123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243 |
- /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
- *
- * Licensed under the Apache License 2.0 (the "License"). You may not use
- * this file except in compliance with the License. You can obtain a copy
- * in the file LICENSE in the source distribution or at
- * https://www.openssl.org/source/license.html
- */
- #include <openssl/crypto.h>
- #include <openssl/core_dispatch.h>
- #include <openssl/core_names.h>
- #include <openssl/params.h>
- #include <openssl/err.h>
- #include <openssl/proverr.h>
- #include "internal/cryptlib.h"
- #include "crypto/ecx.h"
- #include "prov/implementations.h"
- #include "prov/providercommon.h"
- #ifdef S390X_EC_ASM
- # include "s390x_arch.h"
- #endif
- static OSSL_FUNC_keyexch_newctx_fn x25519_newctx;
- static OSSL_FUNC_keyexch_newctx_fn x448_newctx;
- static OSSL_FUNC_keyexch_init_fn ecx_init;
- static OSSL_FUNC_keyexch_set_peer_fn ecx_set_peer;
- static OSSL_FUNC_keyexch_derive_fn ecx_derive;
- static OSSL_FUNC_keyexch_freectx_fn ecx_freectx;
- static OSSL_FUNC_keyexch_dupctx_fn ecx_dupctx;
- /*
- * What's passed as an actual key is defined by the KEYMGMT interface.
- * We happen to know that our KEYMGMT simply passes ECX_KEY structures, so
- * we use that here too.
- */
- typedef struct {
- size_t keylen;
- ECX_KEY *key;
- ECX_KEY *peerkey;
- } PROV_ECX_CTX;
- static void *ecx_newctx(void *provctx, size_t keylen)
- {
- PROV_ECX_CTX *ctx;
- if (!ossl_prov_is_running())
- return NULL;
- ctx = OPENSSL_zalloc(sizeof(PROV_ECX_CTX));
- if (ctx == NULL) {
- ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
- return NULL;
- }
- ctx->keylen = keylen;
- return ctx;
- }
- static void *x25519_newctx(void *provctx)
- {
- return ecx_newctx(provctx, X25519_KEYLEN);
- }
- static void *x448_newctx(void *provctx)
- {
- return ecx_newctx(provctx, X448_KEYLEN);
- }
- static int ecx_init(void *vecxctx, void *vkey,
- ossl_unused const OSSL_PARAM params[])
- {
- PROV_ECX_CTX *ecxctx = (PROV_ECX_CTX *)vecxctx;
- ECX_KEY *key = vkey;
- if (!ossl_prov_is_running())
- return 0;
- if (ecxctx == NULL
- || key == NULL
- || key->keylen != ecxctx->keylen
- || !ossl_ecx_key_up_ref(key)) {
- ERR_raise(ERR_LIB_PROV, ERR_R_INTERNAL_ERROR);
- return 0;
- }
- ossl_ecx_key_free(ecxctx->key);
- ecxctx->key = key;
- return 1;
- }
- static int ecx_set_peer(void *vecxctx, void *vkey)
- {
- PROV_ECX_CTX *ecxctx = (PROV_ECX_CTX *)vecxctx;
- ECX_KEY *key = vkey;
- if (!ossl_prov_is_running())
- return 0;
- if (ecxctx == NULL
- || key == NULL
- || key->keylen != ecxctx->keylen
- || !ossl_ecx_key_up_ref(key)) {
- ERR_raise(ERR_LIB_PROV, ERR_R_INTERNAL_ERROR);
- return 0;
- }
- ossl_ecx_key_free(ecxctx->peerkey);
- ecxctx->peerkey = key;
- return 1;
- }
- static int ecx_derive(void *vecxctx, unsigned char *secret, size_t *secretlen,
- size_t outlen)
- {
- PROV_ECX_CTX *ecxctx = (PROV_ECX_CTX *)vecxctx;
- if (!ossl_prov_is_running())
- return 0;
- if (ecxctx->key == NULL
- || ecxctx->key->privkey == NULL
- || ecxctx->peerkey == NULL) {
- ERR_raise(ERR_LIB_PROV, PROV_R_MISSING_KEY);
- return 0;
- }
- if (!ossl_assert(ecxctx->keylen == X25519_KEYLEN
