[thirdparty/openssl.git] / crypto / ec / ec_pmeth.c

/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
 * project 2006.
 */
/* ====================================================================
 * Copyright (c) 2006 The OpenSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer. 
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
 *
 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
 *    endorse or promote products derived from this software without
 *    prior written permission. For written permission, please contact
 *    licensing@OpenSSL.org.
 *
 * 5. Products derived from this software may not be called "OpenSSL"
 *    nor may "OpenSSL" appear in their names without prior written
 *    permission of the OpenSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the OpenSSL Project
 *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 * ====================================================================
 *
 * This product includes cryptographic software written by Eric Young
 * (eay@cryptsoft.com).  This product includes software written by Tim
 * Hudson (tjh@cryptsoft.com).
 *
 */

#include <stdio.h>
#include "cryptlib.h"
#include <openssl/asn1t.h>
#include <openssl/x509.h>
#include <openssl/ec.h>
#include <openssl/ecdsa.h>
#include <openssl/evp.h>
#include "evp_locl.h"

/* EC pkey context structure */

typedef struct
	{
	/* Key and paramgen group */
	EC_GROUP *gen_group;
	/* message digest */
	const EVP_MD *md;
	} EC_PKEY_CTX;

static int pkey_ec_init(EVP_PKEY_CTX *ctx)
	{
	EC_PKEY_CTX *dctx;
	dctx = OPENSSL_malloc(sizeof(EC_PKEY_CTX));
	if (!dctx)
		return 0;
	dctx->gen_group = NULL;
	dctx->md = NULL;

	ctx->data = dctx;

	return 1;
	}

static int pkey_ec_copy(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)
	{
	EC_PKEY_CTX *dctx, *sctx;
	if (!pkey_ec_init(dst))
		return 0;
       	sctx = src->data;
	dctx = dst->data;
	if (sctx->gen_group)
		{
		dctx->gen_group = EC_GROUP_dup(sctx->gen_group);
		if (!dctx->gen_group)
			return 0;
		}
	dctx->md = sctx->md;
	return 1;
	}

static void pkey_ec_cleanup(EVP_PKEY_CTX *ctx)
	{
	EC_PKEY_CTX *dctx = ctx->data;
	if (dctx)
		{
		if (dctx->gen_group)
			EC_GROUP_free(dctx->gen_group);
		OPENSSL_free(dctx);
		}
	}

static int pkey_ec_sign(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
					const unsigned char *tbs, size_t tbslen)
	{
	int ret, type;
	unsigned int sltmp;
	EC_PKEY_CTX *dctx = ctx->data;
	EC_KEY *ec = ctx->pkey->pkey.ec;

	if (!sig)
		{
		*siglen = ECDSA_size(ec);
		return 1;
		}
	else if(*siglen < (size_t)ECDSA_size(ec))
		{
		ECerr(EC_F_PKEY_EC_SIGN, EC_R_BUFFER_TOO_SMALL);
		return 0;
		}

	if (dctx->md)
		type = EVP_MD_type(dctx->md);
	else
		type = NID_sha1;


	ret = ECDSA_sign(type, tbs, tbslen, sig, &sltmp, ec);

	if (ret <= 0)
		return ret;
	*siglen = (size_t)sltmp;
	return 1;
	}

static int pkey_ec_verify(EVP_PKEY_CTX *ctx,
					const unsigned char *sig, size_t siglen,
					const unsigned char *tbs, size_t tbslen)
	{
	int ret, type;
	EC_PKEY_CTX *dctx = ctx->data;
	EC_KEY *ec = ctx->pkey->pkey.ec;

	if (dctx->md)
		type = EVP_MD_type(dctx->md);
	else
		type = NID_sha1;

	ret = ECDSA_verify(type, tbs, tbslen, sig, siglen, ec);

	return ret;
	}

static int pkey_ec_derive(EVP_PKEY_CTX *ctx, unsigned char *key, size_t *keylen)
	{
	int ret;
	size_t outlen;
	const EC_POINT *pubkey = NULL;
	if (!ctx->pkey || !ctx->peerkey)
		{
		ECerr(EC_F_PKEY_EC_DERIVE, EC_R_KEYS_NOT_SET);
		return 0;
		}

	if (!key)
		{
		const EC_GROUP *group;
		group = EC_KEY_get0_group(ctx->pkey->pkey.ec);
		*keylen = (EC_GROUP_get_degree(group) + 7)/8;
		return 1;
		}

	pubkey = EC_KEY_get0_public_key(ctx->peerkey->pkey.ec);

