[thirdparty/openssl.git] / crypto / dsa / dsa_pmeth.c

/*
 * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
 *
 * Licensed under the OpenSSL license (the "License").  You may not use
 * this file except in compliance with the License.  You can obtain a copy
 * in the file LICENSE in the source distribution or at
 * https://www.openssl.org/source/license.html
 */

#include <stdio.h>
#include "internal/cryptlib.h"
#include <openssl/asn1t.h>
#include <openssl/x509.h>
#include <openssl/evp.h>
#include <openssl/bn.h>
#include "internal/evp_int.h"
#include "dsa_locl.h"

/* DSA pkey context structure */

typedef struct {
    /* Parameter gen parameters */
    int nbits;                  /* size of p in bits (default: 1024) */
    int qbits;                  /* size of q in bits (default: 160) */
    const EVP_MD *pmd;          /* MD for parameter generation */
    /* Keygen callback info */
    int gentmp[2];
    /* message digest */
    const EVP_MD *md;           /* MD for the signature */
} DSA_PKEY_CTX;

static int pkey_dsa_init(EVP_PKEY_CTX *ctx)
{
    DSA_PKEY_CTX *dctx;
    dctx = OPENSSL_malloc(sizeof(*dctx));
    if (dctx == NULL)
        return 0;
    dctx->nbits = 1024;
    dctx->qbits = 160;
    dctx->pmd = NULL;
    dctx->md = NULL;

    ctx->data = dctx;
    ctx->keygen_info = dctx->gentmp;
    ctx->keygen_info_count = 2;

    return 1;
}

static int pkey_dsa_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
{
    DSA_PKEY_CTX *dctx, *sctx;
    if (!pkey_dsa_init(dst))
        return 0;
    sctx = src->data;
    dctx = dst->data;
    dctx->nbits = sctx->nbits;
    dctx->qbits = sctx->qbits;
    dctx->pmd = sctx->pmd;
    dctx->md = sctx->md;
    return 1;
}

static void pkey_dsa_cleanup(EVP_PKEY_CTX *ctx)
{
    DSA_PKEY_CTX *dctx = ctx->data;
    OPENSSL_free(dctx);
}

static int pkey_dsa_sign(EVP_PKEY_CTX *ctx, unsigned char *sig,
                         size_t *siglen, const unsigned char *tbs,
                         size_t tbslen)
{
    int ret;
    unsigned int sltmp;
    DSA_PKEY_CTX *dctx = ctx->data;
    DSA *dsa = ctx->pkey->pkey.dsa;

    if (dctx->md) {
        if (tbslen != (size_t)EVP_MD_size(dctx->md))
            return 0;
    } else {
        if (tbslen != SHA_DIGEST_LENGTH)
            return 0;
    }

    ret = DSA_sign(0, tbs, tbslen, sig, &sltmp, dsa);

    if (ret <= 0)
        return ret;
    *siglen = sltmp;
    return 1;
}

static int pkey_dsa_verify(EVP_PKEY_CTX *ctx,
                           const unsigned char *sig, size_t siglen,
                           const unsigned char *tbs, size_t tbslen)
{
    int ret;
    DSA_PKEY_CTX *dctx = ctx->data;
    DSA *dsa = ctx->pkey->pkey.dsa;

    if (dctx->md) {
        if (tbslen != (size_t)EVP_MD_size(dctx->md))
            return 0;
    } else {
        if (tbslen != SHA_DIGEST_LENGTH)
            return 0;
    }

    ret = DSA_verify(0, tbs, tbslen, sig, siglen, dsa);

    return ret;
}

static int pkey_dsa_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
{
    DSA_PKEY_CTX *dctx = ctx->data;
    switch (type) {
    case EVP_PKEY_CTRL_DSA_PARAMGEN_BITS:
        if (p1 < 256)
            return -2;
        dctx->nbits = p1;
        return 1;

    case EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS:
        if (p1 != 160 && p1 != 224 && p1 && p1 != 256)
            return -2;
        dctx->qbits = p1;
        return 1;

