Logo Search packages:      
Sourcecode: openssl version File versions

rsaref.c

/* Demo of how to construct your own engine and using it.  The basis of this
   engine is RSAref, an old reference of the RSA algorithm which can still
   be found a little here and there. */

#include <stdio.h>
#include <string.h>
#include "./source/global.h"
#include "./source/rsaref.h"
#include "./source/rsa.h"
#include "./source/des.h"
#include <openssl/err.h>
#define OPENSSL_NO_MD2
#define OPENSSL_NO_MD5
#include <openssl/evp.h>
#include <openssl/bn.h>
#include <openssl/engine.h>

#define RSAREF_LIB_NAME "rsaref engine"
#include "rsaref_err.c"

/*****************************************************************************
 *** Function declarations and global variable definitions                 ***
 *****************************************************************************/

/*****************************************************************************
 * Constants used when creating the ENGINE
 **/
static const char *engine_rsaref_id = "rsaref";
static const char *engine_rsaref_name = "RSAref engine support";

/*****************************************************************************
 * Functions to handle the engine
 **/
static int rsaref_destroy(ENGINE *e);
static int rsaref_init(ENGINE *e);
static int rsaref_finish(ENGINE *e);
#if 0
static int rsaref_ctrl(ENGINE *e, int cmd, long i, void *p, void (*f)()); 
#endif

/*****************************************************************************
 * Engine commands
 **/
static const ENGINE_CMD_DEFN rsaref_cmd_defns[] = {
      {0, NULL, NULL, 0}
      };

/*****************************************************************************
 * RSA functions
 **/
static int rsaref_private_decrypt(int len, const unsigned char *from,
      unsigned char *to, RSA *rsa, int padding);
static int rsaref_private_encrypt(int len, const unsigned char *from,
      unsigned char *to, RSA *rsa, int padding);
static int rsaref_public_encrypt(int len, const unsigned char *from,
      unsigned char *to, RSA *rsa, int padding);
static int rsaref_public_decrypt(int len, const unsigned char *from,
      unsigned char *to, RSA *rsa, int padding);
static int bnref_mod_exp(BIGNUM *r,const BIGNUM *a,const BIGNUM *p,const BIGNUM *m,
                    BN_CTX *ctx, BN_MONT_CTX *m_ctx);
static int rsaref_mod_exp(BIGNUM *r0, const BIGNUM *I, RSA *rsa);

/*****************************************************************************
 * Our RSA method
 **/
static RSA_METHOD rsaref_rsa =
{
  "RSAref PKCS#1 RSA",
  rsaref_public_encrypt,
  rsaref_public_decrypt,
  rsaref_private_encrypt,
  rsaref_private_decrypt,
  rsaref_mod_exp,
  bnref_mod_exp,
  NULL,
  NULL,
  0,
  NULL,
  NULL,
  NULL
};

/*****************************************************************************
 * Symetric cipher and digest function registrars
 **/
static int rsaref_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
      const int **nids, int nid);
static int rsaref_digests(ENGINE *e, const EVP_MD **digest,
      const int **nids, int nid);

static int rsaref_cipher_nids[] =
      { NID_des_cbc, NID_des_ede3_cbc, NID_desx_cbc, 0 };
static int rsaref_digest_nids[] =
      { NID_md2, NID_md5, 0 };

/*****************************************************************************
 * DES functions
 **/
static int cipher_des_cbc_init(EVP_CIPHER_CTX *ctx, const unsigned char *key,
      const unsigned char *iv, int enc);
static int cipher_des_cbc_code(EVP_CIPHER_CTX *ctx, unsigned char *out,
      const unsigned char *in, unsigned int inl);
static int cipher_des_cbc_clean(EVP_CIPHER_CTX *);
static int cipher_des_ede3_cbc_init(EVP_CIPHER_CTX *ctx, const unsigned char *key,
      const unsigned char *iv, int enc);
static int cipher_des_ede3_cbc_code(EVP_CIPHER_CTX *ctx, unsigned char *out,
      const unsigned char *in, unsigned int inl);
static int cipher_des_ede3_cbc_clean(EVP_CIPHER_CTX *);
static int cipher_desx_cbc_init(EVP_CIPHER_CTX *ctx, const unsigned char *key,
      const unsigned char *iv, int enc);
static int cipher_desx_cbc_code(EVP_CIPHER_CTX *ctx, unsigned char *out,
      const unsigned char *in, unsigned int inl);
static int cipher_desx_cbc_clean(EVP_CIPHER_CTX *);

