[thirdparty/openssl.git] / apps / dgst.c

/*
 * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the OpenSSL license (the "License").  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
 */

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include "apps.h"
#include "progs.h"
#include <openssl/bio.h>
#include <openssl/err.h>
#include <openssl/evp.h>
#include <openssl/objects.h>
#include <openssl/x509.h>
#include <openssl/pem.h>
#include <openssl/hmac.h>

#undef BUFSIZE
#define BUFSIZE 1024*8

int do_fp(BIO *out, unsigned char *buf, BIO *bp, int sep, int binout,
          EVP_PKEY *key, unsigned char *sigin, int siglen,
          const char *sig_name, const char *md_name,
          const char *file);

typedef enum OPTION_choice {
    OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
    OPT_C, OPT_R, OPT_OUT, OPT_SIGN, OPT_PASSIN, OPT_VERIFY,
    OPT_PRVERIFY, OPT_SIGNATURE, OPT_KEYFORM, OPT_ENGINE, OPT_ENGINE_IMPL,
    OPT_HEX, OPT_BINARY, OPT_DEBUG, OPT_FIPS_FINGERPRINT,
    OPT_HMAC, OPT_MAC, OPT_SIGOPT, OPT_MACOPT,
    OPT_DIGEST,
    OPT_R_ENUM
} OPTION_CHOICE;

const OPTIONS dgst_options[] = {
    {OPT_HELP_STR, 1, '-', "Usage: %s [options] [file...]\n"},
    {OPT_HELP_STR, 1, '-',
        "  file... files to digest (default is stdin)\n"},
    {"help", OPT_HELP, '-', "Display this summary"},
    {"c", OPT_C, '-', "Print the digest with separating colons"},
    {"r", OPT_R, '-', "Print the digest in coreutils format"},
    {"out", OPT_OUT, '>', "Output to filename rather than stdout"},
    {"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
    {"sign", OPT_SIGN, 's', "Sign digest using private key"},
    {"verify", OPT_VERIFY, 's',
     "Verify a signature using public key"},
    {"prverify", OPT_PRVERIFY, 's',
     "Verify a signature using private key"},
    {"signature", OPT_SIGNATURE, '<', "File with signature to verify"},
    {"keyform", OPT_KEYFORM, 'f', "Key file format (PEM or ENGINE)"},
    {"hex", OPT_HEX, '-', "Print as hex dump"},
    {"binary", OPT_BINARY, '-', "Print in binary form"},
    {"d", OPT_DEBUG, '-', "Print debug info"},
    {"debug", OPT_DEBUG, '-', "Print debug info"},
    {"fips-fingerprint", OPT_FIPS_FINGERPRINT, '-',
     "Compute HMAC with the key used in OpenSSL-FIPS fingerprint"},
    {"hmac", OPT_HMAC, 's', "Create hashed MAC with key"},
    {"mac", OPT_MAC, 's', "Create MAC (not necessarily HMAC)"},
    {"sigopt", OPT_SIGOPT, 's', "Signature parameter in n:v form"},
    {"macopt", OPT_MACOPT, 's', "MAC algorithm parameters in n:v form or key"},
    {"", OPT_DIGEST, '-', "Any supported digest"},
    OPT_R_OPTIONS,
#ifndef OPENSSL_NO_ENGINE
    {"engine", OPT_ENGINE, 's', "Use engine e, possibly a hardware device"},
    {"engine_impl", OPT_ENGINE_IMPL, '-',
     "Also use engine given by -engine for digest operations"},
#endif
    {NULL}
};

int dgst_main(int argc, char **argv)
{
    BIO *in = NULL, *inp, *bmd = NULL, *out = NULL;
    ENGINE *e = NULL, *impl = NULL;
    EVP_PKEY *sigkey = NULL;
    STACK_OF(OPENSSL_STRING) *sigopts = NULL, *macopts = NULL;
    char *hmac_key = NULL;
    char *mac_name = NULL;
    char *passinarg = NULL, *passin = NULL;
    const EVP_MD *md = NULL, *m;
    const char *outfile = NULL, *keyfile = NULL, *prog = NULL;
    const char *sigfile = NULL;
    OPTION_CHOICE o;
    int separator = 0, debug = 0, keyform = FORMAT_PEM, siglen = 0;
    int i, ret = 1, out_bin = -1, want_pub = 0, do_verify = 0;
    unsigned char *buf = NULL, *sigbuf = NULL;
    int engine_impl = 0;

    prog = opt_progname(argv[0]);
    buf = app_malloc(BUFSIZE, "I/O buffer");
    md = EVP_get_digestbyname(prog);

