]>
Commit | Line | Data |
---|---|---|
0f113f3e | 1 | /* |
62867571 | 2 | * Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved. |
f5cda4cb | 3 | * |
4a8b0c55 | 4 | * Licensed under the Apache License 2.0 (the "License"). You may not use |
62867571 RS |
5 | * this file except in compliance with the License. You can obtain a copy |
6 | * in the file LICENSE in the source distribution or at | |
7 | * https://www.openssl.org/source/license.html | |
f5cda4cb DSH |
8 | */ |
9 | ||
10 | #include <stdio.h> | |
11 | #include <stdlib.h> | |
b39fc560 | 12 | #include "internal/cryptlib.h" |
c20276e4 | 13 | #include <openssl/objects.h> |
f5cda4cb | 14 | #include <openssl/evp.h> |
25f2138b DMSP |
15 | #include "crypto/bn.h" |
16 | #include "crypto/asn1.h" | |
17 | #include "crypto/evp.h" | |
46e2dd05 RL |
18 | #include "evp_local.h" |
19 | ||
20 | static int fromdata_init(EVP_PKEY_CTX *ctx, int operation) | |
21 | { | |
22 | if (ctx == NULL || ctx->algorithm == NULL) | |
23 | goto not_supported; | |
24 | ||
25 | evp_pkey_ctx_free_old_ops(ctx); | |
26 | ctx->operation = operation; | |
27 | if (ctx->keymgmt == NULL) | |
28 | ctx->keymgmt = EVP_KEYMGMT_fetch(NULL, ctx->algorithm, ctx->propquery); | |
29 | if (ctx->keymgmt == NULL) | |
30 | goto not_supported; | |
31 | ||
32 | return 1; | |
33 | ||
34 | not_supported: | |
35 | ctx->operation = EVP_PKEY_OP_UNDEFINED; | |
36 | ERR_raise(ERR_LIB_EVP, EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE); | |
37 | return -2; | |
38 | } | |
39 | ||
40 | int EVP_PKEY_param_fromdata_init(EVP_PKEY_CTX *ctx) | |
41 | { | |
42 | return fromdata_init(ctx, EVP_PKEY_OP_PARAMFROMDATA); | |
43 | } | |
44 | ||
45 | int EVP_PKEY_key_fromdata_init(EVP_PKEY_CTX *ctx) | |
46 | { | |
47 | return fromdata_init(ctx, EVP_PKEY_OP_KEYFROMDATA); | |
48 | } | |
49 | ||
50 | int EVP_PKEY_fromdata(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey, OSSL_PARAM params[]) | |
51 | { | |
52 | void *provdata = NULL; | |
53 | ||
54 | if (ctx == NULL || (ctx->operation & EVP_PKEY_OP_TYPE_FROMDATA) == 0) { | |
55 | ERR_raise(ERR_LIB_EVP, EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE); | |
56 | return -2; | |
57 | } | |
58 | ||
59 | if (ppkey == NULL) | |
60 | return -1; | |
61 | ||
62 | if (*ppkey == NULL) | |
63 | *ppkey = EVP_PKEY_new(); | |
64 | ||
65 | if (*ppkey == NULL) { | |
66 | ERR_raise(ERR_LIB_EVP, ERR_R_MALLOC_FAILURE); | |
67 | return -1; | |
68 | } | |
69 | ||
70 | provdata = | |
71 | evp_keymgmt_fromdata(*ppkey, ctx->keymgmt, params, | |
72 | ctx->operation == EVP_PKEY_OP_PARAMFROMDATA); | |
73 | ||
74 | if (provdata == NULL) | |
75 | return 0; | |
76 | /* provdata is cached in *ppkey, so we need not bother with it further */ | |
77 | return 1; | |
78 | } | |
79 | ||
80 | /* | |
