ameth_lib.c 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452
  1. /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
  2. * project 2006.
  3. */
  4. /* ====================================================================
  5. * Copyright (c) 2006 The OpenSSL Project. All rights reserved.
  6. *
  7. * Redistribution and use in source and binary forms, with or without
  8. * modification, are permitted provided that the following conditions
  9. * are met:
  10. *
  11. * 1. Redistributions of source code must retain the above copyright
  12. * notice, this list of conditions and the following disclaimer.
  13. *
  14. * 2. Redistributions in binary form must reproduce the above copyright
  15. * notice, this list of conditions and the following disclaimer in
  16. * the documentation and/or other materials provided with the
  17. * distribution.
  18. *
  19. * 3. All advertising materials mentioning features or use of this
  20. * software must display the following acknowledgment:
  21. * "This product includes software developed by the OpenSSL Project
  22. * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
  23. *
  24. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  25. * endorse or promote products derived from this software without
  26. * prior written permission. For written permission, please contact
  27. * licensing@OpenSSL.org.
  28. *
  29. * 5. Products derived from this software may not be called "OpenSSL"
  30. * nor may "OpenSSL" appear in their names without prior written
  31. * permission of the OpenSSL Project.
  32. *
  33. * 6. Redistributions of any form whatsoever must retain the following
  34. * acknowledgment:
  35. * "This product includes software developed by the OpenSSL Project
  36. * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
  37. *
  38. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  39. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  40. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  41. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  42. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  43. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  44. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  45. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  46. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  47. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  48. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  49. * OF THE POSSIBILITY OF SUCH DAMAGE.
  50. * ====================================================================
  51. *
  52. * This product includes cryptographic software written by Eric Young
  53. * (eay@cryptsoft.com). This product includes software written by Tim
  54. * Hudson (tjh@cryptsoft.com).
  55. *
  56. */
  57. #include <stdio.h>
  58. #include "cryptlib.h"
  59. #include <openssl/asn1t.h>
  60. #include <openssl/x509.h>
  61. #ifndef OPENSSL_NO_ENGINE
  62. #include <openssl/engine.h>
  63. #endif
  64. #include "asn1_locl.h"
  65. extern const EVP_PKEY_ASN1_METHOD rsa_asn1_meths[];
  66. extern const EVP_PKEY_ASN1_METHOD dsa_asn1_meths[];
  67. extern const EVP_PKEY_ASN1_METHOD dh_asn1_meth;
  68. extern const EVP_PKEY_ASN1_METHOD eckey_asn1_meth;
  69. extern const EVP_PKEY_ASN1_METHOD hmac_asn1_meth;
  70. extern const EVP_PKEY_ASN1_METHOD cmac_asn1_meth;
  71. /* Keep this sorted in type order !! */
  72. static const EVP_PKEY_ASN1_METHOD *standard_methods[] =
  73. {
  74. #ifndef OPENSSL_NO_RSA