    prog = opt_init(argc, argv, dgst_options);
    while ((o = opt_next()) != OPT_EOF) {
        switch (o) {
        case OPT_EOF:
        case OPT_ERR:
 opthelp:
            BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
            goto end;
        case OPT_HELP:
            opt_help(dgst_options);
            ret = 0;
            goto end;
        case OPT_C:
            separator = 1;
            break;
        case OPT_R:
            separator = 2;
            break;
        case OPT_R_CASES:
            if (!opt_rand(o))
                goto end;
            break;
        case OPT_OUT:
            outfile = opt_arg();
            break;
        case OPT_SIGN:
            keyfile = opt_arg();
            break;
        case OPT_PASSIN:
            passinarg = opt_arg();
            break;
        case OPT_VERIFY:
            keyfile = opt_arg();
            want_pub = do_verify = 1;
            break;
        case OPT_PRVERIFY:
            keyfile = opt_arg();
            do_verify = 1;
            break;
        case OPT_SIGNATURE:
            sigfile = opt_arg();
            break;
        case OPT_KEYFORM:
            if (!opt_format(opt_arg(), OPT_FMT_ANY, &keyform))
                goto opthelp;
            break;
        case OPT_ENGINE:
            e = setup_engine(opt_arg(), 0);
            break;
        case OPT_ENGINE_IMPL:
            engine_impl = 1;
            break;
        case OPT_HEX:
            out_bin = 0;
            break;
        case OPT_BINARY:
            out_bin = 1;
            break;
        case OPT_DEBUG:
            debug = 1;
            break;
        case OPT_FIPS_FINGERPRINT:
            hmac_key = "etaonrishdlcupfm";
            break;
        case OPT_HMAC:
            hmac_key = opt_arg();
            break;
        case OPT_MAC:
            mac_name = opt_arg();
            break;
        case OPT_SIGOPT:
            if (!sigopts)
                sigopts = sk_OPENSSL_STRING_new_null();
            if (!sigopts || !sk_OPENSSL_STRING_push(sigopts, opt_arg()))
                goto opthelp;
            break;
        case OPT_MACOPT:
            if (!macopts)
                macopts = sk_OPENSSL_STRING_new_null();
            if (!macopts || !sk_OPENSSL_STRING_push(macopts, opt_arg()))
                goto opthelp;
            break;
        case OPT_DIGEST:
            if (!opt_md(opt_unknown(), &m))
                goto opthelp;
            md = m;
            break;
        }
    }
    argc = opt_num_rest();
    argv = opt_rest();
    if (keyfile != NULL && argc > 1) {
        BIO_printf(bio_err, "%s: Can only sign or verify one file.\n", prog);
        goto end;
    }

    if (do_verify && sigfile == NULL) {
        BIO_printf(bio_err,
                   "No signature to verify: use the -signature option\n");
        goto end;
    }
    if (engine_impl)
        impl = e;

    in = BIO_new(BIO_s_file());
    bmd = BIO_new(BIO_f_md());
    if ((in == NULL) || (bmd == NULL)) {
        ERR_print_errors(bio_err);
        goto end;
    }

    if (debug) {
        BIO_set_callback(in, BIO_debug_callback);
        /* needed for windows 3.1 */
        BIO_set_callback_arg(in, (char *)bio_err);
    }

    if (!app_passwd(passinarg, NULL, &passin, NULL)) {
        BIO_printf(bio_err, "Error getting password\n");
        goto end;
    }

    if (out_bin == -1) {
        if (keyfile != NULL)
            out_bin = 1;
        else
            out_bin = 0;
    }

    out = bio_open_default(outfile, 'w', out_bin ? FORMAT_BINARY : FORMAT_TEXT);
    if (out == NULL)
        goto end;

    if ((!(mac_name == NULL) + !(keyfile == NULL) + !(hmac_key == NULL)) > 1) {
        BIO_printf(bio_err, "MAC and Signing key cannot both be specified\n");
        goto end;
    }

    if (keyfile != NULL) {
        int type;

        if (want_pub)
            sigkey = load_pubkey(keyfile, keyform, 0, NULL, e, "key file");
        else
            sigkey = load_key(keyfile, keyform, 0, passin, e, "key file");
        if (sigkey == NULL) {
            /*
             * load_[pub]key() has already printed an appropriate message
             */
            goto end;
        }
        type = EVP_PKEY_id(sigkey);
        if (type == EVP_PKEY_ED25519 || type == EVP_PKEY_ED448) {
            /*
             * We implement PureEdDSA for these which doesn't have a separate
             * digest, and only supports one shot.
             */
            BIO_printf(bio_err, "Key type not supported for this operation\n");
            goto end;
        }
    }

    if (mac_name != NULL) {
        EVP_PKEY_CTX *mac_ctx = NULL;
        int r = 0;
        if (!init_gen_str(&mac_ctx, mac_name, impl, 0))
            goto mac_end;
        if (macopts != NULL) {
            char *macopt;
            for (i = 0; i < sk_OPENSSL_STRING_num(macopts); i++) {
                macopt = sk_OPENSSL_STRING_value(macopts, i);
                if (pkey_ctrl_string(mac_ctx, macopt) <= 0) {
                    BIO_printf(bio_err,
                               "MAC parameter error \"%s\"\n", macopt);
                    ERR_print_errors(bio_err);
                    goto mac_end;
                }
            }
        }
        if (EVP_PKEY_keygen(mac_ctx, &sigkey) <= 0) {
            BIO_puts(bio_err, "Error generating key\n");
            ERR_print_errors(bio_err);
            goto mac_end;
        }
        r = 1;
 mac_end:
        EVP_PKEY_CTX_free(mac_ctx);
        if (r == 0)
            goto end;
    }

