A library for setting up Secure Socket Layer (SSL) connections and verifying remote hosts using certificates. Contains only the source files for mbed platform implementation of the library.
Dependents: HTTPClient-SSL HTTPClient-SSL HTTPClient-SSL HTTPClient-SSL
ctaocrypt/src/rsa.c@6:cf58d49e1a86, 2015-03-23 (annotated)
- Committer:
- Mike Fiore
- Date:
- Mon Mar 23 16:51:07 2015 -0500
- Revision:
- 6:cf58d49e1a86
- Parent:
- 0:b86d15c6ba29
fix whitespace in sha512.c
Who changed what in which revision?
User | Revision | Line number | New contents of line |
---|---|---|---|
Vanger | 0:b86d15c6ba29 | 1 | /* rsa.c |
Vanger | 0:b86d15c6ba29 | 2 | * |
Vanger | 0:b86d15c6ba29 | 3 | * Copyright (C) 2006-2014 wolfSSL Inc. |
Vanger | 0:b86d15c6ba29 | 4 | * |
Vanger | 0:b86d15c6ba29 | 5 | * This file is part of CyaSSL. |
Vanger | 0:b86d15c6ba29 | 6 | * |
Vanger | 0:b86d15c6ba29 | 7 | * CyaSSL is free software; you can redistribute it and/or modify |
Vanger | 0:b86d15c6ba29 | 8 | * it under the terms of the GNU General Public License as published by |
Vanger | 0:b86d15c6ba29 | 9 | * the Free Software Foundation; either version 2 of the License, or |
Vanger | 0:b86d15c6ba29 | 10 | * (at your option) any later version. |
Vanger | 0:b86d15c6ba29 | 11 | * |
Vanger | 0:b86d15c6ba29 | 12 | * CyaSSL is distributed in the hope that it will be useful, |
Vanger | 0:b86d15c6ba29 | 13 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
Vanger | 0:b86d15c6ba29 | 14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
Vanger | 0:b86d15c6ba29 | 15 | * GNU General Public License for more details. |
Vanger | 0:b86d15c6ba29 | 16 | * |
Vanger | 0:b86d15c6ba29 | 17 | * You should have received a copy of the GNU General Public License |
Vanger | 0:b86d15c6ba29 | 18 | * along with this program; if not, write to the Free Software |
Vanger | 0:b86d15c6ba29 | 19 | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA |
Vanger | 0:b86d15c6ba29 | 20 | */ |
Vanger | 0:b86d15c6ba29 | 21 | |
Vanger | 0:b86d15c6ba29 | 22 | |
Vanger | 0:b86d15c6ba29 | 23 | #ifdef HAVE_CONFIG_H |
Vanger | 0:b86d15c6ba29 | 24 | #include <config.h> |
Vanger | 0:b86d15c6ba29 | 25 | #endif |
Vanger | 0:b86d15c6ba29 | 26 | |
Vanger | 0:b86d15c6ba29 | 27 | #include <cyassl/ctaocrypt/settings.h> |
Vanger | 0:b86d15c6ba29 | 28 | |
Vanger | 0:b86d15c6ba29 | 29 | #ifndef NO_RSA |
Vanger | 0:b86d15c6ba29 | 30 | |
Vanger | 0:b86d15c6ba29 | 31 | #ifdef HAVE_FIPS |
Vanger | 0:b86d15c6ba29 | 32 | /* set NO_WRAPPERS before headers, use direct internal f()s not wrappers */ |
Vanger | 0:b86d15c6ba29 | 33 | #define FIPS_NO_WRAPPERS |
Vanger | 0:b86d15c6ba29 | 34 | #endif |
Vanger | 0:b86d15c6ba29 | 35 | |
Vanger | 0:b86d15c6ba29 | 36 | #include <cyassl/ctaocrypt/rsa.h> |
Vanger | 0:b86d15c6ba29 | 37 | #include <cyassl/ctaocrypt/random.h> |