	/* NB: unlike PKCS#3 DH, if *outlen is less than maximum size this is
	 * not an error, the result is truncated.
	 */

	outlen = *keylen;
		
	ret = ECDH_compute_key(key, outlen, pubkey, ctx->pkey->pkey.ec, 0);
	if (ret < 0)
		return ret;
	*keylen = ret;
	return 1;
	}

static int pkey_ec_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
	{
	EC_PKEY_CTX *dctx = ctx->data;
	EC_GROUP *group;
	switch (type)
		{
		case EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID:
		group = EC_GROUP_new_by_curve_name(p1);
		if (group == NULL)
			{
			ECerr(EC_F_PKEY_EC_CTRL, EC_R_INVALID_CURVE);
			return 0;
			}
		if (dctx->gen_group)
			EC_GROUP_free(dctx->gen_group);
		dctx->gen_group = group;
		return 1;

		case EVP_PKEY_CTRL_EC_PARAM_ENC:
		if (!dctx->gen_group)
			{
			ECerr(EC_F_PKEY_EC_CTRL, EC_R_NO_PARAMETERS_SET);
			return 0;
			}
		EC_GROUP_set_asn1_flag(dctx->gen_group, p1);
		return 1;

		case EVP_PKEY_CTRL_MD:
		if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_ecdsa_with_SHA1 &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_sha256 &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_sha384 &&
		    EVP_MD_type((const EVP_MD *)p2) != NID_sha512)
			{
			ECerr(EC_F_PKEY_EC_CTRL, EC_R_INVALID_DIGEST_TYPE);
			return 0;
			}
		dctx->md = p2;
		return 1;

		case EVP_PKEY_CTRL_GET_MD:
		*(const EVP_MD **)p2 = dctx->md;
		return 1;

		case EVP_PKEY_CTRL_PEER_KEY:
		/* Default behaviour is OK */
		case EVP_PKEY_CTRL_DIGESTINIT:
		case EVP_PKEY_CTRL_PKCS7_SIGN:
		case EVP_PKEY_CTRL_CMS_SIGN:
		return 1;

		default:
		return -2;

		}
	}
			
static int pkey_ec_ctrl_str(EVP_PKEY_CTX *ctx,
			const char *type, const char *value)
	{
	if (!strcmp(type, "ec_paramgen_curve"))
		{
		int nid;
		nid = EC_curve_nist2nid(value);
		if (nid == NID_undef)
			nid = OBJ_sn2nid(value);
		if (nid == NID_undef)
			nid = OBJ_ln2nid(value);
		if (nid == NID_undef)
			{
			ECerr(EC_F_PKEY_EC_CTRL_STR, EC_R_INVALID_CURVE);
			return 0;
			}
		return EVP_PKEY_CTX_set_ec_paramgen_curve_nid(ctx, nid);
		}
	else if (!strcmp(type, "ec_param_enc"))
		{
		int param_enc;
		if (!strcmp(value, "explicit"))
			param_enc = 0;
		else if (!strcmp(value, "named_curve"))
			param_enc = OPENSSL_EC_NAMED_CURVE;
		else
			return -2;
		return EVP_PKEY_CTX_set_ec_param_enc(ctx, param_enc);
		}
			
