[thirdparty/openssl.git] / crypto / rsa / rsa_lib.c

/* crypto/rsa/rsa_lib.c */
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
 * All rights reserved.
 *
 * This package is an SSL implementation written
 * by Eric Young (eay@cryptsoft.com).
 * The implementation was written so as to conform with Netscapes SSL.
 * 
 * This library is free for commercial and non-commercial use as long as
 * the following conditions are aheared to.  The following conditions
 * apply to all code found in this distribution, be it the RC4, RSA,
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 * included with this distribution is covered by the same copyright terms
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
 * 
 * Copyright remains Eric Young's, and as such any Copyright notices in
 * the code are not to be removed.
 * If this package is used in a product, Eric Young should be given attribution
 * as the author of the parts of the library used.
 * This can be in the form of a textual message at program startup or
 * in documentation (online or textual) provided with the package.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *    "This product includes cryptographic software written by
 *     Eric Young (eay@cryptsoft.com)"
 *    The word 'cryptographic' can be left out if the rouines from the library
 *    being used are not cryptographic related :-).
 * 4. If you include any Windows specific code (or a derivative thereof) from 
 *    the apps directory (application code) you must include an acknowledgement:
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
 * 
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 * 
 * The licence and distribution terms for any publically available version or
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
 * copied and put under another distribution licence
 * [including the GNU Public Licence.]
 */

#include <stdio.h>
#include <openssl/crypto.h>
#include "cryptlib.h"
#include <openssl/lhash.h>
#include <openssl/bn.h>
#include <openssl/rsa.h>
#include <openssl/engine.h>

const char *RSA_version="RSA" OPENSSL_VERSION_PTEXT;

static const RSA_METHOD *default_RSA_meth=NULL;
static int rsa_meth_num=0;
static STACK_OF(CRYPTO_EX_DATA_FUNCS) *rsa_meth=NULL;

RSA *RSA_new(void)
	{
	return(RSA_new_method(NULL));
	}

void RSA_set_default_openssl_method(const RSA_METHOD *meth)
	{
	ENGINE *e;
	/* We'll need to notify the "openssl" ENGINE of this
	 * change too. We won't bother locking things down at
	 * our end as there was never any locking in these
	 * functions! */
	if(default_RSA_meth != meth)
		{
		default_RSA_meth = meth;
		e = ENGINE_by_id("openssl");
		if(e)
			{
			ENGINE_set_RSA(e, meth);
			ENGINE_free(e);
			}
		}
	}

const RSA_METHOD *RSA_get_default_openssl_method(void)
{
	if (default_RSA_meth == NULL)
		{
#ifdef RSA_NULL
		default_RSA_meth=RSA_null_method();
#else
#if 0 /* was: #ifdef RSAref */
		default_RSA_meth=RSA_PKCS1_RSAref();
#else
		default_RSA_meth=RSA_PKCS1_SSLeay();
#endif
#endif
		}

	return default_RSA_meth;
}

const RSA_METHOD *RSA_get_method(const RSA *rsa)
{
	return ENGINE_get_RSA(rsa->engine);
}

#if 0
RSA_METHOD *RSA_set_method(RSA *rsa, RSA_METHOD *meth)
{
	RSA_METHOD *mtmp;
	mtmp = rsa->meth;
	if (mtmp->finish) mtmp->finish(rsa);
	rsa->meth = meth;
	if (meth->init) meth->init(rsa);
	return mtmp;
}
#else
int RSA_set_method(RSA *rsa, ENGINE *engine)
{
	ENGINE *mtmp;
	const RSA_METHOD *meth;
	mtmp = rsa->engine;
	meth = ENGINE_get_RSA(mtmp);
	if (!ENGINE_init(engine))
		return 0;
	if (meth->finish) meth->finish(rsa);
	rsa->engine = engine;
	meth = ENGINE_get_RSA(engine);
	if (meth->init) meth->init(rsa);
	/* SHOULD ERROR CHECK THIS!!! */
	ENGINE_finish(mtmp);
	return 1;
}
#endif