    case EVP_PKEY_CTRL_DSA_PARAMGEN_MD:
        if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 &&
            EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
            EVP_MD_type((const EVP_MD *)p2) != NID_sha256) {
            DSAerr(DSA_F_PKEY_DSA_CTRL, DSA_R_INVALID_DIGEST_TYPE);
            return 0;
        }
        dctx->md = p2;
        return 1;

    case EVP_PKEY_CTRL_MD:
        if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 &&
            EVP_MD_type((const EVP_MD *)p2) != NID_dsa &&
            EVP_MD_type((const EVP_MD *)p2) != NID_dsaWithSHA &&
            EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
            EVP_MD_type((const EVP_MD *)p2) != NID_sha256 &&
            EVP_MD_type((const EVP_MD *)p2) != NID_sha384 &&
            EVP_MD_type((const EVP_MD *)p2) != NID_sha512) {
            DSAerr(DSA_F_PKEY_DSA_CTRL, DSA_R_INVALID_DIGEST_TYPE);
            return 0;
        }
        dctx->md = p2;
        return 1;

    case EVP_PKEY_CTRL_GET_MD:
        *(const EVP_MD **)p2 = dctx->md;
        return 1;

    case EVP_PKEY_CTRL_DIGESTINIT:
    case EVP_PKEY_CTRL_PKCS7_SIGN:
    case EVP_PKEY_CTRL_CMS_SIGN:
        return 1;

    case EVP_PKEY_CTRL_PEER_KEY:
        DSAerr(DSA_F_PKEY_DSA_CTRL,
               EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
        return -2;
    default:
        return -2;

    }
}

static int pkey_dsa_ctrl_str(EVP_PKEY_CTX *ctx,
                             const char *type, const char *value)
{
    if (strcmp(type, "dsa_paramgen_bits") == 0) {
        int nbits;
        nbits = atoi(value);
        return EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx, nbits);
    }
    if (strcmp(type, "dsa_paramgen_q_bits") == 0) {
        int qbits = atoi(value);
        return EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN,
                                 EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS, qbits,
                                 NULL);
    }
    if (strcmp(type, "dsa_paramgen_md") == 0) {
        return EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN,
                                 EVP_PKEY_CTRL_DSA_PARAMGEN_MD, 0,
                                 (void *)EVP_get_digestbyname(value));
    }
    return -2;
}

static int pkey_dsa_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
{
    DSA *dsa = NULL;
    DSA_PKEY_CTX *dctx = ctx->data;
    BN_GENCB *pcb;
    int ret;
    if (ctx->pkey_gencb) {
        pcb = BN_GENCB_new();
        if (pcb == NULL)
            return 0;
        evp_pkey_set_cb_translate(pcb, ctx);
    } else
        pcb = NULL;
    dsa = DSA_new();
    if (dsa == NULL) {
        BN_GENCB_free(pcb);
        return 0;
    }
    ret = dsa_builtin_paramgen(dsa, dctx->nbits, dctx->qbits, dctx->pmd,
                               NULL, 0, NULL, NULL, NULL, pcb);
    BN_GENCB_free(pcb);
    if (ret)
        EVP_PKEY_assign_DSA(pkey, dsa);
    else
        DSA_free(dsa);
    return ret;
}

static int pkey_dsa_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
{
    DSA *dsa = NULL;
    if (ctx->pkey == NULL) {
        DSAerr(DSA_F_PKEY_DSA_KEYGEN, DSA_R_NO_PARAMETERS_SET);
        return 0;
    }
    dsa = DSA_new();
    if (dsa == NULL)
        return 0;
    EVP_PKEY_assign_DSA(pkey, dsa);
    /* Note: if error return, pkey is freed by parent routine */
    if (!EVP_PKEY_copy_parameters(pkey, ctx->pkey))
        return 0;
    return DSA_generate_key(pkey->pkey.dsa);
}

const EVP_PKEY_METHOD dsa_pkey_meth = {
    EVP_PKEY_DSA,
    EVP_PKEY_FLAG_AUTOARGLEN,
    pkey_dsa_init,
    pkey_dsa_copy,
    pkey_dsa_cleanup,