  75. &rsa_asn1_meths[0],
  76. &rsa_asn1_meths[1],
  77. #endif
  78. #ifndef OPENSSL_NO_DH
  79. &dh_asn1_meth,
  80. #endif
  81. #ifndef OPENSSL_NO_DSA
  82. &dsa_asn1_meths[0],
  83. &dsa_asn1_meths[1],
  84. &dsa_asn1_meths[2],
  85. &dsa_asn1_meths[3],
  86. &dsa_asn1_meths[4],
  87. #endif
  88. #ifndef OPENSSL_NO_EC
  89. &eckey_asn1_meth,
  90. #endif
  91. &hmac_asn1_meth,
  92. &cmac_asn1_meth
  93. };
  94. typedef int sk_cmp_fn_type(const char * const *a, const char * const *b);
  95. DECLARE_STACK_OF(EVP_PKEY_ASN1_METHOD)
  96. static STACK_OF(EVP_PKEY_ASN1_METHOD) *app_methods = NULL;
  97. #ifdef TEST
  98. void main()
  99. {
  100. int i;
  101. for (i = 0;
  102. i < sizeof(standard_methods)/sizeof(EVP_PKEY_ASN1_METHOD *);
  103. i++)
  104. fprintf(stderr, "Number %d id=%d (%s)\n", i,
  105. standard_methods[i]->pkey_id,
  106. OBJ_nid2sn(standard_methods[i]->pkey_id));
  107. }
  108. #endif
  109. DECLARE_OBJ_BSEARCH_CMP_FN(const EVP_PKEY_ASN1_METHOD *,
  110. const EVP_PKEY_ASN1_METHOD *, ameth);
  111. static int ameth_cmp(const EVP_PKEY_ASN1_METHOD * const *a,
  112. const EVP_PKEY_ASN1_METHOD * const *b)
  113. {
  114. return ((*a)->pkey_id - (*b)->pkey_id);
  115. }
  116. IMPLEMENT_OBJ_BSEARCH_CMP_FN(const EVP_PKEY_ASN1_METHOD *,
  117. const EVP_PKEY_ASN1_METHOD *, ameth);
  118. int EVP_PKEY_asn1_get_count(void)
  119. {
  120. int num = sizeof(standard_methods)/sizeof(EVP_PKEY_ASN1_METHOD *);
  121. if (app_methods)
  122. num += sk_EVP_PKEY_ASN1_METHOD_num(app_methods);
  123. return num;
  124. }
  125. const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_get0(int idx)
  126. {
  127. int num = sizeof(standard_methods)/sizeof(EVP_PKEY_ASN1_METHOD *);
  128. if (idx < 0)
  129. return NULL;
  130. if (idx < num)
  131. return standard_methods[idx];
  132. idx -= num;
  133. return sk_EVP_PKEY_ASN1_METHOD_value(app_methods, idx);
  134. }
  135. static const EVP_PKEY_ASN1_METHOD *pkey_asn1_find(int type)
  136. {
  137. EVP_PKEY_ASN1_METHOD tmp;
  138. const EVP_PKEY_ASN1_METHOD *t = &tmp, **ret;
  139. tmp.pkey_id = type;
  140. if (app_methods)
  141. {
  142. int idx;
  143. idx = sk_EVP_PKEY_ASN1_METHOD_find(app_methods, &tmp);
  144. if (idx >= 0)
  145. return sk_EVP_PKEY_ASN1_METHOD_value(app_methods, idx);
  146. }
  147. ret = OBJ_bsearch_ameth(&t, standard_methods,
  148. sizeof(standard_methods)
  149. /sizeof(EVP_PKEY_ASN1_METHOD *));
  150. if (!ret || !*ret)
  151. return NULL;
  152. return *ret;
  153. }
  154. /* Find an implementation of an ASN1 algorithm. If 'pe' is not NULL
  155. * also search through engines and set *pe to a functional reference
  156. * to the engine implementing 'type' or NULL if no engine implements
  157. * it.
  158. */
  159. const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_find(ENGINE **pe, int type)
  160. {
  161. const EVP_PKEY_ASN1_METHOD *t;
  162. for (;;)
  163. {
  164. t = pkey_asn1_find(type);
  165. if (!t || !(t->pkey_flags & ASN1_PKEY_ALIAS))
  166. break;
  167. type = t->pkey_base_id;
  168. }
  169. if (pe)
  170. {
  171. #ifndef OPENSSL_NO_ENGINE
  172. ENGINE *e;
  173. /* type will contain the final unaliased type */
  174. e = ENGINE_get_pkey_asn1_meth_engine(type);
  175. if (e)
  176. {
  177. *pe = e;
  178. return ENGINE_get_pkey_asn1_meth(e, type);
  179. }
  180. #endif
  181. *pe = NULL;
  182. }
  183. return t;
  184. }
  185. const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_find_str(ENGINE **pe,
  186. const char *str, int len)