	return -2;
	}

static int pkey_ec_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
	{
	EC_KEY *ec = NULL;
	EC_PKEY_CTX *dctx = ctx->data;
	int ret = 0;
	if (dctx->gen_group == NULL)
		{
		ECerr(EC_F_PKEY_EC_PARAMGEN, EC_R_NO_PARAMETERS_SET);
		return 0;
		}
	ec = EC_KEY_new();
	if (!ec)
		return 0;
	ret = EC_KEY_set_group(ec, dctx->gen_group);
	if (ret)
		EVP_PKEY_assign_EC_KEY(pkey, ec);
	else
		EC_KEY_free(ec);
	return ret;
	}

static int pkey_ec_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)
	{
	EC_KEY *ec = NULL;
	EC_PKEY_CTX *dctx = ctx->data;
	if (ctx->pkey == NULL && dctx->gen_group == NULL)
		{
		ECerr(EC_F_PKEY_EC_KEYGEN, EC_R_NO_PARAMETERS_SET);
		return 0;
		}
	ec = EC_KEY_new();
	if (!ec)
		return 0;
	EVP_PKEY_assign_EC_KEY(pkey, ec);
	if (ctx->pkey)
		{
		/* Note: if error return, pkey is freed by parent routine */
		if (!EVP_PKEY_copy_parameters(pkey, ctx->pkey))
			return 0;
		}
	else
		{
		if (!EC_KEY_set_group(ec, dctx->gen_group))
			return 0;
		}
	return EC_KEY_generate_key(pkey->pkey.ec);
	}

const EVP_PKEY_METHOD ec_pkey_meth = 
	{
	EVP_PKEY_EC,
	0,
	pkey_ec_init,
	pkey_ec_copy,
	pkey_ec_cleanup,