    0,
    pkey_dsa_paramgen,

    0,
    pkey_dsa_keygen,

    0,
    pkey_dsa_sign,

    0,
    pkey_dsa_verify,

    0, 0,

    0, 0, 0, 0,

    0, 0,

    0, 0,

    0, 0,

    pkey_dsa_ctrl,
    pkey_dsa_ctrl_str
};
Commit	Line	Data
0f113f3e	1	/*
d2e9e320	2	* Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
c927df3f	3	*
d2e9e320 RS	4	* Licensed under the OpenSSL license (the "License"). You may not use
	5	* this file except in compliance with the License. You can obtain a copy
	6	* in the file LICENSE in the source distribution or at
	7	* https://www.openssl.org/source/license.html
c927df3f DSH	8	*/
	9
	10	#include <stdio.h>
b39fc560	11	#include "internal/cryptlib.h"
c927df3f DSH	12	#include <openssl/asn1t.h>
c927df3f DSH	13	#include <openssl/x509.h>
c927df3f	14	#include <openssl/evp.h>
1e26a8ba	15	#include <openssl/bn.h>
27af42f9	16	#include "internal/evp_int.h"
357d5de5	17	#include "dsa_locl.h"
c927df3f DSH	18
	19	/* DSA pkey context structure */
	20
0f113f3e MC	21	typedef struct {
	22	/* Parameter gen parameters */
	23	int nbits; /* size of p in bits (default: 1024) */
	24	int qbits; /* size of q in bits (default: 160) */
	25	const EVP_MD pmd; / MD for parameter generation */
	26	/* Keygen callback info */
	27	int gentmp[2];
	28	/* message digest */
	29	const EVP_MD md; / MD for the signature */
	30	} DSA_PKEY_CTX;
c927df3f DSH	31
c927df3f DSH	32	static int pkey_dsa_init(EVP_PKEY_CTX *ctx)
0f113f3e MC	33	{
0f113f3e MC	34	DSA_PKEY_CTX *dctx;
b4faea50	35	dctx = OPENSSL_malloc(sizeof(*dctx));
90945fa3	36	if (dctx == NULL)
0f113f3e MC	37	return 0;
	38	dctx->nbits = 1024;
	39	dctx->qbits = 160;
	40	dctx->pmd = NULL;
	41	dctx->md = NULL;
	42
	43	ctx->data = dctx;
	44	ctx->keygen_info = dctx->gentmp;
	45	ctx->keygen_info_count = 2;
	46
	47	return 1;
	48	}
c927df3f	49
8bdcef40	50	static int pkey_dsa_copy(EVP_PKEY_CTX dst, EVP_PKEY_CTX src)
0f113f3e MC	51	{
	52	DSA_PKEY_CTX dctx, sctx;
	53	if (!pkey_dsa_init(dst))
	54	return 0;
	55	sctx = src->data;
	56	dctx = dst->data;
	57	dctx->nbits = sctx->nbits;
	58	dctx->qbits = sctx->qbits;
	59	dctx->pmd = sctx->pmd;
	60	dctx->md = sctx->md;
	61	return 1;
	62	}
8bdcef40	63
c927df3f	64	static void pkey_dsa_cleanup(EVP_PKEY_CTX *ctx)
0f113f3e MC	65	{
0f113f3e MC	66	DSA_PKEY_CTX *dctx = ctx->data;
b548a1f1	67	OPENSSL_free(dctx);
0f113f3e MC	68	}
	69
	70	static int pkey_dsa_sign(EVP_PKEY_CTX ctx, unsigned char sig,
	71	size_t siglen, const unsigned char tbs,
	72	size_t tbslen)
	73	{
a773b52a	74	int ret;
0f113f3e MC	75	unsigned int sltmp;
	76	DSA_PKEY_CTX *dctx = ctx->data;
	77	DSA *dsa = ctx->pkey->pkey.dsa;
	78
9d04f834 DSH	79	if (dctx->md) {
