2 * Copyright 2019-2020 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
12 #include <openssl/opensslconf.h>
13 #include <openssl/core.h>
14 #include <openssl/core_dispatch.h>
15 #include <openssl/core_names.h>
16 #include <openssl/params.h>
18 #include "prov/provider_ctx.h"
19 #include "prov/providercommon.h"
20 #include "prov/implementations.h"
21 #include "prov/provider_util.h"
22 #include "internal/nelem.h"
25 * Forward declarations to ensure that interface functions are correctly
28 static OSSL_FUNC_provider_gettable_params_fn deflt_gettable_params
;
29 static OSSL_FUNC_provider_get_params_fn deflt_get_params
;
30 static OSSL_FUNC_provider_query_operation_fn deflt_query
;
32 #define ALGC(NAMES, FUNC, CHECK) { { NAMES, "provider=default", FUNC }, CHECK }
33 #define ALG(NAMES, FUNC) ALGC(NAMES, FUNC, NULL)
35 /* Functions provided by the core */
36 static OSSL_FUNC_core_gettable_params_fn
*c_gettable_params
= NULL
;
37 static OSSL_FUNC_core_get_params_fn
*c_get_params
= NULL
;
39 /* Parameters we provide to the core */
40 static const OSSL_PARAM deflt_param_types
[] = {
41 OSSL_PARAM_DEFN(OSSL_PROV_PARAM_NAME
, OSSL_PARAM_UTF8_PTR
, NULL
, 0),
42 OSSL_PARAM_DEFN(OSSL_PROV_PARAM_VERSION
, OSSL_PARAM_UTF8_PTR
, NULL
, 0),
43 OSSL_PARAM_DEFN(OSSL_PROV_PARAM_BUILDINFO
, OSSL_PARAM_UTF8_PTR
, NULL
, 0),
47 static const OSSL_PARAM
*deflt_gettable_params(void *provctx
)
49 return deflt_param_types
;
52 static int deflt_get_params(void *provctx
, OSSL_PARAM params
[])
56 p
= OSSL_PARAM_locate(params
, OSSL_PROV_PARAM_NAME
);
57 if (p
!= NULL
&& !OSSL_PARAM_set_utf8_ptr(p
, "OpenSSL Default Provider"))
59 p
= OSSL_PARAM_locate(params
, OSSL_PROV_PARAM_VERSION
);
60 if (p
!= NULL
&& !OSSL_PARAM_set_utf8_ptr(p
, OPENSSL_VERSION_STR
))
62 p
= OSSL_PARAM_locate(params
, OSSL_PROV_PARAM_BUILDINFO
);
63 if (p
!= NULL
&& !OSSL_PARAM_set_utf8_ptr(p
, OPENSSL_FULL_VERSION_STR
))
70 * For the algorithm names, we use the following formula for our primary
73 * ALGNAME[VERSION?][-SUBNAME[VERSION?]?][-SIZE?][-MODE?]
75 * VERSION is only present if there are multiple versions of
76 * an alg (MD2, MD4, MD5). It may be omitted if there is only
77 * one version (if a subsequent version is released in the future,
78 * we can always change the canonical name, and add the old name
81 * SUBNAME may be present where we are combining multiple
82 * algorithms together, e.g. MD5-SHA1.
84 * SIZE is only present if multiple versions of an algorithm exist
85 * with different sizes (e.g. AES-128-CBC, AES-256-CBC)
87 * MODE is only present where applicable.
89 * We add diverse other names where applicable, such as the names that
90 * NIST uses, or that are used for ASN.1 OBJECT IDENTIFIERs, or names
91 * we have used historically.
93 * Algorithm names are case insensitive, but we use all caps in our "canonical"
94 * names for consistency.