  187. {
  188. int i;
  189. const EVP_PKEY_ASN1_METHOD *ameth;
  190. if (len == -1)
  191. len = strlen(str);
  192. if (pe)
  193. {
  194. #ifndef OPENSSL_NO_ENGINE
  195. ENGINE *e;
  196. ameth = ENGINE_pkey_asn1_find_str(&e, str, len);
  197. if (ameth)
  198. {
  199. /* Convert structural into
  200. * functional reference
  201. */
  202. if (!ENGINE_init(e))
  203. ameth = NULL;
  204. ENGINE_free(e);
  205. *pe = e;
  206. return ameth;
  207. }
  208. #endif
  209. *pe = NULL;
  210. }
  211. for (i = 0; i < EVP_PKEY_asn1_get_count(); i++)
  212. {
  213. ameth = EVP_PKEY_asn1_get0(i);
  214. if (ameth->pkey_flags & ASN1_PKEY_ALIAS)
  215. continue;
  216. if (((int)strlen(ameth->pem_str) == len) &&
  217. !strncasecmp(ameth->pem_str, str, len))
  218. return ameth;
  219. }
  220. return NULL;
  221. }
  222. int EVP_PKEY_asn1_add0(const EVP_PKEY_ASN1_METHOD *ameth)
  223. {
  224. if (app_methods == NULL)
  225. {
  226. app_methods = sk_EVP_PKEY_ASN1_METHOD_new(ameth_cmp);
  227. if (!app_methods)
  228. return 0;
  229. }
  230. if (!sk_EVP_PKEY_ASN1_METHOD_push(app_methods, ameth))
  231. return 0;
  232. sk_EVP_PKEY_ASN1_METHOD_sort(app_methods);
  233. return 1;
  234. }
  235. int EVP_PKEY_asn1_add_alias(int to, int from)
  236. {
  237. EVP_PKEY_ASN1_METHOD *ameth;
  238. ameth = EVP_PKEY_asn1_new(from, ASN1_PKEY_ALIAS, NULL, NULL);
  239. if (!ameth)
  240. return 0;
  241. ameth->pkey_base_id = to;
  242. return EVP_PKEY_asn1_add0(ameth);
  243. }
  244. int EVP_PKEY_asn1_get0_info(int *ppkey_id, int *ppkey_base_id, int *ppkey_flags,
  245. const char **pinfo, const char **ppem_str,
  246. const EVP_PKEY_ASN1_METHOD *ameth)
  247. {
  248. if (!ameth)
  249. return 0;
  250. if (ppkey_id)
  251. *ppkey_id = ameth->pkey_id;
  252. if (ppkey_base_id)
  253. *ppkey_base_id = ameth->pkey_base_id;
  254. if (ppkey_flags)
  255. *ppkey_flags = ameth->pkey_flags;
  256. if (pinfo)
  257. *pinfo = ameth->info;
  258. if (ppem_str)
  259. *ppem_str = ameth->pem_str;
  260. return 1;
  261. }
  262. const EVP_PKEY_ASN1_METHOD* EVP_PKEY_get0_asn1(EVP_PKEY *pkey)
  263. {
  264. return pkey->ameth;
  265. }
  266. EVP_PKEY_ASN1_METHOD* EVP_PKEY_asn1_new(int id, int flags,
  267. const char *pem_str, const char *info)
  268. {
  269. EVP_PKEY_ASN1_METHOD *ameth;
  270. ameth = OPENSSL_malloc(sizeof(EVP_PKEY_ASN1_METHOD));
  271. if (!ameth)
  272. return NULL;
  273. ameth->pkey_id = id;
  274. ameth->pkey_base_id = id;
  275. ameth->pkey_flags = flags | ASN1_PKEY_DYNAMIC;
  276. if (info)
  277. {
  278. ameth->info = BUF_strdup(info);
  279. if (!ameth->info)
  280. goto err;
  281. }
  282. else
  283. ameth->info = NULL;
  284. if (pem_str)
  285. {
  286. ameth->pem_str = BUF_strdup(pem_str);
  287. if (!ameth->pem_str)
  288. goto err;
  289. }
  290. else
  291. ameth->pem_str = NULL;
  292. ameth->pub_decode = 0;
  293. ameth->pub_encode = 0;
  294. ameth->pub_cmp = 0;
  295. ameth->pub_print = 0;
  296. ameth->priv_decode = 0;
  297. ameth->priv_encode = 0;
  298. ameth->priv_print = 0;
  299. ameth->old_priv_encode = 0;
  300. ameth->old_priv_decode = 0;
  301. ameth->pkey_size = 0;
  302. ameth->pkey_bits = 0;
  303. ameth->param_decode = 0;
  304. ameth->param_encode = 0;
  305. ameth->param_missing = 0;
  306. ameth->param_copy = 0;
  307. ameth->param_cmp = 0;
  308. ameth->param_print = 0;
  309. ameth->pkey_free = 0;
  310. ameth->pkey_ctrl = 0;
  311. return ameth;
  312. err:
  313. EVP_PKEY_asn1_free(ameth);
