OPT_NAME, OPT_CSP, OPT_CANAME,
OPT_IN, OPT_OUT, OPT_PASSIN, OPT_PASSOUT, OPT_PASSWORD, OPT_CAPATH,
OPT_CAFILE, OPT_CASTORE, OPT_NOCAPATH, OPT_NOCAFILE, OPT_NOCASTORE, OPT_ENGINE,
- OPT_R_ENUM, OPT_PROV_ENUM, OPT_JDKTRUST,
+ OPT_R_ENUM, OPT_PROV_ENUM, OPT_JDKTRUST, OPT_PBMAC1_PBKDF2, OPT_PBMAC1_PBKDF2_MD,
#ifndef OPENSSL_NO_DES
OPT_LEGACY_ALG
#endif
#endif
{"macalg", OPT_MACALG, 's',
"Digest algorithm to use in MAC (default SHA256)"},
+ {"pbmac1_pbkdf2", OPT_PBMAC1_PBKDF2, '-', "Use PBMAC1 with PBKDF2 instead of MAC"},
+ {"pbmac1_pbkdf2_md", OPT_PBMAC1_PBKDF2_MD, 's', "Digest to use for PBMAC1 KDF (default SHA256)"},
{"iter", OPT_ITER, 'p', "Specify the iteration count for encryption and MAC"},
{"noiter", OPT_NOITER, '-', "Don't use encryption iteration"},
{"nomaciter", OPT_NOMACITER, '-', "Don't use MAC iteration)"},
int use_legacy = 0;
#endif
/* use library defaults for the iter, maciter, cert, and key PBE */
- int iter = 0, maciter = 0;
+ int iter = 0, maciter = 0, pbmac1_pbkdf2 = 0;
int macsaltlen = PKCS12_SALT_LEN;
int cert_pbe = NID_undef;
int key_pbe = NID_undef;
int ret = 1, macver = 1, add_lmk = 0, private = 0;
int noprompt = 0;
char *passinarg = NULL, *passoutarg = NULL, *passarg = NULL;
- char *passin = NULL, *passout = NULL, *macalg = NULL;
+ char *passin = NULL, *passout = NULL, *macalg = NULL, *pbmac1_pbkdf2_md = NULL;
char *cpass = NULL, *mpass = NULL, *badpass = NULL;
const char *CApath = NULL, *CAfile = NULL, *CAstore = NULL, *prog;
int noCApath = 0, noCAfile = 0, noCAstore = 0;
case OPT_MACALG:
macalg = opt_arg();
break;
+ case OPT_PBMAC1_PBKDF2:
+ pbmac1_pbkdf2 = 1;
+ break;
+ case OPT_PBMAC1_PBKDF2_MD:
+ pbmac1_pbkdf2_md = opt_arg();
+ break;
case OPT_CERTPBE:
if (!set_pbe(&cert_pbe, opt_arg()))
goto opthelp;
}
if (maciter != -1) {
- if (!PKCS12_set_mac(p12, mpass, -1, NULL, macsaltlen, maciter, macmd)) {
- BIO_printf(bio_err, "Error creating PKCS12 MAC; no PKCS12KDF support?\n");
- BIO_printf(bio_err, "Use -nomac if MAC not required and PKCS12KDF support not available.\n");
- goto export_end;
+ if (pbmac1_pbkdf2 == 1) {
+ if (!PKCS12_set_pbmac1_pbkdf2(p12, mpass, -1, NULL,
+ macsaltlen, maciter,
+ macmd, pbmac1_pbkdf2_md)) {
+ BIO_printf(bio_err, "Error creating PBMAC1\n");
+ goto export_end;
+ }
+ } else {
+ if (!PKCS12_set_mac(p12, mpass, -1, NULL, macsaltlen, maciter, macmd)) {
+ BIO_printf(bio_err, "Error creating PKCS12 MAC; no PKCS12KDF support?\n");
+ BIO_printf(bio_err,
+ "Use -nomac or -pbmac1_pbkdf2 if PKCS12KDF support not available\n");
+ goto export_end;
+ }
}
}
assert(private);
X509_ALGOR_get0(&macobj, NULL, NULL, macalgid);