96 static const OSSL_ALGORITHM deflt_digests
[] = {
97 /* Our primary name:NIST name[:our older names] */
98 { "SHA1:SHA-1", "provider=default", sha1_functions
},
99 { "SHA2-224:SHA-224:SHA224", "provider=default", sha224_functions
},
100 { "SHA2-256:SHA-256:SHA256", "provider=default", sha256_functions
},
101 { "SHA2-384:SHA-384:SHA384", "provider=default", sha384_functions
},
102 { "SHA2-512:SHA-512:SHA512", "provider=default", sha512_functions
},
103 { "SHA2-512/224:SHA-512/224:SHA512-224", "provider=default",
104 sha512_224_functions
},
105 { "SHA2-512/256:SHA-512/256:SHA512-256", "provider=default",
106 sha512_256_functions
},
108 /* We agree with NIST here, so one name only */
109 { "SHA3-224", "provider=default", sha3_224_functions
},
110 { "SHA3-256", "provider=default", sha3_256_functions
},
111 { "SHA3-384", "provider=default", sha3_384_functions
},
112 { "SHA3-512", "provider=default", sha3_512_functions
},
115 * KECCAK-KMAC-128 and KECCAK-KMAC-256 as hashes are mostly useful for
116 * the KMAC-128 and KMAC-256.
118 { "KECCAK-KMAC-128:KECCAK-KMAC128", "provider=default", keccak_kmac_128_functions
},
119 { "KECCAK-KMAC-256:KECCAK-KMAC256", "provider=default", keccak_kmac_256_functions
},
121 /* Our primary name:NIST name */
122 { "SHAKE-128:SHAKE128", "provider=default", shake_128_functions
},
123 { "SHAKE-256:SHAKE256", "provider=default", shake_256_functions
},
125 #ifndef OPENSSL_NO_BLAKE2
127 * https://blake2.net/ doesn't specify size variants,
128 * but mentions that Bouncy Castle uses the names
129 * BLAKE2b-160, BLAKE2b-256, BLAKE2b-384, and BLAKE2b-512
130 * If we assume that "2b" and "2s" are versions, that pattern
131 * fits with ours. We also add our historical names.
133 { "BLAKE2S-256:BLAKE2s256", "provider=default", blake2s256_functions
},
134 { "BLAKE2B-512:BLAKE2b512", "provider=default", blake2b512_functions
},
135 #endif /* OPENSSL_NO_BLAKE2 */
137 #ifndef OPENSSL_NO_SM3
138 { "SM3", "provider=default", sm3_functions
},
139 #endif /* OPENSSL_NO_SM3 */
141 #ifndef OPENSSL_NO_MD5
142 { "MD5", "provider=default", md5_functions
},
143 { "MD5-SHA1", "provider=default", md5_sha1_functions
},
144 #endif /* OPENSSL_NO_MD5 */
149 static const OSSL_ALGORITHM_CAPABLE deflt_ciphers
[] = {
150 ALG("NULL", null_functions
),
151 ALG("AES-256-ECB", aes256ecb_functions
),
152 ALG("AES-192-ECB", aes192ecb_functions
),
153 ALG("AES-128-ECB", aes128ecb_functions
),
154 ALG("AES-256-CBC", aes256cbc_functions
),
155 ALG("AES-192-CBC", aes192cbc_functions
),
156 ALG("AES-128-CBC", aes128cbc_functions
),
157 ALG("AES-256-OFB", aes256ofb_functions
),
158 ALG("AES-192-OFB", aes192ofb_functions
),
159 ALG("AES-128-OFB", aes128ofb_functions
),
160 ALG("AES-256-CFB", aes256cfb_functions
),
161 ALG("AES-192-CFB", aes192cfb_functions
),
162 ALG("AES-128-CFB", aes128cfb_functions
),
163 ALG("AES-256-CFB1", aes256cfb1_functions
),
164 ALG("AES-192-CFB1", aes192cfb1_functions
),
165 ALG("AES-128-CFB1", aes128cfb1_functions
),
166 ALG("AES-256-CFB8", aes256cfb8_functions
),
167 ALG("AES-192-CFB8", aes192cfb8_functions
),
168 ALG("AES-128-CFB8", aes128cfb8_functions
),
169 ALG("AES-256-CTR", aes256ctr_functions
),
