dlls/rsaenh/implglue.c

   1 /*
   2  * dlls/rsaenh/implglue.c
   3  * Glueing the RSAENH specific code to the crypto library
   4  *
   5  * Copyright (c) 2004 Michael Jung
   6  *
   7  * based on code by Mike McCormack and David Hammerton
   8  *
   9  * This library is free software; you can redistribute it and/or
  10  * modify it under the terms of the GNU Lesser General Public
  11  * License as published by the Free Software Foundation; either
  12  * version 2.1 of the License, or (at your option) any later version.
  13  *
  14  * This library is distributed in the hope that it will be useful,
  15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  17  * Lesser General Public License for more details.
  18  *
  19  * You should have received a copy of the GNU Lesser General Public
  20  * License along with this library; if not, write to the Free Software
  21  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  22  */
  23 #include "config.h"
  24
  25 #include "wine/port.h"
  26 #include "wine/library.h"
  27 #include "wine/debug.h"
  28
  29 #include "windef.h"
  30 #include "wincrypt.h"
  31
  32 #include "implglue.h"
  33
  34 #include <stdio.h>
  35
  36 WINE_DEFAULT_DEBUG_CHANNEL(crypt);
  37
  38 /* Function prototypes copied from dlls/advapi32/crypt_md4.c */
  39 VOID WINAPI MD4Init( MD4_CTX *ctx );
  40 VOID WINAPI MD4Update( MD4_CTX *ctx, const unsigned char *buf, unsigned int len );
  41 VOID WINAPI MD4Final( MD4_CTX *ctx );
  42 /* Function prototypes copied from dlls/advapi32/crypt_md5.c */
  43 VOID WINAPI MD5Init( MD5_CTX *ctx );
  44 VOID WINAPI MD5Update( MD5_CTX *ctx, const unsigned char *buf, unsigned int len );
  45 VOID WINAPI MD5Final( MD5_CTX *ctx );
  46 /* Function prototypes copied from dlls/advapi32/crypt_sha.c */
  47 VOID WINAPI A_SHAInit(PSHA_CTX Context);
  48 VOID WINAPI A_SHAUpdate(PSHA_CTX Context, PCHAR Buffer, UINT BufferSize);
  49 VOID WINAPI A_SHAFinal(PSHA_CTX Context, PULONG Result);
  50
  51 BOOL init_hash_impl(ALG_ID aiAlgid, HASH_CONTEXT *pHashContext)
  52 {
  53     switch (aiAlgid)
  54     {
  55         case CALG_MD2:
  56             md2_init(&pHashContext->md2);
  57             break;
  58
  59         case CALG_MD4:
  60             MD4Init(&pHashContext->md4);
  61             break;
  62
  63         case CALG_MD5:
  64             MD5Init(&pHashContext->md5);
  65             break;
  66
  67         case CALG_SHA:
  68             A_SHAInit(&pHashContext->sha);
  69             break;
  70
  71         default:
  72             SetLastError(NTE_BAD_ALGID);
  73             return FALSE;
  74     }
  75
  76     return TRUE;
  77 }
  78
  79 BOOL update_hash_impl(ALG_ID aiAlgid, HASH_CONTEXT *pHashContext, CONST BYTE *pbData,
  80                       DWORD dwDataLen)
  81 {
  82     switch (aiAlgid)
  83     {
  84         case CALG_MD2:
  85             md2_process(&pHashContext->md2, pbData, dwDataLen);
  86             break;
  87
  88         case CALG_MD4:
  89             MD4Update(&pHashContext->md4, pbData, dwDataLen);
  90             break;
  91
  92         case CALG_MD5:
  93             MD5Update(&pHashContext->md5, pbData, dwDataLen);
  94             break;
  95
  96         case CALG_SHA:
  97             A_SHAUpdate(&pHashContext->sha, (PCHAR)pbData, dwDataLen);
  98             break;
  99
