dhparam.c 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563
  1. /* apps/dhparam.c */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. /* ====================================================================
  59. * Copyright (c) 1998-2000 The OpenSSL Project. All rights reserved.
  60. *
  61. * Redistribution and use in source and binary forms, with or without
  62. * modification, are permitted provided that the following conditions
  63. * are met:
  64. *
  65. * 1. Redistributions of source code must retain the above copyright
  66. * notice, this list of conditions and the following disclaimer.
  67. *
  68. * 2. Redistributions in binary form must reproduce the above copyright
  69. * notice, this list of conditions and the following disclaimer in
  70. * the documentation and/or other materials provided with the
  71. * distribution.
  72. *
  73. * 3. All advertising materials mentioning features or use of this
  74. * software must display the following acknowledgment:
  75. * "This product includes software developed by the OpenSSL Project
  76. * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  77. *
  78. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  79. * endorse or promote products derived from this software without
  80. * prior written permission. For written permission, please contact
  81. * openssl-core@openssl.org.
  82. *
  83. * 5. Products derived from this software may not be called "OpenSSL"
  84. * nor may "OpenSSL" appear in their names without prior written
  85. * permission of the OpenSSL Project.
  86. *
  87. * 6. Redistributions of any form whatsoever must retain the following
  88. * acknowledgment:
  89. * "This product includes software developed by the OpenSSL Project
  90. * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  91. *
  92. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  93. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  94. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  95. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  96. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  97. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  98. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  99. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  100. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  101. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  102. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  103. * OF THE POSSIBILITY OF SUCH DAMAGE.
  104. * ====================================================================
  105. *
  106. * This product includes cryptographic software written by Eric Young
  107. * (eay@cryptsoft.com). This product includes software written by Tim
  108. * Hudson (tjh@cryptsoft.com).
  109. *
  110. */
  111. #include <openssl/opensslconf.h> /* for OPENSSL_NO_DH */
  112. #ifndef OPENSSL_NO_DH
  113. #include <stdio.h>
  114. #include <stdlib.h>
  115. #include <time.h>
  116. #include <string.h>
  117. #include "apps.h"
  118. #include <openssl/bio.h>
  119. #include <openssl/err.h>
  120. #include <openssl/bn.h>
  121. #include <openssl/dh.h>
  122. #include <openssl/x509.h>
  123. #include <openssl/pem.h>
  124. #ifndef OPENSSL_NO_DSA
  125. #include <openssl/dsa.h>
  126. #endif
  127. #undef PROG
  128. #define PROG dhparam_main
  129. #define DEFBITS 512
  130. /* -inform arg - input format - default PEM (DER or PEM)
  131. * -outform arg - output format - default PEM
  132. * -in arg - input file - default stdin
  133. * -out arg - output file - default stdout
  134. * -dsaparam - read or generate DSA parameters, convert to DH