170 ALG("AES-192-CTR", aes192ctr_functions
),
171 ALG("AES-128-CTR", aes128ctr_functions
),
172 ALG("AES-256-XTS", aes256xts_functions
),
173 ALG("AES-128-XTS", aes128xts_functions
),
174 #ifndef OPENSSL_NO_OCB
175 ALG("AES-256-OCB", aes256ocb_functions
),
176 ALG("AES-192-OCB", aes192ocb_functions
),
177 ALG("AES-128-OCB", aes128ocb_functions
),
178 #endif /* OPENSSL_NO_OCB */
179 #ifndef OPENSSL_NO_SIV
180 ALG("AES-128-SIV", aes128siv_functions
),
181 ALG("AES-192-SIV", aes192siv_functions
),
182 ALG("AES-256-SIV", aes256siv_functions
),
183 #endif /* OPENSSL_NO_SIV */
184 ALG("AES-256-GCM:id-aes256-GCM", aes256gcm_functions
),
185 ALG("AES-192-GCM:id-aes192-GCM", aes192gcm_functions
),
186 ALG("AES-128-GCM:id-aes128-GCM", aes128gcm_functions
),
187 ALG("AES-256-CCM:id-aes256-CCM", aes256ccm_functions
),
188 ALG("AES-192-CCM:id-aes192-CCM", aes192ccm_functions
),
189 ALG("AES-128-CCM:id-aes128-CCM", aes128ccm_functions
),
190 ALG("AES-256-WRAP:id-aes256-wrap:AES256-WRAP", aes256wrap_functions
),
191 ALG("AES-192-WRAP:id-aes192-wrap:AES192-WRAP", aes192wrap_functions
),
192 ALG("AES-128-WRAP:id-aes128-wrap:AES128-WRAP", aes128wrap_functions
),
193 ALG("AES-256-WRAP-PAD:id-aes256-wrap-pad:AES256-WRAP-PAD",
194 aes256wrappad_functions
),
195 ALG("AES-192-WRAP-PAD:id-aes192-wrap-pad:AES192-WRAP-PAD",
196 aes192wrappad_functions
),
197 ALG("AES-128-WRAP-PAD:id-aes128-wrap-pad:AES128-WRAP-PAD",
198 aes128wrappad_functions
),
199 ALGC("AES-128-CBC-HMAC-SHA1", aes128cbc_hmac_sha1_functions
,
200 cipher_capable_aes_cbc_hmac_sha1
),
201 ALGC("AES-256-CBC-HMAC-SHA1", aes256cbc_hmac_sha1_functions
,
202 cipher_capable_aes_cbc_hmac_sha1
),
203 ALGC("AES-128-CBC-HMAC-SHA256", aes128cbc_hmac_sha256_functions
,
204 cipher_capable_aes_cbc_hmac_sha256
),
205 ALGC("AES-256-CBC-HMAC-SHA256", aes256cbc_hmac_sha256_functions
,
206 cipher_capable_aes_cbc_hmac_sha256
),
207 #ifndef OPENSSL_NO_ARIA
208 ALG("ARIA-256-GCM", aria256gcm_functions
),
209 ALG("ARIA-192-GCM", aria192gcm_functions
),
210 ALG("ARIA-128-GCM", aria128gcm_functions
),
211 ALG("ARIA-256-CCM", aria256ccm_functions
),
212 ALG("ARIA-192-CCM", aria192ccm_functions
),
213 ALG("ARIA-128-CCM", aria128ccm_functions
),
214 ALG("ARIA-256-ECB", aria256ecb_functions
),
215 ALG("ARIA-192-ECB", aria192ecb_functions
),
216 ALG("ARIA-128-ECB", aria128ecb_functions
),
217 ALG("ARIA-256-CBC:ARIA256", aria256cbc_functions
),
218 ALG("ARIA-192-CBC:ARIA192", aria192cbc_functions
),
219 ALG("ARIA-128-CBC:ARIA128", aria128cbc_functions
),
220 ALG("ARIA-256-OFB", aria256ofb_functions
),
221 ALG("ARIA-192-OFB", aria192ofb_functions
),
222 ALG("ARIA-128-OFB", aria128ofb_functions
),
223 ALG("ARIA-256-CFB", aria256cfb_functions
),
224 ALG("ARIA-192-CFB", aria192cfb_functions
),
225 ALG("ARIA-128-CFB", aria128cfb_functions
),
226 ALG("ARIA-256-CFB1", aria256cfb1_functions
),
227 ALG("ARIA-192-CFB1", aria192cfb1_functions
),
228 ALG("ARIA-128-CFB1", aria128cfb1_functions
),
229 ALG("ARIA-256-CFB8", aria256cfb8_functions
),
230 ALG("ARIA-192-CFB8", aria192cfb8_functions
),
231 ALG("ARIA-128-CFB8", aria128cfb8_functions
),
232 ALG("ARIA-256-CTR", aria256ctr_functions
),
233 ALG("ARIA-192-CTR", aria192ctr_functions