Vanger | 0:b86d15c6ba29 | 38 | #include <cyassl/ctaocrypt/error-crypt.h> |
Vanger | 0:b86d15c6ba29 | 39 | #include <cyassl/ctaocrypt/logging.h> |
Vanger | 0:b86d15c6ba29 | 40 | |
Vanger | 0:b86d15c6ba29 | 41 | #ifdef SHOW_GEN |
Vanger | 0:b86d15c6ba29 | 42 | #ifdef FREESCALE_MQX |
Vanger | 0:b86d15c6ba29 | 43 | #include <fio.h> |
Vanger | 0:b86d15c6ba29 | 44 | #else |
Vanger | 0:b86d15c6ba29 | 45 | #include <stdio.h> |
Vanger | 0:b86d15c6ba29 | 46 | #endif |
Vanger | 0:b86d15c6ba29 | 47 | #endif |
Vanger | 0:b86d15c6ba29 | 48 | |
Vanger | 0:b86d15c6ba29 | 49 | #ifdef HAVE_CAVIUM |
Vanger | 0:b86d15c6ba29 | 50 | static int InitCaviumRsaKey(RsaKey* key, void* heap); |
Vanger | 0:b86d15c6ba29 | 51 | static int FreeCaviumRsaKey(RsaKey* key); |
Vanger | 0:b86d15c6ba29 | 52 | static int CaviumRsaPublicEncrypt(const byte* in, word32 inLen, byte* out, |
Vanger | 0:b86d15c6ba29 | 53 | word32 outLen, RsaKey* key); |
Vanger | 0:b86d15c6ba29 | 54 | static int CaviumRsaPrivateDecrypt(const byte* in, word32 inLen, byte* out, |
Vanger | 0:b86d15c6ba29 | 55 | word32 outLen, RsaKey* key); |
Vanger | 0:b86d15c6ba29 | 56 | static int CaviumRsaSSL_Sign(const byte* in, word32 inLen, byte* out, |
Vanger | 0:b86d15c6ba29 | 57 | word32 outLen, RsaKey* key); |
Vanger | 0:b86d15c6ba29 | 58 | static int CaviumRsaSSL_Verify(const byte* in, word32 inLen, byte* out, |
Vanger | 0:b86d15c6ba29 | 59 | word32 outLen, RsaKey* key); |
Vanger | 0:b86d15c6ba29 | 60 | #endif |
Vanger | 0:b86d15c6ba29 | 61 | |
Vanger | 0:b86d15c6ba29 | 62 | enum { |
Vanger | 0:b86d15c6ba29 | 63 | RSA_PUBLIC_ENCRYPT = 0, |
Vanger | 0:b86d15c6ba29 | 64 | RSA_PUBLIC_DECRYPT = 1, |
Vanger | 0:b86d15c6ba29 | 65 | RSA_PRIVATE_ENCRYPT = 2, |
Vanger | 0:b86d15c6ba29 | 66 | RSA_PRIVATE_DECRYPT = 3, |
Vanger | 0:b86d15c6ba29 | 67 | |
Vanger | 0:b86d15c6ba29 | 68 | RSA_BLOCK_TYPE_1 = 1, |
Vanger | 0:b86d15c6ba29 | 69 | RSA_BLOCK_TYPE_2 = 2, |
Vanger | 0:b86d15c6ba29 | 70 | |
Vanger | 0:b86d15c6ba29 | 71 | RSA_MIN_SIZE = 512, |
Vanger | 0:b86d15c6ba29 | 72 | RSA_MAX_SIZE = 4096, |
Vanger | 0:b86d15c6ba29 | 73 | |
Vanger | 0:b86d15c6ba29 | 74 | RSA_MIN_PAD_SZ = 11 /* seperator + 0 + pad value + 8 pads */ |
Vanger | 0:b86d15c6ba29 | 75 | }; |
Vanger | 0:b86d15c6ba29 | 76 | |
Vanger | 0:b86d15c6ba29 | 77 | |
Vanger | 0:b86d15c6ba29 | 78 | int InitRsaKey(RsaKey* key, void* heap) |
Vanger | 0:b86d15c6ba29 | 79 | { |
Vanger | 0:b86d15c6ba29 | 80 | #ifdef HAVE_CAVIUM |
Vanger | 0:b86d15c6ba29 | 81 | if (key->magic == CYASSL_RSA_CAVIUM_MAGIC) |
Vanger | 0:b86d15c6ba29 | 82 | return InitCaviumRsaKey(key, heap); |
Vanger | 0:b86d15c6ba29 | 83 | #endif |
Vanger | 0:b86d15c6ba29 | 84 | |
Vanger | 0:b86d15c6ba29 | 85 | key->type = -1; /* haven't decided yet */ |
Vanger | 0:b86d15c6ba29 | 86 | key->heap = heap; |
Vanger | 0:b86d15c6ba29 | 87 | |
Vanger | 0:b86d15c6ba29 | 88 | /* TomsFastMath doesn't use memory allocation */ |
