mirror of
https://github.com/openssl/openssl.git
synced 2024-12-09 05:51:54 +08:00
f7c16d48a9
Multiple names per implementation is already supported in the namemap, but hasn't been used yet. However, as soon as we have multiple names, we will get an issue with what name should be saved in the method. The solution is to not save the name itself, but rather the number it's associated with. This number is supposed to be unique for each set of names, and we assume that algorithm names are globally unique, i.e. there can be no name overlap between different algorithm types. Incidently, it was also found that the 'get' function used by ossl_construct_method() doesn't need all the parameters it was given; most of what it needs, it can now get through the data structure given by the caller of ossl_construct_method(). As a consequence, ossl_construct_method() itself doesn't need all the parameters it was given either. There are some added internal functions that are expected to disappear as soon as legacy code is removed, such as evp_first_name() and ossl_namemap_num2name(). Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9897)
162 lines
3.9 KiB
C
162 lines
3.9 KiB
C
/*
|
|
* Copyright 2018-2019 The OpenSSL Project Authors. All Rights Reserved.
|
|
* Copyright (c) 2018-2019, Oracle and/or its affiliates. All rights reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include "internal/cryptlib.h"
|
|
#include <openssl/engine.h>
|
|
#include <openssl/evp.h>
|
|
#include <openssl/x509v3.h>
|
|
#include <openssl/kdf.h>
|
|
#include <openssl/core.h>
|
|
#include <openssl/core_names.h>
|
|
#include "internal/asn1_int.h"
|
|
#include "internal/evp_int.h"
|
|
#include "internal/numbers.h"
|
|
#include "internal/provider.h"
|
|
#include "evp_locl.h"
|
|
|
|
EVP_KDF_CTX *EVP_KDF_CTX_new(EVP_KDF *kdf)
|
|
{
|
|
EVP_KDF_CTX *ctx = NULL;
|
|
|
|
if (kdf == NULL)
|
|
return NULL;
|
|
|
|
ctx = OPENSSL_zalloc(sizeof(EVP_KDF_CTX));
|
|
if (ctx == NULL
|
|
|| (ctx->data = kdf->newctx(ossl_provider_ctx(kdf->prov))) == NULL
|
|
|| !EVP_KDF_up_ref(kdf)) {
|
|
EVPerr(EVP_F_EVP_KDF_CTX_NEW, ERR_R_MALLOC_FAILURE);
|
|
if (ctx != NULL)
|
|
kdf->freectx(ctx->data);
|
|
OPENSSL_free(ctx);
|
|
ctx = NULL;
|
|
} else {
|
|
ctx->meth = kdf;
|
|
}
|
|
return ctx;
|
|
}
|
|
|
|
void EVP_KDF_CTX_free(EVP_KDF_CTX *ctx)
|
|
{
|
|
if (ctx != NULL) {
|
|
ctx->meth->freectx(ctx->data);
|
|
ctx->data = NULL;
|
|
EVP_KDF_free(ctx->meth);
|
|
OPENSSL_free(ctx);
|
|
}
|
|
}
|
|
|
|
EVP_KDF_CTX *EVP_KDF_CTX_dup(const EVP_KDF_CTX *src)
|
|
{
|
|
EVP_KDF_CTX *dst;
|
|
|
|
if (src == NULL || src->data == NULL || src->meth->dupctx == NULL)
|
|
return NULL;
|
|
|
|
dst = OPENSSL_malloc(sizeof(*dst));
|
|
if (dst == NULL) {
|
|
EVPerr(EVP_F_EVP_KDF_CTX_DUP, ERR_R_MALLOC_FAILURE);
|
|
return NULL;
|
|
}
|
|
|
|
memcpy(dst, src, sizeof(*dst));
|
|
if (!EVP_KDF_up_ref(dst->meth)) {
|
|
EVPerr(EVP_F_EVP_KDF_CTX_DUP, ERR_R_MALLOC_FAILURE);
|
|
OPENSSL_free(dst);
|
|
return NULL;
|
|
}
|
|
|
|
dst->data = src->meth->dupctx(src->data);
|
|
if (dst->data == NULL) {
|
|
EVP_KDF_CTX_free(dst);
|
|
return NULL;
|
|
}
|
|
return dst;
|
|
}
|
|
|
|
const char *EVP_KDF_name(const EVP_KDF *kdf)
|
|
{
|
|
return evp_first_name(kdf->prov, kdf->name_id);
|
|
}
|
|
|
|
const OSSL_PROVIDER *EVP_KDF_provider(const EVP_KDF *kdf)
|
|
{
|
|
return kdf->prov;
|
|
}
|
|
|
|
const EVP_KDF *EVP_KDF_CTX_kdf(EVP_KDF_CTX *ctx)
|
|
{
|
|
return ctx->meth;
|
|
}
|
|
|
|
void EVP_KDF_reset(EVP_KDF_CTX *ctx)
|
|
{
|
|
if (ctx == NULL)
|
|
return;
|
|
|
|
if (ctx->meth->reset != NULL)
|
|
ctx->meth->reset(ctx->data);
|
|
}
|
|
|
|
size_t EVP_KDF_size(EVP_KDF_CTX *ctx)
|
|
{
|
|
OSSL_PARAM params[2] = { OSSL_PARAM_END, OSSL_PARAM_END };
|
|
size_t s;
|
|
|
|
if (ctx == NULL)
|
|
return 0;
|
|
|
|
*params = OSSL_PARAM_construct_size_t(OSSL_KDF_PARAM_SIZE, &s);
|
|
if (ctx->meth->get_ctx_params != NULL
|
|
&& ctx->meth->get_ctx_params(ctx->data, params))
|
|
return s;
|
|
if (ctx->meth->get_params != NULL
|
|
&& ctx->meth->get_params(params))
|
|
return s;
|
|
return 0;
|
|
}
|
|
|
|
int EVP_KDF_derive(EVP_KDF_CTX *ctx, unsigned char *key, size_t keylen)
|
|
{
|
|
if (ctx == NULL)
|
|
return 0;
|
|
|
|
return ctx->meth->derive(ctx->data, key, keylen);
|
|
}
|
|
|
|
/*
|
|
* The {get,set}_params functions return 1 if there is no corresponding
|
|
* function in the implementation. This is the same as if there was one,
|
|
* but it didn't recognise any of the given params, i.e. nothing in the
|
|
* bag of parameters was useful.
|
|
*/
|
|
int EVP_KDF_get_params(EVP_KDF *kdf, OSSL_PARAM params[])
|
|
{
|
|
if (kdf->get_params != NULL)
|
|
return kdf->get_params(params);
|
|
return 1;
|
|
}
|
|
|
|
int EVP_KDF_CTX_get_params(EVP_KDF_CTX *ctx, OSSL_PARAM params[])
|
|
{
|
|
if (ctx->meth->get_ctx_params != NULL)
|
|
return ctx->meth->get_ctx_params(ctx->data, params);
|
|
return 1;
|
|
}
|
|
|
|
int EVP_KDF_CTX_set_params(EVP_KDF_CTX *ctx, const OSSL_PARAM params[])
|
|
{
|
|
if (ctx->meth->set_ctx_params != NULL)
|
|
return ctx->meth->set_ctx_params(ctx->data, params);
|
|
return 1;
|
|
}
|