),
234 ALG("ARIA-128-CTR", aria128ctr_functions
),
235 #endif /* OPENSSL_NO_ARIA */
236 #ifndef OPENSSL_NO_CAMELLIA
237 ALG("CAMELLIA-256-ECB", camellia256ecb_functions
),
238 ALG("CAMELLIA-192-ECB", camellia192ecb_functions
),
239 ALG("CAMELLIA-128-ECB", camellia128ecb_functions
),
240 ALG("CAMELLIA-256-CBC:CAMELLIA256", camellia256cbc_functions
),
241 ALG("CAMELLIA-192-CBC:CAMELLIA192", camellia192cbc_functions
),
242 ALG("CAMELLIA-128-CBC:CAMELLIA128", camellia128cbc_functions
),
243 ALG("CAMELLIA-256-OFB", camellia256ofb_functions
),
244 ALG("CAMELLIA-192-OFB", camellia192ofb_functions
),
245 ALG("CAMELLIA-128-OFB", camellia128ofb_functions
),
246 ALG("CAMELLIA-256-CFB", camellia256cfb_functions
),
247 ALG("CAMELLIA-192-CFB", camellia192cfb_functions
),
248 ALG("CAMELLIA-128-CFB", camellia128cfb_functions
),
249 ALG("CAMELLIA-256-CFB1", camellia256cfb1_functions
),
250 ALG("CAMELLIA-192-CFB1", camellia192cfb1_functions
),
251 ALG("CAMELLIA-128-CFB1", camellia128cfb1_functions
),
252 ALG("CAMELLIA-256-CFB8", camellia256cfb8_functions
),
253 ALG("CAMELLIA-192-CFB8", camellia192cfb8_functions
),
254 ALG("CAMELLIA-128-CFB8", camellia128cfb8_functions
),
255 ALG("CAMELLIA-256-CTR", camellia256ctr_functions
),
256 ALG("CAMELLIA-192-CTR", camellia192ctr_functions
),
257 ALG("CAMELLIA-128-CTR", camellia128ctr_functions
),
258 #endif /* OPENSSL_NO_CAMELLIA */
259 #ifndef OPENSSL_NO_DES
260 ALG("DES-EDE3-ECB:DES-EDE3", tdes_ede3_ecb_functions
),
261 ALG("DES-EDE3-CBC:DES3", tdes_ede3_cbc_functions
),
262 ALG("DES-EDE3-OFB", tdes_ede3_ofb_functions
),
263 ALG("DES-EDE3-CFB", tdes_ede3_cfb_functions
),
264 ALG("DES-EDE3-CFB8", tdes_ede3_cfb8_functions
),
265 ALG("DES-EDE3-CFB1", tdes_ede3_cfb1_functions
),
266 ALG("DES3-WRAP:id-smime-alg-CMS3DESwrap", tdes_wrap_cbc_functions
),
267 ALG("DES-EDE-ECB:DES-EDE", tdes_ede2_ecb_functions
),
268 ALG("DES-EDE-CBC", tdes_ede2_cbc_functions
),
269 ALG("DES-EDE-OFB", tdes_ede2_ofb_functions
),
270 ALG("DES-EDE-CFB", tdes_ede2_cfb_functions
),
271 #endif /* OPENSSL_NO_DES */
272 #ifndef OPENSSL_NO_SM4
273 ALG("SM4-ECB", sm4128ecb_functions
),
274 ALG("SM4-CBC:SM4", sm4128cbc_functions
),
275 ALG("SM4-CTR", sm4128ctr_functions
),
276 ALG("SM4-OFB:SM4-OFB128", sm4128ofb128_functions
),
277 ALG("SM4-CFB:SM4-CFB128", sm4128cfb128_functions
),
278 #endif /* OPENSSL_NO_SM4 */
279 #ifndef OPENSSL_NO_CHACHA
280 ALG("ChaCha20", chacha20_functions
),
281 # ifndef OPENSSL_NO_POLY1305
282 ALG("ChaCha20-Poly1305", chacha20_poly1305_functions
),
283 # endif /* OPENSSL_NO_POLY1305 */
284 #endif /* OPENSSL_NO_CHACHA */
285 { { NULL
, NULL
, NULL
}, NULL
}
287 static OSSL_ALGORITHM exported_ciphers
[OSSL_NELEM(deflt_ciphers
)];
289 static const OSSL_ALGORITHM deflt_macs
[] = {
290 #ifndef OPENSSL_NO_BLAKE2
291 { "BLAKE2BMAC", "provider=default", blake2bmac_functions
},
292 { "BLAKE2SMAC", "provider=default", blake2smac_functions
},
294 #ifndef OPENSSL_NO_CMAC
295 { "CMAC", "provider=default", cmac_functions
},
297 { "GMAC", "provider=default", gmac_functions
},
298 { "HMAC", "provider=default", hmac_functions
},
299 { "KMAC-128:KMAC128", "provider=default", kmac128_functions