  314. return NULL;
  315. }
  316. void EVP_PKEY_asn1_copy(EVP_PKEY_ASN1_METHOD *dst,
  317. const EVP_PKEY_ASN1_METHOD *src)
  318. {
  319. dst->pub_decode = src->pub_decode;
  320. dst->pub_encode = src->pub_encode;
  321. dst->pub_cmp = src->pub_cmp;
  322. dst->pub_print = src->pub_print;
  323. dst->priv_decode = src->priv_decode;
  324. dst->priv_encode = src->priv_encode;
  325. dst->priv_print = src->priv_print;
  326. dst->old_priv_encode = src->old_priv_encode;
  327. dst->old_priv_decode = src->old_priv_decode;
  328. dst->pkey_size = src->pkey_size;
  329. dst->pkey_bits = src->pkey_bits;
  330. dst->param_decode = src->param_decode;
  331. dst->param_encode = src->param_encode;
  332. dst->param_missing = src->param_missing;
  333. dst->param_copy = src->param_copy;
  334. dst->param_cmp = src->param_cmp;
  335. dst->param_print = src->param_print;
  336. dst->pkey_free = src->pkey_free;
  337. dst->pkey_ctrl = src->pkey_ctrl;
  338. }
  339. void EVP_PKEY_asn1_free(EVP_PKEY_ASN1_METHOD *ameth)
  340. {
  341. if (ameth && (ameth->pkey_flags & ASN1_PKEY_DYNAMIC))
  342. {
  343. if (ameth->pem_str)
  344. OPENSSL_free(ameth->pem_str);
  345. if (ameth->info)
  346. OPENSSL_free(ameth->info);
  347. OPENSSL_free(ameth);
  348. }
  349. }
  350. void EVP_PKEY_asn1_set_public(EVP_PKEY_ASN1_METHOD *ameth,
  351. int (*pub_decode)(EVP_PKEY *pk, X509_PUBKEY *pub),
  352. int (*pub_encode)(X509_PUBKEY *pub, const EVP_PKEY *pk),
  353. int (*pub_cmp)(const EVP_PKEY *a, const EVP_PKEY *b),
  354. int (*pub_print)(BIO *out, const EVP_PKEY *pkey, int indent,
  355. ASN1_PCTX *pctx),
  356. int (*pkey_size)(const EVP_PKEY *pk),
  357. int (*pkey_bits)(const EVP_PKEY *pk))
  358. {
  359. ameth->pub_decode = pub_decode;
  360. ameth->pub_encode = pub_encode;
  361. ameth->pub_cmp = pub_cmp;
  362. ameth->pub_print = pub_print;
  363. ameth->pkey_size = pkey_size;
  364. ameth->pkey_bits = pkey_bits;
  365. }
  366. void EVP_PKEY_asn1_set_private(EVP_PKEY_ASN1_METHOD *ameth,
  367. int (*priv_decode)(EVP_PKEY *pk, PKCS8_PRIV_KEY_INFO *p8inf),
  368. int (*priv_encode)(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pk),
  369. int (*priv_print)(BIO *out, const EVP_PKEY *pkey, int indent,
  370. ASN1_PCTX *pctx))
  371. {
  372. ameth->priv_decode = priv_decode;
  373. ameth->priv_encode = priv_encode;
  374. ameth->priv_print = priv_print;
  375. }
  376. void EVP_PKEY_asn1_set_param(EVP_PKEY_ASN1_METHOD *ameth,
  377. int (*param_decode)(EVP_PKEY *pkey,
  378. const unsigned char **pder, int derlen),
  379. int (*param_encode)(const EVP_PKEY *pkey, unsigned char **pder),
  380. int (*param_missing)(const EVP_PKEY *pk),
  381. int (*param_copy)(EVP_PKEY *to, const EVP_PKEY *from),
  382. int (*param_cmp)(const EVP_PKEY *a, const EVP_PKEY *b),
  383. int (*param_print)(BIO *out, const EVP_PKEY *pkey, int indent,
  384. ASN1_PCTX *pctx))
  385. {
  386. ameth->param_decode = param_decode;
  387. ameth->param_encode = param_encode;
  388. ameth->param_missing = param_missing;
  389. ameth->param_copy = param_copy;
  390. ameth->param_cmp = param_cmp;
  391. ameth->param_print = param_print;
  392. }
  393. void EVP_PKEY_asn1_set_free(EVP_PKEY_ASN1_METHOD *ameth,
  394. void (*pkey_free)(EVP_PKEY *pkey))
  395. {
  396. ameth->pkey_free = pkey_free;
  397. }
  398. void EVP_PKEY_asn1_set_ctrl(EVP_PKEY_ASN1_METHOD *ameth,
  399. int (*pkey_ctrl)(EVP_PKEY *pkey, int op,
  400. long arg1, void *arg2))
  401. {
  402. ameth->pkey_ctrl = pkey_ctrl;
  403. }