BIO_puts(bio_err, "MAC: ");
i2a_ASN1_OBJECT(bio_err, macobj);
- BIO_printf(bio_err, ", Iteration %ld\n",
- tmaciter != NULL ? ASN1_INTEGER_get(tmaciter) : 1L);
- BIO_printf(bio_err, "MAC length: %ld, salt length: %ld\n",
- tmac != NULL ? ASN1_STRING_length(tmac) : 0L,
- tsalt != NULL ? ASN1_STRING_length(tsalt) : 0L);
+ if (OBJ_obj2nid(macobj) == NID_pbmac1) {
+ PBKDF2PARAM *pbkdf2_param = PBMAC1_get1_pbkdf2_param(macalgid);
+
+ if (pbkdf2_param == NULL) {
+ BIO_printf(bio_err, ", Unsupported KDF or params for PBMAC1\n");
+ } else {
+ const ASN1_OBJECT *prfobj;
+
+ BIO_printf(bio_err, " using PBKDF2, Iteration %ld\n",
+ ASN1_INTEGER_get(pbkdf2_param->iter));
+ BIO_printf(bio_err, "Key length: %ld, Salt length: %d\n",
+ ASN1_INTEGER_get(pbkdf2_param->keylength),
+ ASN1_STRING_length(pbkdf2_param->salt->value.octet_string));
+ X509_ALGOR_get0(&prfobj, NULL, NULL, pbkdf2_param->prf);
+ BIO_printf(bio_err, "PBKDF2 PRF: ");
+ i2a_ASN1_OBJECT(bio_err, prfobj);
+ BIO_printf(bio_err, "\n");
+ }
+ PBKDF2PARAM_free(pbkdf2_param);
+ } else {
+ BIO_printf(bio_err, ", Iteration %ld\n",
+ tmaciter != NULL ? ASN1_INTEGER_get(tmaciter) : 1L);
+ BIO_printf(bio_err, "MAC length: %ld, salt length: %ld\n",
+ tmac != NULL ? ASN1_STRING_length(tmac) : 0L,
+ tsalt != NULL ? ASN1_STRING_length(tsalt) : 0L);
+ }
}
if (macver) {
EVP_KDF *pkcs12kdf;
#include <stdio.h>
#include "internal/cryptlib.h"
+#include "crypto/evp.h"
#include <openssl/crypto.h>
#include <openssl/hmac.h>
#include <openssl/rand.h>
#include <openssl/pkcs12.h>
#include "p12_local.h"
+static int pkcs12_pbmac1_pbkdf2_key_gen(const char *pass, int passlen,
+ unsigned char *salt, int saltlen,
+ int id, int iter, int keylen,
+ unsigned char *out,
+ const EVP_MD *md_type);
+
int PKCS12_mac_present(const PKCS12 *p12)
{
return p12->mac ? 1 : 0;
return 1;
}
-/* Generate a MAC */
+PBKDF2PARAM *PBMAC1_get1_pbkdf2_param(const X509_ALGOR *macalg)
+{
+ PBMAC1PARAM *param = NULL;
+ PBKDF2PARAM *pbkdf2_param = NULL;
+ const ASN1_OBJECT *kdf_oid;
+
+ param = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(PBMAC1PARAM), macalg->parameter);
+ if (param == NULL) {
+ ERR_raise(ERR_LIB_PKCS12, ERR_R_PASSED_INVALID_ARGUMENT);
+ return NULL;
+ }
+
+ X509_ALGOR_get0(&kdf_oid, NULL, NULL, param->keyDerivationFunc);
+ if (OBJ_obj2nid(kdf_oid) != NID_id_pbkdf2) {
+ ERR_raise(ERR_LIB_PKCS12, ERR_R_PASSED_INVALID_ARGUMENT);
+ PBMAC1PARAM_free(param);
+ return NULL;
+ }
+
+ pbkdf2_param = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(PBKDF2PARAM),
+ param->keyDerivationFunc->parameter);
+ PBMAC1PARAM_free(param);
+
+ return pbkdf2_param;
