]> git.ipfire.org Git - thirdparty/openssl.git/blob - providers/fips/fipsprov.c
Create a FIPS provider and put SHA256 in it
[thirdparty/openssl.git] / providers / fips / fipsprov.c
1 /*
2 * Copyright 2019 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10 #include <string.h>
11 #include <stdio.h>
12 #include <openssl/core.h>
13 #include <openssl/core_numbers.h>
14 #include <openssl/core_names.h>
15 #include <openssl/params.h>
16
17 /* Functions provided by the core */
18 static OSSL_core_get_param_types_fn *c_get_param_types = NULL;
19 static OSSL_core_get_params_fn *c_get_params = NULL;
20
21 /* Parameters we provide to the core */
22 static const OSSL_ITEM fips_param_types[] = {
23 { OSSL_PARAM_UTF8_PTR, OSSL_PROV_PARAM_NAME },
24 { OSSL_PARAM_UTF8_PTR, OSSL_PROV_PARAM_VERSION },
25 { OSSL_PARAM_UTF8_PTR, OSSL_PROV_PARAM_BUILDINFO },
26 { 0, NULL }
27 };
28
29 static const OSSL_ITEM *fips_get_param_types(const OSSL_PROVIDER *prov)
30 {
31 return fips_param_types;
32 }
33
34 static int fips_get_params(const OSSL_PROVIDER *prov,
35 const OSSL_PARAM params[])
36 {
37 const OSSL_PARAM *p;
38
39 p = OSSL_PARAM_locate(params, OSSL_PROV_PARAM_NAME);
40 if (p != NULL && !OSSL_PARAM_set_utf8_ptr(p, "OpenSSL FIPS Provider"))
41 return 0;
42 p = OSSL_PARAM_locate(params, OSSL_PROV_PARAM_VERSION);
43 if (p != NULL && !OSSL_PARAM_set_utf8_ptr(p, OPENSSL_VERSION_STR))
44 return 0;
45 p = OSSL_PARAM_locate(params, OSSL_PROV_PARAM_BUILDINFO);
46 if (p != NULL && !OSSL_PARAM_set_utf8_ptr(p, OPENSSL_FULL_VERSION_STR))
47 return 0;
48
49 return 1;
50 }
51
52 extern const OSSL_DISPATCH sha256_functions[];
53
54 static const OSSL_ALGORITHM fips_digests[] = {
55 { "SHA256", "fips=yes", sha256_functions },
56 { NULL, NULL, NULL }
57 };
58
59 static const OSSL_ALGORITHM *fips_query(OSSL_PROVIDER *prov,
60 int operation_id,
61 int *no_cache)
62 {
63 *no_cache = 0;
64 switch (operation_id) {
65 case OSSL_OP_DIGEST:
66 return fips_digests;
67 }
68 return NULL;
69 }
70
71 /* Functions we provide to the core */
72 static const OSSL_DISPATCH fips_dispatch_table[] = {
73 { OSSL_FUNC_PROVIDER_GET_PARAM_TYPES, (void (*)(void))fips_get_param_types },
74 { OSSL_FUNC_PROVIDER_GET_PARAMS, (void (*)(void))fips_get_params },
75 { OSSL_FUNC_PROVIDER_QUERY_OPERATION, (void (*)(void))fips_query },
76 { 0, NULL }
77 };
78
79 int OSSL_provider_init(const OSSL_PROVIDER *provider,
80 const OSSL_DISPATCH *in,
81 const OSSL_DISPATCH **out)
82 {
83 for (; in->function_id != 0; in++) {
84 switch (in->function_id) {
85 case OSSL_FUNC_CORE_GET_PARAM_TYPES:
86 c_get_param_types = OSSL_get_core_get_param_types(in);
87 break;
88 case OSSL_FUNC_CORE_GET_PARAMS:
89 c_get_params = OSSL_get_core_get_params(in);
90 break;
91 /* Just ignore anything we don't understand */
92 default:
93 break;
94 }
95 }
96
97 *out = fips_dispatch_table;
98 return 1;
99 }