79c44b4e | 81 | * TODO(3.0) Re-evaluate the names, it's possible that we find these to be |
46e2dd05 RL |
82 | * better: |
83 | * | |
84 | * EVP_PKEY_param_settable() | |
85 | * EVP_PKEY_param_gettable() | |
86 | */ | |
87 | const OSSL_PARAM *EVP_PKEY_param_fromdata_settable(EVP_PKEY_CTX *ctx) | |
88 | { | |
89 | /* We call fromdata_init to get ctx->keymgmt populated */ | |
90 | if (fromdata_init(ctx, EVP_PKEY_OP_UNDEFINED)) | |
91 | return evp_keymgmt_importdomparam_types(ctx->keymgmt); | |
92 | return NULL; | |
93 | } | |
94 | ||
95 | const OSSL_PARAM *EVP_PKEY_key_fromdata_settable(EVP_PKEY_CTX *ctx) | |
96 | { | |
97 | /* We call fromdata_init to get ctx->keymgmt populated */ | |
98 | if (fromdata_init(ctx, EVP_PKEY_OP_UNDEFINED)) | |
99 | return evp_keymgmt_importdomparam_types(ctx->keymgmt); | |
100 | return NULL; | |
101 | } | |
f5cda4cb DSH |
102 | |
103 | int EVP_PKEY_paramgen_init(EVP_PKEY_CTX *ctx) | |
0f113f3e MC |
104 | { |
105 | int ret; | |
106 | if (!ctx || !ctx->pmeth || !ctx->pmeth->paramgen) { | |
107 | EVPerr(EVP_F_EVP_PKEY_PARAMGEN_INIT, | |
108 | EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE); | |
109 | return -2; | |
110 | } | |
111 | ctx->operation = EVP_PKEY_OP_PARAMGEN; | |
112 | if (!ctx->pmeth->paramgen_init) | |
113 | return 1; | |
114 | ret = ctx->pmeth->paramgen_init(ctx); | |
115 | if (ret <= 0) | |
116 | ctx->operation = EVP_PKEY_OP_UNDEFINED; | |
117 | return ret; | |
118 | } | |
f5cda4cb DSH |
119 | |
120 | int EVP_PKEY_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey) | |
0f113f3e MC |
121 | { |
122 | int ret; | |
123 | if (!ctx || !ctx->pmeth || !ctx->pmeth->paramgen) { | |
124 | EVPerr(EVP_F_EVP_PKEY_PARAMGEN, | |
125 | EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE); | |
126 | return -2; | |
127 | } | |
128 | ||
129 | if (ctx->operation != EVP_PKEY_OP_PARAMGEN) { | |
130 | EVPerr(EVP_F_EVP_PKEY_PARAMGEN, EVP_R_OPERATON_NOT_INITIALIZED); | |
131 | return -1; | |
132 | } | |
133 | ||
e34c66c6 | 134 | if (ppkey == NULL) |
0f113f3e MC |
135 | return -1; |
136 | ||
e34c66c6 | 137 | if (*ppkey == NULL) |
0f113f3e MC |
138 | *ppkey = EVP_PKEY_new(); |
139 | ||
e34c66c6 EK |
140 | if (*ppkey == NULL) { |
141 | EVPerr(EVP_F_EVP_PKEY_PARAMGEN, ERR_R_MALLOC_FAILURE); | |
142 | return -1; | |
143 | } | |
144 | ||
0f113f3e MC |
145 | ret = ctx->pmeth->paramgen(ctx, *ppkey); |
146 | if (ret <= 0) { | |
147 | EVP_PKEY_free(*ppkey); | |
148 | *ppkey = NULL; | |
149 | } | |
150 | return ret; | |
151 | } | |
f5cda4cb DSH |
152 | |
153 | int EVP_PKEY_keygen_init(EVP_PKEY_CTX *ctx) | |
0f113f3e MC |
154 | { |
155 | int ret; | |
156 | if (!ctx || !ctx->pmeth || !ctx->pmeth->keygen) { | |
157 | EVPerr(EVP_F_EVP_PKEY_KEYGEN_INIT, | |
158 | EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE); | |
