dsaparam.c 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352
  1. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  2. * All rights reserved.
  3. *
  4. * This package is an SSL implementation written
  5. * by Eric Young (eay@cryptsoft.com).
  6. * The implementation was written so as to conform with Netscapes SSL.
  7. *
  8. * This library is free for commercial and non-commercial use as long as
  9. * the following conditions are aheared to. The following conditions
  10. * apply to all code found in this distribution, be it the RC4, RSA,
  11. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  12. * included with this distribution is covered by the same copyright terms
  13. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  14. *
  15. * Copyright remains Eric Young's, and as such any Copyright notices in
  16. * the code are not to be removed.
  17. * If this package is used in a product, Eric Young should be given attribution
  18. * as the author of the parts of the library used.
  19. * This can be in the form of a textual message at program startup or
  20. * in documentation (online or textual) provided with the package.
  21. *
  22. * Redistribution and use in source and binary forms, with or without
  23. * modification, are permitted provided that the following conditions
  24. * are met:
  25. * 1. Redistributions of source code must retain the copyright
  26. * notice, this list of conditions and the following disclaimer.
  27. * 2. Redistributions in binary form must reproduce the above copyright
  28. * notice, this list of conditions and the following disclaimer in the
  29. * documentation and/or other materials provided with the distribution.
  30. * 3. All advertising materials mentioning features or use of this software
  31. * must display the following acknowledgement:
  32. * "This product includes cryptographic software written by
  33. * Eric Young (eay@cryptsoft.com)"
  34. * The word 'cryptographic' can be left out if the rouines from the library
  35. * being used are not cryptographic related :-).
  36. * 4. If you include any Windows specific code (or a derivative thereof) from
  37. * the apps directory (application code) you must include an acknowledgement:
  38. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  39. *
  40. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  41. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  42. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  43. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  44. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  45. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  46. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  47. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  48. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  49. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  50. * SUCH DAMAGE.
  51. *
  52. * The licence and distribution terms for any publically available version or
  53. * derivative of this code cannot be changed. i.e. this code cannot simply be
  54. * copied and put under another distribution licence
  55. * [including the GNU Public Licence.]
  56. */
  57. #include <openssl/opensslconf.h>
  58. #ifdef OPENSSL_NO_DSA
  59. NON_EMPTY_TRANSLATION_UNIT
  60. #else
  61. # include <stdio.h>
  62. # include <stdlib.h>
  63. # include <time.h>
  64. # include <string.h>
  65. # include "apps.h"
  66. # include <openssl/bio.h>
  67. # include <openssl/err.h>
  68. # include <openssl/bn.h>
  69. # include <openssl/dsa.h>
  70. # include <openssl/x509.h>
  71. # include <openssl/pem.h>
  72. # ifdef GENCB_TEST
  73. static int stop_keygen_flag = 0;
  74. static void timebomb_sigalarm(int foo)
  75. {
  76. stop_keygen_flag = 1;
  77. }
  78. # endif
  79. static int dsa_cb(int p, int n, BN_GENCB *cb);