    if (hmac_key != NULL) {
        sigkey = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, impl,
                                              (unsigned char *)hmac_key, -1);
        if (sigkey == NULL)
            goto end;
    }

    if (sigkey != NULL) {
        EVP_MD_CTX *mctx = NULL;
        EVP_PKEY_CTX *pctx = NULL;
        int r;
        if (!BIO_get_md_ctx(bmd, &mctx)) {
            BIO_printf(bio_err, "Error getting context\n");
            ERR_print_errors(bio_err);
            goto end;
        }
        if (do_verify)
            r = EVP_DigestVerifyInit(mctx, &pctx, md, impl, sigkey);
        else
            r = EVP_DigestSignInit(mctx, &pctx, md, impl, sigkey);
        if (!r) {
            BIO_printf(bio_err, "Error setting context\n");
            ERR_print_errors(bio_err);
            goto end;
        }
        if (sigopts != NULL) {
            char *sigopt;
            for (i = 0; i < sk_OPENSSL_STRING_num(sigopts); i++) {
                sigopt = sk_OPENSSL_STRING_value(sigopts, i);
                if (pkey_ctrl_string(pctx, sigopt) <= 0) {
                    BIO_printf(bio_err, "parameter error \"%s\"\n", sigopt);
                    ERR_print_errors(bio_err);
                    goto end;
                }
            }
        }
    }
    /* we use md as a filter, reading from 'in' */
    else {
        EVP_MD_CTX *mctx = NULL;
        if (!BIO_get_md_ctx(bmd, &mctx)) {
            BIO_printf(bio_err, "Error getting context\n");
            ERR_print_errors(bio_err);
            goto end;
        }
        if (md == NULL)
            md = EVP_sha256();
        if (!EVP_DigestInit_ex(mctx, md, impl)) {
            BIO_printf(bio_err, "Error setting digest\n");
            ERR_print_errors(bio_err);
            goto end;
        }
    }

    if (sigfile != NULL && sigkey != NULL) {
        BIO *sigbio = BIO_new_file(sigfile, "rb");
        if (sigbio == NULL) {
            BIO_printf(bio_err, "Error opening signature file %s\n", sigfile);
            ERR_print_errors(bio_err);
            goto end;
        }
        siglen = EVP_PKEY_size(sigkey);
        sigbuf = app_malloc(siglen, "signature buffer");
        siglen = BIO_read(sigbio, sigbuf, siglen);
        BIO_free(sigbio);
        if (siglen <= 0) {
            BIO_printf(bio_err, "Error reading signature file %s\n", sigfile);
            ERR_print_errors(bio_err);
            goto end;
        }
    }
    inp = BIO_push(bmd, in);

    if (md == NULL) {
        EVP_MD_CTX *tctx;
        BIO_get_md_ctx(bmd, &tctx);
        md = EVP_MD_CTX_md(tctx);
    }

    if (argc == 0) {
        BIO_set_fp(in, stdin, BIO_NOCLOSE);
        ret = do_fp(out, buf, inp, separator, out_bin, sigkey, sigbuf,
                    siglen, NULL, NULL, "stdin");
    } else {
        const char *md_name = NULL, *sig_name = NULL;
        if (!out_bin) {
            if (sigkey != NULL) {
                const EVP_PKEY_ASN1_METHOD *ameth;
                ameth = EVP_PKEY_get0_asn1(sigkey);
                if (ameth)
                    EVP_PKEY_asn1_get0_info(NULL, NULL,
                                            NULL, NULL, &sig_name, ameth);
            }
            if (md != NULL)
                md_name = EVP_MD_name(md);
        }
        ret = 0;
        for (i = 0; i < argc; i++) {
            int r;
            if (BIO_read_filename(in, argv[i]) <= 0) {
                perror(argv[i]);
                ret++;
                continue;
            } else {
                r = do_fp(out, buf, inp, separator, out_bin, sigkey, sigbuf,
                          siglen, sig_name, md_name, argv[i]);
            }
            if (r)
                ret = r;
            (void)BIO_reset(bmd);
        }
    }
 end:
    OPENSSL_clear_free(buf, BUFSIZE);
    BIO_free(in);
    OPENSSL_free(passin);
    BIO_free_all(out);
    EVP_PKEY_free(sigkey);
    sk_OPENSSL_STRING_free(sigopts);
    sk_OPENSSL_STRING_free(macopts);
    OPENSSL_free(sigbuf);
    BIO_free(bmd);
    release_engine(e);
    return ret;
}

int do_fp(BIO *out, unsigned char *buf, BIO *bp, int sep, int binout,
          EVP_PKEY *key, unsigned char *sigin, int siglen,
          const char *sig_name, const char *md_name,
          const char *file)
{
    size_t len;
    int i;

