mirror of
https://github.com/openssl/openssl.git
synced 2024-11-27 05:21:51 +08:00
f552d90045
Provide EC serializers for text, pem and der. EC parameters use ANS1 'CHOICE' - which means they are more embedded than other parameters used by other KEY types (which normally have a SEQUENCE at the top level). For this reason the ANS1_STRING type that was being passed around has been changed to a void so that the code can still be shared with EC. The EC serializer only supports named curves currently. NOTE the serializer code assumes PKCS8 format - if the older encode methods are needed they will need to be added in another PR. (Probably when deserialization is considered). EVP_PKEY_key_fromdata_init was changed from using a keypair selection to all bits of a key. A side effect of this was that the very restrictive checks in the ecx code needed to be relaxed as it was assuming all selection flags were non optional. As this is not the case for any other key the code has been modified. Fixed a bug in legacy_ctrl_str_to_params() - "ecdh_cofactor_mode" was being incorrectly converted to the wrong keyname. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/11107)
160 lines
5.1 KiB
C
160 lines
5.1 KiB
C
/*
|
|
* Copyright 2020 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*/
|
|
|
|
#include <openssl/core_numbers.h>
|
|
#include <openssl/err.h>
|
|
#include <openssl/pem.h>
|
|
#include <openssl/types.h>
|
|
#include <openssl/params.h>
|
|
#include "prov/bio.h"
|
|
#include "prov/implementations.h"
|
|
#include "serializer_local.h"
|
|
|
|
static OSSL_OP_serializer_newctx_fn ec_pub_newctx;
|
|
static OSSL_OP_serializer_freectx_fn ec_pub_freectx;
|
|
static OSSL_OP_serializer_serialize_data_fn ec_pub_der_data;
|
|
static OSSL_OP_serializer_serialize_object_fn ec_pub_der;
|
|
static OSSL_OP_serializer_serialize_data_fn ec_pub_pem_data;
|
|
static OSSL_OP_serializer_serialize_object_fn ec_pub_pem;
|
|
|
|
static OSSL_OP_serializer_serialize_data_fn ec_pub_print_data;
|
|
static OSSL_OP_serializer_serialize_object_fn ec_pub_print;
|
|
|
|
/* Public key : context */
|
|
|
|
/*
|
|
* There's no specific implementation context, so we use the provider context
|
|
*/
|
|
static void *ec_pub_newctx(void *provctx)
|
|
{
|
|
return provctx;
|
|
}
|
|
|
|
static void ec_pub_freectx(void *ctx)
|
|
{
|
|
}
|
|
|
|
/* Public key : DER */
|
|
static int ec_pub_der_data(void *vctx, const OSSL_PARAM params[], BIO *out,
|
|
OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
|
|
{
|
|
OSSL_OP_keymgmt_new_fn *ec_new;
|
|
OSSL_OP_keymgmt_free_fn *ec_free;
|
|
OSSL_OP_keymgmt_import_fn *ec_import;
|
|
int ok = 0;
|
|
|
|
ec_get_new_free_import(&ec_new, &ec_free, &ec_import);
|
|
|
|
if (ec_import != NULL) {
|
|
EC_KEY *eckey;
|
|
|
|
/* vctx == provctx */
|
|
if ((eckey = ec_new(vctx)) != NULL
|
|
&& ec_import(eckey, OSSL_KEYMGMT_SELECT_KEYPAIR, params)
|
|
&& ec_pub_der(vctx, eckey, out, cb, cbarg))
|
|
ok = 1;
|
|
ec_free(eckey);
|
|
}
|
|
return ok;
|
|
}
|
|
|
|
static int ec_pub_der(void *ctx, void *eckey, BIO *out,
|
|
OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