Vanger | 0:b86d15c6ba29 | 89 | #ifndef USE_FAST_MATH |
Vanger | 0:b86d15c6ba29 | 90 | key->n.dp = key->e.dp = 0; /* public alloc parts */ |
Vanger | 0:b86d15c6ba29 | 91 | |
Vanger | 0:b86d15c6ba29 | 92 | key->d.dp = key->p.dp = 0; /* private alloc parts */ |
Vanger | 0:b86d15c6ba29 | 93 | key->q.dp = key->dP.dp = 0; |
Vanger | 0:b86d15c6ba29 | 94 | key->u.dp = key->dQ.dp = 0; |
Vanger | 0:b86d15c6ba29 | 95 | #endif |
Vanger | 0:b86d15c6ba29 | 96 | |
Vanger | 0:b86d15c6ba29 | 97 | return 0; |
Vanger | 0:b86d15c6ba29 | 98 | } |
Vanger | 0:b86d15c6ba29 | 99 | |
Vanger | 0:b86d15c6ba29 | 100 | |
Vanger | 0:b86d15c6ba29 | 101 | int FreeRsaKey(RsaKey* key) |
Vanger | 0:b86d15c6ba29 | 102 | { |
Vanger | 0:b86d15c6ba29 | 103 | (void)key; |
Vanger | 0:b86d15c6ba29 | 104 | |
Vanger | 0:b86d15c6ba29 | 105 | #ifdef HAVE_CAVIUM |
Vanger | 0:b86d15c6ba29 | 106 | if (key->magic == CYASSL_RSA_CAVIUM_MAGIC) |
Vanger | 0:b86d15c6ba29 | 107 | return FreeCaviumRsaKey(key); |
Vanger | 0:b86d15c6ba29 | 108 | #endif |
Vanger | 0:b86d15c6ba29 | 109 | |
Vanger | 0:b86d15c6ba29 | 110 | /* TomsFastMath doesn't use memory allocation */ |
Vanger | 0:b86d15c6ba29 | 111 | #ifndef USE_FAST_MATH |
Vanger | 0:b86d15c6ba29 | 112 | if (key->type == RSA_PRIVATE) { |
Vanger | 0:b86d15c6ba29 | 113 | mp_clear(&key->u); |
Vanger | 0:b86d15c6ba29 | 114 | mp_clear(&key->dQ); |
Vanger | 0:b86d15c6ba29 | 115 | mp_clear(&key->dP); |
Vanger | 0:b86d15c6ba29 | 116 | mp_clear(&key->q); |
Vanger | 0:b86d15c6ba29 | 117 | mp_clear(&key->p); |
Vanger | 0:b86d15c6ba29 | 118 | mp_clear(&key->d); |
Vanger | 0:b86d15c6ba29 | 119 | } |
Vanger | 0:b86d15c6ba29 | 120 | mp_clear(&key->e); |
Vanger | 0:b86d15c6ba29 | 121 | mp_clear(&key->n); |
Vanger | 0:b86d15c6ba29 | 122 | #endif |
Vanger | 0:b86d15c6ba29 | 123 | |
Vanger | 0:b86d15c6ba29 | 124 | return 0; |
Vanger | 0:b86d15c6ba29 | 125 | } |
Vanger | 0:b86d15c6ba29 | 126 | |
Vanger | 0:b86d15c6ba29 | 127 | static int RsaPad(const byte* input, word32 inputLen, byte* pkcsBlock, |
Vanger | 0:b86d15c6ba29 | 128 | word32 pkcsBlockLen, byte padValue, RNG* rng) |
Vanger | 0:b86d15c6ba29 | 129 | { |
Vanger | 0:b86d15c6ba29 | 130 | if (inputLen == 0) |
Vanger | 0:b86d15c6ba29 | 131 | return 0; |
Vanger | 0:b86d15c6ba29 | 132 | |
Vanger | 0:b86d15c6ba29 | 133 | pkcsBlock[0] = 0x0; /* set first byte to zero and advance */ |
Vanger | 0:b86d15c6ba29 | 134 | pkcsBlock++; pkcsBlockLen--; |
Vanger | 0:b86d15c6ba29 | 135 | pkcsBlock[0] = padValue; /* insert padValue */ |
Vanger | 0:b86d15c6ba29 | 136 | |
Vanger | 0:b86d15c6ba29 | 137 | if (padValue == RSA_BLOCK_TYPE_1) |
Vanger | 0:b86d15c6ba29 | 138 | /* pad with 0xff bytes */ |
Vanger | 0:b86d15c6ba29 | 139 | XMEMSET(&pkcsBlock[1], 0xFF, pkcsBlockLen - inputLen - 2); |
Vanger | 0:b86d15c6ba29 | 140 | else { |
Vanger | 0:b86d15c6ba29 | 141 | /* pad with non-zero random bytes */ |
