <openssl/asn1t.h>
#include <openssl/x509.h>
#include <openssl/rsa.h>
#include <openssl/evp.h>
#include "evp_locl.h"

/* DH pkey context structure */

typedef struct
	{
	/* Parameter gen parameters */
	int prime_len;
	int generator;
	int use_dsa;
	/* Keygen callback info */
	int gentmp[2];
	/* message digest */
	} DH_PKEY_CTX;

static int pkey_dh_init(EVP_PKEY_CTX *ctx)
	{
	DH_PKEY_CTX *dctx;
	dctx = OPENSSL_malloc(sizeof(DH_PKEY_CTX));
	if (!dctx)
		return 0;
	dctx->prime_len = 1024;
	dctx->generator = 2;
	dctx->use_dsa = 0;

	ctx->data = dctx;
	ctx->keygen_info = dctx->gentmp;
	ctx->keygen_info_count = 2;
	
	return 1;
	}

static void pkey_dh_cleanup(EVP_PKEY_CTX *ctx)
	{
	DH_PKEY_CTX *dctx = ctx->data;
	if (dctx)
		OPENSSL_free(dctx);
	}

static int pkey_dh_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
	{
	DH_PKEY_CTX *dctx = ctx->data;
	switch (type)
		{
		case EVP_PKEY_CTRL_DH_PARAMGEN_PRIME_LEN:
		if (p1 < 256)
			return -2;
		dctx->prime_len = p1;
		return 1;

		case EVP_PKEY_CTRL_DH_PARAMGEN_GENERATOR:
		dctx->generator = p1;
		return 1;

		case EVP_PKEY_CTRL_PEER_KEY:
		/* Default behaviour is OK */
		return 1;

		default:
		return -2;

		}
	}

			
static int pkey_dh_ctrl_str(EVP_PKEY_CTX *ctx,
			const char *type, const char *value)
	{
	if (!strcmp(type, "dh_paramgen_prime_len"))
		{
		int len;
		len = atoi(value);
		return EVP_PKEY_CTX_set_dh_paramgen_prime_len(ctx, len);
		}
	if (!strcmp(type, "dh_paramgen_generator"))
		{
		int len;
		len = atoi(value);
		return EVP_PKEY_CTX_set_dh_paramgen_generator(ctx, len);
		}
	return -2;
	}

static int pkey_dh_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
	{
	DH *dh = NULL;
	DH_PKEY_CTX *dctx = ctx->data;
	BN_GENCB *pcb, cb;
	int ret;
	if (ctx->pkey_gencb)
		{
		pcb = &cb;
		evp_pkey_set_cb_translate(pcb, ctx);
		}
	else
		pcb = NULL;
	dh = DH_new();
	if (!dh)
		return 0;
	ret = DH_generate_parameters_ex(dh,
					dctx->prime_len, dctx->generator, pcb);
	if (ret)
		EVP_PKEY_assign_DH(pkey, dh);
	else
		DH_free(dh);
	return ret;
	}

static int pkey_dh_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
	{
	DH *dh = NULL;
	if (ctx->pkey == NULL)
		{
		DHerr(DH_F_PKEY_DH_KEYGEN, DH_R_NO_PARAMETERS_SET);
		return 0;
		}
	dh = DH_new();
	if (!dh)
		return 0;
	EVP_PKEY_assign_DH(pkey, dh);
	/* Note: if error return, pkey is freed by parent routine */
	if (!EVP_PKEY_copy_parameters(pkey, ctx->pkey))
		return 0;
	return DH_generate_key(pkey->pkey.dh);
	}

static int pkey_dh_derive(EVP_PKEY_CTX *ctx, unsigned char *key, size_t *keylen)
	{
	int ret;
	if (!ctx->pkey || !ctx->peerkey)
		{
		DHerr(DH_F_PKEY_DH_DERIVE, DH_R_KEYS_NOT_SET);
		return 0;
		}
	ret = DH_compute_key(key, ctx->peerkey->pkey.dh->pub_key,
							ctx->pkey->pkey.dh);
	if (ret < 0)
		return ret;
	*keylen = ret;
	return 1;
	}

const EVP_PKEY_METHOD dh_pkey_meth = 
	{
	EVP_PKEY_DH,
	EVP_PKEY_FLAG_AUTOARGLEN,
	pkey_dh_init,
	pkey_dh_cleanup,

