1 /* $OpenBSD: ameth_lib.c,v 1.16 2017/01/21 04:31:25 jsing Exp $ */
2 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
5 /* ====================================================================
6 * Copyright (c) 2006 The OpenSSL Project. All rights reserved.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in
17 * the documentation and/or other materials provided with the
20 * 3. All advertising materials mentioning features or use of this
21 * software must display the following acknowledgment:
22 * "This product includes software developed by the OpenSSL Project
23 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
25 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26 * endorse or promote products derived from this software without
27 * prior written permission. For written permission, please contact
28 * licensing@OpenSSL.org.
30 * 5. Products derived from this software may not be called "OpenSSL"
31 * nor may "OpenSSL" appear in their names without prior written
32 * permission of the OpenSSL Project.
34 * 6. Redistributions of any form whatsoever must retain the following
36 * "This product includes software developed by the OpenSSL Project
37 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
39 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
43 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50 * OF THE POSSIBILITY OF SUCH DAMAGE.
51 * ====================================================================
53 * This product includes cryptographic software written by Eric Young
54 * (eay@cryptsoft.com). This product includes software written by Tim
55 * Hudson (tjh@cryptsoft.com).
62 #include <openssl/opensslconf.h>
64 #include <openssl/asn1t.h>
65 #include <openssl/x509.h>
67 #ifndef OPENSSL_NO_ENGINE
68 #include <openssl/engine.h>
71 #include "asn1_locl.h"
73 extern const EVP_PKEY_ASN1_METHOD rsa_asn1_meths
[];
74 extern const EVP_PKEY_ASN1_METHOD dsa_asn1_meths
[];
75 extern const EVP_PKEY_ASN1_METHOD dh_asn1_meth
;
76 extern const EVP_PKEY_ASN1_METHOD eckey_asn1_meth
;
77 extern const EVP_PKEY_ASN1_METHOD gostr01_asn1_meths
[];
78 extern const EVP_PKEY_ASN1_METHOD gostimit_asn1_meth
;
79 extern const EVP_PKEY_ASN1_METHOD hmac_asn1_meth
;
80 extern const EVP_PKEY_ASN1_METHOD cmac_asn1_meth
;
82 /* Keep this sorted in type order !! */
83 static const EVP_PKEY_ASN1_METHOD
*standard_methods
[] = {
84 #ifndef OPENSSL_NO_RSA
91 #ifndef OPENSSL_NO_DSA
101 #ifndef OPENSSL_NO_GOST
102 &gostr01_asn1_meths
[0],
107 #ifndef OPENSSL_NO_GOST
108 &gostr01_asn1_meths
[1],
109 &gostr01_asn1_meths
[2],
113 typedef int sk_cmp_fn_type(const char * const *a
, const char * const *b
);
114 DECLARE_STACK_OF(EVP_PKEY_ASN1_METHOD