 100         default:
 101             SetLastError(NTE_BAD_ALGID);
 102             return FALSE;
 103     }
 104
 105     return TRUE;
 106 }
 107
 108 BOOL finalize_hash_impl(ALG_ID aiAlgid, HASH_CONTEXT *pHashContext, BYTE *pbHashValue)
 109 {
 110     switch (aiAlgid)
 111     {
 112         case CALG_MD2:
 113             md2_done(&pHashContext->md2, pbHashValue);
 114             break;
 115
 116         case CALG_MD4:
 117             MD4Final(&pHashContext->md4);
 118             memcpy(pbHashValue, pHashContext->md4.digest, 16);
 119             break;
 120
 121         case CALG_MD5:
 122             MD5Final(&pHashContext->md5);
 123             memcpy(pbHashValue, pHashContext->md5.digest, 16);
 124             break;
 125
 126         case CALG_SHA:
 127             A_SHAFinal(&pHashContext->sha, (PULONG)pbHashValue);
 128             break;
 129
 130         default:
 131             SetLastError(NTE_BAD_ALGID);
 132             return FALSE;
 133     }
 134
 135     return TRUE;
 136 }
 137
 138 BOOL duplicate_hash_impl(ALG_ID aiAlgid, CONST HASH_CONTEXT *pSrcHashContext,
 139                          HASH_CONTEXT *pDestHashContext)
 140 {
 141     memcpy(pDestHashContext, pSrcHashContext, sizeof(HASH_CONTEXT));
 142
 143     return TRUE;
 144 }
 145
 146 BOOL new_key_impl(ALG_ID aiAlgid, KEY_CONTEXT *pKeyContext, DWORD dwKeyLen)
 147 {
 148     switch (aiAlgid)
 149     {
 150         case CALG_RSA_KEYX:
 151         case CALG_RSA_SIGN:
 152             if (rsa_make_key((int)dwKeyLen, 65537, &pKeyContext->rsa) != CRYPT_OK) {
 153                 SetLastError(NTE_FAIL);
 154                 return FALSE;
 155             }
 156             return TRUE;
 157     }
 158
 159     return TRUE;
 160 }
 161
 162 BOOL free_key_impl(ALG_ID aiAlgid, KEY_CONTEXT *pKeyContext)
 163 {
 164     switch (aiAlgid)
 165     {
 166         case CALG_RSA_KEYX:
 167         case CALG_RSA_SIGN:
 168             rsa_free(&pKeyContext->rsa);
 169     }
 170
 171     return TRUE;
 172 }
 173
 174 BOOL setup_key_impl(ALG_ID aiAlgid, KEY_CONTEXT *pKeyContext, DWORD dwKeyLen, DWORD dwSaltLen,
 175                     BYTE *abKeyValue)
 176 {
 177     switch (aiAlgid)
 178     {
 179         case CALG_RC4:
 180             rc4_start(&pKeyContext->rc4);
 181             rc4_add_entropy(abKeyValue, dwKeyLen + dwSaltLen, &pKeyContext->rc4);
 182             rc4_ready(&pKeyContext->rc4);
 183             break;
 184
 185         case CALG_RC2:
 186             rc2_setup(abKeyValue, dwKeyLen + dwSaltLen, dwKeyLen << 3, 0, &pKeyContext->rc2);
 187             break;
 188
 189         case CALG_3DES:
 190             des3_setup(abKeyValue, 24, 0, &pKeyContext->des3);
 191             break;
 192
 193         case CALG_3DES_112:
 194             memcpy(abKeyValue+16, abKeyValue, 8);
 195             des3_setup(abKeyValue, 24, 0, &pKeyContext->des3);
 196             break;
 197
 198         case CALG_DES:
 199             des_setup(abKeyValue, 8, 0, &pKeyContext->des);
 200             break;
 201
 202         case CALG_RSA_SIGN:
 203         case CALG_RSA_KEYX:
 204             break;
 205
 206         default:
 207             SetLastError(NTE_BAD_ALGID);
 208             return FALSE;
 209     }
 210
 211     return TRUE;
 212 }
 213
 214 BOOL duplicate_key_impl(ALG_ID aiAlgid, CONST KEY_CONTEXT *pSrcKeyContext,
