2 * dlls/rsaenh/implglue.c
3 * Glueing the RSAENH specific code to the crypto library
5 * Copyright (c) 2004, 2005 Michael Jung
6 * Copyright (c) 2007 Vijay Kiran Kamuju
8 * based on code by Mike McCormack and David Hammerton
10 * This library is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU Lesser General Public
12 * License as published by the Free Software Foundation; either
13 * version 2.1 of the License, or (at your option) any later version.
15 * This library is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
18 * Lesser General Public License for more details.
20 * You should have received a copy of the GNU Lesser General Public
21 * License along with this library; if not, write to the Free Software
22 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
26 #include "wine/port.h"
27 #include "wine/library.h"
36 /* Function prototypes copied from dlls/advapi32/crypt_md4.c */
37 VOID WINAPI
MD4Init( MD4_CTX
*ctx
);
38 VOID WINAPI
MD4Update( MD4_CTX
*ctx
, const unsigned char *buf
, unsigned int len
);
39 VOID WINAPI
MD4Final( MD4_CTX
*ctx
);
40 /* Function prototypes copied from dlls/advapi32/crypt_md5.c */
41 VOID WINAPI
MD5Init( MD5_CTX
*ctx
);
42 VOID WINAPI
MD5Update( MD5_CTX
*ctx
, const unsigned char *buf
, unsigned int len
);
43 VOID WINAPI
MD5Final( MD5_CTX
*ctx
);
44 /* Function prototypes copied from dlls/advapi32/crypt_sha.c */
45 VOID WINAPI
A_SHAInit(PSHA_CTX Context
);
46 VOID WINAPI
A_SHAUpdate(PSHA_CTX Context
, const unsigned char *Buffer
, UINT BufferSize
);
47 VOID WINAPI
A_SHAFinal(PSHA_CTX Context
, PULONG Result
);
48 /* Function prototype copied from dlls/advapi32/crypt.c */
49 BOOL WINAPI
SystemFunction036(PVOID pbBuffer
, ULONG dwLen
);
51 BOOL
init_hash_impl(ALG_ID aiAlgid
, HASH_CONTEXT
*pHashContext
)
56 md2_init(&pHashContext
->md2
);
60 MD4Init(&pHashContext
->md4
);
64 MD5Init(&pHashContext
->md5
);
68 A_SHAInit(&pHashContext
->sha
);
72 SHA256_Init(&pHashContext
->sha256
);
76 SHA384_Init(&pHashContext
->sha384
);
80 SHA512_Init(&pHashContext
->sha512
);
87 BOOL
update_hash_impl(ALG_ID aiAlgid
, HASH_CONTEXT
*pHashContext
, const BYTE
*pbData
,
93 md2_process(&pHashContext
->md2
, pbData
, dwDataLen
);
97 MD4Update(&pHashContext
->md4
, pbData
, dwDataLen
);
101 MD5Update(&pHashContext
->md5
, pbData
, dwDataLen
);
105 A_SHAUpdate(&pHashContext
->sha
, pbData
, dwDataLen
);
109 SHA256_Update(&pHashContext
->sha256
, pbData
, dwDataLen
);
113 SHA384_Update(&pHashContext
->sha384
, pbData
, dwDataLen
);
117 SHA512_Update(&pHashContext
->sha512
, pbData
, dwDataLen
);
121 SetLastError(NTE_BAD_ALGID
);
128 BOOL