- || ecxctx->keylen == X448_KEYLEN)) {
- ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_KEY_LENGTH);
- return 0;
- }
- if (secret == NULL) {
- *secretlen = ecxctx->keylen;
- return 1;
- }
- if (outlen < ecxctx->keylen) {
- ERR_raise(ERR_LIB_PROV, PROV_R_OUTPUT_BUFFER_TOO_SMALL);
- return 0;
- }
- if (ecxctx->keylen == X25519_KEYLEN) {
- #ifdef S390X_EC_ASM
- if (OPENSSL_s390xcap_P.pcc[1]
- & S390X_CAPBIT(S390X_SCALAR_MULTIPLY_X25519)) {
- if (s390x_x25519_mul(secret, ecxctx->peerkey->pubkey,
- ecxctx->key->privkey) == 0) {
- ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_DURING_DERIVATION);
- return 0;
- }
- } else
- #endif
- if (ossl_x25519(secret, ecxctx->key->privkey,
- ecxctx->peerkey->pubkey) == 0) {
- ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_DURING_DERIVATION);
- return 0;
- }
- } else {
- #ifdef S390X_EC_ASM
- if (OPENSSL_s390xcap_P.pcc[1]
- & S390X_CAPBIT(S390X_SCALAR_MULTIPLY_X448)) {
- if (s390x_x448_mul(secret, ecxctx->peerkey->pubkey,
- ecxctx->key->privkey) == 0) {
- ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_DURING_DERIVATION);
- return 0;
- }
- } else
- #endif
- if (ossl_x448(secret, ecxctx->key->privkey,
- ecxctx->peerkey->pubkey) == 0) {
- ERR_raise(ERR_LIB_PROV, PROV_R_FAILED_DURING_DERIVATION);
- return 0;
- }
- }
- *secretlen = ecxctx->keylen;
- return 1;
- }
- static void ecx_freectx(void *vecxctx)
- {
- PROV_ECX_CTX *ecxctx = (PROV_ECX_CTX *)vecxctx;
- ossl_ecx_key_free(ecxctx->key);
- ossl_ecx_key_free(ecxctx->peerkey);
- OPENSSL_free(ecxctx);
- }
- static void *ecx_dupctx(void *vecxctx)
- {
- PROV_ECX_CTX *srcctx = (PROV_ECX_CTX *)vecxctx;
- PROV_ECX_CTX *dstctx;
- if (!ossl_prov_is_running())
- return NULL;
- dstctx = OPENSSL_zalloc(sizeof(*srcctx));
- if (dstctx == NULL) {
- ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
- return NULL;
- }
- *dstctx = *srcctx;
- if (dstctx->key != NULL && !ossl_ecx_key_up_ref(dstctx->key)) {
- ERR_raise(ERR_LIB_PROV, ERR_R_INTERNAL_ERROR);
- OPENSSL_free(dstctx);
- return NULL;
- }
- if (dstctx->peerkey != NULL && !ossl_ecx_key_up_ref(dstctx->peerkey)) {
- ERR_raise(ERR_LIB_PROV, ERR_R_INTERNAL_ERROR);
- ossl_ecx_key_free(dstctx->key);
- OPENSSL_free(dstctx);
- return NULL;
- }
- return dstctx;
- }
- const OSSL_DISPATCH ossl_x25519_keyexch_functions[] = {
- { OSSL_FUNC_KEYEXCH_NEWCTX, (void (*)(void))x25519_newctx },
- { OSSL_FUNC_KEYEXCH_INIT, (void (*)(void))ecx_init },
- { OSSL_FUNC_KEYEXCH_DERIVE, (void (*)(void))ecx_derive },
- { OSSL_FUNC_KEYEXCH_SET_PEER, (void (*)(void))ecx_set_peer },
- { OSSL_FUNC_KEYEXCH_FREECTX, (void (*)(void))ecx_freectx },
- { OSSL_FUNC_KEYEXCH_DUPCTX, (void (*)(void))ecx_dupctx },
- { 0, NULL }
- };
- const OSSL_DISPATCH ossl_x448_keyexch_functions[] = {
- { OSSL_FUNC_KEYEXCH_NEWCTX, (void (*)(void))x448_newctx },
- { OSSL_FUNC_KEYEXCH_INIT, (void (*)(void))ecx_init },
- { OSSL_FUNC_KEYEXCH_DERIVE, (void (*)(void))ecx_derive },
- { OSSL_FUNC_KEYEXCH_SET_PEER, (void (*)(void))ecx_set_peer },
- { OSSL_FUNC_KEYEXCH_FREECTX, (void (*)(void))ecx_freectx },
- { OSSL_FUNC_KEYEXCH_DUPCTX, (void (*)(void))ecx_dupctx },
- { 0, NULL }
- };
|