 215                         KEY_CONTEXT *pDestKeyContext)
 216 {
 217     switch (aiAlgid)
 218     {
 219         case CALG_RC4:
 220         case CALG_RC2:
 221         case CALG_3DES:
 222         case CALG_3DES_112:
 223         case CALG_DES:
 224             memcpy(pDestKeyContext, pSrcKeyContext, sizeof(KEY_CONTEXT));
 225             break;
 226         case CALG_RSA_KEYX:
 227         case CALG_RSA_SIGN:
 228             pDestKeyContext->rsa.type = pSrcKeyContext->rsa.type;
 229             mp_init_copy(&pDestKeyContext->rsa.e, &pSrcKeyContext->rsa.e);
 230             mp_init_copy(&pDestKeyContext->rsa.d, &pSrcKeyContext->rsa.d);
 231             mp_init_copy(&pDestKeyContext->rsa.N, &pSrcKeyContext->rsa.N);
 232             mp_init_copy(&pDestKeyContext->rsa.p, &pSrcKeyContext->rsa.p);
 233             mp_init_copy(&pDestKeyContext->rsa.q, &pSrcKeyContext->rsa.q);
 234             mp_init_copy(&pDestKeyContext->rsa.qP, &pSrcKeyContext->rsa.qP);
 235             mp_init_copy(&pDestKeyContext->rsa.dP, &pSrcKeyContext->rsa.dP);
 236             mp_init_copy(&pDestKeyContext->rsa.dQ, &pSrcKeyContext->rsa.dQ);
 237             break;
 238
 239         default:
 240             SetLastError(NTE_BAD_ALGID);
 241             return FALSE;
 242     }
 243
 244     return TRUE;
 245 }
 246
 247 static inline void reverse_bytes(BYTE *pbData, DWORD dwLen) {
 248     BYTE swap;
 249     DWORD i;
 250
 251     for (i=0; i<dwLen/2; i++) {
 252         swap = pbData[i];
 253         pbData[i] = pbData[dwLen-i-1];
 254         pbData[dwLen-i-1] = swap;
 255     }
 256 }
 257
 258 BOOL encrypt_block_impl(ALG_ID aiAlgid, KEY_CONTEXT *pKeyContext, CONST BYTE *in, BYTE *out,
 259                         DWORD enc)
 260 {
 261     unsigned long inlen, outlen;
 262
 263     switch (aiAlgid) {
 264         case CALG_RC2:
 265             if (enc) {
 266                 rc2_ecb_encrypt(in, out, &pKeyContext->rc2);
 267             } else {
 268                 rc2_ecb_decrypt(in, out, &pKeyContext->rc2);
 269             }
 270             break;
 271
 272         case CALG_3DES:
 273         case CALG_3DES_112:
 274             if (enc) {
 275                 des3_ecb_encrypt(in, out, &pKeyContext->des3);
 276             } else {
 277                 des3_ecb_decrypt(in, out, &pKeyContext->des3);
 278             }
 279             break;
 280
 281         case CALG_DES:
 282             if (enc) {
 283                 des_ecb_encrypt(in, out, &pKeyContext->des);
 284             } else {
 285                 des_ecb_decrypt(in, out, &pKeyContext->des);
 286             }
 287             break;
 288
 289         case CALG_RSA_KEYX:
 290             outlen = inlen = (mp_count_bits(&pKeyContext->rsa.N)+7)/8;
 291             if (enc) {
 292                 if (rsa_exptmod(in, inlen, out, &outlen, PK_PUBLIC, &pKeyContext->rsa) != CRYPT_OK) {
 293                     SetLastError(NTE_FAIL);
 294                     return FALSE;
 295                 }
 296                 reverse_bytes((BYTE*)out, outlen);
 297             } else {
 298                 reverse_bytes((BYTE*)in, inlen);
 299                 if (rsa_exptmod(in, inlen, out, &outlen, PK_PRIVATE, &pKeyContext->rsa) != CRYPT_OK) {
 300                     SetLastError(NTE_FAIL);
 301                     return FALSE;
 302                 }