#if 0
RSA *RSA_new_method(RSA_METHOD *meth)
#else
RSA *RSA_new_method(ENGINE *engine)
#endif
	{
	const RSA_METHOD *meth;
	RSA *ret;

	ret=(RSA *)OPENSSL_malloc(sizeof(RSA));
	if (ret == NULL)
		{
		RSAerr(RSA_F_RSA_NEW_METHOD,ERR_R_MALLOC_FAILURE);
		return(NULL);
		}

	if (engine)
		{
		if(ENGINE_init(engine))
			ret->engine = engine;
		else 
			ret->engine = NULL;
		}
	else
		ret->engine=ENGINE_get_default_RSA();

	if(ret->engine == NULL)
		{
		RSAerr(RSA_F_RSA_NEW_METHOD,ERR_LIB_ENGINE);
		OPENSSL_free(ret);
		return NULL;
		}

	meth = ENGINE_get_RSA(ret->engine);

	ret->pad=0;
	ret->version=0;
	ret->n=NULL;
	ret->e=NULL;
	ret->d=NULL;
	ret->p=NULL;
	ret->q=NULL;
	ret->dmp1=NULL;
	ret->dmq1=NULL;
	ret->iqmp=NULL;
	ret->references=1;
	ret->_method_mod_n=NULL;
	ret->_method_mod_p=NULL;
	ret->_method_mod_q=NULL;
	ret->blinding=NULL;
	ret->bignum_data=NULL;
	ret->flags=meth->flags;
	CRYPTO_new_ex_data(rsa_meth,ret,&ret->ex_data);
	if ((meth->init != NULL) && !meth->init(ret))
		{
		CRYPTO_free_ex_data(rsa_meth, ret, &ret->ex_data);
		OPENSSL_free(ret);
		ret=NULL;
		}
	return(ret);
	}

void RSA_free(RSA *r)
	{
	const RSA_METHOD *meth;
	int i;

	if (r == NULL) return;

	i=CRYPTO_add(&r->references,-1,CRYPTO_LOCK_RSA);
#ifdef REF_PRINT
	REF_PRINT("RSA",r);
#endif
	if (i > 0) return;
#ifdef REF_CHECK
	if (i < 0)
		{
		fprintf(stderr,"RSA_free, bad reference count\n");
		abort();
		}
#endif

	meth = ENGINE_get_RSA(r->engine);
	if (meth->finish != NULL)
		meth->finish(r);
	ENGINE_finish(r->engine);

	CRYPTO_free_ex_data(rsa_meth,r,&r->ex_data);

	if (r->n != NULL) BN_clear_free(r->n);
	if (r->e != NULL) BN_clear_free(r->e);
	if (r->d != NULL) BN_clear_free(r->d);
	if (r->p != NULL) BN_clear_free(r->p);
	if (r->q != NULL) BN_clear_free(r->q);
	if (r->dmp1 != NULL) BN_clear_free(r->dmp1);
	if (r->dmq1 != NULL) BN_clear_free(r->dmq1);
	if (r->iqmp != NULL) BN_clear_free(r->iqmp);
	if (r->blinding != NULL) BN_BLINDING_free(r->blinding);
	if (r->bignum_data != NULL) OPENSSL_free_locked(r->bignum_data);
	OPENSSL_free(r);
	}

int RSA_get_ex_new_index(long argl, void *argp, CRYPTO_EX_new *new_func,
	     CRYPTO_EX_dup *dup_func, CRYPTO_EX_free *free_func)
        {
	rsa_meth_num++;
	return(CRYPTO_get_ex_new_index(rsa_meth_num-1,
		&rsa_meth,argl,argp,new_func,dup_func,free_func));
        }

int RSA_set_ex_data(RSA *r, int idx, void *arg)
	{
	return(CRYPTO_set_ex_data(&r->ex_data,idx,arg));
	}

void *RSA_get_ex_data(const RSA *r, int idx)
	{
	return(CRYPTO_get_ex_data(&r->ex_data,idx));
	}

int RSA_size(const RSA *r)
	{
	return(BN_num_bytes(r->n));
	}

int RSA_public_encrypt(int flen, const unsigned char *from, unsigned char *to,
	     RSA *rsa, int padding)
	{
	return(ENGINE_get_RSA(rsa->engine)->rsa_pub_enc(flen,
		from, to, rsa, padding));
	}

int RSA_private_encrypt(int flen, const unsigned char *from, unsigned char *to,
	     RSA *rsa, int padding)
	{
	return(ENGINE_get_RSA(rsa->engine)->rsa_priv_enc(flen,
		from, to, rsa, padding));
	}