)
115 static STACK_OF(EVP_PKEY_ASN1_METHOD
) *app_methods
= NULL
;
117 static int ameth_cmp_BSEARCH_CMP_FN(const void *, const void *);
118 static int ameth_cmp(const EVP_PKEY_ASN1_METHOD
* const *, const EVP_PKEY_ASN1_METHOD
* const *);
119 static const EVP_PKEY_ASN1_METHOD
* *OBJ_bsearch_ameth(const EVP_PKEY_ASN1_METHOD
* *key
, const EVP_PKEY_ASN1_METHOD
* const *base
, int num
);
122 ameth_cmp(const EVP_PKEY_ASN1_METHOD
* const *a
,
123 const EVP_PKEY_ASN1_METHOD
* const *b
)
125 return ((*a
)->pkey_id
- (*b
)->pkey_id
);
130 ameth_cmp_BSEARCH_CMP_FN(const void *a_
, const void *b_
)
132 const EVP_PKEY_ASN1_METHOD
* const *a
= a_
;
133 const EVP_PKEY_ASN1_METHOD
* const *b
= b_
;
134 return ameth_cmp(a
, b
);
137 static const EVP_PKEY_ASN1_METHOD
* *
138 OBJ_bsearch_ameth(const EVP_PKEY_ASN1_METHOD
* *key
, const EVP_PKEY_ASN1_METHOD
* const *base
, int num
)
140 return (const EVP_PKEY_ASN1_METHOD
* *)OBJ_bsearch_(key
, base
, num
, sizeof(const EVP_PKEY_ASN1_METHOD
*),
141 ameth_cmp_BSEARCH_CMP_FN
);
145 EVP_PKEY_asn1_get_count(void)
147 int num
= sizeof(standard_methods
) / sizeof(EVP_PKEY_ASN1_METHOD
*);
149 num
+= sk_EVP_PKEY_ASN1_METHOD_num(app_methods
);
153 const EVP_PKEY_ASN1_METHOD
*
154 EVP_PKEY_asn1_get0(int idx
)
156 int num
= sizeof(standard_methods
) / sizeof(EVP_PKEY_ASN1_METHOD
*);
160 return standard_methods
[idx
];
162 return sk_EVP_PKEY_ASN1_METHOD_value(app_methods
, idx
);
165 static const EVP_PKEY_ASN1_METHOD
*
166 pkey_asn1_find(int type
)
168 EVP_PKEY_ASN1_METHOD tmp
;
169 const EVP_PKEY_ASN1_METHOD
*t
= &tmp
, **ret
;
173 idx
= sk_EVP_PKEY_ASN1_METHOD_find(app_methods
, &tmp
);
175 return sk_EVP_PKEY_ASN1_METHOD_value(app_methods
, idx
);
177 ret
= OBJ_bsearch_ameth(&t
, standard_methods
,
178 sizeof(standard_methods
) / sizeof(EVP_PKEY_ASN1_METHOD
*));
184 /* Find an implementation of an ASN1 algorithm. If 'pe' is not NULL
185 * also search through engines and set *pe to a functional reference
186 * to the engine implementing 'type' or NULL if no engine implements
190 const EVP_PKEY_ASN1_METHOD
*
191 EVP_PKEY_asn1_find(ENGINE
**pe
, int type
)
193 const EVP_PKEY_ASN1_METHOD
*t
;
196 t
= pkey_asn1_find(type
);
197 if (!t
|| !(t
->pkey_flags
& ASN1_PKEY_ALIAS
))
199 type
= t
->pkey_base_id
;
202 #ifndef OPENSSL_NO_ENGINE
204 /* type will contain the final unaliased type */
205 e
= ENGINE_get_pkey_asn1_meth_engine(type
);
208 return ENGINE_get_pkey_asn1_meth(e
, type
);
216 const EVP_PKEY_ASN1_METHOD
*
217 EVP_PKEY_asn1_find_str(ENGINE
**pe
, const char *str
, int len
)
220 const EVP_PKEY_ASN1_METHOD
*ameth
;
224 #ifndef OPENSSL_NO_ENGINE
226 ameth
= ENGINE_pkey_asn1_find_str(&e
, str
, len
);