 303             }
 304             break;
 305
 306         case CALG_RSA_SIGN:
 307             outlen = inlen = (mp_count_bits(&pKeyContext->rsa.N)+7)/8;
 308             if (enc) {
 309                 if (rsa_exptmod(in, inlen, out, &outlen, PK_PRIVATE, &pKeyContext->rsa) != CRYPT_OK) {
 310                     SetLastError(NTE_FAIL);
 311                     return FALSE;
 312                 }
 313                 reverse_bytes((BYTE*)out, outlen);
 314             } else {
 315                 reverse_bytes((BYTE*)in, inlen);
 316                 if (rsa_exptmod(in, inlen, out, &outlen, PK_PUBLIC, &pKeyContext->rsa) != CRYPT_OK) {
 317                     SetLastError(NTE_FAIL);
 318                     return FALSE;
 319                 }
 320             }
 321             break;
 322
 323         default:
 324             SetLastError(NTE_BAD_ALGID);
 325             return FALSE;
 326     }
 327
 328     return TRUE;
 329 }
 330
 331 BOOL encrypt_stream_impl(ALG_ID aiAlgid, KEY_CONTEXT *pKeyContext, BYTE *stream, DWORD dwLen)
 332 {
 333     switch (aiAlgid) {
 334         case CALG_RC4:
 335             rc4_read(stream, dwLen, &pKeyContext->rc4);
 336             break;
 337
 338         default:
 339             SetLastError(NTE_BAD_ALGID);
 340             return FALSE;
 341     }
 342
 343     return TRUE;
 344 }
 345
 346 BOOL gen_rand_impl(BYTE *pbBuffer, DWORD dwLen)
 347 {
 348     int dev_random;
 349
 350     /* FIXME: /dev/urandom does not provide random numbers of a sufficient
 351      * quality for cryptographic applications. /dev/random is much better,
 352      * but it blocks if the kernel has not yet collected enough entropy for
 353      * the request, which will suspend the calling thread for an indefinite
 354      * amount of time. */
 355     dev_random = open("/dev/urandom", O_RDONLY);
 356     if (dev_random != -1)
 357     {
 358         if (read(dev_random, pbBuffer, dwLen) == (ssize_t)dwLen)
 359         {
 360             close(dev_random);
 361             return TRUE;
 362         }
 363         close(dev_random);
 364     }
 365     SetLastError(NTE_FAIL);
 366     return FALSE;
 367 }
 368
 369 BOOL export_public_key_impl(BYTE *pbDest, KEY_CONTEXT *pKeyContext, DWORD dwKeyLen,DWORD *pdwPubExp)
 370 {
 371     mp_to_unsigned_bin(&pKeyContext->rsa.N, pbDest);
 372     reverse_bytes(pbDest, dwKeyLen);
 373     *pdwPubExp = (DWORD)mp_get_int(&pKeyContext->rsa.e);
 374     return TRUE;
 375 }
 376
 377 BOOL import_public_key_impl(CONST BYTE *pbSrc, KEY_CONTEXT *pKeyContext, DWORD dwKeyLen,
 378                             DWORD dwPubExp)
 379 {
 380     BYTE *pbTemp;
 381
 382     if (mp_init_multi(&pKeyContext->rsa.e, &pKeyContext->rsa.d, &pKeyContext->rsa.N,
 383                       &pKeyContext->rsa.dQ,&pKeyContext->rsa.dP,&pKeyContext->rsa.qP,
 384                       &pKeyContext->rsa.p, &pKeyContext->rsa.q, NULL) != MP_OKAY)
 385     {
 386         SetLastError(NTE_FAIL);
 387         return FALSE;
 388     }
 389
 390     pbTemp = (BYTE*)HeapAlloc(GetProcessHeap(), 0, dwKeyLen);
 391     if (!pbTemp) return FALSE;
 392     memcpy(pbTemp, pbSrc, dwKeyLen);
 393
 394     pKeyContext->rsa.type = PK_PUBLIC;
 395     reverse_bytes(pbTemp, dwKeyLen);
 396     mp_read_unsigned_bin(&pKeyContext->rsa.N, pbTemp, dwKeyLen);
 397     HeapFree(GetProcessHeap(), 0, pbTemp);