int RSA_private_decrypt(int flen, const unsigned char *from, unsigned char *to,
	     RSA *rsa, int padding)
	{
	return(ENGINE_get_RSA(rsa->engine)->rsa_priv_dec(flen,
		from, to, rsa, padding));
	}

int RSA_public_decrypt(int flen, const unsigned char *from, unsigned char *to,
	     RSA *rsa, int padding)
	{
	return(ENGINE_get_RSA(rsa->engine)->rsa_pub_dec(flen,
		from, to, rsa, padding));
	}

int RSA_flags(const RSA *r)
	{
	return((r == NULL)?0:ENGINE_get_RSA(r->engine)->flags);
	}

void RSA_blinding_off(RSA *rsa)
	{
	if (rsa->blinding != NULL)
		{
		BN_BLINDING_free(rsa->blinding);
		rsa->blinding=NULL;
		}
	rsa->flags&= ~RSA_FLAG_BLINDING;
	}

int RSA_blinding_on(RSA *rsa, BN_CTX *p_ctx)
	{
	BIGNUM *A,*Ai;
	BN_CTX *ctx;
	int ret=0;

	if (p_ctx == NULL)
		{
		if ((ctx=BN_CTX_new()) == NULL) goto err;
		}
	else
		ctx=p_ctx;

	if (rsa->blinding != NULL)
		BN_BLINDING_free(rsa->blinding);

	BN_CTX_start(ctx);
	A = BN_CTX_get(ctx);
	if (!BN_rand_range(A,rsa->n)) goto err;
	if ((Ai=BN_mod_inverse(NULL,A,rsa->n,ctx)) == NULL) goto err;

	if (!ENGINE_get_RSA(rsa->engine)->bn_mod_exp(A,A,
		rsa->e,rsa->n,ctx,rsa->_method_mod_n))
	    goto err;
	rsa->blinding=BN_BLINDING_new(A,Ai,rsa->n);
	rsa->flags|=RSA_FLAG_BLINDING;
	BN_free(Ai);
	ret=1;
err:
	BN_CTX_end(ctx);
	if (ctx != p_ctx) BN_CTX_free(ctx);
	return(ret);
	}

int RSA_memory_lock(RSA *r)
	{
	int i,j,k,off;
	char *p;
	BIGNUM *bn,**t[6],*b;
	BN_ULONG *ul;

	if (r->d == NULL) return(1);
	t[0]= &r->d;
	t[1]= &r->p;
	t[2]= &r->q;
	t[3]= &r->dmp1;
	t[4]= &r->dmq1;
	t[5]= &r->iqmp;
	k=sizeof(BIGNUM)*6;
	off=k/sizeof(BN_ULONG)+1;
	j=1;
	for (i=0; i<6; i++)
		j+= (*t[i])->top;
	if ((p=OPENSSL_malloc_locked((off+j)*sizeof(BN_ULONG))) == NULL)
		{
		RSAerr(RSA_F_MEMORY_LOCK,ERR_R_MALLOC_FAILURE);
		return(0);
		}
	bn=(BIGNUM *)p;
	ul=(BN_ULONG *)&(p[off]);
	for (i=0; i<6; i++)
		{
		b= *(t[i]);
		*(t[i])= &(bn[i]);
		memcpy((char *)&(bn[i]),(char *)b,sizeof(BIGNUM));
		bn[i].flags=BN_FLG_STATIC_DATA;
		bn[i].d=ul;
		memcpy((char *)ul,b->d,sizeof(BN_ULONG)*b->top);
		ul+=b->top;
		BN_clear_free(b);
		}
	
	/* I should fix this so it can still be done */
	r->flags&= ~(RSA_FLAG_CACHE_PRIVATE|RSA_FLAG_CACHE_PUBLIC);

