mirror of
https://github.com/openssl/openssl.git
synced 2025-03-07 19:38:33 +08:00
738ee1819e
DH_set0_pqg() is now responsible for caching the nid, q and length. DH with or without named safe prime groups now default to using the maximum private key length (BN_num_bits(q) - 1) when generating a DH private key. The code is now shared between fips and non fips mode for DH key generation. The OSSL_PKEY_PARAM_DH_PRIV_LEN parameter can be used during keygen to override the maximum private key length to be in the range (2 * strength ... bits(q) - 1). Where the strength depends on the length of p. Added q = (p - 1) / 2 safe prime BIGNUMS so that the code is data driven (To simplify adding new names). The BIGNUMS were code generated. Fix error in documented return value for DH_get_nid Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/11562)
35 lines
1.3 KiB
C
35 lines
1.3 KiB
C
/*
|
|
* Copyright 2020 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*/
|
|
|
|
#include <openssl/core.h>
|
|
#include <openssl/dh.h>
|
|
#include "internal/ffc.h"
|
|
|
|
DH *dh_new_by_nid_with_libctx(OPENSSL_CTX *libctx, int nid);
|
|
DH *dh_new_with_libctx(OPENSSL_CTX *libctx);
|
|
|
|
int dh_generate_ffc_parameters(DH *dh, int type, int pbits,
|
|
int qbits, EVP_MD *md, BN_GENCB *cb);
|
|
int dh_generate_public_key(BN_CTX *ctx, DH *dh, const BIGNUM *priv_key,
|
|
BIGNUM *pub_key);
|
|
int dh_get_named_group_uid_from_size(int pbits);
|
|
const char *dh_gen_type_id2name(int id);
|
|
void dh_cache_named_group(DH *dh);
|
|
|
|
FFC_PARAMS *dh_get0_params(DH *dh);
|
|
int dh_get0_nid(const DH *dh);
|
|
int dh_ffc_params_fromdata(DH *dh, const OSSL_PARAM params[]);
|
|
int dh_key_fromdata(DH *dh, const OSSL_PARAM params[]);
|
|
|
|
int dh_check_pub_key_partial(const DH *dh, const BIGNUM *pub_key, int *ret);
|
|
int dh_check_priv_key(const DH *dh, const BIGNUM *priv_key, int *ret);
|
|
int dh_check_pairwise(DH *dh);
|
|
|
|
const DH_METHOD *dh_get_method(const DH *dh);
|