/*****************************************************************************
 * Our DES ciphers
 **/
static const EVP_CIPHER cipher_des_cbc =
      {
      NID_des_cbc,
      8, 8, 8,
      0 | EVP_CIPH_CBC_MODE,
      cipher_des_cbc_init,
      cipher_des_cbc_code,
      cipher_des_cbc_clean,
      sizeof(DES_CBC_CTX),
      NULL,
      NULL,
      NULL,
      NULL
      };

static const EVP_CIPHER cipher_des_ede3_cbc =
      {
      NID_des_ede3_cbc,
      8, 24, 8,
      0 | EVP_CIPH_CBC_MODE,
      cipher_des_ede3_cbc_init,
      cipher_des_ede3_cbc_code,
      cipher_des_ede3_cbc_clean,
      sizeof(DES3_CBC_CTX),
      NULL,
      NULL,
      NULL,
      NULL
      };

static const EVP_CIPHER cipher_desx_cbc =
      {
      NID_desx_cbc,
      8, 24, 8,
      0 | EVP_CIPH_CBC_MODE,
      cipher_desx_cbc_init,
      cipher_desx_cbc_code,
      cipher_desx_cbc_clean,
      sizeof(DESX_CBC_CTX),
      NULL,
      NULL,
      NULL,
      NULL
      };

/*****************************************************************************
 * MD functions
 **/
static int digest_md2_init(EVP_MD_CTX *ctx);
static int digest_md2_update(EVP_MD_CTX *ctx,const void *data,
      unsigned long count);
static int digest_md2_final(EVP_MD_CTX *ctx,unsigned char *md);
static int digest_md5_init(EVP_MD_CTX *ctx);
static int digest_md5_update(EVP_MD_CTX *ctx,const void *data,
      unsigned long count);
static int digest_md5_final(EVP_MD_CTX *ctx,unsigned char *md);

/*****************************************************************************
 * Our MD digests
 **/
static const EVP_MD digest_md2 =
      {
      NID_md2,
      NID_md2WithRSAEncryption,
      16,
      0,
      digest_md2_init,
      digest_md2_update,
      digest_md2_final,
      NULL,
      NULL,
      EVP_PKEY_RSA_method,
      16,
      sizeof(MD2_CTX)
      };

static const EVP_MD digest_md5 =
      {
      NID_md5,
      NID_md5WithRSAEncryption,
      16,
      0,
      digest_md5_init,
      digest_md5_update,
      digest_md5_final,
      NULL,
      NULL,
      EVP_PKEY_RSA_method,
      64,
      sizeof(MD5_CTX)
      };

/*****************************************************************************
 *** Function definitions                                                  ***
 *****************************************************************************/

/*****************************************************************************
 * Functions to handle the engine
 **/

static int bind_rsaref(ENGINE *e)
      {
      const RSA_METHOD *meth1;
      if(!ENGINE_set_id(e, engine_rsaref_id)
            || !ENGINE_set_name(e, engine_rsaref_name)
            || !ENGINE_set_RSA(e, &rsaref_rsa)
            || !ENGINE_set_ciphers(e, rsaref_ciphers)
            || !ENGINE_set_digests(e, rsaref_digests)
            || !ENGINE_set_destroy_function(e, rsaref_destroy)
            || !ENGINE_set_init_function(e, rsaref_init)
            || !ENGINE_set_finish_function(e, rsaref_finish)
            /* || !ENGINE_set_ctrl_function(e, rsaref_ctrl) */
            /* || !ENGINE_set_cmd_defns(e, rsaref_cmd_defns) */)
            return 0;

      /* Ensure the rsaref error handling is set up */
      ERR_load_RSAREF_strings();
      return 1;
      }