},
300 { "KMAC-256:KMAC256", "provider=default", kmac256_functions
},
301 #ifndef OPENSSL_NO_SIPHASH
302 { "SIPHASH", "provider=default", siphash_functions
},
304 #ifndef OPENSSL_NO_POLY1305
305 { "POLY1305", "provider=default", poly1305_functions
},
310 static const OSSL_ALGORITHM deflt_kdfs
[] = {
311 { "HKDF", "provider=default", kdf_hkdf_functions
},
312 { "SSKDF", "provider=default", kdf_sskdf_functions
},
313 { "PBKDF2", "provider=default", kdf_pbkdf2_functions
},
314 { "SSHKDF", "provider=default", kdf_sshkdf_functions
},
315 { "X963KDF", "provider=default", kdf_x963_kdf_functions
},
316 { "TLS1-PRF", "provider=default", kdf_tls1_prf_functions
},
317 { "KBKDF", "provider=default", kdf_kbkdf_functions
},
318 #ifndef OPENSSL_NO_CMS
319 { "X942KDF", "provider=default", kdf_x942_kdf_functions
},
321 #ifndef OPENSSL_NO_SCRYPT
322 { "SCRYPT:id-scrypt", "provider=default", kdf_scrypt_functions
},
324 { "KRB5KDF", "provider=default", kdf_krb5kdf_functions
},
328 static const OSSL_ALGORITHM deflt_keyexch
[] = {
329 #ifndef OPENSSL_NO_DH
330 { "DH:dhKeyAgreement", "provider=default", dh_keyexch_functions
},
332 #ifndef OPENSSL_NO_EC
333 { "ECDH", "provider=default", ecdh_keyexch_functions
},
334 { "X25519", "provider=default", x25519_keyexch_functions
},
335 { "X448", "provider=default", x448_keyexch_functions
},
340 static const OSSL_ALGORITHM deflt_rands
[] = {
341 { "CTR-DRBG", "provider=default", drbg_ctr_functions
},
342 { "HASH-DRBG", "provider=default", drbg_hash_functions
},
343 { "HMAC-DRBG", "provider=default", drbg_hmac_functions
},
344 { "TEST-RAND", "provider=default", test_rng_functions
},
348 static const OSSL_ALGORITHM deflt_signature
[] = {
349 #ifndef OPENSSL_NO_DSA
350 { "DSA:dsaEncryption", "provider=default", dsa_signature_functions
},
352 { "RSA:rsaEncryption", "provider=default", rsa_signature_functions
},
353 #ifndef OPENSSL_NO_EC
354 { "ED25519:Ed25519", "provider=default", ed25519_signature_functions
},
355 { "ED448:Ed448", "provider=default", ed448_signature_functions
},
356 { "ECDSA", "provider=default", ecdsa_signature_functions
},
361 static const OSSL_ALGORITHM deflt_asym_cipher
[] = {
362 { "RSA:rsaEncryption", "provider=default", rsa_asym_cipher_functions
},
366 static const OSSL_ALGORITHM deflt_keymgmt
[] = {
367 #ifndef OPENSSL_NO_DH
368 { "DH:dhKeyAgreement", "provider=default", dh_keymgmt_functions
},
370 #ifndef OPENSSL_NO_DSA
371 { "DSA:dsaEncryption", "provider=default", dsa_keymgmt_functions
},
373 { "RSA:rsaEncryption", "provider=default", rsa_keymgmt_functions
},
374 { "RSA-PSS:RSASSA-PSS", "provider=default", rsapss_keymgmt_functions
},
375 #ifndef OPENSSL_NO_EC
376 { "EC:id-ecPublicKey", "provider=default", ec_keymgmt_functions
},
377 { "X25519", "provider=default", x25519_keymgmt_functions
},
378 { "X448", "provider=default", x448_keymgmt_functions
},
379 { "ED25519", "provider=default", ed25519_keymgmt_functions
},
380 { "ED448", "provider=default", ed448_keymgmt_functions
},
386 * Unlike most algorithms in the default provider, the serializers are allowed
387 * for use in FIPS mode because they are not FIPS relevant, and therefore have
388 * the "fips=yes" property.