finalize_hash_impl(ALG_ID aiAlgid
, HASH_CONTEXT
*pHashContext
, BYTE
*pbHashValue
)
133 md2_done(&pHashContext
->md2
, pbHashValue
);
137 MD4Final(&pHashContext
->md4
);
138 memcpy(pbHashValue
, pHashContext
->md4
.digest
, 16);
142 MD5Final(&pHashContext
->md5
);
143 memcpy(pbHashValue
, pHashContext
->md5
.digest
, 16);
147 A_SHAFinal(&pHashContext
->sha
, (PULONG
)pbHashValue
);
151 SHA256_Final(pbHashValue
, &pHashContext
->sha256
);
155 SHA384_Final(pbHashValue
, &pHashContext
->sha384
);
159 SHA512_Final(pbHashValue
, &pHashContext
->sha512
);
163 SetLastError(NTE_BAD_ALGID
);
170 BOOL
duplicate_hash_impl(ALG_ID aiAlgid
, const HASH_CONTEXT
*pSrcHashContext
,
171 HASH_CONTEXT
*pDestHashContext
)
173 *pDestHashContext
= *pSrcHashContext
;
178 BOOL
new_key_impl(ALG_ID aiAlgid
, KEY_CONTEXT
*pKeyContext
, DWORD dwKeyLen
)
184 if (rsa_make_key((int)dwKeyLen
, 65537, &pKeyContext
->rsa
) != CRYPT_OK
) {
185 SetLastError(NTE_FAIL
);
194 BOOL
free_key_impl(ALG_ID aiAlgid
, KEY_CONTEXT
*pKeyContext
)
200 rsa_free(&pKeyContext
->rsa
);
206 BOOL
setup_key_impl(ALG_ID aiAlgid
, KEY_CONTEXT
*pKeyContext
, DWORD dwKeyLen
,
207 DWORD dwEffectiveKeyLen
, DWORD dwSaltLen
, BYTE
*abKeyValue
)
212 rc4_start(&pKeyContext
->rc4
);
213 rc4_add_entropy(abKeyValue
, dwKeyLen
+ dwSaltLen
, &pKeyContext
->rc4
);
214 rc4_ready(&pKeyContext
->rc4
);
218 rc2_setup(abKeyValue
, dwKeyLen
+ dwSaltLen
, dwEffectiveKeyLen
?
219 dwEffectiveKeyLen
: dwKeyLen
<< 3, 0, &pKeyContext
->rc2
);
223 des3_setup(abKeyValue
, 24, 0, &pKeyContext
->des3
);
227 memcpy(abKeyValue
+16, abKeyValue
, 8);
228 des3_setup(abKeyValue
, 24, 0, &pKeyContext
->des3
);
232 des_setup(abKeyValue
, 8, 0, &pKeyContext
->des
);
237 aes_setup(abKeyValue
, 16, 0, &pKeyContext
->aes
);
241 aes_setup(abKeyValue
, 24, 0, &pKeyContext
->aes
);
245 aes_setup(abKeyValue
, 32, 0, &pKeyContext
->aes
);
252 BOOL
duplicate_key_impl(ALG_ID aiAlgid
, const KEY_CONTEXT
*pSrcKeyContext
,
253 KEY_CONTEXT
*pDestKeyContext
)
266 *pDestKeyContext
= *pSrcKeyContext
;
270 pDestKeyContext
->rsa
.type
= pSrcKeyContext
->rsa
.type
;
271 mp_init_copy(&pDestKeyContext
->rsa
.e
, &pSrcKeyContext
->rsa
.e
);
272 mp_init_copy(&pDestKeyContext
->rsa
.d
, &pSrcKeyContext
->rsa
.d
);
273 mp_init_copy(&pDestKeyContext
->rsa
.N
, &pSrcKeyContext
->rsa
.N
);
274 mp_init_copy(&pDestKeyContext
->rsa
.p
, &pSrcKeyContext
->rsa
.p
);
275 mp_init_copy(&pDestKeyContext
->rsa
.q
, &pSrcKeyContext
->rsa
.q
);
276 mp_init_copy(&pDestKeyContext
->rsa
.qP
, &pSrcKeyContext
->rsa
.qP
);
277 mp_init_copy(&pDestKeyContext
->rsa
.dP
, &pSrcKeyContext
->rsa
.dP
);