#ifdef ENGINE_DYNAMIC_SUPPORT
static int bind_helper(ENGINE *e, const char *id)
      {
      if(id && (strcmp(id, engine_rsaref_id) != 0))
            return 0;
      if(!bind_rsaref(e))
            return 0;
      return 1;
      }       
IMPLEMENT_DYNAMIC_CHECK_FN()
IMPLEMENT_DYNAMIC_BIND_FN(bind_helper)
#else
static ENGINE *engine_rsaref(void)
      {
      ENGINE *ret = ENGINE_new();
      if(!ret)
            return NULL;
      if(!bind_rsaref(ret))
            {
            ENGINE_free(ret);
            return NULL;
            }
      return ret;
      }

void ENGINE_load_rsaref(void)
      {
      /* Copied from eng_[openssl|dyn].c */
      ENGINE *toadd = engine_rsaref();
      if(!toadd) return;
      ENGINE_add(toadd);
      ENGINE_free(toadd);
      ERR_clear_error();
      }
#endif

/* Initiator which is only present to make sure this engine looks available */
static int rsaref_init(ENGINE *e)
      {
      return 1;
      }

/* Finisher which is only present to make sure this engine looks available */
static int rsaref_finish(ENGINE *e)
      {
      return 1;
      }

/* Destructor (complements the "ENGINE_ncipher()" constructor) */
static int rsaref_destroy(ENGINE *e)
      {
      ERR_unload_RSAREF_strings();
      return 1;
      }

/*****************************************************************************
 * RSA functions
 **/

static int rsaref_mod_exp(BIGNUM *r0, const BIGNUM *I, RSA *rsa)
      {
      RSAREFerr(RSAREF_F_RSAREF_MOD_EXP,ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
      return(0);
      }

static int bnref_mod_exp(BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
                    const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *m_ctx)
      {
      RSAREFerr(RSAREF_F_BNREF_MOD_EXP,ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED);
      return(0);
      }

/* unsigned char *to:  [max]    */
static int RSAref_bn2bin(BIGNUM *from, unsigned char *to, int max)
      {
      int i;

      i=BN_num_bytes(from);
      if (i > max)
            {
            RSAREFerr(RSAREF_F_RSAREF_BN2BIN,RSAREF_R_LEN);
            return(0);
            }

      memset(to,0,(unsigned int)max);
      if (!BN_bn2bin(from,&(to[max-i])))
            return(0);
      return(1);
      }

#ifdef undef
/* unsigned char *from:  [max]    */
static BIGNUM *RSAref_bin2bn(unsigned char *from, BIGNUM *to, int max)
      {
      int i;
      BIGNUM *ret;

      for (i=0; i<max; i++)
            if (from[i]) break;

      ret=BN_bin2bn(&(from[i]),max-i,to);
      return(ret);
      }

static int RSAref_Public_ref2eay(RSArefPublicKey *from, RSA *to)
      {
      to->n=RSAref_bin2bn(from->m,NULL,RSAref_MAX_LEN);
      to->e=RSAref_bin2bn(from->e,NULL,RSAref_MAX_LEN);
      if ((to->n == NULL) || (to->e == NULL)) return(0);
      return(1);
      }
#endif

static int RSAref_Public_eay2ref(RSA *from, R_RSA_PUBLIC_KEY *to)
      {
      to->bits=BN_num_bits(from->n);
      if (!RSAref_bn2bin(from->n,to->modulus,MAX_RSA_MODULUS_LEN)) return(0);
      if (!RSAref_bn2bin(from->e,to->exponent,MAX_RSA_MODULUS_LEN)) return(0);
      return(1);
      }