+}
+
+static int PBMAC1_PBKDF2_HMAC(OSSL_LIB_CTX *ctx, const char *propq,
+ const char *pass, int passlen,
+ const X509_ALGOR *macalg, unsigned char *key)
+{
+ PBKDF2PARAM *pbkdf2_param = NULL;
+ const ASN1_OBJECT *kdf_hmac_oid;
+ int ret = -1;
+ int keylen = 0;
+ EVP_MD *kdf_md = NULL;
+ const ASN1_OCTET_STRING *pbkdf2_salt = NULL;
+
+ pbkdf2_param = PBMAC1_get1_pbkdf2_param(macalg);
+ if (pbkdf2_param == NULL) {
+ ERR_raise(ERR_LIB_PKCS12, ERR_R_UNSUPPORTED);
+ goto err;
+ }
+ keylen = ASN1_INTEGER_get(pbkdf2_param->keylength);
+ pbkdf2_salt = pbkdf2_param->salt->value.octet_string;
+ X509_ALGOR_get0(&kdf_hmac_oid, NULL, NULL, pbkdf2_param->prf);
+
+ kdf_md = EVP_MD_fetch(ctx, OBJ_nid2sn(ossl_hmac2mdnid(OBJ_obj2nid(kdf_hmac_oid))), propq);
+ if (kdf_md == NULL) {
+ ERR_raise(ERR_LIB_PKCS12, ERR_R_FETCH_FAILED);
+ goto err;
+ }
+
+ if (PKCS5_PBKDF2_HMAC(pass, passlen, pbkdf2_salt->data, pbkdf2_salt->length,
+ ASN1_INTEGER_get(pbkdf2_param->iter), kdf_md, keylen, key) <= 0) {
+ ERR_raise(ERR_LIB_PKCS12, ERR_R_INTERNAL_ERROR);
+ goto err;
+ }
+ ret = keylen;
+
+ err:
+ EVP_MD_free(kdf_md);
+ PBKDF2PARAM_free(pbkdf2_param);
+
+ return ret;
+}
+
+/* Generate a MAC, also used for verification */
static int pkcs12_gen_mac(PKCS12 *p12, const char *pass, int passlen,
unsigned char *mac, unsigned int *maclen,
+ int pbmac1_md_nid, int pbmac1_kdf_nid,
int (*pkcs12_key_gen)(const char *pass, int passlen,
unsigned char *salt, int slen,
int id, int iter, int n,
unsigned char key[EVP_MAX_MD_SIZE], *salt;
int saltlen, iter;
char md_name[80];
- int md_size = 0;
- int md_nid;
+ int keylen = 0;
+ int md_nid = NID_undef;
const X509_ALGOR *macalg;
const ASN1_OBJECT *macoid;
iter = ASN1_INTEGER_get(p12->mac->iter);
X509_SIG_get0(p12->mac->dinfo, &macalg, NULL);
X509_ALGOR_get0(&macoid, NULL, NULL, macalg);
- if (OBJ_obj2txt(md_name, sizeof(md_name), macoid, 0) < 0)
- return 0;
-
+ if (OBJ_obj2nid(macoid) == NID_pbmac1) {
+ if (OBJ_obj2txt(md_name, sizeof(md_name), OBJ_nid2obj(pbmac1_md_nid), 0) < 0)
+ return 0;
+ } else {
+ if (OBJ_obj2txt(md_name, sizeof(md_name), macoid, 0) < 0)
+ return 0;
+ }
(void)ERR_set_mark();
md = md_fetch = EVP_MD_fetch(p12->authsafes->ctx.libctx, md_name,
p12->authsafes->ctx.propq);
}
(void)ERR_pop_to_mark();
- md_size = EVP_MD_get_size(md);
+ keylen = EVP_MD_get_size(md);
md_nid = EVP_MD_get_type(md);
- if (md_size < 0)
+ if (keylen < 0)
goto err;
- if ((md_nid == NID_id_GostR3411_94
- || md_nid == NID_id_GostR3411_2012_256
- || md_nid == NID_id_GostR3411_2012_512)
- && ossl_safe_getenv("LEGACY_GOST_PKCS12") == NULL) {
- md_size = TK26_MAC_KEY_LEN;
+