390 static const OSSL_ALGORITHM deflt_serializer
[] = {
391 { "RSA", "provider=default,fips=yes,format=text,type=private",
392 rsa_priv_text_serializer_functions
},
393 { "RSA", "provider=default,fips=yes,format=text,type=public",
394 rsa_pub_text_serializer_functions
},
395 { "RSA", "provider=default,fips=yes,format=der,type=private",
396 rsa_priv_der_serializer_functions
},
397 { "RSA", "provider=default,fips=yes,format=der,type=public",
398 rsa_pub_der_serializer_functions
},
399 { "RSA", "provider=default,fips=yes,format=pem,type=private",
400 rsa_priv_pem_serializer_functions
},
401 { "RSA", "provider=default,fips=yes,format=pem,type=public",
402 rsa_pub_pem_serializer_functions
},
403 { "RSA-PSS", "provider=default,fips=yes,format=text,type=private",
404 rsa_priv_text_serializer_functions
},
405 { "RSA-PSS", "provider=default,fips=yes,format=text,type=public",
406 rsa_pub_text_serializer_functions
},
407 { "RSA-PSS", "provider=default,fips=yes,format=der,type=private",
408 rsa_priv_der_serializer_functions
},
409 { "RSA-PSS", "provider=default,fips=yes,format=der,type=public",
410 rsa_pub_der_serializer_functions
},
411 { "RSA-PSS", "provider=default,fips=yes,format=pem,type=private",
412 rsa_priv_pem_serializer_functions
},
413 { "RSA-PSS", "provider=default,fips=yes,format=pem,type=public",
414 rsa_pub_pem_serializer_functions
},
416 #ifndef OPENSSL_NO_DH
417 { "DH", "provider=default,fips=yes,format=text,type=private",
418 dh_priv_text_serializer_functions
},
419 { "DH", "provider=default,fips=yes,format=text,type=public",
420 dh_pub_text_serializer_functions
},
421 { "DH", "provider=default,fips=yes,format=text,type=parameters",
422 dh_param_text_serializer_functions
},
423 { "DH", "provider=default,fips=yes,format=der,type=private",
424 dh_priv_der_serializer_functions
},
425 { "DH", "provider=default,fips=yes,format=der,type=public",
426 dh_pub_der_serializer_functions
},
427 { "DH", "provider=default,fips=yes,format=der,type=parameters",
428 dh_param_der_serializer_functions
},
429 { "DH", "provider=default,fips=yes,format=pem,type=private",
430 dh_priv_pem_serializer_functions
},
431 { "DH", "provider=default,fips=yes,format=pem,type=public",
432 dh_pub_pem_serializer_functions
},
433 { "DH", "provider=default,fips=yes,format=pem,type=parameters",
434 dh_param_pem_serializer_functions
},
437 #ifndef OPENSSL_NO_DSA
438 { "DSA", "provider=default,fips=yes,format=text,type=private",
439 dsa_priv_text_serializer_functions
},
440 { "DSA", "provider=default,fips=yes,format=text,type=public",
441 dsa_pub_text_serializer_functions
},
442 { "DSA", "provider=default,fips=yes,format=text,type=parameters",
443 dsa_param_text_serializer_functions
},
444 { "DSA", "provider=default,fips=yes,format=der,type=private",
445 dsa_priv_der_serializer_functions
},
446 { "DSA", "provider=default,fips=yes,format=der,type=public",
447 dsa_pub_der_serializer_functions
},
448 { "DSA", "provider=default,fips=yes,format=der,type=parameters",
449 dsa_param_der_serializer_functions
},
450 { "DSA", "provider=default,fips=yes,format=pem,type=private",
451 dsa_priv_pem_serializer_functions
},
452 { "DSA", "provider=default,fips=yes,format=pem,type=public",