    for (;;) {
        i = BIO_read(bp, (char *)buf, BUFSIZE);
        if (i < 0) {
            BIO_printf(bio_err, "Read Error in %s\n", file);
            ERR_print_errors(bio_err);
            return 1;
        }
        if (i == 0)
            break;
    }
    if (sigin != NULL) {
        EVP_MD_CTX *ctx;
        BIO_get_md_ctx(bp, &ctx);
        i = EVP_DigestVerifyFinal(ctx, sigin, (unsigned int)siglen);
        if (i > 0) {
            BIO_printf(out, "Verified OK\n");
        } else if (i == 0) {
            BIO_printf(out, "Verification Failure\n");
            return 1;
        } else {
            BIO_printf(bio_err, "Error Verifying Data\n");
            ERR_print_errors(bio_err);
            return 1;
        }
        return 0;
    }
    if (key != NULL) {
        EVP_MD_CTX *ctx;
        BIO_get_md_ctx(bp, &ctx);
        len = BUFSIZE;
        if (!EVP_DigestSignFinal(ctx, buf, &len)) {
            BIO_printf(bio_err, "Error Signing Data\n");
            ERR_print_errors(bio_err);
            return 1;
        }
    } else {
        len = BIO_gets(bp, (char *)buf, BUFSIZE);
        if ((int)len < 0) {
            ERR_print_errors(bio_err);
            return 1;
        }
    }

