[thirdparty/openssl.git] / crypto / dsa / dsa_pmeth.c

/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
 * project 2006.
 */
/* ====================================================================
 * Copyright (c) 2006 The OpenSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer. 
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
 *
 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
 *    endorse or promote products derived from this software without
 *    prior written permission. For written permission, please contact
 *    licensing@OpenSSL.org.
 *
 * 5. Products derived from this software may not be called "OpenSSL"
 *    nor may "OpenSSL" appear in their names without prior written
 *    permission of the OpenSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 * ====================================================================
 *
 * This product includes cryptographic software written by Eric Young
 * (eay@cryptsoft.com).  This product includes software written by Tim
 * Hudson (tjh@cryptsoft.com).
 *
 */

#include <stdio.h>
#include "cryptlib.h"
#include <openssl/asn1t.h>
#include <openssl/x509.h>
#include <openssl/evp.h>
#include <openssl/bn.h>
#include "evp_locl.h"
#include "dsa_locl.h"

/* DSA pkey context structure */

typedef struct
	{
	/* Parameter gen parameters */
	int nbits;		/* size of p in bits (default: 1024) */
	int qbits;		/* size of q in bits (default: 160)  */
	const EVP_MD *pmd;	/* MD for parameter generation */
	/* Keygen callback info */
	int gentmp[2];
	/* message digest */
	const EVP_MD *md;	/* MD for the signature */
	} DSA_PKEY_CTX;

static int pkey_dsa_init(EVP_PKEY_CTX *ctx)
	{
	DSA_PKEY_CTX *dctx;
	dctx = OPENSSL_malloc(sizeof(DSA_PKEY_CTX));
	if (!dctx)
		return 0;
	dctx->nbits = 1024;
	dctx->qbits = 160;
	dctx->pmd = NULL;
	dctx->md = NULL;

	ctx->data = dctx;
	ctx->keygen_info = dctx->gentmp;
	ctx->keygen_info_count = 2;
	
	return 1;
	}

static int pkey_dsa_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
	{
	DSA_PKEY_CTX *dctx, *sctx;
	if (!pkey_dsa_init(dst))
		return 0;
       	sctx = src->data;
	dctx = dst->data;
	dctx->nbits = sctx->nbits;
	dctx->qbits = sctx->qbits;
	dctx->pmd = sctx->pmd;
	dctx->md  = sctx->md;
	return 1;
	}

static void pkey_dsa_cleanup(EVP_PKEY_CTX *ctx)
	{
	DSA_PKEY_CTX *dctx = ctx->data;
	if (dctx)
		OPENSSL_free(dctx);
	}

static int pkey_dsa_sign(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
					const unsigned char *tbs, size_t tbslen)
	{
	int ret, type;
	unsigned int sltmp;
	DSA_PKEY_CTX *dctx = ctx->data;
	DSA *dsa = ctx->pkey->pkey.dsa;

	if (dctx->md)
		type = EVP_MD_type(dctx->md);
	else
		type = NID_sha1;

	ret = DSA_sign(type, tbs, tbslen, sig, &sltmp, dsa);

	if (ret <= 0)
		return ret;
	*siglen = sltmp;
	return 1;
	}

static int pkey_dsa_verify(EVP_PKEY_CTX *ctx,
					const unsigned char *sig, size_t siglen,
					const unsigned char *tbs, size_t tbslen)
	{
	int ret, type;
	DSA_PKEY_CTX *dctx = ctx->data;
	DSA *dsa = ctx->pkey->pkey.dsa;

	if (dctx->md)
		type = EVP_MD_type(dctx->md);
	else
		type = NID_sha1;

	ret = DSA_verify(type, tbs, tbslen, sig, siglen, dsa);

	return ret;
	}

static int pkey_dsa_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
	{
	DSA_PKEY_CTX *dctx = ctx->data;
	switch (type)
		{
		case EVP_PKEY_CTRL_DSA_PARAMGEN_BITS:
		if (p1 < 256)
			return -2;
		dctx->nbits = p1;
		return 1;

		case EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS:
		if (p1 != 160 && p1 != 224 && p1 && p1 != 256)
			return -2;
		dctx->qbits = p1;
		return 1;

