rsa_lib.c 9.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336
  1. /* crypto/rsa/rsa_lib.c */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. #include <stdio.h>
  59. #include <openssl/crypto.h>
  60. #include "cryptlib.h"
  61. #include <openssl/lhash.h>
  62. #include <openssl/bn.h>
  63. #include <openssl/rsa.h>
  64. #include <openssl/rand.h>
  65. #ifndef OPENSSL_NO_ENGINE
  66. # include <openssl/engine.h>
  67. #endif
  68. #ifdef OPENSSL_FIPS
  69. # include <openssl/fips.h>
  70. #endif
  71. const char RSA_version[] = "RSA" OPENSSL_VERSION_PTEXT;
  72. static const RSA_METHOD *default_RSA_meth = NULL;
  73. RSA *RSA_new(void)
  74. {
  75. RSA *r = RSA_new_method(NULL);
  76. return r;
  77. }
  78. void RSA_set_default_method(const RSA_METHOD *meth)
  79. {
  80. default_RSA_meth = meth;
  81. }
  82. const RSA_METHOD *RSA_get_default_method(void)
  83. {
  84. if (default_RSA_meth == NULL) {
  85. #ifdef OPENSSL_FIPS
  86. if (FIPS_mode())
  87. return FIPS_rsa_pkcs1_ssleay();
  88. else
  89. return RSA_PKCS1_SSLeay();
  90. #else
  91. # ifdef RSA_NULL
  92. default_RSA_meth = RSA_null_method();
  93. # else
  94. default_RSA_meth = RSA_PKCS1_SSLeay();
  95. # endif
  96. #endif
  97. }
  98. return default_RSA_meth;
  99. }
  100. const RSA_METHOD *RSA_get_method(const RSA *rsa)
  101. {
  102. return rsa->meth;
  103. }
  104. int RSA_set_method(RSA *rsa, const RSA_METHOD *meth)
  105. {
  106. /*
  107. * NB: The caller is specifically setting a method, so it's not up to us
  108. * to deal with which ENGINE it comes from.
  109. */
  110. const RSA_METHOD *mtmp;
  111. mtmp = rsa->meth;
  112. if (mtmp->finish)
  113. mtmp->finish(rsa);
  114. #ifndef OPENSSL_NO_ENGINE
  115. if (rsa->engine) {
  116. ENGINE_finish(rsa->engine);
  117. rsa->engine = NULL;
  118. }
  119. #endif
  120. rsa->meth = meth;
  121. if (meth->init)
  122. meth->init(rsa);
  123. return 1;
  124. }
  125. RSA *RSA_new_method(ENGINE *engine)
  126. {
  127. RSA *ret;
  128. ret = (RSA *)OPENSSL_malloc(sizeof(RSA));
  129. if (ret == NULL) {
  130. RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_MALLOC_FAILURE);
  131. return NULL;
  132. }
  133. ret->meth = RSA_get_default_method();
  134. #ifndef OPENSSL_NO_ENGINE
  135. if (engine) {
  136. if (!ENGINE_init(engine)) {
  137. RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_ENGINE_LIB);
  138. OPENSSL_free(ret);
  139. return NULL;
  140. }
  141. ret->engine = engine;
  142. } else
  143. ret->engine = ENGINE_get_default_RSA();
  144. if (ret->engine) {
  145. ret->meth = ENGINE_get_RSA(ret->engine);
  146. if (!ret->meth) {
  147. RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_ENGINE_LIB);
  148. ENGINE_finish(ret->engine);
  149. OPENSSL_free(ret);
  150. return NULL;
  151. }
  152. }
  153. #endif
  154. ret->pad = 0;
  155. ret->version = 0;
  156. ret->n = NULL;
  157. ret->e = NULL;
  158. ret->d = NULL;
  159. ret->p = NULL;
  160. ret->q = NULL;
  161. ret->dmp1 = NULL;
  162. ret->dmq1 = NULL;
  163. ret->iqmp = NULL;
  164. ret->references = 1;
  165. ret->_method_mod_n = NULL;
  166. ret->_method_mod_p = NULL;
  167. ret->_method_mod_q = NULL;
  168. ret->blinding = NULL;
  169. ret->mt_blinding = NULL;
  170. ret->bignum_data = NULL;
  171. ret->flags = ret->meth->flags & ~RSA_FLAG_NON_FIPS_ALLOW;
  172. if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_RSA, ret, &ret->ex_data)) {
  173. #ifndef OPENSSL_NO_ENGINE
  174. if (ret->engine)
  175. ENGINE_finish(ret->engine);
  176. #endif
  177. OPENSSL_free(ret);
  178. return (NULL);
  179. }
  180. if ((ret->meth->init != NULL) && !ret->meth->init(ret)) {