Vanger | 0:b86d15c6ba29 | 142 | word32 padLen = pkcsBlockLen - inputLen - 1, i; |
Vanger | 0:b86d15c6ba29 | 143 | int ret = RNG_GenerateBlock(rng, &pkcsBlock[1], padLen); |
Vanger | 0:b86d15c6ba29 | 144 | |
Vanger | 0:b86d15c6ba29 | 145 | if (ret != 0) |
Vanger | 0:b86d15c6ba29 | 146 | return ret; |
Vanger | 0:b86d15c6ba29 | 147 | |
Vanger | 0:b86d15c6ba29 | 148 | /* remove zeros */ |
Vanger | 0:b86d15c6ba29 | 149 | for (i = 1; i < padLen; i++) |
Vanger | 0:b86d15c6ba29 | 150 | if (pkcsBlock[i] == 0) pkcsBlock[i] = 0x01; |
Vanger | 0:b86d15c6ba29 | 151 | } |
Vanger | 0:b86d15c6ba29 | 152 | |
Vanger | 0:b86d15c6ba29 | 153 | pkcsBlock[pkcsBlockLen-inputLen-1] = 0; /* separator */ |
Vanger | 0:b86d15c6ba29 | 154 | XMEMCPY(pkcsBlock+pkcsBlockLen-inputLen, input, inputLen); |
Vanger | 0:b86d15c6ba29 | 155 | |
Vanger | 0:b86d15c6ba29 | 156 | return 0; |
Vanger | 0:b86d15c6ba29 | 157 | } |
Vanger | 0:b86d15c6ba29 | 158 | |
Vanger | 0:b86d15c6ba29 | 159 | |
Vanger | 0:b86d15c6ba29 | 160 | /* UnPad plaintext, set start to *output, return length of plaintext, |
Vanger | 0:b86d15c6ba29 | 161 | * < 0 on error */ |
Vanger | 0:b86d15c6ba29 | 162 | static int RsaUnPad(const byte *pkcsBlock, unsigned int pkcsBlockLen, |
Vanger | 0:b86d15c6ba29 | 163 | byte **output, byte padValue) |
Vanger | 0:b86d15c6ba29 | 164 | { |
Vanger | 0:b86d15c6ba29 | 165 | word32 maxOutputLen = (pkcsBlockLen > 10) ? (pkcsBlockLen - 10) : 0, |
Vanger | 0:b86d15c6ba29 | 166 | invalid = 0, |
Vanger | 0:b86d15c6ba29 | 167 | i = 1, |
Vanger | 0:b86d15c6ba29 | 168 | outputLen; |
Vanger | 0:b86d15c6ba29 | 169 | |
Vanger | 0:b86d15c6ba29 | 170 | if (pkcsBlock[0] != 0x0) /* skip past zero */ |
Vanger | 0:b86d15c6ba29 | 171 | invalid = 1; |
Vanger | 0:b86d15c6ba29 | 172 | pkcsBlock++; pkcsBlockLen--; |
Vanger | 0:b86d15c6ba29 | 173 | |
Vanger | 0:b86d15c6ba29 | 174 | /* Require block type padValue */ |
Vanger | 0:b86d15c6ba29 | 175 | invalid = (pkcsBlock[0] != padValue) || invalid; |
Vanger | 0:b86d15c6ba29 | 176 | |
Vanger | 0:b86d15c6ba29 | 177 | /* verify the padding until we find the separator */ |
Vanger | 0:b86d15c6ba29 | 178 | if (padValue == RSA_BLOCK_TYPE_1) { |
Vanger | 0:b86d15c6ba29 | 179 | while (i<pkcsBlockLen && pkcsBlock[i++] == 0xFF) {/* Null body */} |
Vanger | 0:b86d15c6ba29 | 180 | } |
Vanger | 0:b86d15c6ba29 | 181 | else { |
Vanger | 0:b86d15c6ba29 | 182 | while (i<pkcsBlockLen && pkcsBlock[i++]) {/* Null body */} |
Vanger | 0:b86d15c6ba29 | 183 | } |
Vanger | 0:b86d15c6ba29 | 184 | |
Vanger | 0:b86d15c6ba29 | 185 | if(!(i==pkcsBlockLen || pkcsBlock[i-1]==0)) { |
Vanger | 0:b86d15c6ba29 | 186 | CYASSL_MSG("RsaUnPad error, bad formatting"); |
Vanger | 0:b86d15c6ba29 | 187 | return RSA_PAD_E; |
Vanger | 0:b86d15c6ba29 | 188 | } |
Vanger | 0:b86d15c6ba29 | 189 | |
Vanger | 0:b86d15c6ba29 | 190 | outputLen = pkcsBlockLen - i; |