159 | return -2; | |
160 | } | |
161 | ctx->operation = EVP_PKEY_OP_KEYGEN; | |
162 | if (!ctx->pmeth->keygen_init) | |
163 | return 1; | |
164 | ret = ctx->pmeth->keygen_init(ctx); | |
165 | if (ret <= 0) | |
166 | ctx->operation = EVP_PKEY_OP_UNDEFINED; | |
167 | return ret; | |
168 | } | |
f5cda4cb DSH |
169 | |
170 | int EVP_PKEY_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey) | |
0f113f3e MC |
171 | { |
172 | int ret; | |
173 | ||
174 | if (!ctx || !ctx->pmeth || !ctx->pmeth->keygen) { | |
175 | EVPerr(EVP_F_EVP_PKEY_KEYGEN, | |
176 | EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE); | |
177 | return -2; | |
178 | } | |
179 | if (ctx->operation != EVP_PKEY_OP_KEYGEN) { | |
180 | EVPerr(EVP_F_EVP_PKEY_KEYGEN, EVP_R_OPERATON_NOT_INITIALIZED); | |
181 | return -1; | |
182 | } | |
183 | ||
90945fa3 | 184 | if (ppkey == NULL) |
0f113f3e MC |
185 | return -1; |
186 | ||
90945fa3 | 187 | if (*ppkey == NULL) |
0f113f3e | 188 | *ppkey = EVP_PKEY_new(); |
90945fa3 MC |
189 | if (*ppkey == NULL) |
190 | return -1; | |
0f113f3e MC |
191 | |
192 | ret = ctx->pmeth->keygen(ctx, *ppkey); | |
193 | if (ret <= 0) { | |
194 | EVP_PKEY_free(*ppkey); | |
195 | *ppkey = NULL; | |
196 | } | |
197 | return ret; | |
198 | } | |
f5cda4cb DSH |
199 | |
200 | void EVP_PKEY_CTX_set_cb(EVP_PKEY_CTX *ctx, EVP_PKEY_gen_cb *cb) | |
0f113f3e MC |
201 | { |
202 | ctx->pkey_gencb = cb; | |
203 | } | |
f5cda4cb | 204 | |
b28dea4e | 205 | EVP_PKEY_gen_cb *EVP_PKEY_CTX_get_cb(EVP_PKEY_CTX *ctx) |
0f113f3e MC |
206 | { |
207 | return ctx->pkey_gencb; | |
208 | } | |
b28dea4e | 209 | |
0f113f3e MC |
210 | /* |
211 | * "translation callback" to call EVP_PKEY_CTX callbacks using BN_GENCB style | |
212 | * callbacks. | |
f5cda4cb DSH |
213 | */ |
214 | ||
215 | static int trans_cb(int a, int b, BN_GENCB *gcb) | |
0f113f3e MC |
216 | { |
217 | EVP_PKEY_CTX *ctx = BN_GENCB_get_arg(gcb); | |
218 | ctx->keygen_info[0] = a; | |
219 | ctx->keygen_info[1] = b; | |
220 | return ctx->pkey_gencb(ctx); | |
221 | } | |
f5cda4cb DSH |
222 | |
223 | void evp_pkey_set_cb_translate(BN_GENCB *cb, EVP_PKEY_CTX *ctx) | |
0f113f3e MC |
224 | { |
225 | BN_GENCB_set(cb, trans_cb, ctx); | |
226 | } | |
f5cda4cb DSH |
227 | |
228 | int EVP_PKEY_CTX_get_keygen_info(EVP_PKEY_CTX *ctx, int idx) | |
0f113f3e MC |
229 | { |
230 | if (idx == -1) | |
231 | return ctx->keygen_info_count; | |
232 | if (idx < 0 || idx > ctx->keygen_info_count) | |
233 | return 0; | |
234 | return ctx->keygen_info[idx]; | |
235 | } | |
2022cfe0 DSH |
236 | |
237 | EVP_PKEY *EVP_PKEY_new_mac_key(int type, ENGINE *e, | |
0f113f3e MC |
238 | const unsigned char *key, int keylen) |
239 | { | |
240 | EVP_PKEY_CTX *mac_ctx = NULL; | |
241 | EVP_PKEY *mac_key = NULL; | |