228 /* Convert structural into
229 * functional reference
240 for (i
= 0; i
< EVP_PKEY_asn1_get_count(); i
++) {
241 ameth
= EVP_PKEY_asn1_get0(i
);
242 if (ameth
->pkey_flags
& ASN1_PKEY_ALIAS
)
244 if (((int)strlen(ameth
->pem_str
) == len
) &&
245 !strncasecmp(ameth
->pem_str
, str
, len
))
252 EVP_PKEY_asn1_add0(const EVP_PKEY_ASN1_METHOD
*ameth
)
254 if (app_methods
== NULL
) {
255 app_methods
= sk_EVP_PKEY_ASN1_METHOD_new(ameth_cmp
);
259 if (!sk_EVP_PKEY_ASN1_METHOD_push(app_methods
, ameth
))
261 sk_EVP_PKEY_ASN1_METHOD_sort(app_methods
);
266 EVP_PKEY_asn1_add_alias(int to
, int from
)
268 EVP_PKEY_ASN1_METHOD
*ameth
;
270 ameth
= EVP_PKEY_asn1_new(from
, ASN1_PKEY_ALIAS
, NULL
, NULL
);
273 ameth
->pkey_base_id
= to
;
274 if (!EVP_PKEY_asn1_add0(ameth
)) {
275 EVP_PKEY_asn1_free(ameth
);
282 EVP_PKEY_asn1_get0_info(int *ppkey_id
, int *ppkey_base_id
, int *ppkey_flags
,
283 const char **pinfo
, const char **ppem_str
,
284 const EVP_PKEY_ASN1_METHOD
*ameth
)
289 *ppkey_id
= ameth
->pkey_id
;
291 *ppkey_base_id
= ameth
->pkey_base_id
;
293 *ppkey_flags
= ameth
->pkey_flags
;
295 *pinfo
= ameth
->info
;
297 *ppem_str
= ameth
->pem_str
;
301 const EVP_PKEY_ASN1_METHOD
*
302 EVP_PKEY_get0_asn1(EVP_PKEY
*pkey
)
307 EVP_PKEY_ASN1_METHOD
*
308 EVP_PKEY_asn1_new(int id
, int flags
, const char *pem_str
, const char *info
)
310 EVP_PKEY_ASN1_METHOD
*ameth
;
312 ameth
= calloc(1, sizeof(EVP_PKEY_ASN1_METHOD
));
317 ameth
->pkey_base_id
= id
;
318 ameth
->pkey_flags
= flags
| ASN1_PKEY_DYNAMIC
;
321 ameth
->info
= strdup(info
);
328 ameth
->pem_str
= strdup(pem_str
);
332 ameth
->pem_str
= NULL
;
334 ameth
->pub_decode
= 0;
335 ameth
->pub_encode
= 0;
337 ameth
->pub_print
= 0;
339 ameth
->priv_decode
= 0;
340 ameth
->priv_encode
= 0;
341 ameth
->priv_print
= 0;
343 ameth
->old_priv_encode
= 0;
344 ameth
->old_priv_decode
= 0;
346 ameth
->item_verify
= 0;
347 ameth
->item_sign
= 0;
349 ameth
->pkey_size
= 0;
350 ameth
->pkey_bits
= 0;
352 ameth
->param_decode
= 0;
353 ameth
->param_encode
= 0;
354 ameth
->param_missing
= 0;
355 ameth
->param_copy
= 0;
356 ameth
->param_cmp
= 0;
357 ameth
->param_print
= 0;
359 ameth
->pkey_free
= 0;
360 ameth
->pkey_ctrl
= 0;
365 EVP_PKEY_asn1_free(ameth
);
370 EVP_PKEY_asn1_copy(EVP_PKEY_ASN1_METHOD
*dst
, const EVP_PKEY_ASN1_METHOD
*src
)
372 dst
->pub_decode
= src
->pub_decode
;
373 dst
->pub_encode
= src
->pub_encode
;
374 dst
->pub_cmp
= src
->pub_cmp
;
375 dst
->pub_print
= src
->pub_print
;
377 dst
->priv_decode
= src
->priv_decode
;
378 dst
->priv_encode
= src
->priv_encode
;
379 dst
->priv_print
= src
->priv_print
;
381 dst
->old_priv_encode
= src
->old_priv_encode
;
382 dst
->old_priv_decode
= src