	0,
	pkey_dh_paramgen,

	0,
	pkey_dh_keygen,

	0,
	0,

	0,
	0,

	0,0,

	0,0,0,0,

	0,0,

	0,0,

	0,
	pkey_dh_derive,

	pkey_dh_ctrl,
	pkey_dh_ctrl_str

	};
Commit	Line	Data
3ba0885a DSH	1	/* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
	2	* project 2006.
	3	*/
	4	/* ====================================================================
	5	* Copyright (c) 2006 The OpenSSL Project. All rights reserved.
	6	*
	7	* Redistribution and use in source and binary forms, with or without
	8	* modification, are permitted provided that the following conditions
	9	* are met:
	10	*
	11	* 1. Redistributions of source code must retain the above copyright
	12	* notice, this list of conditions and the following disclaimer.
	13	*
	14	* 2. Redistributions in binary form must reproduce the above copyright
	15	* notice, this list of conditions and the following disclaimer in
	16	* the documentation and/or other materials provided with the
	17	* distribution.
	18	*
	19	* 3. All advertising materials mentioning features or use of this
	20	* software must display the following acknowledgment:
	21	* "This product includes software developed by the OpenSSL Project
	22	* for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
	23	*
	24	* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
	25	* endorse or promote products derived from this software without
	26	* prior written permission. For written permission, please contact
	27	* licensing@OpenSSL.org.
	28	*
	29	* 5. Products derived from this software may not be called "OpenSSL"
	30	* nor may "OpenSSL" appear in their names without prior written
	31	* permission of the OpenSSL Project.
	32	*
	33	* 6. Redistributions of any form whatsoever must retain the following
	34	* acknowledgment:
	35	* "This product includes software developed by the OpenSSL Project
	36	* for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
	37	*
	38	* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
	39	* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	40	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
	41	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
	42	* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
	43	* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
	44	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
	45	* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	46	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
	47	* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	48	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
	49	* OF THE POSSIBILITY OF SUCH DAMAGE.
	50	* ====================================================================
	51	*
	52	* This product includes cryptographic software written by Eric Young
	53	* (eay@cryptsoft.com). This product includes software written by Tim
	54	* Hudson (tjh@cryptsoft.com).
	55	*
	56	*/
	57
	58	#include <stdio.h>
	59	#include "cryptlib.h"
	60	#include <openssl/asn1t.h>
	61	#include <openssl/x509.h>
	62	#include <openssl/rsa.h>
	63	#include <openssl/evp.h>
	64	#include "evp_locl.h"
65
66	/* DH pkey context structure */
67
68	typedef struct
69	{
70	/* Parameter gen parameters */
71	int prime_len;
72	int generator;
73	int use_dsa;
74	/* Keygen callback info */
75	int gentmp[2];
76	/* message digest */
77	} DH_PKEY_CTX;
78
79	static int pkey_dh_init(EVP_PKEY_CTX *ctx)
80	{