Vanger | 0:b86d15c6ba29 | 191 | invalid = (outputLen > maxOutputLen) || invalid; |
Vanger | 0:b86d15c6ba29 | 192 | |
Vanger | 0:b86d15c6ba29 | 193 | if (invalid) { |
Vanger | 0:b86d15c6ba29 | 194 | CYASSL_MSG("RsaUnPad error, bad formatting"); |
Vanger | 0:b86d15c6ba29 | 195 | return RSA_PAD_E; |
Vanger | 0:b86d15c6ba29 | 196 | } |
Vanger | 0:b86d15c6ba29 | 197 | |
Vanger | 0:b86d15c6ba29 | 198 | *output = (byte *)(pkcsBlock + i); |
Vanger | 0:b86d15c6ba29 | 199 | return outputLen; |
Vanger | 0:b86d15c6ba29 | 200 | } |
Vanger | 0:b86d15c6ba29 | 201 | |
Vanger | 0:b86d15c6ba29 | 202 | |
Vanger | 0:b86d15c6ba29 | 203 | static int RsaFunction(const byte* in, word32 inLen, byte* out, word32* outLen, |
Vanger | 0:b86d15c6ba29 | 204 | int type, RsaKey* key) |
Vanger | 0:b86d15c6ba29 | 205 | { |
Vanger | 0:b86d15c6ba29 | 206 | #define ERROR_OUT(x) { ret = x; goto done;} |
Vanger | 0:b86d15c6ba29 | 207 | |
Vanger | 0:b86d15c6ba29 | 208 | mp_int tmp; |
Vanger | 0:b86d15c6ba29 | 209 | int ret = 0; |
Vanger | 0:b86d15c6ba29 | 210 | word32 keyLen, len; |
Vanger | 0:b86d15c6ba29 | 211 | |
Vanger | 0:b86d15c6ba29 | 212 | if (mp_init(&tmp) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 213 | return MP_INIT_E; |
Vanger | 0:b86d15c6ba29 | 214 | |
Vanger | 0:b86d15c6ba29 | 215 | if (mp_read_unsigned_bin(&tmp, (byte*)in, inLen) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 216 | ERROR_OUT(MP_READ_E); |
Vanger | 0:b86d15c6ba29 | 217 | |
Vanger | 0:b86d15c6ba29 | 218 | if (type == RSA_PRIVATE_DECRYPT || type == RSA_PRIVATE_ENCRYPT) { |
Vanger | 0:b86d15c6ba29 | 219 | #ifdef RSA_LOW_MEM /* half as much memory but twice as slow */ |
Vanger | 0:b86d15c6ba29 | 220 | if (mp_exptmod(&tmp, &key->d, &key->n, &tmp) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 221 | ERROR_OUT(MP_EXPTMOD_E); |
Vanger | 0:b86d15c6ba29 | 222 | #else |
Vanger | 0:b86d15c6ba29 | 223 | #define INNER_ERROR_OUT(x) { ret = x; goto inner_done; } |
Vanger | 0:b86d15c6ba29 | 224 | |
Vanger | 0:b86d15c6ba29 | 225 | mp_int tmpa, tmpb; |
Vanger | 0:b86d15c6ba29 | 226 | |
Vanger | 0:b86d15c6ba29 | 227 | if (mp_init(&tmpa) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 228 | ERROR_OUT(MP_INIT_E); |
Vanger | 0:b86d15c6ba29 | 229 | |
Vanger | 0:b86d15c6ba29 | 230 | if (mp_init(&tmpb) != MP_OKAY) { |
Vanger | 0:b86d15c6ba29 | 231 | mp_clear(&tmpa); |
Vanger | 0:b86d15c6ba29 | 232 | ERROR_OUT(MP_INIT_E); |
Vanger | 0:b86d15c6ba29 | 233 | } |
Vanger | 0:b86d15c6ba29 | 234 | |
Vanger | 0:b86d15c6ba29 | 235 | /* tmpa = tmp^dP mod p */ |
Vanger | 0:b86d15c6ba29 | 236 | if (mp_exptmod(&tmp, &key->dP, &key->p, &tmpa) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 237 | INNER_ERROR_OUT(MP_EXPTMOD_E); |
Vanger | 0:b86d15c6ba29 | 238 | |
Vanger | 0:b86d15c6ba29 | 239 | /* tmpb = tmp^dQ mod q */ |