#ifdef undef
static int RSAref_Private_ref2eay(RSArefPrivateKey *from, RSA *to)
      {
      if ((to->n=RSAref_bin2bn(from->m,NULL,RSAref_MAX_LEN)) == NULL)
            return(0);
      if ((to->e=RSAref_bin2bn(from->e,NULL,RSAref_MAX_LEN)) == NULL)
            return(0);
      if ((to->d=RSAref_bin2bn(from->d,NULL,RSAref_MAX_LEN)) == NULL)
            return(0);
      if ((to->p=RSAref_bin2bn(from->prime[0],NULL,RSAref_MAX_PLEN)) == NULL)
            return(0);
      if ((to->q=RSAref_bin2bn(from->prime[1],NULL,RSAref_MAX_PLEN)) == NULL)
            return(0);
      if ((to->dmp1=RSAref_bin2bn(from->pexp[0],NULL,RSAref_MAX_PLEN))
            == NULL)
            return(0);
      if ((to->dmq1=RSAref_bin2bn(from->pexp[1],NULL,RSAref_MAX_PLEN))
            == NULL)
            return(0);
      if ((to->iqmp=RSAref_bin2bn(from->coef,NULL,RSAref_MAX_PLEN)) == NULL)
            return(0);
      return(1);
      }
#endif

static int RSAref_Private_eay2ref(RSA *from, R_RSA_PRIVATE_KEY *to)
      {
      to->bits=BN_num_bits(from->n);
      if (!RSAref_bn2bin(from->n,to->modulus,MAX_RSA_MODULUS_LEN)) return(0);
      if (!RSAref_bn2bin(from->e,to->publicExponent,MAX_RSA_MODULUS_LEN)) return(0);
      if (!RSAref_bn2bin(from->d,to->exponent,MAX_RSA_MODULUS_LEN)) return(0);
      if (!RSAref_bn2bin(from->p,to->prime[0],MAX_RSA_PRIME_LEN)) return(0);
      if (!RSAref_bn2bin(from->q,to->prime[1],MAX_RSA_PRIME_LEN)) return(0);
      if (!RSAref_bn2bin(from->dmp1,to->primeExponent[0],MAX_RSA_PRIME_LEN)) return(0);
      if (!RSAref_bn2bin(from->dmq1,to->primeExponent[1],MAX_RSA_PRIME_LEN)) return(0);
      if (!RSAref_bn2bin(from->iqmp,to->coefficient,MAX_RSA_PRIME_LEN)) return(0);
      return(1);
      }

static int rsaref_private_decrypt(int len, const unsigned char *from, unsigned char *to,
           RSA *rsa, int padding)
      {
      int i,outlen= -1;
      R_RSA_PRIVATE_KEY RSAkey;

      if (!RSAref_Private_eay2ref(rsa,&RSAkey))
            goto err;
      if ((i=RSAPrivateDecrypt(to,(unsigned int *)&outlen,(unsigned char *)from,len,&RSAkey)) != 0)
            {
            RSAREFerr(RSAREF_F_RSAREF_PRIVATE_DECRYPT,i);
            outlen= -1;
            }
err:
      memset(&RSAkey,0,sizeof(RSAkey));
      return(outlen);
      }

static int rsaref_private_encrypt(int len, const unsigned char *from, unsigned char *to,
           RSA *rsa, int padding)
      {
      int i,outlen= -1;
      R_RSA_PRIVATE_KEY RSAkey;

      if (padding != RSA_PKCS1_PADDING)
            {
            RSAREFerr(RSAREF_F_RSAREF_PRIVATE_ENCRYPT, RSA_R_UNKNOWN_PADDING_TYPE);
            goto err;
      }
      if (!RSAref_Private_eay2ref(rsa,&RSAkey))
            goto err;
      if ((i=RSAPrivateEncrypt(to,(unsigned int *)&outlen,(unsigned char *)from,len,&RSAkey)) != 0)
            {
            RSAREFerr(RSAREF_F_RSAREF_PRIVATE_ENCRYPT,i);
            outlen= -1;
            }
err:
      memset(&RSAkey,0,sizeof(RSAkey));
      return(outlen);
      }

static int rsaref_public_decrypt(int len, const unsigned char *from, unsigned char *to,
           RSA *rsa, int padding)
      {
      int i,outlen= -1;
      R_RSA_PUBLIC_KEY RSAkey;

      if (!RSAref_Public_eay2ref(rsa,&RSAkey))
            goto err;
      if ((i=RSAPublicDecrypt(to,(unsigned int *)&outlen,(unsigned char *)from,len,&RSAkey)) != 0)
            {
            RSAREFerr(RSAREF_F_RSAREF_PUBLIC_DECRYPT,i);
            outlen= -1;
            }
err:
      memset(&RSAkey,0,sizeof(RSAkey));
      return(outlen);
      }