    if (binout) {
        BIO_write(out, buf, len);
    } else if (sep == 2) {
        for (i = 0; i < (int)len; i++)
            BIO_printf(out, "%02x", buf[i]);
        BIO_printf(out, " *%s\n", file);
    } else {
        if (sig_name != NULL) {
            BIO_puts(out, sig_name);
            if (md_name != NULL)
                BIO_printf(out, "-%s", md_name);
            BIO_printf(out, "(%s)= ", file);
        } else if (md_name != NULL) {
            BIO_printf(out, "%s(%s)= ", md_name, file);
        } else {
            BIO_printf(out, "(%s)= ", file);
        }
        for (i = 0; i < (int)len; i++) {
            if (sep && (i != 0))
                BIO_printf(out, ":");
            BIO_printf(out, "%02x", buf[i]);
        }
        BIO_printf(out, "\n");
    }
    return 0;
}
Commit	Line	Data
846e33c7	1	/*
6738bf14	2	* Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
d02b48c6	3	*
846e33c7 RS	4	* Licensed under the OpenSSL license (the "License"). You may not use
	5	* this file except in compliance with the License. You can obtain a copy
	6	* in the file LICENSE in the source distribution or at
	7	* https://www.openssl.org/source/license.html
d02b48c6 RE	8	*/
	9
	10	#include <stdio.h>
	11	#include <string.h>
	12	#include <stdlib.h>
	13	#include "apps.h"
dab2cd68	14	#include "progs.h"
ec577822 BM	15	#include <openssl/bio.h>
	16	#include <openssl/err.h>
	17	#include <openssl/evp.h>
	18	#include <openssl/objects.h>
	19	#include <openssl/x509.h>
	20	#include <openssl/pem.h>
52cfa397	21	#include <openssl/hmac.h>
d02b48c6 RE	22
d02b48c6 RE	23	#undef BUFSIZE
0f113f3e	24	#define BUFSIZE 1024*8
d02b48c6	25
d15711ef	26	int do_fp(BIO out, unsigned char buf, BIO *bp, int sep, int binout,
0f113f3e MC	27	EVP_PKEY key, unsigned char sigin, int siglen,
0f113f3e MC	28	const char sig_name, const char md_name,
a773b52a	29	const char *file);
667ac4ec	30
7e1b7485 RS	31	typedef enum OPTION_choice {
7e1b7485 RS	32	OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
3ee1eac2	33	OPT_C, OPT_R, OPT_OUT, OPT_SIGN, OPT_PASSIN, OPT_VERIFY,
7e1b7485 RS	34	OPT_PRVERIFY, OPT_SIGNATURE, OPT_KEYFORM, OPT_ENGINE, OPT_ENGINE_IMPL,
7e1b7485 RS	35	OPT_HEX, OPT_BINARY, OPT_DEBUG, OPT_FIPS_FINGERPRINT,
700b4a4a	36	OPT_HMAC, OPT_MAC, OPT_SIGOPT, OPT_MACOPT,
3ee1eac2	37	OPT_DIGEST,
f1b8b001	38	OPT_R_ENUM
7e1b7485 RS	39	} OPTION_CHOICE;
7e1b7485 RS	40
44c83ebd	41	const OPTIONS dgst_options[] = {
7e1b7485 RS	42	{OPT_HELP_STR, 1, '-', "Usage: %s [options] [file...]\n"},
	43	{OPT_HELP_STR, 1, '-',
	44	" file... files to digest (default is stdin)\n"},
	45	{"help", OPT_HELP, '-', "Display this summary"},
	46	{"c", OPT_C, '-', "Print the digest with separating colons"},
	47	{"r", OPT_R, '-', "Print the digest in coreutils format"},
7e1b7485	48	{"out", OPT_OUT, '>', "Output to filename rather than stdout"},
a173a7ee	49	{"passin", OPT_PASSIN, 's', "Input file pass phrase source"},
dd958974 DSH	50	{"sign", OPT_SIGN, 's', "Sign digest using private key"},
	51	{"verify", OPT_VERIFY, 's',
	52	"Verify a signature using public key"},
	53	{"prverify", OPT_PRVERIFY, 's',
	54	"Verify a signature using private key"},
7e1b7485 RS	55	{"signature", OPT_SIGNATURE, '<', "File with signature to verify"},
7e1b7485 RS	56	{"keyform", OPT_KEYFORM, 'f', "Key file format (PEM or ENGINE)"},
7e1b7485 RS	57	{"hex", OPT_HEX, '-', "Print as hex dump"},
	58	{"binary", OPT_BINARY, '-', "Print in binary form"},
	59	{"d", OPT_DEBUG, '-', "Print debug info"},
a173a7ee RS	60	{"debug", OPT_DEBUG, '-', "Print debug info"},
	61	{"fips-fingerprint", OPT_FIPS_FINGERPRINT, '-',
	62	"Compute HMAC with the key used in OpenSSL-FIPS fingerprint"},
7e1b7485	63	{"hmac", OPT_HMAC, 's', "Create hashed MAC with key"},
0d4fb843	64	{"mac", OPT_MAC, 's', "Create MAC (not necessarily HMAC)"},
d175e8a6 MC	65	{"sigopt", OPT_SIGOPT, 's', "Signature parameter in n:v form"},
d175e8a6 MC	66	{"macopt", OPT_MACOPT, 's', "MAC algorithm parameters in n:v form or key"},
9c3bcfa0	67	{"", OPT_DIGEST, '-', "Any supported digest"},
3ee1eac2	68	OPT_R_OPTIONS,
333b070e RS	69	#ifndef OPENSSL_NO_ENGINE
333b070e RS	70	{"engine", OPT_ENGINE, 's', "Use engine e, possibly a hardware device"},
a173a7ee RS	71	{"engine_impl", OPT_ENGINE_IMPL, '-',