	r->bignum_data=p;
	return(1);
	}
Commit	Line	Data
d02b48c6	1	/* crypto/rsa/rsa_lib.c */
58964a49	2	/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
d02b48c6 RE	3	* All rights reserved.
	4	*
	5	* This package is an SSL implementation written
	6	* by Eric Young (eay@cryptsoft.com).
	7	* The implementation was written so as to conform with Netscapes SSL.
	8	*
	9	* This library is free for commercial and non-commercial use as long as
	10	* the following conditions are aheared to. The following conditions
	11	* apply to all code found in this distribution, be it the RC4, RSA,
	12	* lhash, DES, etc., code; not just the SSL code. The SSL documentation
	13	* included with this distribution is covered by the same copyright terms
	14	* except that the holder is Tim Hudson (tjh@cryptsoft.com).
	15	*
	16	* Copyright remains Eric Young's, and as such any Copyright notices in
	17	* the code are not to be removed.
	18	* If this package is used in a product, Eric Young should be given attribution
	19	* as the author of the parts of the library used.
	20	* This can be in the form of a textual message at program startup or
	21	* in documentation (online or textual) provided with the package.
	22	*
	23	* Redistribution and use in source and binary forms, with or without
	24	* modification, are permitted provided that the following conditions
	25	* are met:
	26	* 1. Redistributions of source code must retain the copyright
	27	* notice, this list of conditions and the following disclaimer.
	28	* 2. Redistributions in binary form must reproduce the above copyright
	29	* notice, this list of conditions and the following disclaimer in the
	30	* documentation and/or other materials provided with the distribution.
	31	* 3. All advertising materials mentioning features or use of this software
	32	* must display the following acknowledgement:
	33	* "This product includes cryptographic software written by
	34	* Eric Young (eay@cryptsoft.com)"
	35	* The word 'cryptographic' can be left out if the rouines from the library
	36	* being used are not cryptographic related :-).
	37	* 4. If you include any Windows specific code (or a derivative thereof) from
	38	* the apps directory (application code) you must include an acknowledgement:
	39	* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
	40	*
	41	* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
	42	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	43	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	44	* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
	45	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	46	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	47	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	48	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	49	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	50	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	51	* SUCH DAMAGE.
	52	*
	53	* The licence and distribution terms for any publically available version or
	54	* derivative of this code cannot be changed. i.e. this code cannot simply be
	55	* copied and put under another distribution licence
	56	* [including the GNU Public Licence.]
	57	*/
	58