->old_priv_decode
;
384 dst
->pkey_size
= src
->pkey_size
;
385 dst
->pkey_bits
= src
->pkey_bits
;
387 dst
->param_decode
= src
->param_decode
;
388 dst
->param_encode
= src
->param_encode
;
389 dst
->param_missing
= src
->param_missing
;
390 dst
->param_copy
= src
->param_copy
;
391 dst
->param_cmp
= src
->param_cmp
;
392 dst
->param_print
= src
->param_print
;
394 dst
->pkey_free
= src
->pkey_free
;
395 dst
->pkey_ctrl
= src
->pkey_ctrl
;
397 dst
->item_sign
= src
->item_sign
;
398 dst
->item_verify
= src
->item_verify
;
402 EVP_PKEY_asn1_free(EVP_PKEY_ASN1_METHOD
*ameth
)
404 if (ameth
&& (ameth
->pkey_flags
& ASN1_PKEY_DYNAMIC
)) {
405 free(ameth
->pem_str
);
412 EVP_PKEY_asn1_set_public(EVP_PKEY_ASN1_METHOD
*ameth
,
413 int (*pub_decode
)(EVP_PKEY
*pk
, X509_PUBKEY
*pub
),
414 int (*pub_encode
)(X509_PUBKEY
*pub
, const EVP_PKEY
*pk
),
415 int (*pub_cmp
)(const EVP_PKEY
*a
, const EVP_PKEY
*b
),
416 int (*pub_print
)(BIO
*out
, const EVP_PKEY
*pkey
, int indent
,
418 int (*pkey_size
)(const EVP_PKEY
*pk
),
419 int (*pkey_bits
)(const EVP_PKEY
*pk
))
421 ameth
->pub_decode
= pub_decode
;
422 ameth
->pub_encode
= pub_encode
;
423 ameth
->pub_cmp
= pub_cmp
;
424 ameth
->pub_print
= pub_print
;
425 ameth
->pkey_size
= pkey_size
;
426 ameth
->pkey_bits
= pkey_bits
;
430 EVP_PKEY_asn1_set_private(EVP_PKEY_ASN1_METHOD
*ameth
,
431 int (*priv_decode
)(EVP_PKEY
*pk
, PKCS8_PRIV_KEY_INFO
*p8inf
),
432 int (*priv_encode
)(PKCS8_PRIV_KEY_INFO
*p8
, const EVP_PKEY
*pk
),
433 int (*priv_print
)(BIO
*out
, const EVP_PKEY
*pkey
, int indent
,
436 ameth
->priv_decode
= priv_decode
;
437 ameth
->priv_encode
= priv_encode
;
438 ameth
->priv_print
= priv_print
;
442 EVP_PKEY_asn1_set_param(EVP_PKEY_ASN1_METHOD
*ameth
,
443 int (*param_decode
)(EVP_PKEY
*pkey
, const unsigned char **pder
, int derlen
),
444 int (*param_encode
)(const EVP_PKEY
*pkey
, unsigned char **pder
),
445 int (*param_missing
)(const EVP_PKEY
*pk
),
446 int (*param_copy
)(EVP_PKEY
*to
, const EVP_PKEY
*from
),
447 int (*param_cmp
)(const EVP_PKEY
*a
, const EVP_PKEY
*b
),
448 int (*param_print
)(BIO
*out
, const EVP_PKEY
*pkey
, int indent
,
451 ameth
->param_decode
= param_decode
;
452 ameth
->param_encode
= param_encode
;
453 ameth
->param_missing
= param_missing
;
454 ameth
->param_copy
= param_copy
;
455 ameth
->param_cmp
= param_cmp
;
456 ameth
->param_print
= param_print
;
460 EVP_PKEY_asn1_set_free(EVP_PKEY_ASN1_METHOD
*ameth
,
461 void (*pkey_free
)(EVP_PKEY
*pkey
))
463 ameth
->pkey_free
= pkey_free
;
467 EVP_PKEY_asn1_set_ctrl(EVP_PKEY_ASN1_METHOD
*ameth
,
468 int (*pkey_ctrl
)(EVP_PKEY
*pkey
, int op
, long arg1
, void *arg2
))
470 ameth
->pkey_ctrl
= pkey_ctrl
;