81	DH_PKEY_CTX *dctx;
82	dctx = OPENSSL_malloc(sizeof(DH_PKEY_CTX));
83	if (!dctx)
84	return 0;
85	dctx->prime_len = 1024;
86	dctx->generator = 2;
87	dctx->use_dsa = 0;
88
89	ctx->data = dctx;
90	ctx->keygen_info = dctx->gentmp;
91	ctx->keygen_info_count = 2;
92
93	return 1;
94	}
95
96	static void pkey_dh_cleanup(EVP_PKEY_CTX *ctx)
97	{
98	DH_PKEY_CTX *dctx = ctx->data;
99	if (dctx)
100	OPENSSL_free(dctx);
101	}
102
103	static int pkey_dh_ctrl(EVP_PKEY_CTX ctx, int type, int p1, void p2)
104	{
105	DH_PKEY_CTX *dctx = ctx->data;
106	switch (type)
107	{
108	case EVP_PKEY_CTRL_DH_PARAMGEN_PRIME_LEN:
109	if (p1 < 256)
110	return -2;
111	dctx->prime_len = p1;
112	return 1;
113
114	case EVP_PKEY_CTRL_DH_PARAMGEN_GENERATOR:
115	dctx->generator = p1;
116	return 1;
117
ffb1ac67 DSH	118	case EVP_PKEY_CTRL_PEER_KEY:
	119	/* Default behaviour is OK */
	120	return 1;
	121
3ba0885a DSH	122	default:
	123	return -2;
	124
	125	}
	126	}
ffb1ac67	127
3ba0885a DSH	128
	129	static int pkey_dh_ctrl_str(EVP_PKEY_CTX *ctx,
	130	const char type, const char value)
	131	{
	132	if (!strcmp(type, "dh_paramgen_prime_len"))
	133	{
	134	int len;
	135	len = atoi(value);
	136	return EVP_PKEY_CTX_set_dh_paramgen_prime_len(ctx, len);
	137	}
	138	if (!strcmp(type, "dh_paramgen_generator"))
	139	{
	140	int len;
	141	len = atoi(value);
	142	return EVP_PKEY_CTX_set_dh_paramgen_generator(ctx, len);
	143	}
	144	return -2;
	145	}
	146
	147	static int pkey_dh_paramgen(EVP_PKEY_CTX ctx, EVP_PKEY pkey)
	148	{
	149	DH *dh = NULL;
	150	DH_PKEY_CTX *dctx = ctx->data;
	151	BN_GENCB *pcb, cb;
	152	int ret;
	153	if (ctx->pkey_gencb)
	154	{
	155	pcb = &cb;
	156	evp_pkey_set_cb_translate(pcb, ctx);
	157	}
	158	else
	159	pcb = NULL;
	160	dh = DH_new();
	161	if (!dh)
	162	return 0;
	163	ret = DH_generate_parameters_ex(dh,
	164	dctx->prime_len, dctx->generator, pcb);
	165	if (ret)
	166	EVP_PKEY_assign_DH(pkey, dh);
	167	else
	168	DH_free(dh);
	169	return ret;
	170	}
	171
	172	static int pkey_dh_keygen(EVP_PKEY_CTX ctx, EVP_PKEY pkey)
	173	{
	174	DH *dh = NULL;
	175	if (ctx->pkey == NULL)
	176	{
52c11dce	177	DHerr(DH_F_PKEY_DH_KEYGEN, DH_R_NO_PARAMETERS_SET);
3ba0885a DSH	178	return 0;
	179	}
	180	dh = DH_new();
	181	if (!dh)
	182	return 0;
	183	EVP_PKEY_assign_DH(pkey, dh);
	184	/* Note: if error return, pkey is freed by parent routine */
	185	if (!EVP_PKEY_copy_parameters(pkey, ctx->pkey))
	186	return 0;
	187	return DH_generate_key(pkey->pkey.dh);
	188	}
	189
eaff5a14	190	static int pkey_dh_derive(EVP_PKEY_CTX ctx, unsigned char key, size_t *keylen)
ffb1ac67 DSH	191	{
	192	int ret;
	193	if (!ctx->pkey \|\| !ctx->peerkey)
	194	{
	195	DHerr(DH_F_PKEY_DH_DERIVE, DH_R_KEYS_NOT_SET);
	196	return 0;
	197	}
	198	ret = DH_compute_key(key, ctx->peerkey->pkey.dh->pub_key,
	199	ctx->pkey->pkey.dh);
	200	if (ret < 0)
	201	return ret;
	202	*keylen = ret;
	203	return 1;
	204	}
	205
3ba0885a DSH	206	const EVP_PKEY_METHOD dh_pkey_meth =
	207	{
	208	EVP_PKEY_DH,
b010b7c4	209	EVP_PKEY_FLAG_AUTOARGLEN,
3ba0885a DSH	210	pkey_dh_init,
	211	pkey_dh_cleanup,
	212
	213	0,
	214	pkey_dh_paramgen,
	215
	216	0,
	217	pkey_dh_keygen,
	218
	219	0,
	220	0,
	221
	222	0,
	223	0,
	224
	225	0,0,
	226
	227	0,0,0,0,
	228
	229	0,0,
	230
	231	0,0,
	232
ffb1ac67 DSH	233	0,
ffb1ac67 DSH	234	pkey_dh_derive,
d87e6152	235
3ba0885a DSH	236	pkey_dh_ctrl,
	237	pkey_dh_ctrl_str
	238
	239	};