	59	#include <stdio.h>
ec577822	60	#include <openssl/crypto.h>
d02b48c6	61	#include "cryptlib.h"
ec577822 BM	62	#include <openssl/lhash.h>
	63	#include <openssl/bn.h>
	64	#include <openssl/rsa.h>
5270e702	65	#include <openssl/engine.h>
d02b48c6	66
e778802f	67	const char *RSA_version="RSA" OPENSSL_VERSION_PTEXT;
d02b48c6	68
29c1f061	69	static const RSA_METHOD *default_RSA_meth=NULL;
58964a49	70	static int rsa_meth_num=0;
dd9d233e	71	static STACK_OF(CRYPTO_EX_DATA_FUNCS) *rsa_meth=NULL;
d02b48c6	72
6b691a5c	73	RSA *RSA_new(void)
d02b48c6 RE	74	{
	75	return(RSA_new_method(NULL));
	76	}
	77
29c1f061	78	void RSA_set_default_openssl_method(const RSA_METHOD *meth)
d02b48c6	79	{
5270e702 RL	80	ENGINE *e;
	81	/* We'll need to notify the "openssl" ENGINE of this
	82	* change too. We won't bother locking things down at
	83	* our end as there was never any locking in these
	84	* functions! */
	85	if(default_RSA_meth != meth)
	86	{
	87	default_RSA_meth = meth;
	88	e = ENGINE_by_id("openssl");
	89	if(e)
	90	{
	91	ENGINE_set_RSA(e, meth);
	92	ENGINE_free(e);
	93	}
	94	}
d02b48c6 RE	95	}
d02b48c6 RE	96
29c1f061	97	const RSA_METHOD *RSA_get_default_openssl_method(void)
ce8b2574	98	{
deb4d50e GT	99	if (default_RSA_meth == NULL)
	100	{
	101	#ifdef RSA_NULL
	102	default_RSA_meth=RSA_null_method();
	103	#else
0b5806b5	104	#if 0 /* was: #ifdef RSAref */
deb4d50e GT	105	default_RSA_meth=RSA_PKCS1_RSAref();
	106	#else
	107	default_RSA_meth=RSA_PKCS1_SSLeay();
	108	#endif
	109	#endif
	110	}
	111
ce8b2574 DSH	112	return default_RSA_meth;
	113	}
	114
29c1f061	115	const RSA_METHOD RSA_get_method(const RSA rsa)
ce8b2574	116	{
5270e702	117	return ENGINE_get_RSA(rsa->engine);
ce8b2574 DSH	118	}
ce8b2574 DSH	119
5270e702	120	#if 0
ce8b2574 DSH	121	RSA_METHOD RSA_set_method(RSA rsa, RSA_METHOD *meth)
	122	{
	123	RSA_METHOD *mtmp;
	124	mtmp = rsa->meth;
	125	if (mtmp->finish) mtmp->finish(rsa);
	126	rsa->meth = meth;
	127	if (meth->init) meth->init(rsa);
	128	return mtmp;
	129	}
5270e702 RL	130	#else
	131	int RSA_set_method(RSA rsa, ENGINE engine)
	132	{
	133	ENGINE *mtmp;
29c1f061	134	const RSA_METHOD *meth;
5270e702 RL	135	mtmp = rsa->engine;
	136	meth = ENGINE_get_RSA(mtmp);
	137	if (!ENGINE_init(engine))
	138	return 0;
	139	if (meth->finish) meth->finish(rsa);
	140	rsa->engine = engine;
	141	meth = ENGINE_get_RSA(engine);
	142	if (meth->init) meth->init(rsa);
	143	/* SHOULD ERROR CHECK THIS!!! */
	144	ENGINE_finish(mtmp);
	145	return 1;
	146	}
	147	#endif
ce8b2574	148
5270e702	149	#if 0
6b691a5c	150	RSA RSA_new_method(RSA_METHOD meth)
5270e702 RL	151	#else
	152	RSA RSA_new_method(ENGINE engine)
	153	#endif
d02b48c6	154	{
29c1f061	155	const RSA_METHOD *meth;
d02b48c6 RE	156	RSA *ret;
d02b48c6 RE	157
26a3a48d	158	ret=(RSA *)OPENSSL_malloc(sizeof(RSA));
d02b48c6 RE	159	if (ret == NULL)
	160	{
	161	RSAerr(RSA_F_RSA_NEW_METHOD,ERR_R_MALLOC_FAILURE);
	162	return(NULL);
	163	}
	164
0c9de428	165	if (engine)
5270e702	166	{
0c9de428 DSH	167	if(ENGINE_init(engine))
	168	ret->engine = engine;
	169	else
	170	ret->engine = NULL;
5270e702	171	}
d02b48c6	172	else
0c9de428 DSH	173	ret->engine=ENGINE_get_default_RSA();
	174
	175	if(ret->engine == NULL)
	176	{
	177	RSAerr(RSA_F_RSA_NEW_METHOD,ERR_LIB_ENGINE);
