]>
Commit | Line | Data |
---|---|---|
0f113f3e | 1 | /* |
33388b44 | 2 | * Copyright 2006-2020 The OpenSSL Project Authors. All Rights Reserved. |
c927df3f | 3 | * |
3cdbea65 | 4 | * Licensed under the Apache License 2.0 (the "License"). You may not use |
d2e9e320 RS |
5 | * this file except in compliance with the License. You can obtain a copy |
6 | * in the file LICENSE in the source distribution or at | |
7 | * https://www.openssl.org/source/license.html | |
c927df3f DSH |
8 | */ |
9 | ||
f41ac0ee P |
10 | /* |
11 | * DSA low level APIs are deprecated for public use, but still ok for | |
12 | * internal use. | |
13 | */ | |
14 | #include "internal/deprecated.h" | |
15 | ||
c927df3f | 16 | #include <stdio.h> |
b39fc560 | 17 | #include "internal/cryptlib.h" |
c927df3f DSH |
18 | #include <openssl/asn1t.h> |
19 | #include <openssl/x509.h> | |
c927df3f | 20 | #include <openssl/evp.h> |
1e26a8ba | 21 | #include <openssl/bn.h> |
25f2138b | 22 | #include "crypto/evp.h" |
706457b7 | 23 | #include "dsa_local.h" |
c927df3f DSH |
24 | |
25 | /* DSA pkey context structure */ | |
26 | ||
0f113f3e MC |
27 | typedef struct { |
28 | /* Parameter gen parameters */ | |
70b0b977 KR |
29 | int nbits; /* size of p in bits (default: 2048) */ |
30 | int qbits; /* size of q in bits (default: 224) */ | |
0f113f3e MC |
31 | const EVP_MD *pmd; /* MD for parameter generation */ |
32 | /* Keygen callback info */ | |
33 | int gentmp[2]; | |
34 | /* message digest */ | |
35 | const EVP_MD *md; /* MD for the signature */ | |
36 | } DSA_PKEY_CTX; | |
c927df3f DSH |
37 | |
38 | static int pkey_dsa_init(EVP_PKEY_CTX *ctx) | |
0f113f3e | 39 | { |
e705fcf1 F |
40 | DSA_PKEY_CTX *dctx = OPENSSL_malloc(sizeof(*dctx)); |
41 | ||
90945fa3 | 42 | if (dctx == NULL) |
0f113f3e | 43 | return 0; |
70b0b977 KR |
44 | dctx->nbits = 2048; |
45 | dctx->qbits = 224; | |
0f113f3e MC |
46 | dctx->pmd = NULL; |
47 | dctx->md = NULL; | |
48 | ||
49 | ctx->data = dctx; | |
50 | ctx->keygen_info = dctx->gentmp; | |
51 | ctx->keygen_info_count = 2; | |
52 | ||
53 | return 1; | |
54 | } | |
c927df3f | 55 | |
9fdcc21f | 56 | static int pkey_dsa_copy(EVP_PKEY_CTX *dst, const EVP_PKEY_CTX *src) |
0f113f3e MC |
57 | { |
58 | DSA_PKEY_CTX *dctx, *sctx; | |
e705fcf1 | 59 | |
0f113f3e MC |
60 | if (!pkey_dsa_init(dst)) |
61 | return 0; | |
62 | sctx = src->data; | |
63 | dctx = dst->data; | |
64 | dctx->nbits = sctx->nbits; | |
65 | dctx->qbits = sctx->qbits; | |
66 | dctx->pmd = sctx->pmd; | |
67 | dctx->md = sctx->md; | |
68 | return 1; | |
69 | } | |
8bdcef40 | 70 | |
c927df3f | 71 | static void pkey_dsa_cleanup(EVP_PKEY_CTX *ctx) |
0f113f3e MC |
72 | { |
73 | DSA_PKEY_CTX *dctx = ctx->data; | |
b548a1f1 | 74 | OPENSSL_free(dctx); |
0f113f3e MC |
75 | } |
76 | ||
77 | static int pkey_dsa_sign(EVP_PKEY_CTX *ctx, unsigned char *sig, | |
78 | size_t *siglen, const unsigned char *tbs, | |
79 | size_t tbslen) | |
80 | { | |
a773b52a | 81 | int ret; |
0f113f3e MC |
82 | unsigned int sltmp; |
83 | DSA_PKEY_CTX *dctx = ctx->data; | |
84 | DSA *dsa = ctx->pkey->pkey.dsa; | |
85 | ||
665d9d1c BD |
86 | if (dctx->md != NULL && tbslen != (size_t)EVP_MD_size(dctx->md)) |
87 | return 0; | |
0f113f3e | 88 | |
a773b52a | 89 | ret = DSA_sign(0, tbs, tbslen, sig, &sltmp, dsa); |
0f113f3e MC |
90 | |
91 | if (ret <= 0) | |
