mirror of
https://github.com/openssl/openssl.git
synced 2024-12-27 06:21:43 +08:00
55f02cb684
Fixes #11108. It only sets q if a valid named group is found. The function signature was recently changed to pass a non const DH pointer in order to allow the nid to be cached internally. As an extension of this the value of q can now also be set as q is always known for named groups. The length field is also set if q is set. Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/11114)
145 lines
6.3 KiB
Plaintext
145 lines
6.3 KiB
Plaintext
=pod
|
|
|
|
=head1 NAME
|
|
|
|
DH_get0_pqg, DH_set0_pqg, DH_get0_key, DH_set0_key,
|
|
DH_get0_p, DH_get0_q, DH_get0_g,
|
|
DH_get0_priv_key, DH_get0_pub_key,
|
|
DH_clear_flags, DH_test_flags, DH_set_flags, DH_get0_engine,
|
|
DH_get_length, DH_set_length - Routines for getting and setting data in a DH object
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
#include <openssl/dh.h>
|
|
|
|
void DH_get0_pqg(const DH *dh,
|
|
const BIGNUM **p, const BIGNUM **q, const BIGNUM **g);
|
|
int DH_set0_pqg(DH *dh, BIGNUM *p, BIGNUM *q, BIGNUM *g);
|
|
void DH_get0_key(const DH *dh,
|
|
const BIGNUM **pub_key, const BIGNUM **priv_key);
|
|
int DH_set0_key(DH *dh, BIGNUM *pub_key, BIGNUM *priv_key);
|
|
const BIGNUM *DH_get0_p(const DH *dh);
|
|
const BIGNUM *DH_get0_q(const DH *dh);
|
|
const BIGNUM *DH_get0_g(const DH *dh);
|
|
const BIGNUM *DH_get0_priv_key(const DH *dh);
|
|
const BIGNUM *DH_get0_pub_key(const DH *dh);
|
|
void DH_clear_flags(DH *dh, int flags);
|
|
int DH_test_flags(const DH *dh, int flags);
|
|
void DH_set_flags(DH *dh, int flags);
|
|
|
|
Deprecated since OpenSSL 3.0, can be hidden entirely by defining
|
|
B<OPENSSL_API_COMPAT> with a suitable version value, see
|
|
L<openssl_user_macros(7)>:
|
|
|
|
ENGINE *DH_get0_engine(DH *d);
|
|
long DH_get_length(const DH *dh);
|
|
int DH_set_length(DH *dh, long length);
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
A DH object contains the parameters I<p>, I<q> and I<g>. Note that the I<q>
|
|
parameter is optional. It also contains a public key (I<pub_key>) and
|
|
(optionally) a private key (I<priv_key>).
|
|
|
|
The I<p>, I<q> and I<g> parameters can be obtained by calling DH_get0_pqg().
|
|
If the parameters have not yet been set then I<*p>, I<*q> and I<*g> will be set
|
|
to NULL. Otherwise they are set to pointers to their respective values. These
|
|
point directly to the internal representations of the values and therefore
|
|
should not be freed directly.
|
|
Any of the out parameters I<p>, I<q>, and I<g> can be NULL, in which case no
|
|
value will be returned for that parameter.
|
|
|
|
The I<p>, I<q> and I<g> values can be set by calling DH_set0_pqg() and passing
|
|
the new values for I<p>, I<q> and I<g> as parameters to the function. Calling
|
|
this function transfers the memory management of the values to the DH object,
|
|
and therefore the values that have been passed in should not be freed directly
|
|
after this function has been called. The I<q> parameter may be NULL.
|
|
DH_set0_pqg() also checks if the parameters associated with I<p> and I<g> and
|
|
optionally I<q> are associated with known safe prime groups. If it is a safe
|
|
prime group then the value of I<q> will be set to q = (p - 1) / 2 if I<q> is NULL.
|
|
For safe prime groups the optional length parameter I<length> is set to twice
|
|
the value of the maximum_target_security_strength(BN_num_bits(I<p>)) as listed in
|
|
SP800-56Ar3 Table(s) 25 & 26. If it is not a safe prime group then the optional
|
|
length parameter will be set if I<q> is not NULL to BN_num_bits(I<q>).