Vanger | 0:b86d15c6ba29 | 240 | if (mp_exptmod(&tmp, &key->dQ, &key->q, &tmpb) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 241 | INNER_ERROR_OUT(MP_EXPTMOD_E); |
Vanger | 0:b86d15c6ba29 | 242 | |
Vanger | 0:b86d15c6ba29 | 243 | /* tmp = (tmpa - tmpb) * qInv (mod p) */ |
Vanger | 0:b86d15c6ba29 | 244 | if (mp_sub(&tmpa, &tmpb, &tmp) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 245 | INNER_ERROR_OUT(MP_SUB_E); |
Vanger | 0:b86d15c6ba29 | 246 | |
Vanger | 0:b86d15c6ba29 | 247 | if (mp_mulmod(&tmp, &key->u, &key->p, &tmp) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 248 | INNER_ERROR_OUT(MP_MULMOD_E); |
Vanger | 0:b86d15c6ba29 | 249 | |
Vanger | 0:b86d15c6ba29 | 250 | /* tmp = tmpb + q * tmp */ |
Vanger | 0:b86d15c6ba29 | 251 | if (mp_mul(&tmp, &key->q, &tmp) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 252 | INNER_ERROR_OUT(MP_MUL_E); |
Vanger | 0:b86d15c6ba29 | 253 | |
Vanger | 0:b86d15c6ba29 | 254 | if (mp_add(&tmp, &tmpb, &tmp) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 255 | INNER_ERROR_OUT(MP_ADD_E); |
Vanger | 0:b86d15c6ba29 | 256 | |
Vanger | 0:b86d15c6ba29 | 257 | inner_done: |
Vanger | 0:b86d15c6ba29 | 258 | mp_clear(&tmpa); |
Vanger | 0:b86d15c6ba29 | 259 | mp_clear(&tmpb); |
Vanger | 0:b86d15c6ba29 | 260 | |
Vanger | 0:b86d15c6ba29 | 261 | if (ret != 0) return ret; |
Vanger | 0:b86d15c6ba29 | 262 | |
Vanger | 0:b86d15c6ba29 | 263 | #endif /* RSA_LOW_MEM */ |
Vanger | 0:b86d15c6ba29 | 264 | } |
Vanger | 0:b86d15c6ba29 | 265 | else if (type == RSA_PUBLIC_ENCRYPT || type == RSA_PUBLIC_DECRYPT) { |
Vanger | 0:b86d15c6ba29 | 266 | if (mp_exptmod(&tmp, &key->e, &key->n, &tmp) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 267 | ERROR_OUT(MP_EXPTMOD_E); |
Vanger | 0:b86d15c6ba29 | 268 | } |
Vanger | 0:b86d15c6ba29 | 269 | else |
Vanger | 0:b86d15c6ba29 | 270 | ERROR_OUT(RSA_WRONG_TYPE_E); |
Vanger | 0:b86d15c6ba29 | 271 | |
Vanger | 0:b86d15c6ba29 | 272 | keyLen = mp_unsigned_bin_size(&key->n); |
Vanger | 0:b86d15c6ba29 | 273 | if (keyLen > *outLen) |
Vanger | 0:b86d15c6ba29 | 274 | ERROR_OUT(RSA_BUFFER_E); |
Vanger | 0:b86d15c6ba29 | 275 | |
Vanger | 0:b86d15c6ba29 | 276 | len = mp_unsigned_bin_size(&tmp); |
Vanger | 0:b86d15c6ba29 | 277 | |
Vanger | 0:b86d15c6ba29 | 278 | /* pad front w/ zeros to match key length */ |
Vanger | 0:b86d15c6ba29 | 279 | while (len < keyLen) { |
Vanger | 0:b86d15c6ba29 | 280 | *out++ = 0x00; |
Vanger | 0:b86d15c6ba29 | 281 | len++; |
Vanger | 0:b86d15c6ba29 | 282 | } |
Vanger | 0:b86d15c6ba29 | 283 | |
Vanger | 0:b86d15c6ba29 | 284 | *outLen = keyLen; |
Vanger | 0:b86d15c6ba29 | 285 | |
Vanger | 0:b86d15c6ba29 | 286 | /* convert */ |
Vanger | 0:b86d15c6ba29 | 287 | if (mp_to_unsigned_bin(&tmp, out) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 288 | ERROR_OUT(MP_TO_E); |
Vanger | 0:b86d15c6ba29 | 289 | |
Vanger | 0:b86d15c6ba29 | 290 | done: |