  135. * -check - check the parameters are ok
  136. * -noout
  137. * -text
  138. * -C
  139. */
  140. static int MS_CALLBACK dh_cb(int p, int n, BN_GENCB *cb);
  141. int MAIN(int, char **);
  142. int MAIN(int argc, char **argv)
  143. {
  144. #ifndef OPENSSL_NO_ENGINE
  145. ENGINE *e = NULL;
  146. #endif
  147. DH *dh=NULL;
  148. int i,badops=0,text=0;
  149. #ifndef OPENSSL_NO_DSA
  150. int dsaparam=0;
  151. #endif
  152. BIO *in=NULL,*out=NULL;
  153. int informat,outformat,check=0,noout=0,C=0,ret=1;
  154. char *infile,*outfile,*prog;
  155. char *inrand=NULL;
  156. #ifndef OPENSSL_NO_ENGINE
  157. char *engine=NULL;
  158. #endif
  159. int num = 0, g = 0;
  160. apps_startup();
  161. if (bio_err == NULL)
  162. if ((bio_err=BIO_new(BIO_s_file())) != NULL)
  163. BIO_set_fp(bio_err,stderr,BIO_NOCLOSE|BIO_FP_TEXT);
  164. if (!load_config(bio_err, NULL))
  165. goto end;
  166. infile=NULL;
  167. outfile=NULL;
  168. informat=FORMAT_PEM;
  169. outformat=FORMAT_PEM;
  170. prog=argv[0];
  171. argc--;
  172. argv++;
  173. while (argc >= 1)
  174. {
  175. if (strcmp(*argv,"-inform") == 0)
  176. {
  177. if (--argc < 1) goto bad;
  178. informat=str2fmt(*(++argv));
  179. }
  180. else if (strcmp(*argv,"-outform") == 0)
  181. {
  182. if (--argc < 1) goto bad;
  183. outformat=str2fmt(*(++argv));
  184. }
  185. else if (strcmp(*argv,"-in") == 0)
  186. {
  187. if (--argc < 1) goto bad;
  188. infile= *(++argv);
  189. }
  190. else if (strcmp(*argv,"-out") == 0)
  191. {
  192. if (--argc < 1) goto bad;
  193. outfile= *(++argv);
  194. }
  195. #ifndef OPENSSL_NO_ENGINE
  196. else if (strcmp(*argv,"-engine") == 0)
  197. {
  198. if (--argc < 1) goto bad;
  199. engine= *(++argv);
  200. }
  201. #endif
  202. else if (strcmp(*argv,"-check") == 0)
  203. check=1;
  204. else if (strcmp(*argv,"-text") == 0)
  205. text=1;
  206. #ifndef OPENSSL_NO_DSA
  207. else if (strcmp(*argv,"-dsaparam") == 0)
  208. dsaparam=1;
  209. #endif
  210. else if (strcmp(*argv,"-C") == 0)
  211. C=1;
  212. else if (strcmp(*argv,"-noout") == 0)
  213. noout=1;
  214. else if (strcmp(*argv,"-2") == 0)
  215. g=2;
  216. else if (strcmp(*argv,"-5") == 0)
  217. g=5;
  218. else if (strcmp(*argv,"-rand") == 0)
  219. {
  220. if (--argc < 1) goto bad;
  221. inrand= *(++argv);
  222. }
  223. else if (((sscanf(*argv,"%d",&num) == 0) || (num <= 0)))
  224. goto bad;
  225. argv++;
  226. argc--;
  227. }
  228. if (badops)
  229. {
  230. bad:
  231. BIO_printf(bio_err,"%s [options] [numbits]\n",prog);
  232. BIO_printf(bio_err,"where options are\n");
  233. BIO_printf(bio_err," -inform arg input format - one of DER PEM\n");
  234. BIO_printf(bio_err," -outform arg output format - one of DER PEM\n");
  235. BIO_printf(bio_err," -in arg input file\n");
  236. BIO_printf(bio_err," -out arg output file\n");
  237. #ifndef OPENSSL_NO_DSA
  238. BIO_printf(bio_err," -dsaparam read or generate DSA parameters, convert to DH\n");
  239. #endif
  240. BIO_printf(bio_err," -check check the DH parameters\n");
  241. BIO_printf(bio_err," -text print a text form of the DH parameters\n");
  242. BIO_printf(bio_err," -C Output C code\n");
  243. BIO_printf(bio_err," -2 generate parameters using 2 as the generator value\n");
  244. BIO_printf(bio_err," -5 generate parameters using 5 as the generator value\n");
  245. BIO_printf(bio_err," numbits number of bits in to generate (default 512)\n");
  246. #ifndef OPENSSL_NO_ENGINE
  247. BIO_printf(bio_err," -engine e use engine e, possibly a hardware device.\n");
  248. #endif