		case EVP_PKEY_CTRL_DSA_PARAMGEN_MD:
		if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1   &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_sha256)
			{
			DSAerr(DSA_F_PKEY_DSA_CTRL, DSA_R_INVALID_DIGEST_TYPE);
			return 0;
			}
		dctx->md = p2;
		return 1;

		case EVP_PKEY_CTRL_MD:
		if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1   &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_dsa    &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_dsaWithSHA    &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_sha256 &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_sha384 &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_sha512)
			{
			DSAerr(DSA_F_PKEY_DSA_CTRL, DSA_R_INVALID_DIGEST_TYPE);
			return 0;
			}
		dctx->md = p2;
		return 1;

		case EVP_PKEY_CTRL_GET_MD:
		*(const EVP_MD **)p2 = dctx->md;
		return 1;

		case EVP_PKEY_CTRL_DIGESTINIT:
		case EVP_PKEY_CTRL_PKCS7_SIGN:
		case EVP_PKEY_CTRL_CMS_SIGN:
		return 1;
		
		case EVP_PKEY_CTRL_PEER_KEY:
			DSAerr(DSA_F_PKEY_DSA_CTRL,
			EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
			return -2;	
		default:
		return -2;

		}
	}
			
static int pkey_dsa_ctrl_str(EVP_PKEY_CTX *ctx,
			const char *type, const char *value)
	{
	if (!strcmp(type, "dsa_paramgen_bits"))
		{
		int nbits;
		nbits = atoi(value);
		return EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx, nbits);
		}
	if (!strcmp(type, "dsa_paramgen_q_bits"))
		{
		int qbits = atoi(value);
		return EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN,
		                         EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS, qbits, NULL);
		}
	if (!strcmp(type, "dsa_paramgen_md"))
		{
		return EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN,
		                         EVP_PKEY_CTRL_DSA_PARAMGEN_MD, 0, 
		                         (void *)EVP_get_digestbyname(value));
		}
	return -2;
	}

static int pkey_dsa_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
	{
	DSA *dsa = NULL;
	DSA_PKEY_CTX *dctx = ctx->data;
	BN_GENCB *pcb;
	int ret;
	if (ctx->pkey_gencb)
		{
		pcb = BN_GENCB_new();
		if(!pcb) return 0;
		evp_pkey_set_cb_translate(pcb, ctx);
		}
	else
		pcb = NULL;
	dsa = DSA_new();
	if (!dsa)
		{
		if(pcb) BN_GENCB_free(pcb);
		return 0;
		}
	ret = dsa_builtin_paramgen(dsa, dctx->nbits, dctx->qbits, dctx->pmd,
	                           NULL, 0, NULL, NULL, NULL, pcb);
	if(pcb) BN_GENCB_free(pcb);
	if (ret)
		EVP_PKEY_assign_DSA(pkey, dsa);
	else
		DSA_free(dsa);
	return ret;
	}

static int pkey_dsa_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
	{
	DSA *dsa = NULL;
	if (ctx->pkey == NULL)
		{
		DSAerr(DSA_F_PKEY_DSA_KEYGEN, DSA_R_NO_PARAMETERS_SET);
		return 0;
		}
	dsa = DSA_new();
	if (!dsa)
		return 0;
	EVP_PKEY_assign_DSA(pkey, dsa);
	/* Note: if error return, pkey is freed by parent routine */
	if (!EVP_PKEY_copy_parameters(pkey, ctx->pkey))
		return 0;
	return DSA_generate_key(pkey->pkey.dsa);
	}

const EVP_PKEY_METHOD dsa_pkey_meth = 
	{
	EVP_PKEY_DSA,
	EVP_PKEY_FLAG_AUTOARGLEN,
	pkey_dsa_init,
	pkey_dsa_copy,
	pkey_dsa_cleanup,