a173a7ee RS	72	"Also use engine given by -engine for digest operations"},
333b070e	73	#endif
7e1b7485 RS	74	{NULL}
	75	};
	76
	77	int dgst_main(int argc, char **argv)
0f113f3e	78	{
7e1b7485	79	BIO in = NULL, inp, bmd = NULL, out = NULL;
0f113f3e	80	ENGINE e = NULL, impl = NULL;
7e1b7485 RS	81	EVP_PKEY *sigkey = NULL;
	82	STACK_OF(OPENSSL_STRING) sigopts = NULL, macopts = NULL;
	83	char *hmac_key = NULL;
	84	char *mac_name = NULL;
	85	char passinarg = NULL, passin = NULL;
0f113f3e	86	const EVP_MD md = NULL, m;
7e1b7485	87	const char outfile = NULL, keyfile = NULL, *prog = NULL;
3ee1eac2	88	const char *sigfile = NULL;
7e1b7485 RS	89	OPTION_CHOICE o;
7e1b7485 RS	90	int separator = 0, debug = 0, keyform = FORMAT_PEM, siglen = 0;
700b4a4a	91	int i, ret = 1, out_bin = -1, want_pub = 0, do_verify = 0;
7e1b7485	92	unsigned char buf = NULL, sigbuf = NULL;
0f113f3e	93	int engine_impl = 0;
0f113f3e	94
7e1b7485	95	prog = opt_progname(argv[0]);
68dc6824	96	buf = app_malloc(BUFSIZE, "I/O buffer");
7e1b7485 RS	97	md = EVP_get_digestbyname(prog);
	98
	99	prog = opt_init(argc, argv, dgst_options);
	100	while ((o = opt_next()) != OPT_EOF) {
	101	switch (o) {
	102	case OPT_EOF:
	103	case OPT_ERR:
	104	opthelp:
	105	BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
	106	goto end;
	107	case OPT_HELP:
	108	opt_help(dgst_options);
	109	ret = 0;
	110	goto end;
	111	case OPT_C:
0f113f3e	112	separator = 1;
7e1b7485 RS	113	break;
7e1b7485 RS	114	case OPT_R:
0f113f3e	115	separator = 2;
7e1b7485	116	break;
3ee1eac2 RS	117	case OPT_R_CASES:
	118	if (!opt_rand(o))
	119	goto end;
7e1b7485 RS	120	break;
	121	case OPT_OUT:
	122	outfile = opt_arg();
	123	break;
	124	case OPT_SIGN:
	125	keyfile = opt_arg();
	126	break;
	127	case OPT_PASSIN:
	128	passinarg = opt_arg();
	129	break;
	130	case OPT_VERIFY:
	131	keyfile = opt_arg();
	132	want_pub = do_verify = 1;
	133	break;
	134	case OPT_PRVERIFY:
	135	keyfile = opt_arg();
0f113f3e	136	do_verify = 1;
7e1b7485 RS	137	break;
	138	case OPT_SIGNATURE:
	139	sigfile = opt_arg();
	140	break;
	141	case OPT_KEYFORM:
	142	if (!opt_format(opt_arg(), OPT_FMT_ANY, &keyform))
	143	goto opthelp;
	144	break;
7e1b7485	145	case OPT_ENGINE:
333b070e	146	e = setup_engine(opt_arg(), 0);
7e1b7485 RS	147	break;
7e1b7485 RS	148	case OPT_ENGINE_IMPL:
0f113f3e	149	engine_impl = 1;
7e1b7485	150	break;
7e1b7485	151	case OPT_HEX:
0f113f3e	152	out_bin = 0;
7e1b7485 RS	153	break;
7e1b7485 RS	154	case OPT_BINARY:
0f113f3e	155	out_bin = 1;
7e1b7485 RS	156	break;
7e1b7485 RS	157	case OPT_DEBUG:
0f113f3e	158	debug = 1;
7e1b7485 RS	159	break;
7e1b7485 RS	160	case OPT_FIPS_FINGERPRINT:
0f113f3e	161	hmac_key = "etaonrishdlcupfm";
7e1b7485	162	break;
7e1b7485 RS	163	case OPT_HMAC:
	164	hmac_key = opt_arg();
	165	break;
	166	case OPT_MAC:
	167	mac_name = opt_arg();
	168	break;
	169	case OPT_SIGOPT:
0f113f3e MC	170	if (!sigopts)
0f113f3e MC	171	sigopts = sk_OPENSSL_STRING_new_null();
7e1b7485 RS	172	if (!sigopts \|\| !sk_OPENSSL_STRING_push(sigopts, opt_arg()))
	173	goto opthelp;
	174	break;
	175	case OPT_MACOPT:
0f113f3e MC	176	if (!macopts)
0f113f3e MC	177	macopts = sk_OPENSSL_STRING_new_null();
7e1b7485 RS	178	if (!macopts \|\| !sk_OPENSSL_STRING_push(macopts, opt_arg()))
	179	goto opthelp;
	180	break;
	181	case OPT_DIGEST:
	182	if (!opt_md(opt_unknown(), &m))
	183	goto opthelp;
0f113f3e	184	md = m;
0f113f3e	185	break;
7e1b7485	186	}
0f113f3e	187	}
7e1b7485 RS	188	argc = opt_num_rest();
7e1b7485 RS	189	argv = opt_rest();
13a46183 RS	190	if (keyfile != NULL && argc > 1) {
	191	BIO_printf(bio_err, "%s: Can only sign or verify one file.\n", prog);
	192	goto end;
	193	}
0f113f3e	194
2234212c	195	if (do_verify && sigfile == NULL) {
0f113f3e MC	196	BIO_printf(bio_err,
	197	"No signature to verify: use the -signature option\n");
	198	goto end;
	199	}
0f113f3e MC	200	if (engine_impl)
0f113f3e MC	201	impl = e;
bb845ee0	202
0f113f3e MC	203	in = BIO_new(BIO_s_file());
0f113f3e MC	204	bmd = BIO_new(BIO_f_md());
be1477ad MC	205	if ((in == NULL) \|\| (bmd == NULL)) {
	206	ERR_print_errors(bio_err);
	207	goto end;
	208	}
	209
0f113f3e MC	210	if (debug) {
	211	BIO_set_callback(in, BIO_debug_callback);
	212	/* needed for windows 3.1 */
	213	BIO_set_callback_arg(in, (char *)bio_err);