  249. BIO_printf(bio_err," -rand file%cfile%c...\n", LIST_SEPARATOR_CHAR, LIST_SEPARATOR_CHAR);
  250. BIO_printf(bio_err," - load the file (or the files in the directory) into\n");
  251. BIO_printf(bio_err," the random number generator\n");
  252. BIO_printf(bio_err," -noout no output\n");
  253. goto end;
  254. }
  255. ERR_load_crypto_strings();
  256. #ifndef OPENSSL_NO_ENGINE
  257. e = setup_engine(bio_err, engine, 0);
  258. #endif
  259. if (g && !num)
  260. num = DEFBITS;
  261. #ifndef OPENSSL_NO_DSA
  262. if (dsaparam)
  263. {
  264. if (g)
  265. {
  266. BIO_printf(bio_err, "generator may not be chosen for DSA parameters\n");
  267. goto end;
  268. }
  269. }
  270. else
  271. #endif
  272. {
  273. /* DH parameters */
  274. if (num && !g)
  275. g = 2;
  276. }
  277. if(num) {
  278. BN_GENCB cb;
  279. BN_GENCB_set(&cb, dh_cb, bio_err);
  280. if (!app_RAND_load_file(NULL, bio_err, 1) && inrand == NULL)
  281. {
  282. BIO_printf(bio_err,"warning, not much extra random data, consider using the -rand option\n");
  283. }
  284. if (inrand != NULL)
  285. BIO_printf(bio_err,"%ld semi-random bytes loaded\n",
  286. app_RAND_load_files(inrand));
  287. #ifndef OPENSSL_NO_DSA
  288. if (dsaparam)
  289. {
  290. DSA *dsa = DSA_new();
  291. BIO_printf(bio_err,"Generating DSA parameters, %d bit long prime\n",num);
  292. if(!dsa || !DSA_generate_parameters_ex(dsa, num,
  293. NULL, 0, NULL, NULL, &cb))
  294. {
  295. if(dsa) DSA_free(dsa);
  296. ERR_print_errors(bio_err);
  297. goto end;
  298. }
  299. dh = DSA_dup_DH(dsa);
  300. DSA_free(dsa);
  301. if (dh == NULL)
  302. {
  303. ERR_print_errors(bio_err);
  304. goto end;
  305. }
  306. }
  307. else
  308. #endif
  309. {
  310. dh = DH_new();
  311. BIO_printf(bio_err,"Generating DH parameters, %d bit long safe prime, generator %d\n",num,g);
  312. BIO_printf(bio_err,"This is going to take a long time\n");
  313. if(!dh || !DH_generate_parameters_ex(dh, num, g, &cb))
  314. {
  315. if(dh) DH_free(dh);
  316. ERR_print_errors(bio_err);
  317. goto end;
  318. }
  319. }
  320. app_RAND_write_file(NULL, bio_err);
  321. } else {
  322. in=BIO_new(BIO_s_file());
  323. if (in == NULL)
  324. {
  325. ERR_print_errors(bio_err);
  326. goto end;
  327. }
  328. if (infile == NULL)
  329. BIO_set_fp(in,stdin,BIO_NOCLOSE);
  330. else
  331. {
  332. if (BIO_read_filename(in,infile) <= 0)
  333. {
  334. perror(infile);
  335. goto end;
  336. }
  337. }
  338. if (informat != FORMAT_ASN1 && informat != FORMAT_PEM)
  339. {
  340. BIO_printf(bio_err,"bad input format specified\n");
  341. goto end;
  342. }
  343. #ifndef OPENSSL_NO_DSA
  344. if (dsaparam)
  345. {
  346. DSA *dsa;
  347. if (informat == FORMAT_ASN1)
  348. dsa=d2i_DSAparams_bio(in,NULL);
  349. else /* informat == FORMAT_PEM */
  350. dsa=PEM_read_bio_DSAparams(in,NULL,NULL,NULL);
  351. if (dsa == NULL)
  352. {
  353. BIO_printf(bio_err,"unable to load DSA parameters\n");
  354. ERR_print_errors(bio_err);
  355. goto end;
  356. }
  357. dh = DSA_dup_DH(dsa);
  358. DSA_free(dsa);
  359. if (dh == NULL)
  360. {
  361. ERR_print_errors(bio_err);
  362. goto end;
  363. }
  364. }
  365. else
  366. #endif
  367. {
  368. if (informat == FORMAT_ASN1)
  369. dh=d2i_DHparams_bio(in,NULL);
  370. else /* informat == FORMAT_PEM */
  371. dh=PEM_read_bio_DHparams(in,NULL,NULL,NULL);
  372. if (dh == NULL)
  373. {
  374. BIO_printf(bio_err,"unable to load DH parameters\n");
  375. ERR_print_errors(bio_err);
  376. goto end;
  377. }
  378. }
  379. /* dh != NULL */
  380. }
  381. out=BIO_new(BIO_s_file());
  382. if (out == NULL)
  383. {
  384. ERR_print_errors(bio_err);