	178	OPENSSL_free(ret);
	179	return NULL;
	180	}
	181
5270e702	182	meth = ENGINE_get_RSA(ret->engine);
d02b48c6 RE	183
	184	ret->pad=0;
	185	ret->version=0;
	186	ret->n=NULL;
	187	ret->e=NULL;
	188	ret->d=NULL;
	189	ret->p=NULL;
	190	ret->q=NULL;
	191	ret->dmp1=NULL;
	192	ret->dmq1=NULL;
	193	ret->iqmp=NULL;
	194	ret->references=1;
03f8b042 BL	195	ret->_method_mod_n=NULL;
	196	ret->_method_mod_p=NULL;
	197	ret->_method_mod_q=NULL;
58964a49	198	ret->blinding=NULL;
dfeab068	199	ret->bignum_data=NULL;
5270e702	200	ret->flags=meth->flags;
7abe8305	201	CRYPTO_new_ex_data(rsa_meth,ret,&ret->ex_data);
5270e702	202	if ((meth->init != NULL) && !meth->init(ret))
d02b48c6	203	{
7abe8305	204	CRYPTO_free_ex_data(rsa_meth, ret, &ret->ex_data);
26a3a48d	205	OPENSSL_free(ret);
d02b48c6 RE	206	ret=NULL;
	207	}
	208	return(ret);
	209	}
	210
6b691a5c	211	void RSA_free(RSA *r)
d02b48c6	212	{
29c1f061	213	const RSA_METHOD *meth;
d02b48c6 RE	214	int i;
	215
	216	if (r == NULL) return;
	217
	218	i=CRYPTO_add(&r->references,-1,CRYPTO_LOCK_RSA);
58964a49 RE	219	#ifdef REF_PRINT
	220	REF_PRINT("RSA",r);
	221	#endif
d02b48c6 RE	222	if (i > 0) return;
	223	#ifdef REF_CHECK
	224	if (i < 0)
	225	{
	226	fprintf(stderr,"RSA_free, bad reference count\n");
	227	abort();
	228	}
	229	#endif
	230
5270e702 RL	231	meth = ENGINE_get_RSA(r->engine);
	232	if (meth->finish != NULL)
	233	meth->finish(r);
	234	ENGINE_finish(r->engine);
d02b48c6	235
7abe8305 GT	236	CRYPTO_free_ex_data(rsa_meth,r,&r->ex_data);
7abe8305 GT	237
d02b48c6 RE	238	if (r->n != NULL) BN_clear_free(r->n);
	239	if (r->e != NULL) BN_clear_free(r->e);
	240	if (r->d != NULL) BN_clear_free(r->d);
	241	if (r->p != NULL) BN_clear_free(r->p);
	242	if (r->q != NULL) BN_clear_free(r->q);
	243	if (r->dmp1 != NULL) BN_clear_free(r->dmp1);
	244	if (r->dmq1 != NULL) BN_clear_free(r->dmq1);
	245	if (r->iqmp != NULL) BN_clear_free(r->iqmp);
58964a49	246	if (r->blinding != NULL) BN_BLINDING_free(r->blinding);
26a3a48d RL	247	if (r->bignum_data != NULL) OPENSSL_free_locked(r->bignum_data);
26a3a48d RL	248	OPENSSL_free(r);
d02b48c6 RE	249	}
d02b48c6 RE	250
dd9d233e DSH	251	int RSA_get_ex_new_index(long argl, void argp, CRYPTO_EX_new new_func,
dd9d233e DSH	252	CRYPTO_EX_dup dup_func, CRYPTO_EX_free free_func)
58964a49 RE	253	{
	254	rsa_meth_num++;
	255	return(CRYPTO_get_ex_new_index(rsa_meth_num-1,
	256	&rsa_meth,argl,argp,new_func,dup_func,free_func));
	257	}
	258
dd9d233e	259	int RSA_set_ex_data(RSA r, int idx, void arg)
58964a49 RE	260	{
	261	return(CRYPTO_set_ex_data(&r->ex_data,idx,arg));
	262	}
	263
29c1f061	264	void RSA_get_ex_data(const RSA r, int idx)
58964a49 RE	265	{
	266	return(CRYPTO_get_ex_data(&r->ex_data,idx));
	267	}
	268
29c1f061	269	int RSA_size(const RSA *r)
d02b48c6 RE	270	{
	271	return(BN_num_bytes(r->n));
	272	}
	273
29c1f061	274	int RSA_public_encrypt(int flen, const unsigned char from, unsigned char to,
6b691a5c	275	RSA *rsa, int padding)
d02b48c6	276	{
5270e702 RL	277	return(ENGINE_get_RSA(rsa->engine)->rsa_pub_enc(flen,
5270e702 RL	278	from, to, rsa, padding));
d02b48c6 RE	279	}
d02b48c6 RE	280
29c1f061	281	int RSA_private_encrypt(int flen, const unsigned char from, unsigned char to,