static int rsaref_public_encrypt(int len, const unsigned char *from, unsigned char *to,
           RSA *rsa, int padding)
      {
      int outlen= -1;
      int i;
      R_RSA_PUBLIC_KEY RSAkey;
      R_RANDOM_STRUCT rnd;
      unsigned char buf[16];

      if (padding != RSA_PKCS1_PADDING && padding != RSA_SSLV23_PADDING) 
            {
            RSAREFerr(RSAREF_F_RSAREF_PUBLIC_ENCRYPT, RSA_R_UNKNOWN_PADDING_TYPE);
            goto err;
            }
      
      R_RandomInit(&rnd);
      R_GetRandomBytesNeeded((unsigned int *)&i,&rnd);
      while (i > 0)
            {
            if (RAND_bytes(buf,16) <= 0)
                  goto err;
            R_RandomUpdate(&rnd,buf,(unsigned int)((i>16)?16:i));
            i-=16;
            }

      if (!RSAref_Public_eay2ref(rsa,&RSAkey))
            goto err;
      if ((i=RSAPublicEncrypt(to,(unsigned int *)&outlen,(unsigned char *)from,len,&RSAkey,&rnd)) != 0)
            {
            RSAREFerr(RSAREF_F_RSAREF_PUBLIC_ENCRYPT,i);
            outlen= -1;
            goto err;
            }
err:
      memset(&RSAkey,0,sizeof(RSAkey));
      R_RandomFinal(&rnd);
      memset(&rnd,0,sizeof(rnd));
      return(outlen);
      }

/*****************************************************************************
 * Symetric cipher and digest function registrars
 **/
static int rsaref_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
      const int **nids, int nid)
      {
      int ok = 1;
      if(!cipher)
            {
            /* We are returning a list of supported nids */
            *nids = rsaref_cipher_nids;
            return (sizeof(rsaref_cipher_nids)-1)/sizeof(rsaref_cipher_nids[0]);
            }
      /* We are being asked for a specific cipher */
      switch (nid)
            {
      case NID_des_cbc:
            *cipher = &cipher_des_cbc; break;
      case NID_des_ede3_cbc:
            *cipher = &cipher_des_ede3_cbc; break;
      case NID_desx_cbc:
            *cipher = &cipher_desx_cbc; break;
      default:
            ok = 0;
            *cipher = NULL;
            break;
            }
      return ok;
      }
static int rsaref_digests(ENGINE *e, const EVP_MD **digest,
      const int **nids, int nid)
      {
      int ok = 1;
      if(!digest)
            {
            /* We are returning a list of supported nids */
            *nids = rsaref_digest_nids;
            return (sizeof(rsaref_digest_nids)-1)/sizeof(rsaref_digest_nids[0]);
            }
      /* We are being asked for a specific digest */
      switch (nid)
            {
      case NID_md2:
            *digest = &digest_md2; break;
      case NID_md5:
            *digest = &digest_md5; break;
      default:
            ok = 0;
            *digest = NULL;
            break;
            }
      return ok;
      }

/*****************************************************************************
 * DES functions
 **/
#undef data
#define data(ctx) ((DES_CBC_CTX *)(ctx)->cipher_data)
static int cipher_des_cbc_init(EVP_CIPHER_CTX *ctx, const unsigned char *key,
      const unsigned char *iv, int enc)
      {
      DES_CBCInit(data(ctx), (unsigned char *)key, (unsigned char *)iv, enc);
      return 1;
      }
static int cipher_des_cbc_code(EVP_CIPHER_CTX *ctx, unsigned char *out,
      const unsigned char *in, unsigned int inl)
      {
      int ret = DES_CBCUpdate(data(ctx), out, (unsigned char *)in, inl);
      switch (ret)
            {
      case RE_LEN:
            RSAREFerr(RSAREF_F_CIPHER_DES_CBC_CODE,RSAREF_R_LENGTH_NOT_BLOCK_ALIGNED);
            break;
      case 0:
            break;
      default:
            RSAREFerr(RSAREF_F_CIPHER_DES_CBC_CODE,RSAREF_R_UNKNOWN_FAULT);
            }
      return !ret;
      }
static int cipher_des_cbc_clean(EVP_CIPHER_CTX *ctx)
      {
      memset(data(ctx), 0, ctx->cipher->ctx_size);
      return 1;
      }