  80. typedef enum OPTION_choice {
  81. OPT_ERR = -1, OPT_EOF = 0, OPT_HELP,
  82. OPT_INFORM, OPT_OUTFORM, OPT_IN, OPT_OUT, OPT_TEXT, OPT_C,
  83. OPT_NOOUT, OPT_GENKEY, OPT_RAND, OPT_ENGINE,
  84. OPT_TIMEBOMB
  85. } OPTION_CHOICE;
  86. OPTIONS dsaparam_options[] = {
  87. {"help", OPT_HELP, '-', "Display this summary"},
  88. {"inform", OPT_INFORM, 'F', "Input format - DER or PEM"},
  89. {"in", OPT_IN, '<', "Input file"},
  90. {"outform", OPT_OUTFORM, 'F', "Output format - DER or PEM"},
  91. {"out", OPT_OUT, '>', "Output file"},
  92. {"text", OPT_TEXT, '-', "Print as text"},
  93. {"C", OPT_C, '-', "Output C code"},
  94. {"noout", OPT_NOOUT, '-', "No output"},
  95. {"genkey", OPT_GENKEY, '-', "Generate a DSA key"},
  96. {"rand", OPT_RAND, 's', "Files to use for random number input"},
  97. # ifdef GENCB_TEST
  98. {"timebomb", OPT_TIMEBOMB, 'p', "Interrupt keygen after 'pnum' seconds"},
  99. # endif
  100. # ifndef OPENSSL_NO_ENGINE
  101. {"engine", OPT_ENGINE, 's', "Use engine e, possibly a hardware device"},
  102. # endif
  103. {NULL}
  104. };
  105. int dsaparam_main(int argc, char **argv)
  106. {
  107. DSA *dsa = NULL;
  108. BIO *in = NULL, *out = NULL;
  109. BN_GENCB *cb = NULL;
  110. int numbits = -1, num = 0, genkey = 0, need_rand = 0;
  111. int informat = FORMAT_PEM, outformat = FORMAT_PEM, noout = 0, C = 0;
  112. int ret = 1, i, text = 0, private = 0;
  113. # ifdef GENCB_TEST
  114. int timebomb = 0;
  115. # endif
  116. char *infile = NULL, *outfile = NULL, *prog, *inrand = NULL;
  117. OPTION_CHOICE o;
  118. prog = opt_init(argc, argv, dsaparam_options);
  119. while ((o = opt_next()) != OPT_EOF) {
  120. switch (o) {
  121. case OPT_EOF:
  122. case OPT_ERR:
  123. opthelp:
  124. BIO_printf(bio_err, "%s: Use -help for summary.\n", prog);
  125. goto end;
  126. case OPT_HELP:
  127. opt_help(dsaparam_options);
  128. ret = 0;
  129. goto end;
  130. case OPT_INFORM:
  131. if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &informat))
  132. goto opthelp;
  133. break;
  134. case OPT_IN:
  135. infile = opt_arg();
  136. break;
  137. case OPT_OUTFORM:
  138. if (!opt_format(opt_arg(), OPT_FMT_PEMDER, &outformat))
  139. goto opthelp;
  140. break;
  141. case OPT_OUT:
  142. outfile = opt_arg();
  143. break;
  144. case OPT_ENGINE:
  145. (void)setup_engine(opt_arg(), 0);
  146. break;
  147. case OPT_TIMEBOMB:
  148. # ifdef GENCB_TEST
  149. timebomb = atoi(opt_arg());
  150. break;
  151. # endif
  152. case OPT_TEXT:
  153. text = 1;
  154. break;
  155. case OPT_C:
  156. C = 1;
  157. break;
  158. case OPT_GENKEY:
  159. genkey = need_rand = 1;
  160. break;
  161. case OPT_RAND:
  162. inrand = opt_arg();
  163. need_rand = 1;
  164. break;
  165. case OPT_NOOUT:
  166. noout = 1;
  167. break;
  168. }
  169. }
  170. argc = opt_num_rest();
  171. argv = opt_rest();
  172. if (argc == 1) {
  173. if (!opt_int(argv[0], &num) || num < 0)
  174. goto end;
  175. /* generate a key */
  176. numbits = num;
  177. need_rand = 1;
  178. }
  179. private = genkey ? 1 : 0;
  180. in = bio_open_default(infile, 'r', informat);
  181. if (in == NULL)
  182. goto end;
  183. out = bio_open_owner(outfile, outformat, private);
  184. if (out == NULL)
  185. goto end;
  186. if (need_rand) {
  187. app_RAND_load_file(NULL, (inrand != NULL));
  188. if (inrand != NULL)
  189. BIO_printf(bio_err, "%ld semi-random bytes loaded\n",
  190. app_RAND_load_files(inrand));
  191. }
  192. if (numbits > 0) {
  193. cb = BN_GENCB_new();
  194. if (cb == NULL) {
  195. BIO_printf(bio_err, "Error allocating BN_GENCB object\n");
  196. goto end;
  197. }
  198. BN_GENCB_set(cb, dsa_cb, bio_err);
  199. assert(need_rand);
  200. dsa = DSA_new();
  201. if (dsa == NULL) {
  202. BIO_printf(bio_err, "Error allocating DSA object\n");
  203. goto end;
  204. }
