123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194 |
- /*
- * Copyright 2019 The OpenSSL Project Authors. All Rights Reserved.
- *
- * Licensed under the Apache License 2.0 (the "License"). You may not use
- * this file except in compliance with the License. You can obtain a copy
- * in the file LICENSE in the source distribution or at
- * https://www.openssl.org/source/license.html
- */
- #include <openssl/crypto.h>
- #include <openssl/core_numbers.h>
- #include <openssl/core_names.h>
- #include <openssl/dh.h>
- #include <openssl/params.h>
- #include "internal/provider_algs.h"
- static OSSL_OP_keyexch_newctx_fn dh_newctx;
- static OSSL_OP_keyexch_init_fn dh_init;
- static OSSL_OP_keyexch_set_peer_fn dh_set_peer;
- static OSSL_OP_keyexch_derive_fn dh_derive;
- static OSSL_OP_keyexch_freectx_fn dh_freectx;
- static OSSL_OP_keyexch_dupctx_fn dh_dupctx;
- typedef struct {
- DH *dh;
- DH *dhpeer;
- int pad;
- } PROV_DH_CTX;
- static void *dh_newctx(void *provctx)
- {
- return OPENSSL_zalloc(sizeof(PROV_DH_CTX));
- }
- static DH *param_to_dh(OSSL_PARAM params[], int priv)
- {
- DH *dh = DH_new();
- OSSL_PARAM *paramptr;
- BIGNUM *p = NULL, *g = NULL, *pub_key = NULL, *priv_key = NULL;
- if (dh == NULL)
- return NULL;
- paramptr = OSSL_PARAM_locate(params, OSSL_PKEY_PARAM_DH_P);
- if (paramptr == NULL
- || !OSSL_PARAM_get_BN(paramptr, &p))
- goto err;
- paramptr = OSSL_PARAM_locate(params, OSSL_PKEY_PARAM_DH_G);
- if (paramptr == NULL || !OSSL_PARAM_get_BN(paramptr, &g))
- goto err;
- if (!DH_set0_pqg(dh, p, NULL, g))
- goto err;
- p = g = NULL;
- paramptr = OSSL_PARAM_locate(params, OSSL_PKEY_PARAM_DH_PUB_KEY);
- if (paramptr == NULL || !OSSL_PARAM_get_BN(paramptr, &pub_key))
- goto err;
- /* Private key is optional */
- if (priv) {
- paramptr = OSSL_PARAM_locate(params, OSSL_PKEY_PARAM_DH_PRIV_KEY);
- if (paramptr == NULL
- || (priv_key = BN_secure_new()) == NULL
- || !OSSL_PARAM_get_BN(paramptr, &priv_key))
- goto err;
- }
- if (!DH_set0_key(dh, pub_key, priv_key))
- goto err;
- return dh;
- err:
- BN_free(p);
- BN_free(g);
- BN_free(pub_key);
- BN_free(priv_key);
- DH_free(dh);
- return NULL;
- }
- static int dh_init(void *vpdhctx, OSSL_PARAM params[])
- {
- PROV_DH_CTX *pdhctx = (PROV_DH_CTX *)vpdhctx;
- DH_free(pdhctx->dh);
- pdhctx->dh = param_to_dh(params, 1);
- return pdhctx->dh != NULL;
- }
- static int dh_set_peer(void *vpdhctx, OSSL_PARAM params[])
- {
- PROV_DH_CTX *pdhctx = (PROV_DH_CTX *)vpdhctx;
- DH_free(pdhctx->dhpeer);
- pdhctx->dhpeer = param_to_dh(params, 0);
- return pdhctx->dhpeer != NULL;
- }
- static int dh_derive(void *vpdhctx, unsigned char *key, size_t *keylen,
- size_t outlen)
- {
- PROV_DH_CTX *pdhctx = (PROV_DH_CTX *)vpdhctx;
- int ret;
- size_t dhsize;
- const BIGNUM *pub_key = NULL;
- /* TODO(3.0): Add errors to stack */
- if (pdhctx->dh == NULL || pdhctx->dhpeer == NULL)
- return 0;
- dhsize = (size_t)DH_size(pdhctx->dh);
- if (key == NULL) {
- *keylen = dhsize;
- return 1;
- }
- if (outlen < dhsize)
- return 0;
- DH_get0_key(pdhctx->dhpeer, &pub_key, NULL);
- ret = (pdhctx->pad) ? DH_compute_key_padded(key, pub_key, pdhctx->dh)
- : DH_compute_key(key, pub_key, pdhctx->dh);
- if (ret <= 0)
- return 0;
- *keylen = ret;
- return 1;
- }
- static void dh_freectx(void *vpdhctx)
- {
- PROV_DH_CTX *pdhctx = (PROV_DH_CTX *)vpdhctx;
- DH_free(pdhctx->dh);
- DH_free(pdhctx->dhpeer);
- OPENSSL_free(pdhctx);
- }
- static void *dh_dupctx(void *vpdhctx)
- {
- PROV_DH_CTX *srcctx = (PROV_DH_CTX *)vpdhctx;
- PROV_DH_CTX *dstctx;
- dstctx = OPENSSL_zalloc(sizeof(*srcctx));
- *dstctx = *srcctx;
- if (dstctx->dh != NULL && !DH_up_ref(dstctx->dh)) {
- OPENSSL_free(dstctx);
- return NULL;
- }
- if (dstctx->dhpeer != NULL && !DH_up_ref(dstctx->dhpeer)) {
- DH_free(dstctx->dh);
- OPENSSL_free(dstctx);
- return NULL;
- }
- return dstctx;
- }
- static int dh_set_params(void *vpdhctx, OSSL_PARAM params[])
- {
- PROV_DH_CTX *pdhctx = (PROV_DH_CTX *)vpdhctx;
- const OSSL_PARAM *p;
- int pad;
- if (pdhctx == NULL || params == NULL)
- return 0;
- p = OSSL_PARAM_locate(params, OSSL_EXCHANGE_PARAM_PAD);
- if (p == NULL || !OSSL_PARAM_get_int(p, &pad))
- return 0;
- pdhctx->pad = pad;
- return 1;
- }
- const OSSL_DISPATCH dh_functions[] = {
- { OSSL_FUNC_KEYEXCH_NEWCTX, (void (*)(void))dh_newctx },
- { OSSL_FUNC_KEYEXCH_INIT, (void (*)(void))dh_init },
- { OSSL_FUNC_KEYEXCH_DERIVE, (void (*)(void))dh_derive },
- { OSSL_FUNC_KEYEXCH_SET_PEER, (void (*)(void))dh_set_peer },
- { OSSL_FUNC_KEYEXCH_FREECTX, (void (*)(void))dh_freectx },
- { OSSL_FUNC_KEYEXCH_DUPCTX, (void (*)(void))dh_dupctx },
- { OSSL_FUNC_KEYEXCH_SET_PARAMS, (void (*)(void))dh_set_params },
- { 0, NULL }
- };
|