	0,
	pkey_dsa_paramgen,

	0,
	pkey_dsa_keygen,

	0,
	pkey_dsa_sign,

	0,
	pkey_dsa_verify,

	0,0,

	0,0,0,0,

	0,0,

	0,0,

	0,0,

	pkey_dsa_ctrl,
	pkey_dsa_ctrl_str


	};
Commit	Line	Data
2e597528	1	/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
c927df3f DSH	2	* project 2006.
	3	*/
	4	/* ====================================================================
	5	* Copyright (c) 2006 The OpenSSL Project. All rights reserved.
	6	*
	7	* Redistribution and use in source and binary forms, with or without
	8	* modification, are permitted provided that the following conditions
	9	* are met:
	10	*
	11	* 1. Redistributions of source code must retain the above copyright
	12	* notice, this list of conditions and the following disclaimer.
	13	*
	14	* 2. Redistributions in binary form must reproduce the above copyright
	15	* notice, this list of conditions and the following disclaimer in
	16	* the documentation and/or other materials provided with the
	17	* distribution.
	18	*
	19	* 3. All advertising materials mentioning features or use of this
	20	* software must display the following acknowledgment:
	21	* "This product includes software developed by the OpenSSL Project
	22	* for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
	23	*
	24	* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
	25	* endorse or promote products derived from this software without
	26	* prior written permission. For written permission, please contact
	27	* licensing@OpenSSL.org.
	28	*
	29	* 5. Products derived from this software may not be called "OpenSSL"
	30	* nor may "OpenSSL" appear in their names without prior written
	31	* permission of the OpenSSL Project.
	32	*
	33	* 6. Redistributions of any form whatsoever must retain the following
	34	* acknowledgment:
	35	* "This product includes software developed by the OpenSSL Project
	36	* for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
	37	*
	38	* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
	39	* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	40	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
	41	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
	42	* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
	43	* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
	44	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
	45	* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	46	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
	47	* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	48	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
	49	* OF THE POSSIBILITY OF SUCH DAMAGE.
	50	* ====================================================================
	51	*
	52	* This product includes cryptographic software written by Eric Young
	53	* (eay@cryptsoft.com). This product includes software written by Tim
	54	* Hudson (tjh@cryptsoft.com).
	55	*
	56	*/
	57
	58	#include <stdio.h>
	59	#include "cryptlib.h"
	60	#include <openssl/asn1t.h>
	61	#include <openssl/x509.h>
c927df3f	62	#include <openssl/evp.h>
1e26a8ba	63	#include <openssl/bn.h>
c927df3f	64	#include "evp_locl.h"
357d5de5	65	#include "dsa_locl.h"
c927df3f DSH	66
	67	/* DSA pkey context structure */
	68
	69	typedef struct
	70	{
	71	/* Parameter gen parameters */
357d5de5 NL	72	int nbits; /* size of p in bits (default: 1024) */
	73	int qbits; /* size of q in bits (default: 160) */