	0,
	pkey_ec_paramgen,

	0,
	pkey_ec_keygen,

	0,
	pkey_ec_sign,

	0,
	pkey_ec_verify,

	0,0,

	0,0,0,0,

	0,0,

	0,0,

	0,
	pkey_ec_derive,

	pkey_ec_ctrl,
	pkey_ec_ctrl_str

	};
Commit	Line	Data
2e597528	1	/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
9ca7047d DSH	2	* project 2006.
	3	*/
	4	/* ====================================================================
	5	* Copyright (c) 2006 The OpenSSL Project. All rights reserved.
	6	*
	7	* Redistribution and use in source and binary forms, with or without
	8	* modification, are permitted provided that the following conditions
	9	* are met:
	10	*
	11	* 1. Redistributions of source code must retain the above copyright
	12	* notice, this list of conditions and the following disclaimer.
	13	*
	14	* 2. Redistributions in binary form must reproduce the above copyright
	15	* notice, this list of conditions and the following disclaimer in
	16	* the documentation and/or other materials provided with the
	17	* distribution.
	18	*
	19	* 3. All advertising materials mentioning features or use of this
	20	* software must display the following acknowledgment:
	21	* "This product includes software developed by the OpenSSL Project
	22	* for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
	23	*
	24	* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
	25	* endorse or promote products derived from this software without
	26	* prior written permission. For written permission, please contact
	27	* licensing@OpenSSL.org.
	28	*
	29	* 5. Products derived from this software may not be called "OpenSSL"
	30	* nor may "OpenSSL" appear in their names without prior written
	31	* permission of the OpenSSL Project.
	32	*
	33	* 6. Redistributions of any form whatsoever must retain the following
	34	* acknowledgment:
	35	* "This product includes software developed by the OpenSSL Project
	36	* for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
	37	*
	38	* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
	39	* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	40	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
	41	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
	42	* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
	43	* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
	44	* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
	45	* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	46	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
	47	* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	48	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
	49	* OF THE POSSIBILITY OF SUCH DAMAGE.
	50	* ====================================================================
	51	*
	52	* This product includes cryptographic software written by Eric Young
	53	* (eay@cryptsoft.com). This product includes software written by Tim
	54	* Hudson (tjh@cryptsoft.com).
	55	*
	56	*/
	57
	58	#include <stdio.h>
	59	#include "cryptlib.h"
	60	#include <openssl/asn1t.h>
	61	#include <openssl/x509.h>
	62	#include <openssl/ec.h>
	63	#include <openssl/ecdsa.h>
	64	#include <openssl/evp.h>
	65	#include "evp_locl.h"
66
67	/* EC pkey context structure */
68
69	typedef struct
70	{
71	/* Key and paramgen group */
72	EC_GROUP *gen_group;
73	/* message digest */
74	const EVP_MD *md;
75	} EC_PKEY_CTX;
76
77	static int pkey_ec_init(EVP_PKEY_CTX *ctx)
78	{
79	EC_PKEY_CTX *dctx;
80	dctx = OPENSSL_malloc(sizeof(EC_PKEY_CTX));
81	if (!dctx)
82	return 0;
83	dctx->gen_group = NULL;
84	dctx->md = NULL;
85
86	ctx->data = dctx;
87
88	return 1;
89	}