	214	}
	215
7e1b7485	216	if (!app_passwd(passinarg, NULL, &passin, NULL)) {
0f113f3e MC	217	BIO_printf(bio_err, "Error getting password\n");
	218	goto end;
	219	}
	220
0f113f3e	221	if (out_bin == -1) {
2234212c	222	if (keyfile != NULL)
0f113f3e MC	223	out_bin = 1;
	224	else
	225	out_bin = 0;
	226	}
	227
bdd58d98	228	out = bio_open_default(outfile, 'w', out_bin ? FORMAT_BINARY : FORMAT_TEXT);
7e1b7485	229	if (out == NULL)
0f113f3e	230	goto end;
7e1b7485	231
2234212c	232	if ((!(mac_name == NULL) + !(keyfile == NULL) + !(hmac_key == NULL)) > 1) {
0f113f3e MC	233	BIO_printf(bio_err, "MAC and Signing key cannot both be specified\n");
	234	goto end;
	235	}
	236
2234212c	237	if (keyfile != NULL) {
e65c959f MC	238	int type;
e65c959f MC	239
0f113f3e	240	if (want_pub)
7e1b7485	241	sigkey = load_pubkey(keyfile, keyform, 0, NULL, e, "key file");
0f113f3e	242	else
7e1b7485	243	sigkey = load_key(keyfile, keyform, 0, passin, e, "key file");
2234212c	244	if (sigkey == NULL) {
0f113f3e MC	245	/*
	246	* load_[pub]key() has already printed an appropriate message
	247	*/
	248	goto end;
	249	}
e65c959f MC	250	type = EVP_PKEY_id(sigkey);
	251	if (type == EVP_PKEY_ED25519 \|\| type == EVP_PKEY_ED448) {
	252	/*
	253	* We implement PureEdDSA for these which doesn't have a separate
	254	* digest, and only supports one shot.
	255	*/
	256	BIO_printf(bio_err, "Key type not supported for this operation\n");
	257	goto end;
	258	}
0f113f3e MC	259	}
0f113f3e MC	260
2234212c	261	if (mac_name != NULL) {
0f113f3e MC	262	EVP_PKEY_CTX *mac_ctx = NULL;
0f113f3e MC	263	int r = 0;
7e1b7485	264	if (!init_gen_str(&mac_ctx, mac_name, impl, 0))
0f113f3e	265	goto mac_end;
2234212c	266	if (macopts != NULL) {
0f113f3e MC	267	char *macopt;
	268	for (i = 0; i < sk_OPENSSL_STRING_num(macopts); i++) {
	269	macopt = sk_OPENSSL_STRING_value(macopts, i);
	270	if (pkey_ctrl_string(mac_ctx, macopt) <= 0) {
	271	BIO_printf(bio_err,
	272	"MAC parameter error \"%s\"\n", macopt);
	273	ERR_print_errors(bio_err);
	274	goto mac_end;
	275	}
	276	}
	277	}
	278	if (EVP_PKEY_keygen(mac_ctx, &sigkey) <= 0) {
	279	BIO_puts(bio_err, "Error generating key\n");
	280	ERR_print_errors(bio_err);
	281	goto mac_end;
	282	}
	283	r = 1;
	284	mac_end:
c5ba2d99	285	EVP_PKEY_CTX_free(mac_ctx);
0f113f3e MC	286	if (r == 0)
	287	goto end;
	288	}
	289
2234212c	290	if (hmac_key != NULL) {
f929439f MC	291	sigkey = EVP_PKEY_new_raw_private_key(EVP_PKEY_HMAC, impl,
f929439f MC	292	(unsigned char *)hmac_key, -1);
2234212c	293	if (sigkey == NULL)
0f113f3e MC	294	goto end;
	295	}
	296
2234212c	297	if (sigkey != NULL) {
0f113f3e MC	298	EVP_MD_CTX *mctx = NULL;
	299	EVP_PKEY_CTX *pctx = NULL;
	300	int r;
	301	if (!BIO_get_md_ctx(bmd, &mctx)) {
	302	BIO_printf(bio_err, "Error getting context\n");
	303	ERR_print_errors(bio_err);
	304	goto end;
	305	}
	306	if (do_verify)
	307	r = EVP_DigestVerifyInit(mctx, &pctx, md, impl, sigkey);
	308	else
	309	r = EVP_DigestSignInit(mctx, &pctx, md, impl, sigkey);
	310	if (!r) {
	311	BIO_printf(bio_err, "Error setting context\n");
	312	ERR_print_errors(bio_err);
	313	goto end;
	314	}
2234212c	315	if (sigopts != NULL) {
0f113f3e MC	316	char *sigopt;
	317	for (i = 0; i < sk_OPENSSL_STRING_num(sigopts); i++) {
	318	sigopt = sk_OPENSSL_STRING_value(sigopts, i);
	319	if (pkey_ctrl_string(pctx, sigopt) <= 0) {
	320	BIO_printf(bio_err, "parameter error \"%s\"\n", sigopt);
	321	ERR_print_errors(bio_err);
	322	goto end;
	323	}
	324	}
	325	}
	326	}
	327	/* we use md as a filter, reading from 'in' */
	328	else {
	329	EVP_MD_CTX *mctx = NULL;
	330	if (!BIO_get_md_ctx(bmd, &mctx)) {
	331	BIO_printf(bio_err, "Error getting context\n");
	332	ERR_print_errors(bio_err);
	333	goto end;
	334	}
	335	if (md == NULL)
f8547f62	336	md = EVP_sha256();
0f113f3e	337	if (!EVP_DigestInit_ex(mctx, md, impl)) {
7e1b7485	338	BIO_printf(bio_err, "Error setting digest\n");
0f113f3e MC	339	ERR_print_errors(bio_err);
	340	goto end;
	341	}
	342	}
	343
2234212c	344	if (sigfile != NULL && sigkey != NULL) {
7e1b7485	345	BIO *sigbio = BIO_new_file(sigfile, "rb");
2234212c	346	if (sigbio == NULL) {
0f113f3e MC	347	BIO_printf(bio_err, "Error opening signature file %s\n", sigfile);
	348	ERR_print_errors(bio_err);
	349	goto end;
	350	}
