mirror of
https://github.com/openssl/openssl.git
synced 2025-01-06 13:26:43 +08:00
a3327784d9
These fields are purely application data, and applications don't reach into the bowels of the FIPS module, so these fields are never used there. Fixes #10835 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/10837)
68 lines
1.9 KiB
C
68 lines
1.9 KiB
C
/*
|
|
* Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*/
|
|
|
|
#include <openssl/dh.h>
|
|
#include "internal/refcount.h"
|
|
|
|
#define DH_MIN_MODULUS_BITS 512
|
|
|
|
struct dh_st {
|
|
/*
|
|
* This first argument is used to pick up errors when a DH is passed
|
|
* instead of a EVP_PKEY
|
|
*/
|
|
int pad;
|
|
int version;
|
|
BIGNUM *p;
|
|
BIGNUM *g;
|
|
int32_t length; /* optional */
|
|
BIGNUM *pub_key; /* g^x % p */
|
|
BIGNUM *priv_key; /* x */
|
|
int flags;
|
|
BN_MONT_CTX *method_mont_p;
|
|
/* Place holders if we want to do X9.42 DH */
|
|
BIGNUM *q;
|
|
BIGNUM *j;
|
|
unsigned char *seed;
|
|
int seedlen;
|
|
BIGNUM *counter;
|
|
CRYPTO_REF_COUNT references;
|
|
#ifndef FIPS_MODE
|
|
CRYPTO_EX_DATA ex_data;
|
|
#endif
|
|
const DH_METHOD *meth;
|
|
ENGINE *engine;
|
|
CRYPTO_RWLOCK *lock;
|
|
|
|
/* Provider data */
|
|
size_t dirty_cnt; /* If any key material changes, increment this */
|
|
};
|
|
|
|
struct dh_method {
|
|
char *name;
|
|
/* Methods here */
|
|
int (*generate_key) (DH *dh);
|
|
int (*compute_key) (unsigned char *key, const BIGNUM *pub_key, DH *dh);
|
|
|
|
/* Can be null */
|
|
int (*bn_mod_exp) (const DH *dh, BIGNUM *r, const BIGNUM *a,
|
|
const BIGNUM *p, const BIGNUM *m, BN_CTX *ctx,
|
|
BN_MONT_CTX *m_ctx);
|
|
int (*init) (DH *dh);
|
|
int (*finish) (DH *dh);
|
|
int flags;
|
|
char *app_data;
|
|
/* If this is non-NULL, it will be used to generate parameters */
|
|
int (*generate_params) (DH *dh, int prime_len, int generator,
|
|
BN_GENCB *cb);
|
|
};
|
|
|
|
int dh_buf2key(DH *key, const unsigned char *buf, size_t len);
|
|
size_t dh_key2buf(const DH *dh, unsigned char **pbuf);
|