278 mp_init_copy(&pDestKeyContext
->rsa
.dQ
, &pSrcKeyContext
->rsa
.dQ
);
282 SetLastError(NTE_BAD_ALGID
);
289 static inline void reverse_bytes(BYTE
*pbData
, DWORD dwLen
) {
293 for (i
=0; i
<dwLen
/2; i
++) {
295 pbData
[i
] = pbData
[dwLen
-i
-1];
296 pbData
[dwLen
-i
-1] = swap
;
300 BOOL
encrypt_block_impl(ALG_ID aiAlgid
, DWORD dwKeySpec
, KEY_CONTEXT
*pKeyContext
, const BYTE
*in
,
301 BYTE
*out
, DWORD enc
)
303 unsigned long inlen
, outlen
;
304 BYTE
*in_reversed
= NULL
;
309 rc2_ecb_encrypt(in
, out
, &pKeyContext
->rc2
);
311 rc2_ecb_decrypt(in
, out
, &pKeyContext
->rc2
);
318 des3_ecb_encrypt(in
, out
, &pKeyContext
->des3
);
320 des3_ecb_decrypt(in
, out
, &pKeyContext
->des3
);
326 des_ecb_encrypt(in
, out
, &pKeyContext
->des
);
328 des_ecb_decrypt(in
, out
, &pKeyContext
->des
);
337 aes_ecb_encrypt(in
, out
, &pKeyContext
->aes
);
339 aes_ecb_decrypt(in
, out
, &pKeyContext
->aes
);
345 case CALG_SSL3_SHAMD5
:
346 outlen
= inlen
= (mp_count_bits(&pKeyContext
->rsa
.N
)+7)/8;
348 if (rsa_exptmod(in
, inlen
, out
, &outlen
, dwKeySpec
, &pKeyContext
->rsa
) != CRYPT_OK
) {
349 SetLastError(NTE_FAIL
);
352 reverse_bytes(out
, outlen
);
354 in_reversed
= HeapAlloc(GetProcessHeap(), 0, inlen
);
356 SetLastError(NTE_NO_MEMORY
);
359 memcpy(in_reversed
, in
, inlen
);
360 reverse_bytes(in_reversed
, inlen
);
361 if (rsa_exptmod(in_reversed
, inlen
, out
, &outlen
, dwKeySpec
, &pKeyContext
->rsa
) != CRYPT_OK
) {
362 HeapFree(GetProcessHeap(), 0, in_reversed
);
363 SetLastError(NTE_FAIL
);
366 HeapFree(GetProcessHeap(), 0, in_reversed
);
371 SetLastError(NTE_BAD_ALGID
);
378 BOOL
encrypt_stream_impl(ALG_ID aiAlgid
, KEY_CONTEXT
*pKeyContext
, BYTE
*stream
, DWORD dwLen
)
382 rc4_read(stream
, dwLen
, &pKeyContext
->rc4
);
386 SetLastError(NTE_BAD_ALGID
);
393 BOOL
gen_rand_impl(BYTE
*pbBuffer
, DWORD dwLen
)
395 return SystemFunction036(pbBuffer
, dwLen
);
398 BOOL
export_public_key_impl(BYTE
*pbDest
, const KEY_CONTEXT
*pKeyContext
, DWORD dwKeyLen
,DWORD
*pdwPubExp
)
400 mp_to_unsigned_bin(&pKeyContext
->rsa
.N
, pbDest
);
401 reverse_bytes(pbDest
, mp_unsigned_bin_size(&pKeyContext
->rsa
.N
));
402 if (mp_unsigned_bin_size(&pKeyContext
->rsa
.N
) < dwKeyLen
)
403 memset(pbDest
+ mp_unsigned_bin_size(&pKeyContext
->rsa
.N
), 0,
404 dwKeyLen
- mp_unsigned_bin_size(&pKeyContext
->rsa
.N
));
405 *pdwPubExp
= (DWORD
)mp_get_int(&pKeyContext
->rsa
.e
);
409 BOOL
import_public_key_impl(const BYTE
*pbSrc
, KEY_CONTEXT
*pKeyContext
, DWORD dwKeyLen
,
414 if (mp_init_multi(&pKeyContext
->rsa
.e
, &pKeyContext
->rsa
.d
, &pKeyContext
->rsa
.N
,
415 &pKeyContext