+ /* For PBMAC1 we use a special keygen callback if not provided (e.g. on verification) */
+ if (pbmac1_md_nid != NID_undef && pkcs12_key_gen == NULL) {
+ keylen = PBMAC1_PBKDF2_HMAC(p12->authsafes->ctx.libctx, p12->authsafes->ctx.propq,
+ pass, passlen, macalg, key);
+ if (keylen < 0)
+ goto err;
+ } else if ((md_nid == NID_id_GostR3411_94
+ || md_nid == NID_id_GostR3411_2012_256
+ || md_nid == NID_id_GostR3411_2012_512)
+ && ossl_safe_getenv("LEGACY_GOST_PKCS12") == NULL) {
+ keylen = TK26_MAC_KEY_LEN;
if (!pkcs12_gen_gost_mac_key(pass, passlen, salt, saltlen, iter,
- md_size, key, md)) {
+ keylen, key, md)) {
ERR_raise(ERR_LIB_PKCS12, PKCS12_R_KEY_GEN_ERROR);
goto err;
}
} else {
+ EVP_MD *hmac_md = (EVP_MD *)md;
+ int fetched = 0;
+
+ if (pbmac1_kdf_nid != NID_undef) {
+ char hmac_md_name[128];
+
+ if (OBJ_obj2txt(hmac_md_name, sizeof(hmac_md_name), OBJ_nid2obj(pbmac1_kdf_nid), 0) < 0)
+ goto err;
+ hmac_md = EVP_MD_fetch(NULL, hmac_md_name, NULL);
+ fetched = 1;
+ }
if (pkcs12_key_gen != NULL) {
- if (!(*pkcs12_key_gen)(pass, passlen, salt, saltlen, PKCS12_MAC_ID,
- iter, md_size, key, md)) {
+ int res = (*pkcs12_key_gen)(pass, passlen, salt, saltlen, PKCS12_MAC_ID,
+ iter, keylen, key, hmac_md);
+
+ if (fetched)
+ EVP_MD_free(hmac_md);
+ if (res != 1) {
ERR_raise(ERR_LIB_PKCS12, PKCS12_R_KEY_GEN_ERROR);
goto err;
}
} else {
/* Default to UTF-8 password */
if (!PKCS12_key_gen_utf8_ex(pass, passlen, salt, saltlen, PKCS12_MAC_ID,
- iter, md_size, key, md,
- p12->authsafes->ctx.libctx,
- p12->authsafes->ctx.propq)) {
+ iter, keylen, key, md,
+ p12->authsafes->ctx.libctx, p12->authsafes->ctx.propq)) {
ERR_raise(ERR_LIB_PKCS12, PKCS12_R_KEY_GEN_ERROR);
goto err;
}
}
}
if ((hmac = HMAC_CTX_new()) == NULL
- || !HMAC_Init_ex(hmac, key, md_size, md, NULL)
+ || !HMAC_Init_ex(hmac, key, keylen, md, NULL)
|| !HMAC_Update(hmac, p12->authsafes->d.data->data,
p12->authsafes->d.data->length)
|| !HMAC_Final(hmac, mac, maclen)) {
int PKCS12_gen_mac(PKCS12 *p12, const char *pass, int passlen,
unsigned char *mac, unsigned int *maclen)
{
- return pkcs12_gen_mac(p12, pass, passlen, mac, maclen, NULL);
+ return pkcs12_gen_mac(p12, pass, passlen, mac, maclen, NID_undef, NID_undef, NULL);
}
/* Verify the mac */
unsigned char mac[EVP_MAX_MD_SIZE];
unsigned int maclen;
const ASN1_OCTET_STRING *macoct;
+ const X509_ALGOR *macalg;
+ const ASN1_OBJECT *macoid;
if (p12->mac == NULL) {
ERR_raise(ERR_LIB_PKCS12, PKCS12_R_MAC_ABSENT);
return 0;
}
- if (!pkcs12_gen_mac(p12, pass, passlen, mac, &maclen, NULL)) {
- ERR_raise(ERR_LIB_PKCS12, PKCS12_R_MAC_GENERATION_ERROR);
- return 0;
+