  181. #ifndef OPENSSL_NO_ENGINE
  182. if (ret->engine)
  183. ENGINE_finish(ret->engine);
  184. #endif
  185. CRYPTO_free_ex_data(CRYPTO_EX_INDEX_RSA, ret, &ret->ex_data);
  186. OPENSSL_free(ret);
  187. ret = NULL;
  188. }
  189. return (ret);
  190. }
  191. void RSA_free(RSA *r)
  192. {
  193. int i;
  194. if (r == NULL)
  195. return;
  196. i = CRYPTO_add(&r->references, -1, CRYPTO_LOCK_RSA);
  197. #ifdef REF_PRINT
  198. REF_PRINT("RSA", r);
  199. #endif
  200. if (i > 0)
  201. return;
  202. #ifdef REF_CHECK
  203. if (i < 0) {
  204. fprintf(stderr, "RSA_free, bad reference count\n");
  205. abort();
  206. }
  207. #endif
  208. if (r->meth->finish)
  209. r->meth->finish(r);
  210. #ifndef OPENSSL_NO_ENGINE
  211. if (r->engine)
  212. ENGINE_finish(r->engine);
  213. #endif
  214. CRYPTO_free_ex_data(CRYPTO_EX_INDEX_RSA, r, &r->ex_data);
  215. if (r->n != NULL)
  216. BN_clear_free(r->n);
  217. if (r->e != NULL)
  218. BN_clear_free(r->e);
  219. if (r->d != NULL)
  220. BN_clear_free(r->d);
  221. if (r->p != NULL)
  222. BN_clear_free(r->p);
  223. if (r->q != NULL)
  224. BN_clear_free(r->q);
  225. if (r->dmp1 != NULL)
  226. BN_clear_free(r->dmp1);
  227. if (r->dmq1 != NULL)
  228. BN_clear_free(r->dmq1);
  229. if (r->iqmp != NULL)
  230. BN_clear_free(r->iqmp);
  231. if (r->blinding != NULL)
  232. BN_BLINDING_free(r->blinding);
  233. if (r->mt_blinding != NULL)
  234. BN_BLINDING_free(r->mt_blinding);
  235. if (r->bignum_data != NULL)
  236. OPENSSL_free_locked(r->bignum_data);
  237. OPENSSL_free(r);
  238. }
  239. int RSA_up_ref(RSA *r)
  240. {
  241. int i = CRYPTO_add(&r->references, 1, CRYPTO_LOCK_RSA);
  242. #ifdef REF_PRINT
  243. REF_PRINT("RSA", r);
  244. #endif
  245. #ifdef REF_CHECK
  246. if (i < 2) {
  247. fprintf(stderr, "RSA_up_ref, bad reference count\n");
  248. abort();
  249. }
  250. #endif
  251. return ((i > 1) ? 1 : 0);
  252. }
  253. int RSA_get_ex_new_index(long argl, void *argp, CRYPTO_EX_new *new_func,
  254. CRYPTO_EX_dup *dup_func, CRYPTO_EX_free *free_func)
  255. {
  256. return CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_RSA, argl, argp,
  257. new_func, dup_func, free_func);
  258. }
  259. int RSA_set_ex_data(RSA *r, int idx, void *arg)
  260. {
  261. return (CRYPTO_set_ex_data(&r->ex_data, idx, arg));
  262. }
  263. void *RSA_get_ex_data(const RSA *r, int idx)
  264. {
  265. return (CRYPTO_get_ex_data(&r->ex_data, idx));
  266. }
  267. int RSA_memory_lock(RSA *r)
  268. {
  269. int i, j, k, off;
  270. char *p;
  271. BIGNUM *bn, **t[6], *b;
  272. BN_ULONG *ul;
  273. if (r->d == NULL)
  274. return (1);
  275. t[0] = &r->d;
  276. t[1] = &r->p;
  277. t[2] = &r->q;
  278. t[3] = &r->dmp1;
  279. t[4] = &r->dmq1;
  280. t[5] = &r->iqmp;
  281. k = sizeof(BIGNUM) * 6;
  282. off = k / sizeof(BN_ULONG) + 1;
  283. j = 1;
  284. for (i = 0; i < 6; i++)
  285. j += (*t[i])->top;
  286. if ((p = OPENSSL_malloc_locked((off + j) * sizeof(BN_ULONG))) == NULL) {
  287. RSAerr(RSA_F_RSA_MEMORY_LOCK, ERR_R_MALLOC_FAILURE);
  288. return (0);
  289. }
  290. bn = (BIGNUM *)p;
  291. ul = (BN_ULONG *)&(p[off]);
  292. for (i = 0; i < 6; i++) {
  293. b = *(t[i]);
  294. *(t[i]) = &(bn[i]);
  295. memcpy((char *)&(bn[i]), (char *)b, sizeof(BIGNUM));
  296. bn[i].flags = BN_FLG_STATIC_DATA;
  297. bn[i].d = ul;
  298. memcpy((char *)ul, b->d, sizeof(BN_ULONG) * b->top);
  299. ul += b->top;
  300. BN_clear_free(b);
  301. }
  302. /* I should fix this so it can still be done */
  303. r->flags &= ~(RSA_FLAG_CACHE_PRIVATE | RSA_FLAG_CACHE_PUBLIC);
  304. r->bignum_data = p;
  305. return (1);
  306. }