|
|
|
|
To get the public and private key values use the DH_get0_key() function. A
|
|
pointer to the public key will be stored in I<*pub_key>, and a pointer to the
|
|
private key will be stored in I<*priv_key>. Either may be NULL if they have not
|
|
been set yet, although if the private key has been set then the public key must
|
|
be. The values point to the internal representation of the public key and
|
|
private key values. This memory should not be freed directly.
|
|
Any of the out parameters I<pub_key> and I<priv_key> can be NULL, in which case
|
|
no value will be returned for that parameter.
|
|
|
|
The public and private key values can be set using DH_set0_key(). Either
|
|
parameter may be NULL, which means the corresponding DH field is left
|
|
untouched. As with DH_set0_pqg() this function transfers the memory management
|
|
of the key values to the DH object, and therefore they should not be freed
|
|
directly after this function has been called.
|
|
|
|
Any of the values I<p>, I<q>, I<g>, I<priv_key>, and I<pub_key> can also be
|
|
retrieved separately by the corresponding function DH_get0_p(), DH_get0_q(),
|
|
DH_get0_g(), DH_get0_priv_key(), and DH_get0_pub_key(), respectively.
|
|
|
|
DH_set_flags() sets the flags in the I<flags> parameter on the DH object.
|
|
Multiple flags can be passed in one go (bitwise ORed together). Any flags that
|
|
are already set are left set. DH_test_flags() tests to see whether the flags
|
|
passed in the I<flags> parameter are currently set in the DH object. Multiple
|
|
flags can be tested in one go. All flags that are currently set are returned, or
|
|
zero if none of the flags are set. DH_clear_flags() clears the specified flags
|
|
within the DH object.
|
|
|
|
DH_get0_engine() returns a handle to the ENGINE that has been set for this DH
|
|
object, or NULL if no such ENGINE has been set. This function is deprecated.
|
|
|
|
The DH_get_length() and DH_set_length() functions get and set the optional
|
|
length parameter associated with this DH object. If the length is nonzero then
|
|
it is used, otherwise it is ignored. The I<length> parameter indicates the
|
|
length of the secret exponent (private key) in bits. These functions are
|
|
deprecated.
|
|
|
|
=head1 NOTES
|
|
|
|
Values retrieved with DH_get0_key() are owned by the DH object used
|
|
in the call and may therefore I<not> be passed to DH_set0_key(). If
|
|
needed, duplicate the received value using BN_dup() and pass the
|
|
duplicate. The same applies to DH_get0_pqg() and DH_set0_pqg().
|
|
|
|
=head1 RETURN VALUES
|
|
|
|
DH_set0_pqg() and DH_set0_key() return 1 on success or 0 on failure.
|
|
|
|
DH_get0_p(), DH_get0_q(), DH_get0_g(), DH_get0_priv_key(), and DH_get0_pub_key()
|
|
return the respective value, or NULL if it is unset.
|
|
|
|
DH_test_flags() returns the current state of the flags in the DH object.
|
|
|
|
DH_get0_engine() returns the ENGINE set for the DH object or NULL if no ENGINE
|
|
has been set.
|
|
|
|
DH_get_length() returns the length of the secret exponent (private key) in bits,
|
|
or zero if no such length has been explicitly set.
|
|
|
|
=head1 SEE ALSO
|
|
|
|
L<DH_new(3)>, L<DH_new(3)>, L<DH_generate_parameters(3)>, L<DH_generate_key(3)>,
|
|
L<DH_set_method(3)>, L<DH_size(3)>, L<DH_meth_new(3)>
|
|
|
|
=head1 HISTORY
|
|
|
|
The DH_get0_engine(), DH_get_length() and DH_set_length() functions were
|
|
deprecated in OpenSSL 3.0.
|
|
|
|
The functions described here were added in OpenSSL 1.1.0.
|
|
|
|
=head1 COPYRIGHT
|
|
|
|
Copyright 2016-2018 The OpenSSL Project Authors. All Rights Reserved.
|
|
|
|
Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
this file except in compliance with the License. You can obtain a copy
|
|
in the file LICENSE in the source distribution or at
|
|
L<https://www.openssl.org/source/license.html>.
|
|
|
|
=cut
|