90
8bdcef40 DSH	91	static int pkey_ec_copy(EVP_PKEY_CTX dst, EVP_PKEY_CTX src)
	92	{
	93	EC_PKEY_CTX dctx, sctx;
	94	if (!pkey_ec_init(dst))
	95	return 0;
	96	sctx = src->data;
	97	dctx = dst->data;
	98	if (sctx->gen_group)
	99	{
	100	dctx->gen_group = EC_GROUP_dup(sctx->gen_group);
	101	if (!dctx->gen_group)
	102	return 0;
	103	}
	104	dctx->md = sctx->md;
	105	return 1;
	106	}
	107
9ca7047d DSH	108	static void pkey_ec_cleanup(EVP_PKEY_CTX *ctx)
	109	{
	110	EC_PKEY_CTX *dctx = ctx->data;
	111	if (dctx)
	112	{
	113	if (dctx->gen_group)
	114	EC_GROUP_free(dctx->gen_group);
	115	OPENSSL_free(dctx);
	116	}
	117	}
	118
eaff5a14 DSH	119	static int pkey_ec_sign(EVP_PKEY_CTX ctx, unsigned char sig, size_t *siglen,
eaff5a14 DSH	120	const unsigned char *tbs, size_t tbslen)
9ca7047d DSH	121	{
9ca7047d DSH	122	int ret, type;
786aa98d	123	unsigned int sltmp;
9ca7047d DSH	124	EC_PKEY_CTX *dctx = ctx->data;
	125	EC_KEY *ec = ctx->pkey->pkey.ec;
	126
	127	if (!sig)
	128	{
	129	*siglen = ECDSA_size(ec);
	130	return 1;
	131	}
eaff5a14	132	else if(*siglen < (size_t)ECDSA_size(ec))
9ca7047d DSH	133	{
	134	ECerr(EC_F_PKEY_EC_SIGN, EC_R_BUFFER_TOO_SMALL);
	135	return 0;
	136	}
	137
	138	if (dctx->md)
	139	type = EVP_MD_type(dctx->md);
	140	else
	141	type = NID_sha1;
	142
	143
	144	ret = ECDSA_sign(type, tbs, tbslen, sig, &sltmp, ec);
	145
fed8dbf4	146	if (ret <= 0)
9ca7047d	147	return ret;
786aa98d	148	*siglen = (size_t)sltmp;
9ca7047d DSH	149	return 1;
	150	}
	151
	152	static int pkey_ec_verify(EVP_PKEY_CTX *ctx,
eaff5a14 DSH	153	const unsigned char *sig, size_t siglen,
eaff5a14 DSH	154	const unsigned char *tbs, size_t tbslen)
9ca7047d DSH	155	{
	156	int ret, type;
	157	EC_PKEY_CTX *dctx = ctx->data;
	158	EC_KEY *ec = ctx->pkey->pkey.ec;
	159
	160	if (dctx->md)
	161	type = EVP_MD_type(dctx->md);
	162	else
	163	type = NID_sha1;
	164
	165	ret = ECDSA_verify(type, tbs, tbslen, sig, siglen, ec);
	166
	167	return ret;
	168	}
	169
eaff5a14	170	static int pkey_ec_derive(EVP_PKEY_CTX ctx, unsigned char key, size_t *keylen)
9ca7047d DSH	171	{
	172	int ret;
	173	size_t outlen;
	174	const EC_POINT *pubkey = NULL;
	175	if (!ctx->pkey \|\| !ctx->peerkey)
	176	{
	177	ECerr(EC_F_PKEY_EC_DERIVE, EC_R_KEYS_NOT_SET);
	178	return 0;
	179	}
	180
	181	if (!key)
	182	{
	183	const EC_GROUP *group;
	184	group = EC_KEY_get0_group(ctx->pkey->pkey.ec);
	185	*keylen = (EC_GROUP_get_degree(group) + 7)/8;
	186	return 1;
	187	}
	188
	189	pubkey = EC_KEY_get0_public_key(ctx->peerkey->pkey.ec);
	190
713f4911	191	/* NB: unlike PKCS#3 DH, if *outlen is less than maximum size this is
9ca7047d DSH	192	* not an error, the result is truncated.
	193	*/
	194
	195	outlen = *keylen;
	196
	197	ret = ECDH_compute_key(key, outlen, pubkey, ctx->pkey->pkey.ec, 0);
	198	if (ret < 0)
	199	return ret;
	200	*keylen = ret;
	201	return 1;
	202	}
	203
	204	static int pkey_ec_ctrl(EVP_PKEY_CTX ctx, int type, int p1, void p2)
	205	{
	206	EC_PKEY_CTX *dctx = ctx->data;
	207	EC_GROUP *group;
	208	switch (type)
	209	{
	210	case EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID:
	211	group = EC_GROUP_new_by_curve_name(p1);
	212	if (group == NULL)
	213	{
	214	ECerr(EC_F_PKEY_EC_CTRL, EC_R_INVALID_CURVE);
	215	return 0;
	216	}
	217	if (dctx->gen_group)
	218	EC_GROUP_free(dctx->gen_group);
	219	dctx->gen_group = group;
	220	return 1;
	221
24edfa9d DSH	222	case EVP_PKEY_CTRL_EC_PARAM_ENC:
	223	if (!dctx->gen_group)
	224	{
	225	ECerr(EC_F_PKEY_EC_CTRL, EC_R_NO_PARAMETERS_SET);
	226	return 0;
	227	}
	228	EC_GROUP_set_asn1_flag(dctx->gen_group, p1);