 398     mp_set_int(&pKeyContext->rsa.e, dwPubExp);
 399
 400     return TRUE;
 401 }
 402
 403 BOOL export_private_key_impl(BYTE *pbDest, KEY_CONTEXT *pKeyContext, DWORD dwKeyLen,
 404                              DWORD *pdwPubExp)
 405 {
 406     mp_to_unsigned_bin(&pKeyContext->rsa.N, pbDest);
 407     reverse_bytes(pbDest, dwKeyLen);
 408     pbDest += dwKeyLen;
 409     mp_to_unsigned_bin(&pKeyContext->rsa.p, pbDest);
 410     reverse_bytes(pbDest, (dwKeyLen+1)>>1);
 411     pbDest += (dwKeyLen+1)>>1;
 412     mp_to_unsigned_bin(&pKeyContext->rsa.q, pbDest);
 413     reverse_bytes(pbDest, (dwKeyLen+1)>>1);
 414     pbDest += (dwKeyLen+1)>>1;
 415     mp_to_unsigned_bin(&pKeyContext->rsa.dP, pbDest);
 416     reverse_bytes(pbDest, (dwKeyLen+1)>>1);
 417     pbDest += (dwKeyLen+1)>>1;
 418     mp_to_unsigned_bin(&pKeyContext->rsa.dQ, pbDest);
 419     reverse_bytes(pbDest, (dwKeyLen+1)>>1);
 420     pbDest += (dwKeyLen+1)>>1;
 421     mp_to_unsigned_bin(&pKeyContext->rsa.qP, pbDest);
 422     reverse_bytes(pbDest, (dwKeyLen+1)>>1);
 423     pbDest += (dwKeyLen+1)>>1;
 424     mp_to_unsigned_bin(&pKeyContext->rsa.d, pbDest);
 425     reverse_bytes(pbDest, dwKeyLen);
 426     *pdwPubExp = (DWORD)mp_get_int(&pKeyContext->rsa.e);
 427
 428     return TRUE;
 429 }
 430
 431 BOOL import_private_key_impl(CONST BYTE *pbSrc, KEY_CONTEXT *pKeyContext, DWORD dwKeyLen,
 432                              DWORD dwPubExp)
 433 {
 434     BYTE *pbTemp, *pbBigNum;
 435
 436     if (mp_init_multi(&pKeyContext->rsa.e, &pKeyContext->rsa.d, &pKeyContext->rsa.N,
 437                       &pKeyContext->rsa.dQ,&pKeyContext->rsa.dP,&pKeyContext->rsa.qP,
 438                       &pKeyContext->rsa.p, &pKeyContext->rsa.q, NULL) != MP_OKAY)
 439     {
 440         SetLastError(NTE_FAIL);
 441         return FALSE;
 442     }
 443
 444     pbTemp = HeapAlloc(GetProcessHeap(), 0, 2*dwKeyLen+5*((dwKeyLen+1)>>1));
 445     if (!pbTemp) return FALSE;
 446     memcpy(pbTemp, pbSrc, 2*dwKeyLen+5*((dwKeyLen+1)>>1));
 447     pbBigNum = pbTemp;
 448
 449     pKeyContext->rsa.type = PK_PRIVATE;
 450     reverse_bytes(pbBigNum, dwKeyLen);
 451     mp_read_unsigned_bin(&pKeyContext->rsa.N, pbBigNum, dwKeyLen);
 452     pbBigNum += dwKeyLen;
 453     reverse_bytes(pbBigNum, (dwKeyLen+1)>>1);
 454     mp_read_unsigned_bin(&pKeyContext->rsa.p, pbBigNum, (dwKeyLen+1)>>1);
 455     pbBigNum += (dwKeyLen+1)>>1;
 456     reverse_bytes(pbBigNum, (dwKeyLen+1)>>1);
 457     mp_read_unsigned_bin(&pKeyContext->rsa.q, pbBigNum, (dwKeyLen+1)>>1);
 458     pbBigNum += (dwKeyLen+1)>>1;
 459     reverse_bytes(pbBigNum, (dwKeyLen+1)>>1);
 460     mp_read_unsigned_bin(&pKeyContext->rsa.dP, pbBigNum, (dwKeyLen+1)>>1);
 461     pbBigNum += (dwKeyLen+1)>>1;
 462     reverse_bytes(pbBigNum, (dwKeyLen+1)>>1);
 463     mp_read_unsigned_bin(&pKeyContext->rsa.dQ, pbBigNum, (dwKeyLen+1)>>1);
 464     pbBigNum += (dwKeyLen+1)>>1;
 465     reverse_bytes(pbBigNum, (dwKeyLen+1)>>1);
 466     mp_read_unsigned_bin(&pKeyContext->rsa.qP, pbBigNum, (dwKeyLen+1)>>1);
 467     pbBigNum += (dwKeyLen+1)>>1;
 468     reverse_bytes(pbBigNum, dwKeyLen);
 469     mp_read_unsigned_bin(&pKeyContext->rsa.d, pbBigNum, dwKeyLen);
 470     mp_set_int(&pKeyContext->rsa.e, dwPubExp);
 471
 472     HeapFree(GetProcessHeap(), 0, pbTemp);
 473     return TRUE;
 474 }