453 dsa_pub_pem_serializer_functions
},
454 { "DSA", "provider=default,fips=yes,format=pem,type=parameters",
455 dsa_param_pem_serializer_functions
},
458 #ifndef OPENSSL_NO_EC
459 { "X25519", "provider=default,fips=yes,format=text,type=private",
460 x25519_priv_print_serializer_functions
},
461 { "X25519", "provider=default,fips=yes,format=text,type=public",
462 x25519_pub_print_serializer_functions
},
463 { "X25519", "provider=default,fips=yes,format=der,type=private",
464 x25519_priv_der_serializer_functions
},
465 { "X25519", "provider=default,fips=yes,format=der,type=public",
466 x25519_pub_der_serializer_functions
},
467 { "X25519", "provider=default,fips=yes,format=pem,type=private",
468 x25519_priv_pem_serializer_functions
},
469 { "X25519", "provider=default,fips=yes,format=pem,type=public",
470 x25519_pub_pem_serializer_functions
},
472 { "X448", "provider=default,format=text,type=private",
473 x448_priv_print_serializer_functions
},
474 { "X448", "provider=default,format=text,type=public",
475 x448_pub_print_serializer_functions
},
476 { "X448", "provider=default,format=der,type=private",
477 x448_priv_der_serializer_functions
},
478 { "X448", "provider=default,format=der,type=public",
479 x448_pub_der_serializer_functions
},
480 { "X448", "provider=default,format=pem,type=private",
481 x448_priv_pem_serializer_functions
},
482 { "X448", "provider=default,format=pem,type=public",
483 x448_pub_pem_serializer_functions
},
485 { "ED25519", "provider=default,fips=yes,format=text,type=private",
486 ed25519_priv_print_serializer_functions
},
487 { "ED25519", "provider=default,fips=yes,format=text,type=public",
488 ed25519_pub_print_serializer_functions
},
489 { "ED25519", "provider=default,fips=yes,format=der,type=private",
490 ed25519_priv_der_serializer_functions
},
491 { "ED25519", "provider=default,fips=yes,format=der,type=public",
492 ed25519_pub_der_serializer_functions
},
493 { "ED25519", "provider=default,fips=yes,format=pem,type=private",
494 ed25519_priv_pem_serializer_functions
},
495 { "ED25519", "provider=default,fips=yes,format=pem,type=public",
496 ed25519_pub_pem_serializer_functions
},
498 { "ED448", "provider=default,format=text,type=private",
499 ed448_priv_print_serializer_functions
},
500 { "ED448", "provider=default,format=text,type=public",
501 ed448_pub_print_serializer_functions
},
502 { "ED448", "provider=default,format=der,type=private",
503 ed448_priv_der_serializer_functions
},
504 { "ED448", "provider=default,format=der,type=public",
505 ed448_pub_der_serializer_functions
},
506 { "ED448", "provider=default,format=pem,type=private",
507 ed448_priv_pem_serializer_functions
},
508 { "ED448", "provider=default,format=pem,type=public",
509 ed448_pub_pem_serializer_functions
},
511 { "EC", "provider=default,fips=yes,format=text,type=private",
512 ec_priv_text_serializer_functions
},
513 { "EC", "provider=default,fips=yes,format=text,type=public",
514 ec_pub_text_serializer_functions
},
515 { "EC", "provider=default,fips=yes,format=text,type=parameters",
516 ec_param_text_serializer_functions
},
517 { "EC", "provider=default,fips=yes,format=der,type=private",