	80	if (tbslen != (size_t)EVP_MD_size(dctx->md))
	81	return 0;
9d04f834 DSH	82	} else {
	83	if (tbslen != SHA_DIGEST_LENGTH)
	84	return 0;
9d04f834	85	}
0f113f3e	86
a773b52a	87	ret = DSA_sign(0, tbs, tbslen, sig, &sltmp, dsa);
0f113f3e MC	88
	89	if (ret <= 0)
	90	return ret;
	91	*siglen = sltmp;
	92	return 1;
	93	}
c927df3f DSH	94
c927df3f DSH	95	static int pkey_dsa_verify(EVP_PKEY_CTX *ctx,
0f113f3e MC	96	const unsigned char *sig, size_t siglen,
	97	const unsigned char *tbs, size_t tbslen)
	98	{
a773b52a	99	int ret;
0f113f3e MC	100	DSA_PKEY_CTX *dctx = ctx->data;
0f113f3e MC	101	DSA *dsa = ctx->pkey->pkey.dsa;
c927df3f	102
9d04f834 DSH	103	if (dctx->md) {
	104	if (tbslen != (size_t)EVP_MD_size(dctx->md))
	105	return 0;
9d04f834 DSH	106	} else {
	107	if (tbslen != SHA_DIGEST_LENGTH)
	108	return 0;
9d04f834	109	}
c927df3f	110
a773b52a	111	ret = DSA_verify(0, tbs, tbslen, sig, siglen, dsa);
c927df3f	112
0f113f3e MC	113	return ret;
0f113f3e MC	114	}
c927df3f DSH	115
c927df3f DSH	116	static int pkey_dsa_ctrl(EVP_PKEY_CTX ctx, int type, int p1, void p2)
0f113f3e MC	117	{
	118	DSA_PKEY_CTX *dctx = ctx->data;
	119	switch (type) {
	120	case EVP_PKEY_CTRL_DSA_PARAMGEN_BITS:
	121	if (p1 < 256)
	122	return -2;
	123	dctx->nbits = p1;
	124	return 1;
	125
	126	case EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS:
	127	if (p1 != 160 && p1 != 224 && p1 && p1 != 256)
	128	return -2;
	129	dctx->qbits = p1;
	130	return 1;
	131
	132	case EVP_PKEY_CTRL_DSA_PARAMGEN_MD:
	133	if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 &&
	134	EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
	135	EVP_MD_type((const EVP_MD *)p2) != NID_sha256) {
	136	DSAerr(DSA_F_PKEY_DSA_CTRL, DSA_R_INVALID_DIGEST_TYPE);
	137	return 0;
	138	}
	139	dctx->md = p2;
	140	return 1;
	141
	142	case EVP_PKEY_CTRL_MD:
	143	if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 &&
	144	EVP_MD_type((const EVP_MD *)p2) != NID_dsa &&
	145	EVP_MD_type((const EVP_MD *)p2) != NID_dsaWithSHA &&
	146	EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
	147	EVP_MD_type((const EVP_MD *)p2) != NID_sha256 &&
	148	EVP_MD_type((const EVP_MD *)p2) != NID_sha384 &&
	149	EVP_MD_type((const EVP_MD *)p2) != NID_sha512) {
	150	DSAerr(DSA_F_PKEY_DSA_CTRL, DSA_R_INVALID_DIGEST_TYPE);
	151	return 0;
	152	}
	153	dctx->md = p2;
	154	return 1;
	155
	156	case EVP_PKEY_CTRL_GET_MD:
	157	(const EVP_MD *)p2 = dctx->md;
	158	return 1;
	159
	160	case EVP_PKEY_CTRL_DIGESTINIT:
	161	case EVP_PKEY_CTRL_PKCS7_SIGN:
	162	case EVP_PKEY_CTRL_CMS_SIGN:
	163	return 1;
	164
	165	case EVP_PKEY_CTRL_PEER_KEY:
	166	DSAerr(DSA_F_PKEY_DSA_CTRL,
	167	EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