Vanger | 0:b86d15c6ba29 | 291 | mp_clear(&tmp); |
Vanger | 0:b86d15c6ba29 | 292 | return ret; |
Vanger | 0:b86d15c6ba29 | 293 | } |
Vanger | 0:b86d15c6ba29 | 294 | |
Vanger | 0:b86d15c6ba29 | 295 | |
Vanger | 0:b86d15c6ba29 | 296 | int RsaPublicEncrypt(const byte* in, word32 inLen, byte* out, word32 outLen, |
Vanger | 0:b86d15c6ba29 | 297 | RsaKey* key, RNG* rng) |
Vanger | 0:b86d15c6ba29 | 298 | { |
Vanger | 0:b86d15c6ba29 | 299 | int sz, ret; |
Vanger | 0:b86d15c6ba29 | 300 | |
Vanger | 0:b86d15c6ba29 | 301 | #ifdef HAVE_CAVIUM |
Vanger | 0:b86d15c6ba29 | 302 | if (key->magic == CYASSL_RSA_CAVIUM_MAGIC) |
Vanger | 0:b86d15c6ba29 | 303 | return CaviumRsaPublicEncrypt(in, inLen, out, outLen, key); |
Vanger | 0:b86d15c6ba29 | 304 | #endif |
Vanger | 0:b86d15c6ba29 | 305 | |
Vanger | 0:b86d15c6ba29 | 306 | sz = mp_unsigned_bin_size(&key->n); |
Vanger | 0:b86d15c6ba29 | 307 | if (sz > (int)outLen) |
Vanger | 0:b86d15c6ba29 | 308 | return RSA_BUFFER_E; |
Vanger | 0:b86d15c6ba29 | 309 | |
Vanger | 0:b86d15c6ba29 | 310 | if (inLen > (word32)(sz - RSA_MIN_PAD_SZ)) |
Vanger | 0:b86d15c6ba29 | 311 | return RSA_BUFFER_E; |
Vanger | 0:b86d15c6ba29 | 312 | |
Vanger | 0:b86d15c6ba29 | 313 | ret = RsaPad(in, inLen, out, sz, RSA_BLOCK_TYPE_2, rng); |
Vanger | 0:b86d15c6ba29 | 314 | if (ret != 0) |
Vanger | 0:b86d15c6ba29 | 315 | return ret; |
Vanger | 0:b86d15c6ba29 | 316 | |
Vanger | 0:b86d15c6ba29 | 317 | if ((ret = RsaFunction(out, sz, out, &outLen, RSA_PUBLIC_ENCRYPT, key)) < 0) |
Vanger | 0:b86d15c6ba29 | 318 | sz = ret; |
Vanger | 0:b86d15c6ba29 | 319 | |
Vanger | 0:b86d15c6ba29 | 320 | return sz; |
Vanger | 0:b86d15c6ba29 | 321 | } |
Vanger | 0:b86d15c6ba29 | 322 | |
Vanger | 0:b86d15c6ba29 | 323 | |
Vanger | 0:b86d15c6ba29 | 324 | int RsaPrivateDecryptInline(byte* in, word32 inLen, byte** out, RsaKey* key) |
Vanger | 0:b86d15c6ba29 | 325 | { |
Vanger | 0:b86d15c6ba29 | 326 | int ret; |
Vanger | 0:b86d15c6ba29 | 327 | |
Vanger | 0:b86d15c6ba29 | 328 | #ifdef HAVE_CAVIUM |
Vanger | 0:b86d15c6ba29 | 329 | if (key->magic == CYASSL_RSA_CAVIUM_MAGIC) { |
Vanger | 0:b86d15c6ba29 | 330 | ret = CaviumRsaPrivateDecrypt(in, inLen, in, inLen, key); |
Vanger | 0:b86d15c6ba29 | 331 | if (ret > 0) |
Vanger | 0:b86d15c6ba29 | 332 | *out = in; |
Vanger | 0:b86d15c6ba29 | 333 | return ret; |
Vanger | 0:b86d15c6ba29 | 334 | } |
Vanger | 0:b86d15c6ba29 | 335 | #endif |
Vanger | 0:b86d15c6ba29 | 336 | |
Vanger | 0:b86d15c6ba29 | 337 | if ((ret = RsaFunction(in, inLen, in, &inLen, RSA_PRIVATE_DECRYPT, key)) |
Vanger | 0:b86d15c6ba29 | 338 | < 0) { |
Vanger | 0:b86d15c6ba29 | 339 | return ret; |
Vanger | 0:b86d15c6ba29 | 340 | } |
Vanger | 0:b86d15c6ba29 | 341 | |
Vanger | 0:b86d15c6ba29 | 342 | return RsaUnPad(in, inLen, out, RSA_BLOCK_TYPE_2); |
Vanger | 0:b86d15c6ba29 | 343 | } |
Vanger | 0:b86d15c6ba29 | 344 | |