->rsa
.dQ
,&pKeyContext
->rsa
.dP
,&pKeyContext
->rsa
.qP
,
416 &pKeyContext
->rsa
.p
, &pKeyContext
->rsa
.q
, NULL
) != MP_OKAY
)
418 SetLastError(NTE_FAIL
);
422 pbTemp
= HeapAlloc(GetProcessHeap(), 0, dwKeyLen
);
423 if (!pbTemp
) return FALSE
;
424 memcpy(pbTemp
, pbSrc
, dwKeyLen
);
426 pKeyContext
->rsa
.type
= PK_PUBLIC
;
427 reverse_bytes(pbTemp
, dwKeyLen
);
428 mp_read_unsigned_bin(&pKeyContext
->rsa
.N
, pbTemp
, dwKeyLen
);
429 HeapFree(GetProcessHeap(), 0, pbTemp
);
430 mp_set_int(&pKeyContext
->rsa
.e
, dwPubExp
);
435 BOOL
export_private_key_impl(BYTE
*pbDest
, const KEY_CONTEXT
*pKeyContext
, DWORD dwKeyLen
,
438 mp_to_unsigned_bin(&pKeyContext
->rsa
.N
, pbDest
);
439 reverse_bytes(pbDest
, mp_unsigned_bin_size(&pKeyContext
->rsa
.N
));
440 if (mp_unsigned_bin_size(&pKeyContext
->rsa
.N
) < dwKeyLen
)
441 memset(pbDest
+ mp_unsigned_bin_size(&pKeyContext
->rsa
.N
), 0,
442 dwKeyLen
- mp_unsigned_bin_size(&pKeyContext
->rsa
.N
));
444 mp_to_unsigned_bin(&pKeyContext
->rsa
.p
, pbDest
);
445 reverse_bytes(pbDest
, mp_unsigned_bin_size(&pKeyContext
->rsa
.p
));
446 if (mp_unsigned_bin_size(&pKeyContext
->rsa
.p
) < (dwKeyLen
+1)>>1)
447 memset(pbDest
+ mp_unsigned_bin_size(&pKeyContext
->rsa
.p
), 0,
448 ((dwKeyLen
+1)>>1) - mp_unsigned_bin_size(&pKeyContext
->rsa
.p
));
449 pbDest
+= (dwKeyLen
+1)>>1;
450 mp_to_unsigned_bin(&pKeyContext
->rsa
.q
, pbDest
);
451 reverse_bytes(pbDest
, mp_unsigned_bin_size(&pKeyContext
->rsa
.q
));
452 if (mp_unsigned_bin_size(&pKeyContext
->rsa
.q
) < (dwKeyLen
+1)>>1)
453 memset(pbDest
+ mp_unsigned_bin_size(&pKeyContext
->rsa
.q
), 0,
454 ((dwKeyLen
+1)>>1) - mp_unsigned_bin_size(&pKeyContext
->rsa
.q
));
455 pbDest
+= (dwKeyLen
+1)>>1;
456 mp_to_unsigned_bin(&pKeyContext
->rsa
.dP
, pbDest
);
457 reverse_bytes(pbDest
, mp_unsigned_bin_size(&pKeyContext
->rsa
.dP
));
458 if (mp_unsigned_bin_size(&pKeyContext
->rsa
.dP
) < (dwKeyLen
+1)>>1)
459 memset(pbDest
+ mp_unsigned_bin_size(&pKeyContext
->rsa
.dP
), 0,
460 ((dwKeyLen
+1)>>1) - mp_unsigned_bin_size(&pKeyContext
->rsa
.dP
));
461 pbDest
+= (dwKeyLen
+1)>>1;
462 mp_to_unsigned_bin(&pKeyContext
->rsa
.dQ
, pbDest
);
463 reverse_bytes(pbDest
, mp_unsigned_bin_size(&pKeyContext
->rsa
.dQ
));
464 if (mp_unsigned_bin_size(&pKeyContext
->rsa
.dQ
) < (dwKeyLen
+1)>>1)
465 memset(pbDest
+ mp_unsigned_bin_size(&pKeyContext
->rsa
.dQ
), 0,
466 ((dwKeyLen
+1)>>1) - mp_unsigned_bin_size(&pKeyContext
->rsa
.dQ
));
467 pbDest
+= (dwKeyLen
+1)>>1;
468 mp_to_unsigned_bin(&pKeyContext
->rsa
.qP
, pbDest
);
469 reverse_bytes(pbDest
, mp_unsigned_bin_size(&pKeyContext
->rsa
.qP