	168	return -2;
	169	default:
	170	return -2;
	171
	172	}
	173	}
	174
c927df3f	175	static int pkey_dsa_ctrl_str(EVP_PKEY_CTX *ctx,
0f113f3e MC	176	const char type, const char value)
0f113f3e MC	177	{
86885c28	178	if (strcmp(type, "dsa_paramgen_bits") == 0) {
0f113f3e MC	179	int nbits;
	180	nbits = atoi(value);
	181	return EVP_PKEY_CTX_set_dsa_paramgen_bits(ctx, nbits);
	182	}
86885c28	183	if (strcmp(type, "dsa_paramgen_q_bits") == 0) {
0f113f3e MC	184	int qbits = atoi(value);
	185	return EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN,
	186	EVP_PKEY_CTRL_DSA_PARAMGEN_Q_BITS, qbits,
	187	NULL);
	188	}
86885c28	189	if (strcmp(type, "dsa_paramgen_md") == 0) {
0f113f3e MC	190	return EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_DSA, EVP_PKEY_OP_PARAMGEN,
	191	EVP_PKEY_CTRL_DSA_PARAMGEN_MD, 0,
	192	(void *)EVP_get_digestbyname(value));
	193	}
	194	return -2;
	195	}
c927df3f DSH	196
c927df3f DSH	197	static int pkey_dsa_paramgen(EVP_PKEY_CTX ctx, EVP_PKEY pkey)
0f113f3e MC	198	{
	199	DSA *dsa = NULL;
	200	DSA_PKEY_CTX *dctx = ctx->data;
	201	BN_GENCB *pcb;
	202	int ret;
	203	if (ctx->pkey_gencb) {
	204	pcb = BN_GENCB_new();
90945fa3	205	if (pcb == NULL)
0f113f3e MC	206	return 0;
	207	evp_pkey_set_cb_translate(pcb, ctx);
	208	} else
	209	pcb = NULL;
	210	dsa = DSA_new();
90945fa3	211	if (dsa == NULL) {
23a1d5e9	212	BN_GENCB_free(pcb);
0f113f3e MC	213	return 0;
	214	}
	215	ret = dsa_builtin_paramgen(dsa, dctx->nbits, dctx->qbits, dctx->pmd,
	216	NULL, 0, NULL, NULL, NULL, pcb);
23a1d5e9	217	BN_GENCB_free(pcb);
0f113f3e MC	218	if (ret)
	219	EVP_PKEY_assign_DSA(pkey, dsa);
	220	else
	221	DSA_free(dsa);
	222	return ret;
	223	}
c927df3f	224
75ef7188	225	static int pkey_dsa_keygen(EVP_PKEY_CTX ctx, EVP_PKEY pkey)
0f113f3e MC	226	{
	227	DSA *dsa = NULL;
	228	if (ctx->pkey == NULL) {
	229	DSAerr(DSA_F_PKEY_DSA_KEYGEN, DSA_R_NO_PARAMETERS_SET);
	230	return 0;
	231	}
	232	dsa = DSA_new();
90945fa3	233	if (dsa == NULL)
0f113f3e MC	234	return 0;
	235	EVP_PKEY_assign_DSA(pkey, dsa);
	236	/* Note: if error return, pkey is freed by parent routine */
	237	if (!EVP_PKEY_copy_parameters(pkey, ctx->pkey))
	238	return 0;
	239	return DSA_generate_key(pkey->pkey.dsa);
	240	}
	241
	242	const EVP_PKEY_METHOD dsa_pkey_meth = {
	243	EVP_PKEY_DSA,
	244	EVP_PKEY_FLAG_AUTOARGLEN,
	245	pkey_dsa_init,
	246	pkey_dsa_copy,
	247	pkey_dsa_cleanup,
	248
	249	0,
	250	pkey_dsa_paramgen,
	251
	252	0,
	253	pkey_dsa_keygen,
	254
	255	0,
	256	pkey_dsa_sign,
	257
	258	0,
	259	pkey_dsa_verify,
	260
	261	0, 0,
	262
	263	0, 0, 0, 0,
	264
	265	0, 0,
	266
	267	0, 0,
	268
	269	0, 0,
	270
	271	pkey_dsa_ctrl,
	272	pkey_dsa_ctrl_str
	273	};