	74	const EVP_MD pmd; / MD for parameter generation */
c927df3f DSH	75	/* Keygen callback info */
	76	int gentmp[2];
	77	/* message digest */
357d5de5	78	const EVP_MD md; / MD for the signature */
c927df3f DSH	79	} DSA_PKEY_CTX;
	80
	81	static int pkey_dsa_init(EVP_PKEY_CTX *ctx)
	82	{
	83	DSA_PKEY_CTX *dctx;
	84	dctx = OPENSSL_malloc(sizeof(DSA_PKEY_CTX));
	85	if (!dctx)
	86	return 0;
	87	dctx->nbits = 1024;
357d5de5 NL	88	dctx->qbits = 160;
357d5de5 NL	89	dctx->pmd = NULL;
c927df3f DSH	90	dctx->md = NULL;
	91
	92	ctx->data = dctx;
	93	ctx->keygen_info = dctx->gentmp;
	94	ctx->keygen_info_count = 2;
	95
	96	return 1;
	97	}
	98
8bdcef40 DSH	99	static int pkey_dsa_copy(EVP_PKEY_CTX dst, EVP_PKEY_CTX src)
	100	{
	101	DSA_PKEY_CTX dctx, sctx;
	102	if (!pkey_dsa_init(dst))
	103	return 0;
	104	sctx = src->data;
	105	dctx = dst->data;
	106	dctx->nbits = sctx->nbits;
357d5de5 NL	107	dctx->qbits = sctx->qbits;
	108	dctx->pmd = sctx->pmd;
	109	dctx->md = sctx->md;
8bdcef40 DSH	110	return 1;
	111	}
	112
c927df3f DSH	113	static void pkey_dsa_cleanup(EVP_PKEY_CTX *ctx)
	114	{
	115	DSA_PKEY_CTX *dctx = ctx->data;
	116	if (dctx)
	117	OPENSSL_free(dctx);
	118	}
	119
eaff5a14 DSH	120	static int pkey_dsa_sign(EVP_PKEY_CTX ctx, unsigned char sig, size_t *siglen,
eaff5a14 DSH	121	const unsigned char *tbs, size_t tbslen)
c927df3f DSH	122	{
	123	int ret, type;
	124	unsigned int sltmp;
	125	DSA_PKEY_CTX *dctx = ctx->data;
	126	DSA *dsa = ctx->pkey->pkey.dsa;
	127
	128	if (dctx->md)
	129	type = EVP_MD_type(dctx->md);
	130	else
	131	type = NID_sha1;
	132
	133	ret = DSA_sign(type, tbs, tbslen, sig, &sltmp, dsa);
	134
6732e142	135	if (ret <= 0)
c927df3f DSH	136	return ret;
	137	*siglen = sltmp;
	138	return 1;
	139	}
	140
	141	static int pkey_dsa_verify(EVP_PKEY_CTX *ctx,
eaff5a14 DSH	142	const unsigned char *sig, size_t siglen,
eaff5a14 DSH	143	const unsigned char *tbs, size_t tbslen)
c927df3f DSH	144	{
	145	int ret, type;
	146	DSA_PKEY_CTX *dctx = ctx->data;
	147	DSA *dsa = ctx->pkey->pkey.dsa;
	148
	149	if (dctx->md)
	150	type = EVP_MD_type(dctx->md);
	151	else
	152	type = NID_sha1;
	153
	154	ret = DSA_verify(type, tbs, tbslen, sig, siglen, dsa);
	155
	156	return ret;
	157	}
	158
	159	static int pkey_dsa_ctrl(EVP_PKEY_CTX ctx, int type, int p1, void p2)
	160	{
	161	DSA_PKEY_CTX *dctx = ctx->data;
	162	switch (type)
	163	{
	164	case EVP_PKEY_CTRL_DSA_PARAMGEN_BITS:
	165	if (p1 < 256)
	166	return -2;
	167	dctx->nbits = p1;
	168	return 1;
	169
357d5de5 NL	170	case EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS:
	171	if (p1 != 160 && p1 != 224 && p1 && p1 != 256)
	172	return -2;
	173	dctx->qbits = p1;
	174	return 1;
	175
	176	case EVP_PKEY_CTRL_DSA_PARAMGEN_MD:
	177	if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 &&
	178	EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
	179	EVP_MD_type((const EVP_MD *)p2) != NID_sha256)
	180	{
	181	DSAerr(DSA_F_PKEY_DSA_CTRL, DSA_R_INVALID_DIGEST_TYPE);
	182	return 0;
	183	}
	184	dctx->md = p2;
	185	return 1;
	186
c927df3f	187	case EVP_PKEY_CTRL_MD:
357d5de5	188	if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 &&
fc680569	189	EVP_MD_type((const EVP_MD *)p2) != NID_dsa &&
af17d992	190	EVP_MD_type((const EVP_MD *)p2) != NID_dsaWithSHA &&
357d5de5	191	EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
fc683d72 DSH	192	EVP_MD_type((const EVP_MD *)p2) != NID_sha256 &&