6b691a5c	282	RSA *rsa, int padding)
d02b48c6	283	{
5270e702 RL	284	return(ENGINE_get_RSA(rsa->engine)->rsa_priv_enc(flen,
5270e702 RL	285	from, to, rsa, padding));
d02b48c6 RE	286	}
d02b48c6 RE	287
29c1f061	288	int RSA_private_decrypt(int flen, const unsigned char from, unsigned char to,
6b691a5c	289	RSA *rsa, int padding)
d02b48c6	290	{
5270e702 RL	291	return(ENGINE_get_RSA(rsa->engine)->rsa_priv_dec(flen,
5270e702 RL	292	from, to, rsa, padding));
d02b48c6 RE	293	}
d02b48c6 RE	294
29c1f061	295	int RSA_public_decrypt(int flen, const unsigned char from, unsigned char to,
6b691a5c	296	RSA *rsa, int padding)
d02b48c6	297	{
5270e702 RL	298	return(ENGINE_get_RSA(rsa->engine)->rsa_pub_dec(flen,
5270e702 RL	299	from, to, rsa, padding));
d02b48c6 RE	300	}
d02b48c6 RE	301
29c1f061	302	int RSA_flags(const RSA *r)
58964a49	303	{
5270e702	304	return((r == NULL)?0:ENGINE_get_RSA(r->engine)->flags);
58964a49 RE	305	}
58964a49 RE	306
6b691a5c	307	void RSA_blinding_off(RSA *rsa)
58964a49 RE	308	{
	309	if (rsa->blinding != NULL)
	310	{
	311	BN_BLINDING_free(rsa->blinding);
	312	rsa->blinding=NULL;
	313	}
	314	rsa->flags&= ~RSA_FLAG_BLINDING;
	315	}
	316
6b691a5c	317	int RSA_blinding_on(RSA rsa, BN_CTX p_ctx)
58964a49 RE	318	{
	319	BIGNUM A,Ai;
	320	BN_CTX *ctx;
	321	int ret=0;
	322
	323	if (p_ctx == NULL)
	324	{
	325	if ((ctx=BN_CTX_new()) == NULL) goto err;
	326	}
	327	else
	328	ctx=p_ctx;
	329
	330	if (rsa->blinding != NULL)
	331	BN_BLINDING_free(rsa->blinding);
	332
9b141126 UM	333	BN_CTX_start(ctx);
9b141126 UM	334	A = BN_CTX_get(ctx);
12c2fe8d	335	if (!BN_rand_range(A,rsa->n)) goto err;
dfeab068	336	if ((Ai=BN_mod_inverse(NULL,A,rsa->n,ctx)) == NULL) goto err;
58964a49	337
5270e702 RL	338	if (!ENGINE_get_RSA(rsa->engine)->bn_mod_exp(A,A,
5270e702 RL	339	rsa->e,rsa->n,ctx,rsa->_method_mod_n))
03f8b042	340	goto err;
58964a49	341	rsa->blinding=BN_BLINDING_new(A,Ai,rsa->n);
58964a49 RE	342	rsa->flags\|=RSA_FLAG_BLINDING;
	343	BN_free(Ai);
	344	ret=1;
	345	err:
9b141126	346	BN_CTX_end(ctx);
58964a49 RE	347	if (ctx != p_ctx) BN_CTX_free(ctx);
	348	return(ret);
	349	}
	350
6b691a5c	351	int RSA_memory_lock(RSA *r)
dfeab068 RE	352	{
	353	int i,j,k,off;
	354	char *p;
	355	BIGNUM bn,t[6],b;
	356	BN_ULONG *ul;
	357
	358	if (r->d == NULL) return(1);
	359	t[0]= &r->d;
	360	t[1]= &r->p;
	361	t[2]= &r->q;
	362	t[3]= &r->dmp1;
	363	t[4]= &r->dmq1;
	364	t[5]= &r->iqmp;
	365	k=sizeof(BIGNUM)*6;
	366	off=k/sizeof(BN_ULONG)+1;
	367	j=1;
	368	for (i=0; i<6; i++)
	369	j+= (*t[i])->top;
26a3a48d	370	if ((p=OPENSSL_malloc_locked((off+j)*sizeof(BN_ULONG))) == NULL)
dfeab068 RE	371	{
	372	RSAerr(RSA_F_MEMORY_LOCK,ERR_R_MALLOC_FAILURE);
	373	return(0);
	374	}
	375	bn=(BIGNUM *)p;
	376	ul=(BN_ULONG *)&(p[off]);
	377	for (i=0; i<6; i++)
	378	{
	379	b= *(t[i]);
	380	*(t[i])= &(bn[i]);
	381	memcpy((char )&(bn[i]),(char )b,sizeof(BIGNUM));
	382	bn[i].flags=BN_FLG_STATIC_DATA;
	383	bn[i].d=ul;
	384	memcpy((char )ul,b->d,sizeof(BN_ULONG)b->top);
	385	ul+=b->top;
	386	BN_clear_free(b);
	387	}
	388
	389	/* I should fix this so it can still be done */
	390	r->flags&= ~(RSA_FLAG_CACHE_PRIVATE\|RSA_FLAG_CACHE_PUBLIC);
	391
	392	r->bignum_data=p;
	393	return(1);
	394	}
	395