+ X509_SIG_get0(p12->mac->dinfo, &macalg, NULL);
+ X509_ALGOR_get0(&macoid, NULL, NULL, macalg);
+ if (OBJ_obj2nid(macoid) == NID_pbmac1) {
+ PBMAC1PARAM *param = NULL;
+ const ASN1_OBJECT *hmac_oid;
+ int md_nid = NID_undef;
+
+ param = ASN1_TYPE_unpack_sequence(ASN1_ITEM_rptr(PBMAC1PARAM), macalg->parameter);
+ if (param == NULL) {
+ ERR_raise(ERR_LIB_PKCS12, ERR_R_UNSUPPORTED);
+ return 0;
+ }
+ X509_ALGOR_get0(&hmac_oid, NULL, NULL, param->messageAuthScheme);
+ md_nid = ossl_hmac2mdnid(OBJ_obj2nid(hmac_oid));
+
+ if (!pkcs12_gen_mac(p12, pass, passlen, mac, &maclen, md_nid, NID_undef, NULL)) {
+ ERR_raise(ERR_LIB_PKCS12, PKCS12_R_MAC_GENERATION_ERROR);
+ PBMAC1PARAM_free(param);
+ return 0;
+ }
+ PBMAC1PARAM_free(param);
+ } else {
+ if (!pkcs12_gen_mac(p12, pass, passlen, mac, &maclen, NID_undef, NID_undef, NULL)) {
+ ERR_raise(ERR_LIB_PKCS12, PKCS12_R_MAC_GENERATION_ERROR);
+ return 0;
+ }
}
X509_SIG_get0(p12->mac->dinfo, NULL, &macoct);
if ((maclen != (unsigned int)ASN1_STRING_length(macoct))
}
/* Set a mac */
-
int PKCS12_set_mac(PKCS12 *p12, const char *pass, int passlen,
unsigned char *salt, int saltlen, int iter,
const EVP_MD *md_type)
/*
* Note that output mac is forced to UTF-8...
*/
- if (!pkcs12_gen_mac(p12, pass, passlen, mac, &maclen, NULL)) {
+ if (!pkcs12_gen_mac(p12, pass, passlen, mac, &maclen, NID_undef, NID_undef, NULL)) {
ERR_raise(ERR_LIB_PKCS12, PKCS12_R_MAC_GENERATION_ERROR);
return 0;
}
return 1;
}
-/* Set up a mac structure */
-int PKCS12_setup_mac(PKCS12 *p12, int iter, unsigned char *salt, int saltlen,
- const EVP_MD *md_type)
+static int pkcs12_pbmac1_pbkdf2_key_gen(const char *pass, int passlen,
+ unsigned char *salt, int saltlen,
+ int id, int iter, int keylen,
+ unsigned char *out,
+ const EVP_MD *md_type)
+{
+ return PKCS5_PBKDF2_HMAC(pass, passlen, salt, saltlen, iter,
+ md_type, keylen, out);
+}
+
+static int pkcs12_setup_mac(PKCS12 *p12, int iter, unsigned char *salt, int saltlen,
+ int nid)
{
X509_ALGOR *macalg;
memcpy(p12->mac->salt->data, salt, saltlen);
}
X509_SIG_getm(p12->mac->dinfo, &macalg, NULL);
- if (!X509_ALGOR_set0(macalg, OBJ_nid2obj(EVP_MD_get_type(md_type)),
- V_ASN1_NULL, NULL)) {
+ if (!X509_ALGOR_set0(macalg, OBJ_nid2obj(nid), V_ASN1_NULL, NULL)) {
ERR_raise(ERR_LIB_PKCS12, ERR_R_ASN1_LIB);
return 0;
}
return 1;
}
+
+/* Set up a mac structure */
+int PKCS12_setup_mac(PKCS12 *p12, int iter, unsigned char *salt, int saltlen,
+ const EVP_MD *md_type)
+{
+ return pkcs12_setup_mac(p12, iter, salt, saltlen, EVP_MD_get_type(md_type));
+}
+
+int PKCS12_set_pbmac1_pbkdf2(PKCS12 *p12, const char *pass, int passlen,