518 ec_priv_der_serializer_functions
},
519 { "EC", "provider=default,fips=yes,format=der,type=public",
520 ec_pub_der_serializer_functions
},
521 { "EC", "provider=default,fips=yes,format=der,type=parameters",
522 ec_param_der_serializer_functions
},
523 { "EC", "provider=default,fips=yes,format=pem,type=private",
524 ec_priv_pem_serializer_functions
},
525 { "EC", "provider=default,fips=yes,format=pem,type=public",
526 ec_pub_pem_serializer_functions
},
527 { "EC", "provider=default,fips=yes,format=pem,type=parameters",
528 ec_param_pem_serializer_functions
},
533 static const OSSL_ALGORITHM
*deflt_query(void *provctx
, int operation_id
,
537 switch (operation_id
) {
539 return deflt_digests
;
541 ossl_prov_cache_exported_algorithms(deflt_ciphers
, exported_ciphers
);
542 return exported_ciphers
;
549 case OSSL_OP_KEYMGMT
:
550 return deflt_keymgmt
;
551 case OSSL_OP_KEYEXCH
:
552 return deflt_keyexch
;
553 case OSSL_OP_SIGNATURE
:
554 return deflt_signature
;
555 case OSSL_OP_ASYM_CIPHER
:
556 return deflt_asym_cipher
;
557 case OSSL_OP_SERIALIZER
:
558 return deflt_serializer
;
564 static void deflt_teardown(void *provctx
)
566 BIO_meth_free(PROV_CTX_get0_core_bio_method(provctx
));
567 PROV_CTX_free(provctx
);
570 /* Functions we provide to the core */
571 static const OSSL_DISPATCH deflt_dispatch_table
[] = {
572 { OSSL_FUNC_PROVIDER_TEARDOWN
, (void (*)(void))deflt_teardown
},
573 { OSSL_FUNC_PROVIDER_GETTABLE_PARAMS
, (void (*)(void))deflt_gettable_params
},
574 { OSSL_FUNC_PROVIDER_GET_PARAMS
, (void (*)(void))deflt_get_params
},
575 { OSSL_FUNC_PROVIDER_QUERY_OPERATION
, (void (*)(void))deflt_query
},
576 { OSSL_FUNC_PROVIDER_GET_CAPABILITIES
, (void (*)(void))provider_get_capabilities
},
580 OSSL_provider_init_fn ossl_default_provider_init
;
582 int ossl_default_provider_init(const OSSL_CORE_HANDLE
*handle
,
583 const OSSL_DISPATCH
*in
,
584 const OSSL_DISPATCH
**out
,
587 OSSL_FUNC_core_get_library_context_fn
*c_get_libctx
= NULL
;
588 BIO_METHOD
*corebiometh
;
590 if (!ossl_prov_bio_from_dispatch(in
))
592 for (; in
->function_id
!= 0; in
++) {
593 switch (in
->function_id
) {
594 case OSSL_FUNC_CORE_GETTABLE_PARAMS
:
595 c_gettable_params
= OSSL_FUNC_core_gettable_params(in
);
597 case OSSL_FUNC_CORE_GET_PARAMS
:
598 c_get_params
= OSSL_FUNC_core_get_params(in
);
600 case OSSL_FUNC_CORE_GET_LIBRARY_CONTEXT
:
601 c_get_libctx
= OSSL_FUNC_core_get_library_context(in
);
604 /* Just ignore anything we don't understand */
609 if (c_get_libctx
== NULL
)
613 * We want to make sure that all calls from this provider that requires
614 * a library context use the same context as the one used to call our
615 * functions. We do that by passing it along in the provider context.
617 * This only works for built-in providers. Most providers should
618 * create their own library context.
620 if ((*provctx
= PROV_CTX_new()) == NULL
621 || (corebiometh
= bio_prov_init_bio_method()) == NULL
) {
622 PROV_CTX_free(*provctx
);
626 PROV_CTX_set0_library_context(*provctx
, (OPENSSL_CTX
*)c_get_libctx(handle
));
627 PROV_CTX_set0_handle(*provctx
, handle
);
628 PROV_CTX_set0_core_bio_method(*provctx
, corebiometh
);
630 *out
= deflt_dispatch_table
;