242 | mac_ctx = EVP_PKEY_CTX_new_id(type, e); | |
243 | if (!mac_ctx) | |
244 | return NULL; | |
245 | if (EVP_PKEY_keygen_init(mac_ctx) <= 0) | |
246 | goto merr; | |
eff1a4d2 | 247 | if (EVP_PKEY_CTX_set_mac_key(mac_ctx, key, keylen) <= 0) |
0f113f3e MC |
248 | goto merr; |
249 | if (EVP_PKEY_keygen(mac_ctx, &mac_key) <= 0) | |
250 | goto merr; | |
251 | merr: | |
c5ba2d99 | 252 | EVP_PKEY_CTX_free(mac_ctx); |
0f113f3e MC |
253 | return mac_key; |
254 | } | |
2aee35d3 PY |
255 | |
256 | int EVP_PKEY_check(EVP_PKEY_CTX *ctx) | |
257 | { | |
258 | EVP_PKEY *pkey = ctx->pkey; | |
259 | ||
260 | if (pkey == NULL) { | |
261 | EVPerr(EVP_F_EVP_PKEY_CHECK, EVP_R_NO_KEY_SET); | |
262 | return 0; | |
263 | } | |
264 | ||
265 | /* call customized check function first */ | |
266 | if (ctx->pmeth->check != NULL) | |
267 | return ctx->pmeth->check(pkey); | |
268 | ||
269 | /* use default check function in ameth */ | |
270 | if (pkey->ameth == NULL || pkey->ameth->pkey_check == NULL) { | |
271 | EVPerr(EVP_F_EVP_PKEY_CHECK, | |
272 | EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE); | |
273 | return -2; | |
274 | } | |
275 | ||
276 | return pkey->ameth->pkey_check(pkey); | |
277 | } | |
b0004708 PY |
278 | |
279 | int EVP_PKEY_public_check(EVP_PKEY_CTX *ctx) | |
280 | { | |
281 | EVP_PKEY *pkey = ctx->pkey; | |
282 | ||
283 | if (pkey == NULL) { | |
284 | EVPerr(EVP_F_EVP_PKEY_PUBLIC_CHECK, EVP_R_NO_KEY_SET); | |
285 | return 0; | |
286 | } | |
287 | ||
288 | /* call customized public key check function first */ | |
289 | if (ctx->pmeth->public_check != NULL) | |
290 | return ctx->pmeth->public_check(pkey); | |
291 | ||
292 | /* use default public key check function in ameth */ | |
293 | if (pkey->ameth == NULL || pkey->ameth->pkey_public_check == NULL) { | |
294 | EVPerr(EVP_F_EVP_PKEY_PUBLIC_CHECK, | |
295 | EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE); | |
296 | return -2; | |
297 | } | |
298 | ||
299 | return pkey->ameth->pkey_public_check(pkey); | |
300 | } | |
301 | ||
302 | int EVP_PKEY_param_check(EVP_PKEY_CTX *ctx) | |
303 | { | |
304 | EVP_PKEY *pkey = ctx->pkey; | |
305 | ||
306 | if (pkey == NULL) { | |
307 | EVPerr(EVP_F_EVP_PKEY_PARAM_CHECK, EVP_R_NO_KEY_SET); | |
308 | return 0; | |
309 | } | |
310 | ||
311 | /* call customized param check function first */ | |
312 | if (ctx->pmeth->param_check != NULL) | |
313 | return ctx->pmeth->param_check(pkey); | |
314 | ||
315 | /* use default param check function in ameth */ | |
316 | if (pkey->ameth == NULL || pkey->ameth->pkey_param_check == NULL) { | |
317 | EVPerr(EVP_F_EVP_PKEY_PARAM_CHECK, | |
318 | EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE); | |
319 | return -2; | |
320 | } | |
321 | ||
322 | return pkey->ameth->pkey_param_check(pkey); | |
323 | } |