+ unsigned char *salt, int saltlen, int iter,
+ const EVP_MD *md_type, const char *prf_md_name)
+{
+ unsigned char mac[EVP_MAX_MD_SIZE];
+ unsigned int maclen;
+ ASN1_OCTET_STRING *macoct;
+ X509_ALGOR *alg = NULL;
+ int ret = 0;
+ int prf_md_nid = NID_undef, prf_nid = NID_undef, hmac_nid;
+ unsigned char *known_salt = NULL;
+ int keylen = 0;
+ PBMAC1PARAM *param = NULL;
+ X509_ALGOR *hmac_alg = NULL, *macalg = NULL;
+
+ if (md_type == NULL)
+ /* No need to do a fetch as the md_type is used only to get a NID */
+ md_type = EVP_sha256();
+
+ if (prf_md_name == NULL)
+ prf_md_nid = EVP_MD_get_type(md_type);
+ else
+ prf_md_nid = OBJ_txt2nid(prf_md_name);
+
+ if (iter == 0)
+ iter = PKCS12_DEFAULT_ITER;
+
+ keylen = EVP_MD_get_size(md_type);
+
+ prf_nid = ossl_md2hmacnid(prf_md_nid);
+ hmac_nid = ossl_md2hmacnid(EVP_MD_get_type(md_type));
+
+ if (prf_nid == NID_undef || hmac_nid == NID_undef) {
+ ERR_raise(ERR_LIB_PKCS12, PKCS12_R_UNKNOWN_DIGEST_ALGORITHM);
+ goto err;
+ }
+
+ if (salt == NULL) {
+ known_salt = OPENSSL_malloc(saltlen);
+ if (known_salt == NULL)
+ goto err;
+
+ if (RAND_bytes_ex(NULL, known_salt, saltlen, 0) <= 0) {
+ ERR_raise(ERR_LIB_PKCS12, ERR_R_RAND_LIB);
+ goto err;
+ }
+ }
+
+ param = PBMAC1PARAM_new();
+ hmac_alg = X509_ALGOR_new();
+ alg = PKCS5_pbkdf2_set(iter, salt ? salt : known_salt, saltlen, prf_nid, keylen);
+ if (param == NULL || hmac_alg == NULL || alg == NULL)
+ goto err;
+
+ if (pkcs12_setup_mac(p12, iter, salt ? salt : known_salt, saltlen,
+ NID_pbmac1) == PKCS12_ERROR) {
+ ERR_raise(ERR_LIB_PKCS12, PKCS12_R_MAC_SETUP_ERROR);
+ goto err;
+ }
+
+ if (!X509_ALGOR_set0(hmac_alg, OBJ_nid2obj(hmac_nid), V_ASN1_NULL, NULL)) {
+ ERR_raise(ERR_LIB_PKCS12, PKCS12_R_MAC_SETUP_ERROR);
+ goto err;
+ }
+
+ X509_ALGOR_free(param->keyDerivationFunc);
+ X509_ALGOR_free(param->messageAuthScheme);
+ param->keyDerivationFunc = alg;
+ param->messageAuthScheme = hmac_alg;
+
+ X509_SIG_getm(p12->mac->dinfo, &macalg, &macoct);
+ if (!ASN1_TYPE_pack_sequence(ASN1_ITEM_rptr(PBMAC1PARAM), param, &macalg->parameter))
+ goto err;
+
+ /*
+ * Note that output mac is forced to UTF-8...
+ */
+ if (!pkcs12_gen_mac(p12, pass, passlen, mac, &maclen,
+ EVP_MD_get_type(md_type), prf_md_nid,
+ pkcs12_pbmac1_pbkdf2_key_gen)) {
+ ERR_raise(ERR_LIB_PKCS12, PKCS12_R_MAC_GENERATION_ERROR);
+ goto err;
+ }
+ if (!ASN1_OCTET_STRING_set(macoct, mac, maclen)) {
+ ERR_raise(ERR_LIB_PKCS12, PKCS12_R_MAC_STRING_SET_ERROR);
+ goto err;
+ }
+ ret = 1;
+
+ err:
+ PBMAC1PARAM_free(param);
+ OPENSSL_free(known_salt);
+ return ret;
+}
projects / thirdparty / openssl.git / commitdiff