92 | return ret; | |
93 | *siglen = sltmp; | |
94 | return 1; | |
95 | } | |
c927df3f DSH |
96 | |
97 | static int pkey_dsa_verify(EVP_PKEY_CTX *ctx, | |
0f113f3e MC |
98 | const unsigned char *sig, size_t siglen, |
99 | const unsigned char *tbs, size_t tbslen) | |
100 | { | |
a773b52a | 101 | int ret; |
0f113f3e MC |
102 | DSA_PKEY_CTX *dctx = ctx->data; |
103 | DSA *dsa = ctx->pkey->pkey.dsa; | |
c927df3f | 104 | |
665d9d1c BD |
105 | if (dctx->md != NULL && tbslen != (size_t)EVP_MD_size(dctx->md)) |
106 | return 0; | |
c927df3f | 107 | |
a773b52a | 108 | ret = DSA_verify(0, tbs, tbslen, sig, siglen, dsa); |
c927df3f | 109 | |
0f113f3e MC |
110 | return ret; |
111 | } | |
c927df3f DSH |
112 | |
113 | static int pkey_dsa_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2) | |
0f113f3e MC |
114 | { |
115 | DSA_PKEY_CTX *dctx = ctx->data; | |
e705fcf1 | 116 | |
0f113f3e MC |
117 | switch (type) { |
118 | case EVP_PKEY_CTRL_DSA_PARAMGEN_BITS: | |
119 | if (p1 < 256) | |
120 | return -2; | |
121 | dctx->nbits = p1; | |
122 | return 1; | |
123 | ||
124 | case EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS: | |
125 | if (p1 != 160 && p1 != 224 && p1 && p1 != 256) | |
126 | return -2; | |
127 | dctx->qbits = p1; | |
128 | return 1; | |
129 | ||
130 | case EVP_PKEY_CTRL_DSA_PARAMGEN_MD: | |
131 | if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 && | |
132 | EVP_MD_type((const EVP_MD *)p2) != NID_sha224 && | |
133 | EVP_MD_type((const EVP_MD *)p2) != NID_sha256) { | |
134 | DSAerr(DSA_F_PKEY_DSA_CTRL, DSA_R_INVALID_DIGEST_TYPE); | |
135 | return 0; | |
136 | } | |
8a05c4d3 | 137 | dctx->pmd = p2; |
0f113f3e MC |
138 | return 1; |
139 | ||
140 | case EVP_PKEY_CTRL_MD: | |
141 | if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 && | |
142 | EVP_MD_type((const EVP_MD *)p2) != NID_dsa && | |
143 | EVP_MD_type((const EVP_MD *)p2) != NID_dsaWithSHA && | |
144 | EVP_MD_type((const EVP_MD *)p2) != NID_sha224 && | |
145 | EVP_MD_type((const EVP_MD *)p2) != NID_sha256 && | |
146 | EVP_MD_type((const EVP_MD *)p2) != NID_sha384 && | |
3f950d87 PS |
147 | EVP_MD_type((const EVP_MD *)p2) != NID_sha512 && |
148 | EVP_MD_type((const EVP_MD *)p2) != NID_sha3_224 && | |
149 | EVP_MD_type((const EVP_MD *)p2) != NID_sha3_256 && | |
150 | EVP_MD_type((const EVP_MD *)p2) != NID_sha3_384 && | |
151 | EVP_MD_type((const EVP_MD *)p2) != NID_sha3_512) { | |
0f113f3e MC |
152 | DSAerr(DSA_F_PKEY_DSA_CTRL, DSA_R_INVALID_DIGEST_TYPE); |
153 | return 0; | |
154 | } | |
155 | dctx->md = p2; | |
156 | return 1; | |
157 | ||
158 | case EVP_PKEY_CTRL_GET_MD: | |
159 | *(const EVP_MD **)p2 = dctx->md; | |
160 | return 1; | |
161 | ||
162 | case EVP_PKEY_CTRL_DIGESTINIT: | |
163 | case EVP_PKEY_CTRL_PKCS7_SIGN: | |
164 | case EVP_PKEY_CTRL_CMS_SIGN: | |
165 | return 1; | |
166 | ||
167 | case EVP_PKEY_CTRL_PEER_KEY: | |
168 | DSAerr(DSA_F_PKEY_DSA_CTRL, | |
169 | EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE); | |
170 | return -2; | |
171 | default: | |
172 | return -2; | |
173 | ||
174 | } | |
175 | } | |
176 | ||
c927df3f | 177 | static int pkey_dsa_ctrl_str(EVP_PKEY_CTX *ctx, |
0f113f3e MC |
178 | const char *type, const char *value) |
179 | { | |
86885c28 | 180 | if (strcmp(type, "dsa_paramgen_bits") == 0) { |
0f113f3e MC |
181 | int nbits; |
