2 * Copyright 1999-2023 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 #include "internal/cryptlib.h"
12 #include <openssl/asn1t.h>
13 #include <openssl/x509.h>
14 #include <openssl/rand.h>
15 #include "crypto/evp.h"
17 /* PKCS#5 password based encryption structure */
19 ASN1_SEQUENCE(PBEPARAM
) = {
20 ASN1_SIMPLE(PBEPARAM
, salt
, ASN1_OCTET_STRING
),
21 ASN1_SIMPLE(PBEPARAM
, iter
, ASN1_INTEGER
)
22 } ASN1_SEQUENCE_END(PBEPARAM
)
24 IMPLEMENT_ASN1_FUNCTIONS(PBEPARAM
)
26 /* Set an algorithm identifier for a PKCS#5 PBE algorithm */
28 int PKCS5_pbe_set0_algor_ex(X509_ALGOR
*algor
, int alg
, int iter
,
29 const unsigned char *salt
, int saltlen
,
33 ASN1_STRING
*pbe_str
= NULL
;
34 unsigned char *sstr
= NULL
;
38 /* ERR_R_ASN1_LIB, because PBEPARAM_new() is defined in crypto/asn1 */
39 ERR_raise(ERR_LIB_ASN1
, ERR_R_ASN1_LIB
);
43 iter
= PKCS5_DEFAULT_ITER
;
44 if (!ASN1_INTEGER_set(pbe
->iter
, iter
)) {
45 ERR_raise(ERR_LIB_ASN1
, ERR_R_ASN1_LIB
);
49 saltlen
= PKCS5_DEFAULT_PBE1_SALT_LEN
;
53 sstr
= OPENSSL_malloc(saltlen
);
57 memcpy(sstr
, salt
, saltlen
);
58 else if (RAND_bytes_ex(ctx
, sstr
, saltlen
, 0) <= 0)
61 ASN1_STRING_set0(pbe
->salt
, sstr
, saltlen
);
64 if (!ASN1_item_pack(pbe
, ASN1_ITEM_rptr(PBEPARAM
), &pbe_str
)) {
65 ERR_raise(ERR_LIB_ASN1
, ERR_R_ASN1_LIB
);
72 if (X509_ALGOR_set0(algor
, OBJ_nid2obj(alg
), V_ASN1_SEQUENCE
, pbe_str
))
78 ASN1_STRING_free(pbe_str
);
82 int PKCS5_pbe_set0_algor(X509_ALGOR
*algor
, int alg
, int iter
,
83 const unsigned char *salt
, int saltlen
)
85 return PKCS5_pbe_set0_algor_ex(algor
, alg
, iter
, salt
, saltlen
, NULL
);
88 /* Return an algorithm identifier for a PKCS#5 PBE algorithm */
90 X509_ALGOR
*PKCS5_pbe_set_ex(int alg
, int iter
,
91 const unsigned char *salt
, int saltlen
,
95 ret
= X509_ALGOR_new();
97 ERR_raise(ERR_LIB_ASN1
, ERR_R_X509_LIB
);
101 if (PKCS5_pbe_set0_algor_ex(ret
, alg
, iter
, salt
, saltlen
, ctx
))
104 X509_ALGOR_free(ret
);
108 X509_ALGOR
*PKCS5_pbe_set(int alg
, int iter
,
109 const unsigned char *salt
, int saltlen
)
111 return PKCS5_pbe_set_ex(alg
, iter
, salt
, saltlen
, NULL
);