	229	return 1;
	230
9ca7047d	231	case EVP_PKEY_CTRL_MD:
06e2dd03	232	if (EVP_MD_type((const EVP_MD *)p2) != NID_sha1 &&
3699ec60	233	EVP_MD_type((const EVP_MD *)p2) != NID_ecdsa_with_SHA1 &&
06e2dd03 NL	234	EVP_MD_type((const EVP_MD *)p2) != NID_sha224 &&
	235	EVP_MD_type((const EVP_MD *)p2) != NID_sha256 &&
	236	EVP_MD_type((const EVP_MD *)p2) != NID_sha384 &&
	237	EVP_MD_type((const EVP_MD *)p2) != NID_sha512)
9ca7047d DSH	238	{
	239	ECerr(EC_F_PKEY_EC_CTRL, EC_R_INVALID_DIGEST_TYPE);
	240	return 0;
	241	}
	242	dctx->md = p2;
	243	return 1;
	244
81063953 DSH	245	case EVP_PKEY_CTRL_GET_MD:
	246	(const EVP_MD *)p2 = dctx->md;
	247	return 1;
	248
9ca7047d DSH	249	case EVP_PKEY_CTRL_PEER_KEY:
9ca7047d DSH	250	/* Default behaviour is OK */
156ee882	251	case EVP_PKEY_CTRL_DIGESTINIT:
b7683e3a	252	case EVP_PKEY_CTRL_PKCS7_SIGN:
8931b30d	253	case EVP_PKEY_CTRL_CMS_SIGN:
9ca7047d DSH	254	return 1;
	255
	256	default:
	257	return -2;
	258
	259	}
	260	}
	261
	262	static int pkey_ec_ctrl_str(EVP_PKEY_CTX *ctx,
	263	const char type, const char value)
	264	{
	265	if (!strcmp(type, "ec_paramgen_curve"))
	266	{
	267	int nid;
64095ce9 DSH	268	nid = EC_curve_nist2nid(value);
	269	if (nid == NID_undef)
	270	nid = OBJ_sn2nid(value);
9ca7047d DSH	271	if (nid == NID_undef)
	272	nid = OBJ_ln2nid(value);
	273	if (nid == NID_undef)
	274	{
	275	ECerr(EC_F_PKEY_EC_CTRL_STR, EC_R_INVALID_CURVE);
	276	return 0;
	277	}
	278	return EVP_PKEY_CTX_set_ec_paramgen_curve_nid(ctx, nid);
	279	}
24edfa9d DSH	280	else if (!strcmp(type, "ec_param_enc"))
	281	{
	282	int param_enc;
	283	if (!strcmp(value, "explicit"))
	284	param_enc = 0;
	285	else if (!strcmp(value, "named_curve"))
	286	param_enc = OPENSSL_EC_NAMED_CURVE;
	287	else
	288	return -2;
	289	return EVP_PKEY_CTX_set_ec_param_enc(ctx, param_enc);
	290	}
	291
9ca7047d DSH	292	return -2;
	293	}
	294
	295	static int pkey_ec_paramgen(EVP_PKEY_CTX ctx, EVP_PKEY pkey)
	296	{
	297	EC_KEY *ec = NULL;
	298	EC_PKEY_CTX *dctx = ctx->data;
	299	int ret = 0;
	300	if (dctx->gen_group == NULL)
	301	{
	302	ECerr(EC_F_PKEY_EC_PARAMGEN, EC_R_NO_PARAMETERS_SET);
	303	return 0;
	304	}
	305	ec = EC_KEY_new();
	306	if (!ec)
	307	return 0;
	308	ret = EC_KEY_set_group(ec, dctx->gen_group);
	309	if (ret)
	310	EVP_PKEY_assign_EC_KEY(pkey, ec);
	311	else
	312	EC_KEY_free(ec);
	313	return ret;
	314	}
	315
	316	static int pkey_ec_keygen(EVP_PKEY_CTX ctx, EVP_PKEY pkey)
	317	{
	318	EC_KEY *ec = NULL;
24edfa9d DSH	319	EC_PKEY_CTX *dctx = ctx->data;
24edfa9d DSH	320	if (ctx->pkey == NULL && dctx->gen_group == NULL)
9ca7047d DSH	321	{
	322	ECerr(EC_F_PKEY_EC_KEYGEN, EC_R_NO_PARAMETERS_SET);
	323	return 0;
	324	}
	325	ec = EC_KEY_new();
	326	if (!ec)
	327	return 0;
	328	EVP_PKEY_assign_EC_KEY(pkey, ec);
24edfa9d DSH	329	if (ctx->pkey)
	330	{
	331	/* Note: if error return, pkey is freed by parent routine */
	332	if (!EVP_PKEY_copy_parameters(pkey, ctx->pkey))
	333	return 0;
	334	}
	335	else
	336	{
	337	if (!EC_KEY_set_group(ec, dctx->gen_group))
	338	return 0;
	339	}
9ca7047d DSH	340	return EC_KEY_generate_key(pkey->pkey.ec);
	341	}
	342
	343	const EVP_PKEY_METHOD ec_pkey_meth =
	344	{
	345	EVP_PKEY_EC,
	346	0,
	347	pkey_ec_init,
8bdcef40	348	pkey_ec_copy,
9ca7047d DSH	349	pkey_ec_cleanup,
	350
	351	0,
	352	pkey_ec_paramgen,
	353
	354	0,
	355	pkey_ec_keygen,
	356
	357	0,
	358	pkey_ec_sign,
	359
	360	0,
	361	pkey_ec_verify,
	362
	363	0,0,
	364
	365	0,0,0,0,
	366
	367	0,0,
	368
	369	0,0,
	370
	371	0,
	372	pkey_ec_derive,
	373
	374	pkey_ec_ctrl,
	375	pkey_ec_ctrl_str
	376
	377	};