182 | nbits = atoi(value); | |
183 | return EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx, nbits); | |
184 | } | |
86885c28 | 185 | if (strcmp(type, "dsa_paramgen_q_bits") == 0) { |
0f113f3e | 186 | int qbits = atoi(value); |
a97faad7 | 187 | return EVP_PKEY_CTX_set_dsa_paramgen_q_bits(ctx, qbits); |
0f113f3e | 188 | } |
86885c28 | 189 | if (strcmp(type, "dsa_paramgen_md") == 0) { |
06d3b485 MC |
190 | const EVP_MD *md = EVP_get_digestbyname(value); |
191 | ||
192 | if (md == NULL) { | |
193 | DSAerr(DSA_F_PKEY_DSA_CTRL_STR, DSA_R_INVALID_DIGEST_TYPE); | |
194 | return 0; | |
195 | } | |
a97faad7 | 196 | return EVP_PKEY_CTX_set_dsa_paramgen_md(ctx, md); |
0f113f3e MC |
197 | } |
198 | return -2; | |
199 | } | |
c927df3f DSH |
200 | |
201 | static int pkey_dsa_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey) | |
0f113f3e MC |
202 | { |
203 | DSA *dsa = NULL; | |
204 | DSA_PKEY_CTX *dctx = ctx->data; | |
205 | BN_GENCB *pcb; | |
f11f86f6 | 206 | int ret, res; |
e705fcf1 | 207 | |
0f113f3e MC |
208 | if (ctx->pkey_gencb) { |
209 | pcb = BN_GENCB_new(); | |
90945fa3 | 210 | if (pcb == NULL) |
0f113f3e MC |
211 | return 0; |
212 | evp_pkey_set_cb_translate(pcb, ctx); | |
213 | } else | |
214 | pcb = NULL; | |
215 | dsa = DSA_new(); | |
90945fa3 | 216 | if (dsa == NULL) { |
23a1d5e9 | 217 | BN_GENCB_free(pcb); |
0f113f3e MC |
218 | return 0; |
219 | } | |
4f2271d5 SL |
220 | if (dctx->md != NULL) |
221 | ffc_set_digest(&dsa->params, EVP_MD_name(dctx->md), NULL); | |
222 | ||
f11f86f6 | 223 | ret = ffc_params_FIPS186_4_generate(NULL, &dsa->params, FFC_PARAM_TYPE_DSA, |
4f2271d5 | 224 | dctx->nbits, dctx->qbits, &res, pcb); |
23a1d5e9 | 225 | BN_GENCB_free(pcb); |
8da42c8b | 226 | if (ret > 0) |
0f113f3e MC |
227 | EVP_PKEY_assign_DSA(pkey, dsa); |
228 | else | |
229 | DSA_free(dsa); | |
230 | return ret; | |
231 | } | |
c927df3f | 232 | |
75ef7188 | 233 | static int pkey_dsa_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey) |
0f113f3e MC |
234 | { |
235 | DSA *dsa = NULL; | |
e705fcf1 | 236 | |
0f113f3e MC |
237 | if (ctx->pkey == NULL) { |
238 | DSAerr(DSA_F_PKEY_DSA_KEYGEN, DSA_R_NO_PARAMETERS_SET); | |
239 | return 0; | |
240 | } | |
241 | dsa = DSA_new(); | |
90945fa3 | 242 | if (dsa == NULL) |
0f113f3e MC |
243 | return 0; |
244 | EVP_PKEY_assign_DSA(pkey, dsa); | |
245 | /* Note: if error return, pkey is freed by parent routine */ | |
246 | if (!EVP_PKEY_copy_parameters(pkey, ctx->pkey)) | |
247 | return 0; | |
248 | return DSA_generate_key(pkey->pkey.dsa); | |
249 | } | |
250 | ||
19bd1fa1 | 251 | static const EVP_PKEY_METHOD dsa_pkey_meth = { |
0f113f3e MC |
252 | EVP_PKEY_DSA, |
253 | EVP_PKEY_FLAG_AUTOARGLEN, | |
254 | pkey_dsa_init, | |
255 | pkey_dsa_copy, | |
256 | pkey_dsa_cleanup, | |
257 | ||
258 | 0, | |
259 | pkey_dsa_paramgen, | |
260 | ||
261 | 0, | |
262 | pkey_dsa_keygen, | |
263 | ||
264 | 0, | |
265 | pkey_dsa_sign, | |
266 | ||
267 | 0, | |
268 | pkey_dsa_verify, | |
269 | ||
270 | 0, 0, | |
271 | ||
272 | 0, 0, 0, 0, | |
273 | ||
274 | 0, 0, | |
275 | ||
276 | 0, 0, | |
277 | ||
278 | 0, 0, | |
279 | ||
280 | pkey_dsa_ctrl, | |
281 | pkey_dsa_ctrl_str | |
282 | }; | |
19bd1fa1 PS |
283 | |
284 | const EVP_PKEY_METHOD *dsa_pkey_method(void) | |
285 | { | |
286 | return &dsa_pkey_meth; | |
287 | } |