  385. goto end;
  386. }
  387. if (outfile == NULL)
  388. {
  389. BIO_set_fp(out,stdout,BIO_NOCLOSE);
  390. #ifdef OPENSSL_SYS_VMS
  391. {
  392. BIO *tmpbio = BIO_new(BIO_f_linebuffer());
  393. out = BIO_push(tmpbio, out);
  394. }
  395. #endif
  396. }
  397. else
  398. {
  399. if (BIO_write_filename(out,outfile) <= 0)
  400. {
  401. perror(outfile);
  402. goto end;
  403. }
  404. }
  405. if (text)
  406. {
  407. DHparams_print(out,dh);
  408. }
  409. if (check)
  410. {
  411. if (!DH_check(dh,&i))
  412. {
  413. ERR_print_errors(bio_err);
  414. goto end;
  415. }
  416. if (i & DH_CHECK_P_NOT_PRIME)
  417. printf("p value is not prime\n");
  418. if (i & DH_CHECK_P_NOT_SAFE_PRIME)
  419. printf("p value is not a safe prime\n");
  420. if (i & DH_UNABLE_TO_CHECK_GENERATOR)
  421. printf("unable to check the generator value\n");
  422. if (i & DH_NOT_SUITABLE_GENERATOR)
  423. printf("the g value is not a generator\n");
  424. if (i == 0)
  425. printf("DH parameters appear to be ok.\n");
  426. }
  427. if (C)
  428. {
  429. unsigned char *data;
  430. int len,l,bits;
  431. len=BN_num_bytes(dh->p);
  432. bits=BN_num_bits(dh->p);
  433. data=(unsigned char *)OPENSSL_malloc(len);
  434. if (data == NULL)
  435. {
  436. perror("OPENSSL_malloc");
  437. goto end;
  438. }
  439. printf("#ifndef HEADER_DH_H\n"
  440. "#include <openssl/dh.h>\n"
  441. "#endif\n");
  442. printf("DH *get_dh%d()\n\t{\n",bits);
  443. l=BN_bn2bin(dh->p,data);
  444. printf("\tstatic unsigned char dh%d_p[]={",bits);
  445. for (i=0; i<l; i++)
  446. {
  447. if ((i%12) == 0) printf("\n\t\t");
  448. printf("0x%02X,",data[i]);
  449. }
  450. printf("\n\t\t};\n");
  451. l=BN_bn2bin(dh->g,data);
  452. printf("\tstatic unsigned char dh%d_g[]={",bits);
  453. for (i=0; i<l; i++)
  454. {
  455. if ((i%12) == 0) printf("\n\t\t");
  456. printf("0x%02X,",data[i]);
  457. }
  458. printf("\n\t\t};\n");
  459. printf("\tDH *dh;\n\n");
  460. printf("\tif ((dh=DH_new()) == NULL) return(NULL);\n");
  461. printf("\tdh->p=BN_bin2bn(dh%d_p,sizeof(dh%d_p),NULL);\n",
  462. bits,bits);
  463. printf("\tdh->g=BN_bin2bn(dh%d_g,sizeof(dh%d_g),NULL);\n",
  464. bits,bits);
  465. printf("\tif ((dh->p == NULL) || (dh->g == NULL))\n");
  466. printf("\t\t{ DH_free(dh); return(NULL); }\n");
  467. if (dh->length)
  468. printf("\tdh->length = %ld;\n", dh->length);
  469. printf("\treturn(dh);\n\t}\n");
  470. OPENSSL_free(data);
  471. }
  472. if (!noout)
  473. {
  474. if (outformat == FORMAT_ASN1)
  475. i=i2d_DHparams_bio(out,dh);
  476. else if (outformat == FORMAT_PEM)
  477. i=PEM_write_bio_DHparams(out,dh);
  478. else {
  479. BIO_printf(bio_err,"bad output format specified for outfile\n");
  480. goto end;
  481. }
  482. if (!i)
  483. {
  484. BIO_printf(bio_err,"unable to write DH parameters\n");
  485. ERR_print_errors(bio_err);
  486. goto end;
  487. }
  488. }
  489. ret=0;
  490. end:
  491. if (in != NULL) BIO_free(in);
  492. if (out != NULL) BIO_free_all(out);
  493. if (dh != NULL) DH_free(dh);
  494. apps_shutdown();
  495. OPENSSL_EXIT(ret);
  496. }
  497. /* dh_cb is identical to dsa_cb in apps/dsaparam.c */
  498. static int MS_CALLBACK dh_cb(int p, int n, BN_GENCB *cb)
  499. {
  500. char c='*';
  501. if (p == 0) c='.';
  502. if (p == 1) c='+';
  503. if (p == 2) c='*';
  504. if (p == 3) c='\n';
  505. BIO_write(cb->arg,&c,1);
  506. (void)BIO_flush(cb->arg);
  507. #ifdef LINT
  508. p=n;
  509. #endif
  510. return 1;
  511. }
  512. #else /* !OPENSSL_NO_DH */
  513. # if PEDANTIC
  514. static void *dummy=&dummy;
  515. # endif
  516. #endif