));
470 if (mp_unsigned_bin_size(&pKeyContext
->rsa
.qP
) < (dwKeyLen
+1)>>1)
471 memset(pbDest
+ mp_unsigned_bin_size(&pKeyContext
->rsa
.qP
), 0,
472 ((dwKeyLen
+1)>>1) - mp_unsigned_bin_size(&pKeyContext
->rsa
.qP
));
473 pbDest
+= (dwKeyLen
+1)>>1;
474 mp_to_unsigned_bin(&pKeyContext
->rsa
.d
, pbDest
);
475 reverse_bytes(pbDest
, mp_unsigned_bin_size(&pKeyContext
->rsa
.d
));
476 if (mp_unsigned_bin_size(&pKeyContext
->rsa
.d
) < dwKeyLen
)
477 memset(pbDest
+ mp_unsigned_bin_size(&pKeyContext
->rsa
.d
), 0,
478 dwKeyLen
- mp_unsigned_bin_size(&pKeyContext
->rsa
.d
));
479 *pdwPubExp
= (DWORD
)mp_get_int(&pKeyContext
->rsa
.e
);
484 BOOL
import_private_key_impl(const BYTE
*pbSrc
, KEY_CONTEXT
*pKeyContext
, DWORD dwKeyLen
,
485 DWORD dwDataLen
, DWORD dwPubExp
)
487 BYTE
*pbTemp
, *pbBigNum
;
489 if (mp_init_multi(&pKeyContext
->rsa
.e
, &pKeyContext
->rsa
.d
, &pKeyContext
->rsa
.N
,
490 &pKeyContext
->rsa
.dQ
,&pKeyContext
->rsa
.dP
,&pKeyContext
->rsa
.qP
,
491 &pKeyContext
->rsa
.p
, &pKeyContext
->rsa
.q
, NULL
) != MP_OKAY
)
493 SetLastError(NTE_FAIL
);
497 pbTemp
= HeapAlloc(GetProcessHeap(), 0, 2*dwKeyLen
+5*((dwKeyLen
+1)>>1));
498 if (!pbTemp
) return FALSE
;
499 memcpy(pbTemp
, pbSrc
, min(dwDataLen
, 2*dwKeyLen
+5*((dwKeyLen
+1)>>1)));
502 pKeyContext
->rsa
.type
= PK_PRIVATE
;
503 reverse_bytes(pbBigNum
, dwKeyLen
);
504 mp_read_unsigned_bin(&pKeyContext
->rsa
.N
, pbBigNum
, dwKeyLen
);
505 pbBigNum
+= dwKeyLen
;
506 reverse_bytes(pbBigNum
, (dwKeyLen
+1)>>1);
507 mp_read_unsigned_bin(&pKeyContext
->rsa
.p
, pbBigNum
, (dwKeyLen
+1)>>1);
508 pbBigNum
+= (dwKeyLen
+1)>>1;
509 reverse_bytes(pbBigNum
, (dwKeyLen
+1)>>1);
510 mp_read_unsigned_bin(&pKeyContext
->rsa
.q
, pbBigNum
, (dwKeyLen
+1)>>1);
511 pbBigNum
+= (dwKeyLen
+1)>>1;
512 reverse_bytes(pbBigNum
, (dwKeyLen
+1)>>1);
513 mp_read_unsigned_bin(&pKeyContext
->rsa
.dP
, pbBigNum
, (dwKeyLen
+1)>>1);
514 pbBigNum
+= (dwKeyLen
+1)>>1;
515 reverse_bytes(pbBigNum
, (dwKeyLen
+1)>>1);
516 mp_read_unsigned_bin(&pKeyContext
->rsa
.dQ
, pbBigNum
, (dwKeyLen
+1)>>1);
517 pbBigNum
+= (dwKeyLen
+1)>>1;
518 reverse_bytes(pbBigNum
, (dwKeyLen
+1)>>1);
519 mp_read_unsigned_bin(&pKeyContext
->rsa
.qP
, pbBigNum
, (dwKeyLen
+1)>>1);
520 pbBigNum
+= (dwKeyLen
+1)>>1;
521 /* The size of the private exponent d is inferred from the remaining
524 dwKeyLen
= min(dwKeyLen
, dwDataLen
- (pbBigNum
- pbTemp
));
525 reverse_bytes(pbBigNum
, dwKeyLen
);
526 mp_read_unsigned_bin(&pKeyContext
->rsa
.d
, pbBigNum
, dwKeyLen
);
527 mp_set_int(&pKeyContext
->rsa
.e
, dwPubExp
);
529 HeapFree(GetProcessHeap(), 0, pbTemp
);