  205. BIO_printf(bio_err, "Generating DSA parameters, %d bit long prime\n",
  206. num);
  207. BIO_printf(bio_err, "This could take some time\n");
  208. # ifdef GENCB_TEST
  209. if (timebomb > 0) {
  210. struct sigaction act;
  211. act.sa_handler = timebomb_sigalarm;
  212. act.sa_flags = 0;
  213. BIO_printf(bio_err,
  214. "(though I'll stop it if not done within %d secs)\n",
  215. timebomb);
  216. if (sigaction(SIGALRM, &act, NULL) != 0) {
  217. BIO_printf(bio_err, "Error, couldn't set SIGALRM handler\n");
  218. goto end;
  219. }
  220. alarm(timebomb);
  221. }
  222. # endif
  223. if (!DSA_generate_parameters_ex(dsa, num, NULL, 0, NULL, NULL, cb)) {
  224. # ifdef GENCB_TEST
  225. if (stop_keygen_flag) {
  226. BIO_printf(bio_err, "DSA key generation time-stopped\n");
  227. /* This is an asked-for behaviour! */
  228. ret = 0;
  229. goto end;
  230. }
  231. # endif
  232. ERR_print_errors(bio_err);
  233. BIO_printf(bio_err, "Error, DSA key generation failed\n");
  234. goto end;
  235. }
  236. } else if (informat == FORMAT_ASN1)
  237. dsa = d2i_DSAparams_bio(in, NULL);
  238. else
  239. dsa = PEM_read_bio_DSAparams(in, NULL, NULL, NULL);
  240. if (dsa == NULL) {
  241. BIO_printf(bio_err, "unable to load DSA parameters\n");
  242. ERR_print_errors(bio_err);
  243. goto end;
  244. }
  245. if (text) {
  246. DSAparams_print(out, dsa);
  247. }
  248. if (C) {
  249. int len = BN_num_bytes(dsa->p);
  250. int bits_p = BN_num_bits(dsa->p);
  251. unsigned char *data = app_malloc(len + 20, "BN space");
  252. BIO_printf(bio_out, "DSA *get_dsa%d()\n{\n", bits_p);
  253. print_bignum_var(bio_out, dsa->p, "dsap", len, data);
  254. print_bignum_var(bio_out, dsa->q, "dsaq", len, data);
  255. print_bignum_var(bio_out, dsa->g, "dsag", len, data);
  256. BIO_printf(bio_out, " DSA *dsa = DSA_new();\n"
  257. "\n");
  258. BIO_printf(bio_out, " if (dsa == NULL)\n"
  259. " return NULL;\n");
  260. BIO_printf(bio_out, " dsa->p = BN_bin2bn(dsap_%d, sizeof (dsap_%d), NULL);\n",
  261. bits_p, bits_p);
  262. BIO_printf(bio_out, " dsa->q = BN_bin2bn(dsaq_%d, sizeof (dsaq_%d), NULL);\n",
  263. bits_p, bits_p);
  264. BIO_printf(bio_out, " dsa->g = BN_bin2bn(dsag_%d, sizeof (dsag_%d), NULL);\n",
  265. bits_p, bits_p);
  266. BIO_printf(bio_out, " if (!dsa->p || !dsa->q || !dsa->g) {\n"
  267. " DSA_free(dsa);\n"
  268. " return NULL;\n"
  269. " }\n"
  270. " return(dsa);\n}\n");
  271. }
  272. if (!noout) {
  273. if (outformat == FORMAT_ASN1)
  274. i = i2d_DSAparams_bio(out, dsa);
  275. else
  276. i = PEM_write_bio_DSAparams(out, dsa);
  277. if (!i) {
  278. BIO_printf(bio_err, "unable to write DSA parameters\n");
  279. ERR_print_errors(bio_err);
  280. goto end;
  281. }
  282. }
  283. if (genkey) {
  284. DSA *dsakey;
  285. assert(need_rand);
  286. if ((dsakey = DSAparams_dup(dsa)) == NULL)
  287. goto end;
  288. if (!DSA_generate_key(dsakey)) {
  289. ERR_print_errors(bio_err);
  290. DSA_free(dsakey);
  291. goto end;
  292. }
  293. assert(private);
  294. if (outformat == FORMAT_ASN1)
  295. i = i2d_DSAPrivateKey_bio(out, dsakey);
  296. else
  297. i = PEM_write_bio_DSAPrivateKey(out, dsakey, NULL, NULL, 0, NULL,
  298. NULL);
  299. DSA_free(dsakey);
  300. }
  301. if (need_rand)
  302. app_RAND_write_file(NULL);
  303. ret = 0;
  304. end:
  305. BN_GENCB_free(cb);
  306. BIO_free(in);
  307. BIO_free_all(out);
  308. DSA_free(dsa);
  309. return (ret);
  310. }
  311. static int dsa_cb(int p, int n, BN_GENCB *cb)
  312. {
  313. char c = '*';
  314. if (p == 0)
  315. c = '.';
  316. if (p == 1)
  317. c = '+';
  318. if (p == 2)
  319. c = '*';
  320. if (p == 3)
  321. c = '\n';
  322. BIO_write(BN_GENCB_get_arg(cb), &c, 1);
  323. (void)BIO_flush(BN_GENCB_get_arg(cb));
  324. # ifdef GENCB_TEST
  325. if (stop_keygen_flag)
  326. return 0;
  327. # endif
  328. return 1;
  329. }
  330. #endif