|
|
{
|
|
return ossl_prov_write_pub_der_from_obj(out, eckey, EVP_PKEY_EC,
|
|
ossl_prov_prepare_ec_params,
|
|
ossl_prov_ec_pub_to_der);
|
|
}
|
|
|
|
/* Public key : PEM */
|
|
static int ec_pub_pem_data(void *vctx, const OSSL_PARAM params[], BIO *out,
|
|
OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
|
|
{
|
|
OSSL_OP_keymgmt_new_fn *ec_new;
|
|
OSSL_OP_keymgmt_free_fn *ec_free;
|
|
OSSL_OP_keymgmt_import_fn *ec_import;
|
|
int ok = 0;
|
|
|
|
ec_get_new_free_import(&ec_new, &ec_free, &ec_import);
|
|
|
|
if (ec_import != NULL) {
|
|
EC_KEY *eckey;
|
|
|
|
/* ctx == provctx */
|
|
if ((eckey = ec_new(vctx)) != NULL
|
|
&& ec_import(eckey, OSSL_KEYMGMT_SELECT_KEYPAIR, params)
|
|
&& ec_pub_pem(vctx, eckey, out, cb, cbarg))
|
|
ok = 1;
|
|
ec_free(eckey);
|
|
}
|
|
return ok;
|
|
}
|
|
|
|
static int ec_pub_pem(void *vctx, void *eckey, BIO *out,
|
|
OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
|
|
{
|
|
return ossl_prov_write_pub_pem_from_obj(out, eckey, EVP_PKEY_EC,
|
|
ossl_prov_prepare_ec_params,
|
|
ossl_prov_ec_pub_to_der);
|
|
}
|
|
|
|
static int ec_pub_print_data(void *vctx, const OSSL_PARAM params[], BIO *out,
|
|
OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
|
|
{
|
|
OSSL_OP_keymgmt_new_fn *ec_new;
|
|
OSSL_OP_keymgmt_free_fn *ec_free;
|
|
OSSL_OP_keymgmt_import_fn *ec_import;
|
|
int ok = 0;
|
|
|
|
ec_get_new_free_import(&ec_new, &ec_free, &ec_import);
|
|
|
|
if (ec_import != NULL) {
|
|
EC_KEY *eckey;
|
|
|
|
/* ctx == provctx */
|
|
if ((eckey = ec_new(vctx)) != NULL
|
|
&& ec_import(eckey, OSSL_KEYMGMT_SELECT_KEYPAIR, params)
|
|
&& ec_pub_print(vctx, eckey, out, cb, cbarg))
|
|
ok = 1;
|
|
ec_free(eckey);
|
|
}
|
|
return ok;
|
|
}
|
|
|
|
static int ec_pub_print(void *vctx, void *eckey, BIO *out,
|
|
OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
|
|
{
|
|
return ossl_prov_print_eckey(out, eckey, ec_print_pub);
|
|
}
|
|
|
|
const OSSL_DISPATCH ec_pub_der_serializer_functions[] = {
|
|
{ OSSL_FUNC_SERIALIZER_NEWCTX, (void (*)(void))ec_pub_newctx },
|
|
{ OSSL_FUNC_SERIALIZER_FREECTX, (void (*)(void))ec_pub_freectx },
|
|
{ OSSL_FUNC_SERIALIZER_SERIALIZE_DATA, (void (*)(void))ec_pub_der_data },
|
|
{ OSSL_FUNC_SERIALIZER_SERIALIZE_OBJECT, (void (*)(void))ec_pub_der },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
const OSSL_DISPATCH ec_pub_pem_serializer_functions[] = {
|
|
{ OSSL_FUNC_SERIALIZER_NEWCTX, (void (*)(void))ec_pub_newctx },
|
|
{ OSSL_FUNC_SERIALIZER_FREECTX, (void (*)(void))ec_pub_freectx },
|
|
{ OSSL_FUNC_SERIALIZER_SERIALIZE_DATA, (void (*)(void))ec_pub_pem_data },
|
|
{ OSSL_FUNC_SERIALIZER_SERIALIZE_OBJECT, (void (*)(void))ec_pub_pem },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
const OSSL_DISPATCH ec_pub_text_serializer_functions[] = {
|
|
{ OSSL_FUNC_SERIALIZER_NEWCTX, (void (*)(void))ec_pub_newctx },
|
|
{ OSSL_FUNC_SERIALIZER_FREECTX, (void (*)(void))ec_pub_freectx },
|
|
{ OSSL_FUNC_SERIALIZER_SERIALIZE_OBJECT, (void (*)(void))ec_pub_print },
|
|
{ OSSL_FUNC_SERIALIZER_SERIALIZE_DATA,
|
|
(void (*)(void))ec_pub_print_data },
|
|
{ 0, NULL }
|
|
};
|