7e1b7485	351	siglen = EVP_PKEY_size(sigkey);
68dc6824	352	sigbuf = app_malloc(siglen, "signature buffer");
0f113f3e MC	353	siglen = BIO_read(sigbio, sigbuf, siglen);
	354	BIO_free(sigbio);
	355	if (siglen <= 0) {
	356	BIO_printf(bio_err, "Error reading signature file %s\n", sigfile);
	357	ERR_print_errors(bio_err);
	358	goto end;
	359	}
	360	}
	361	inp = BIO_push(bmd, in);
	362
	363	if (md == NULL) {
	364	EVP_MD_CTX *tctx;
	365	BIO_get_md_ctx(bmd, &tctx);
	366	md = EVP_MD_CTX_md(tctx);
	367	}
	368
	369	if (argc == 0) {
	370	BIO_set_fp(in, stdin, BIO_NOCLOSE);
7e1b7485	371	ret = do_fp(out, buf, inp, separator, out_bin, sigkey, sigbuf,
a773b52a	372	siglen, NULL, NULL, "stdin");
0f113f3e MC	373	} else {
	374	const char md_name = NULL, sig_name = NULL;
	375	if (!out_bin) {
2234212c	376	if (sigkey != NULL) {
0f113f3e MC	377	const EVP_PKEY_ASN1_METHOD *ameth;
	378	ameth = EVP_PKEY_get0_asn1(sigkey);
	379	if (ameth)
	380	EVP_PKEY_asn1_get0_info(NULL, NULL,
	381	NULL, NULL, &sig_name, ameth);
	382	}
2234212c	383	if (md != NULL)
0f113f3e MC	384	md_name = EVP_MD_name(md);
0f113f3e MC	385	}
7e1b7485	386	ret = 0;
0f113f3e MC	387	for (i = 0; i < argc; i++) {
	388	int r;
	389	if (BIO_read_filename(in, argv[i]) <= 0) {
	390	perror(argv[i]);
7e1b7485	391	ret++;
0f113f3e	392	continue;
2234212c	393	} else {
0f113f3e	394	r = do_fp(out, buf, inp, separator, out_bin, sigkey, sigbuf,
a773b52a	395	siglen, sig_name, md_name, argv[i]);
2234212c	396	}
0f113f3e	397	if (r)
7e1b7485	398	ret = r;
0f113f3e MC	399	(void)BIO_reset(bmd);
	400	}
	401	}
	402	end:
4b45c6e5	403	OPENSSL_clear_free(buf, BUFSIZE);
ca3a82c3	404	BIO_free(in);
25aaa98a	405	OPENSSL_free(passin);
0f113f3e MC	406	BIO_free_all(out);
0f113f3e MC	407	EVP_PKEY_free(sigkey);
25aaa98a RS	408	sk_OPENSSL_STRING_free(sigopts);
25aaa98a RS	409	sk_OPENSSL_STRING_free(macopts);
b548a1f1	410	OPENSSL_free(sigbuf);
ca3a82c3	411	BIO_free(bmd);
dd1abd44	412	release_engine(e);
26a7d938	413	return ret;
0f113f3e	414	}
d02b48c6	415
d15711ef	416	int do_fp(BIO out, unsigned char buf, BIO *bp, int sep, int binout,
0f113f3e MC	417	EVP_PKEY key, unsigned char sigin, int siglen,
0f113f3e MC	418	const char sig_name, const char md_name,
a773b52a	419	const char *file)
0f113f3e MC	420	{
	421	size_t len;
	422	int i;
	423
	424	for (;;) {
	425	i = BIO_read(bp, (char *)buf, BUFSIZE);
	426	if (i < 0) {
	427	BIO_printf(bio_err, "Read Error in %s\n", file);
	428	ERR_print_errors(bio_err);
	429	return 1;
	430	}
	431	if (i == 0)
	432	break;
	433	}
2234212c	434	if (sigin != NULL) {
0f113f3e MC	435	EVP_MD_CTX *ctx;
	436	BIO_get_md_ctx(bp, &ctx);
	437	i = EVP_DigestVerifyFinal(ctx, sigin, (unsigned int)siglen);
2234212c	438	if (i > 0) {
0f113f3e	439	BIO_printf(out, "Verified OK\n");
2234212c	440	} else if (i == 0) {
0f113f3e MC	441	BIO_printf(out, "Verification Failure\n");
	442	return 1;
	443	} else {
	444	BIO_printf(bio_err, "Error Verifying Data\n");
	445	ERR_print_errors(bio_err);
	446	return 1;
	447	}
	448	return 0;
	449	}
2234212c	450	if (key != NULL) {
0f113f3e MC	451	EVP_MD_CTX *ctx;
	452	BIO_get_md_ctx(bp, &ctx);
	453	len = BUFSIZE;
	454	if (!EVP_DigestSignFinal(ctx, buf, &len)) {
	455	BIO_printf(bio_err, "Error Signing Data\n");
	456	ERR_print_errors(bio_err);
	457	return 1;
	458	}
	459	} else {
	460	len = BIO_gets(bp, (char *)buf, BUFSIZE);
	461	if ((int)len < 0) {
	462	ERR_print_errors(bio_err);
	463	return 1;
	464	}
	465	}
	466
2234212c	467	if (binout) {
0f113f3e	468	BIO_write(out, buf, len);
2234212c	469	} else if (sep == 2) {
0f113f3e MC	470	for (i = 0; i < (int)len; i++)
	471	BIO_printf(out, "%02x", buf[i]);
	472	BIO_printf(out, " *%s\n", file);
	473	} else {
2234212c	474	if (sig_name != NULL) {
0f113f3e	475	BIO_puts(out, sig_name);
2234212c	476	if (md_name != NULL)
0f113f3e MC	477	BIO_printf(out, "-%s", md_name);
0f113f3e MC	478	BIO_printf(out, "(%s)= ", file);
2234212c	479	} else if (md_name != NULL) {
0f113f3e	480	BIO_printf(out, "%s(%s)= ", md_name, file);
2234212c	481	} else {
0f113f3e	482	BIO_printf(out, "(%s)= ", file);
2234212c	483	}
0f113f3e MC	484	for (i = 0; i < (int)len; i++) {
	485	if (sep && (i != 0))
	486	BIO_printf(out, ":");
	487	BIO_printf(out, "%02x", buf[i]);
	488	}
	489	BIO_printf(out, "\n");
	490	}
	491	return 0;
	492	}