#undef data
#define data(ctx) ((DES3_CBC_CTX *)(ctx)->cipher_data)
static int cipher_des_ede3_cbc_init(EVP_CIPHER_CTX *ctx, const unsigned char *key,
      const unsigned char *iv, int enc)
      {
      DES3_CBCInit(data(ctx), (unsigned char *)key, (unsigned char *)iv,
            enc);
      return 1;
      }
static int cipher_des_ede3_cbc_code(EVP_CIPHER_CTX *ctx, unsigned char *out,
      const unsigned char *in, unsigned int inl)
      {
      int ret = DES3_CBCUpdate(data(ctx), out, (unsigned char *)in, inl);
      switch (ret)
            {
      case RE_LEN:
            RSAREFerr(RSAREF_F_CIPHER_DES_CBC_CODE,RSAREF_R_LENGTH_NOT_BLOCK_ALIGNED);
            break;
      case 0:
            break;
      default:
            RSAREFerr(RSAREF_F_CIPHER_DES_CBC_CODE,RSAREF_R_UNKNOWN_FAULT);
            }
      return !ret;
      }
static int cipher_des_ede3_cbc_clean(EVP_CIPHER_CTX *ctx)
      {
      memset(data(ctx), 0, ctx->cipher->ctx_size);
      return 1;
      }

#undef data
#define data(ctx) ((DESX_CBC_CTX *)(ctx)->cipher_data)
static int cipher_desx_cbc_init(EVP_CIPHER_CTX *ctx, const unsigned char *key,
      const unsigned char *iv, int enc)
      {
      DESX_CBCInit(data(ctx), (unsigned char *)key, (unsigned char *)iv,
            enc);
      return 1;
      }
static int cipher_desx_cbc_code(EVP_CIPHER_CTX *ctx, unsigned char *out,
      const unsigned char *in, unsigned int inl)
      {
      int ret = DESX_CBCUpdate(data(ctx), out, (unsigned char *)in, inl);
      switch (ret)
            {
      case RE_LEN:
            RSAREFerr(RSAREF_F_CIPHER_DES_CBC_CODE,RSAREF_R_LENGTH_NOT_BLOCK_ALIGNED);
            break;
      case 0:
            break;
      default:
            RSAREFerr(RSAREF_F_CIPHER_DES_CBC_CODE,RSAREF_R_UNKNOWN_FAULT);
            }
      return !ret;
      }
static int cipher_desx_cbc_clean(EVP_CIPHER_CTX *ctx)
      {
      memset(data(ctx), 0, ctx->cipher->ctx_size);
      return 1;
      }

/*****************************************************************************
 * MD functions
 **/
#undef data
#define data(ctx) ((MD2_CTX *)(ctx)->md_data)
static int digest_md2_init(EVP_MD_CTX *ctx)
      {
      MD2Init(data(ctx));
      return 1;
      }
static int digest_md2_update(EVP_MD_CTX *ctx,const void *data,
      unsigned long count)
      {
      MD2Update(data(ctx), (unsigned char *)data, (unsigned int)count);
      return 1;
      }
static int digest_md2_final(EVP_MD_CTX *ctx,unsigned char *md)
      {
      MD2Final(md, data(ctx));
      return 1;
      }

#undef data
#define data(ctx) ((MD5_CTX *)(ctx)->md_data)
static int digest_md5_init(EVP_MD_CTX *ctx)
      {
      MD5Init(data(ctx));
      return 1;
      }
static int digest_md5_update(EVP_MD_CTX *ctx,const void *data,
      unsigned long count)
      {
      MD5Update(data(ctx), (unsigned char *)data, (unsigned int)count);
      return 1;
      }
static int digest_md5_final(EVP_MD_CTX *ctx,unsigned char *md)
      {
      MD5Final(md, data(ctx));
      return 1;
      }

Generated by  Doxygen 1.6.0   Back to index