	193	EVP_MD_type((const EVP_MD *)p2) != NID_sha384 &&
	194	EVP_MD_type((const EVP_MD *)p2) != NID_sha512)
c927df3f DSH	195	{
	196	DSAerr(DSA_F_PKEY_DSA_CTRL, DSA_R_INVALID_DIGEST_TYPE);
	197	return 0;
	198	}
	199	dctx->md = p2;
	200	return 1;
	201
81063953 DSH	202	case EVP_PKEY_CTRL_GET_MD:
	203	(const EVP_MD *)p2 = dctx->md;
	204	return 1;
	205
156ee882	206	case EVP_PKEY_CTRL_DIGESTINIT:
b7683e3a	207	case EVP_PKEY_CTRL_PKCS7_SIGN:
8931b30d	208	case EVP_PKEY_CTRL_CMS_SIGN:
b7683e3a	209	return 1;
0e1dba93 DSH	210
	211	case EVP_PKEY_CTRL_PEER_KEY:
	212	DSAerr(DSA_F_PKEY_DSA_CTRL,
	213	EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
	214	return -2;
c927df3f DSH	215	default:
	216	return -2;
	217
	218	}
	219	}
	220
	221	static int pkey_dsa_ctrl_str(EVP_PKEY_CTX *ctx,
	222	const char type, const char value)
	223	{
	224	if (!strcmp(type, "dsa_paramgen_bits"))
	225	{
	226	int nbits;
	227	nbits = atoi(value);
	228	return EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx, nbits);
	229	}
357d5de5 NL	230	if (!strcmp(type, "dsa_paramgen_q_bits"))
	231	{
	232	int qbits = atoi(value);
	233	return EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN,
	234	EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS, qbits, NULL);
	235	}
	236	if (!strcmp(type, "dsa_paramgen_md"))
	237	{
	238	return EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN,
	239	EVP_PKEY_CTRL_DSA_PARAMGEN_MD, 0,
	240	(void *)EVP_get_digestbyname(value));
	241	}
c927df3f DSH	242	return -2;
	243	}
	244
	245	static int pkey_dsa_paramgen(EVP_PKEY_CTX ctx, EVP_PKEY pkey)
	246	{
	247	DSA *dsa = NULL;
	248	DSA_PKEY_CTX *dctx = ctx->data;
c0d43901	249	BN_GENCB *pcb;
c927df3f DSH	250	int ret;
	251	if (ctx->pkey_gencb)
	252	{
c0d43901 MC	253	pcb = BN_GENCB_new();
c0d43901 MC	254	if(!pcb) return 0;
c927df3f DSH	255	evp_pkey_set_cb_translate(pcb, ctx);
	256	}
	257	else
	258	pcb = NULL;
	259	dsa = DSA_new();
	260	if (!dsa)
c0d43901 MC	261	{
c0d43901 MC	262	if(pcb) BN_GENCB_free(pcb);
c927df3f	263	return 0;
c0d43901	264	}
357d5de5	265	ret = dsa_builtin_paramgen(dsa, dctx->nbits, dctx->qbits, dctx->pmd,
198ce9a6	266	NULL, 0, NULL, NULL, NULL, pcb);
c0d43901	267	if(pcb) BN_GENCB_free(pcb);
c927df3f DSH	268	if (ret)
	269	EVP_PKEY_assign_DSA(pkey, dsa);
	270	else
	271	DSA_free(dsa);
	272	return ret;
	273	}
	274
75ef7188 DSH	275	static int pkey_dsa_keygen(EVP_PKEY_CTX ctx, EVP_PKEY pkey)
	276	{
	277	DSA *dsa = NULL;
	278	if (ctx->pkey == NULL)
	279	{
	280	DSAerr(DSA_F_PKEY_DSA_KEYGEN, DSA_R_NO_PARAMETERS_SET);
	281	return 0;
	282	}
	283	dsa = DSA_new();
	284	if (!dsa)
	285	return 0;
	286	EVP_PKEY_assign_DSA(pkey, dsa);
	287	/* Note: if error return, pkey is freed by parent routine */
	288	if (!EVP_PKEY_copy_parameters(pkey, ctx->pkey))
	289	return 0;
	290	return DSA_generate_key(pkey->pkey.dsa);
	291	}
	292
c927df3f DSH	293	const EVP_PKEY_METHOD dsa_pkey_meth =
	294	{
	295	EVP_PKEY_DSA,
b010b7c4	296	EVP_PKEY_FLAG_AUTOARGLEN,
c927df3f	297	pkey_dsa_init,
8bdcef40	298	pkey_dsa_copy,
c927df3f DSH	299	pkey_dsa_cleanup,
	300
	301	0,
	302	pkey_dsa_paramgen,
	303
75ef7188 DSH	304	0,
75ef7188 DSH	305	pkey_dsa_keygen,
c927df3f DSH	306
	307	0,
	308	pkey_dsa_sign,
	309
	310	0,
	311	pkey_dsa_verify,
	312
	313	0,0,
	314
	315	0,0,0,0,
	316
	317	0,0,
	318
	319	0,0,
	320
d87e6152 DSH	321	0,0,
d87e6152 DSH	322
c927df3f DSH	323	pkey_dsa_ctrl,
	324	pkey_dsa_ctrl_str
	325
	326
	327	};