Vanger | 0:b86d15c6ba29 | 345 | |
Vanger | 0:b86d15c6ba29 | 346 | int RsaPrivateDecrypt(const byte* in, word32 inLen, byte* out, word32 outLen, |
Vanger | 0:b86d15c6ba29 | 347 | RsaKey* key) |
Vanger | 0:b86d15c6ba29 | 348 | { |
Vanger | 0:b86d15c6ba29 | 349 | int plainLen; |
Vanger | 0:b86d15c6ba29 | 350 | byte* tmp; |
Vanger | 0:b86d15c6ba29 | 351 | byte* pad = 0; |
Vanger | 0:b86d15c6ba29 | 352 | |
Vanger | 0:b86d15c6ba29 | 353 | #ifdef HAVE_CAVIUM |
Vanger | 0:b86d15c6ba29 | 354 | if (key->magic == CYASSL_RSA_CAVIUM_MAGIC) |
Vanger | 0:b86d15c6ba29 | 355 | return CaviumRsaPrivateDecrypt(in, inLen, out, outLen, key); |
Vanger | 0:b86d15c6ba29 | 356 | #endif |
Vanger | 0:b86d15c6ba29 | 357 | |
Vanger | 0:b86d15c6ba29 | 358 | tmp = (byte*)XMALLOC(inLen, key->heap, DYNAMIC_TYPE_RSA); |
Vanger | 0:b86d15c6ba29 | 359 | if (tmp == NULL) { |
Vanger | 0:b86d15c6ba29 | 360 | return MEMORY_E; |
Vanger | 0:b86d15c6ba29 | 361 | } |
Vanger | 0:b86d15c6ba29 | 362 | |
Vanger | 0:b86d15c6ba29 | 363 | XMEMCPY(tmp, in, inLen); |
Vanger | 0:b86d15c6ba29 | 364 | |
Vanger | 0:b86d15c6ba29 | 365 | if ( (plainLen = RsaPrivateDecryptInline(tmp, inLen, &pad, key) ) < 0) { |
Vanger | 0:b86d15c6ba29 | 366 | XFREE(tmp, key->heap, DYNAMIC_TYPE_RSA); |
Vanger | 0:b86d15c6ba29 | 367 | return plainLen; |
Vanger | 0:b86d15c6ba29 | 368 | } |
Vanger | 0:b86d15c6ba29 | 369 | if (plainLen > (int)outLen) |
Vanger | 0:b86d15c6ba29 | 370 | plainLen = BAD_FUNC_ARG; |
Vanger | 0:b86d15c6ba29 | 371 | else |
Vanger | 0:b86d15c6ba29 | 372 | XMEMCPY(out, pad, plainLen); |
Vanger | 0:b86d15c6ba29 | 373 | XMEMSET(tmp, 0x00, inLen); |
Vanger | 0:b86d15c6ba29 | 374 | |
Vanger | 0:b86d15c6ba29 | 375 | XFREE(tmp, key->heap, DYNAMIC_TYPE_RSA); |
Vanger | 0:b86d15c6ba29 | 376 | return plainLen; |
Vanger | 0:b86d15c6ba29 | 377 | } |
Vanger | 0:b86d15c6ba29 | 378 | |
Vanger | 0:b86d15c6ba29 | 379 | |
Vanger | 0:b86d15c6ba29 | 380 | /* for Rsa Verify */ |
Vanger | 0:b86d15c6ba29 | 381 | int RsaSSL_VerifyInline(byte* in, word32 inLen, byte** out, RsaKey* key) |
Vanger | 0:b86d15c6ba29 | 382 | { |
Vanger | 0:b86d15c6ba29 | 383 | int ret; |
Vanger | 0:b86d15c6ba29 | 384 | |
Vanger | 0:b86d15c6ba29 | 385 | #ifdef HAVE_CAVIUM |
Vanger | 0:b86d15c6ba29 | 386 | if (key->magic == CYASSL_RSA_CAVIUM_MAGIC) { |
Vanger | 0:b86d15c6ba29 | 387 | ret = CaviumRsaSSL_Verify(in, inLen, in, inLen, key); |
Vanger | 0:b86d15c6ba29 | 388 | if (ret > 0) |
Vanger | 0:b86d15c6ba29 | 389 | *out = in; |
Vanger | 0:b86d15c6ba29 | 390 | return ret; |
Vanger | 0:b86d15c6ba29 | 391 | } |
Vanger | 0:b86d15c6ba29 | 392 | #endif |
Vanger | 0:b86d15c6ba29 | 393 | |
Vanger | 0:b86d15c6ba29 | 394 | if ((ret = RsaFunction(in, inLen, in, &inLen, RSA_PUBLIC_DECRYPT, key)) |
Vanger | 0:b86d15c6ba29 | 395 | < 0) { |
Vanger | 0:b86d15c6ba29 | 396 | return ret; |
Vanger | 0:b86d15c6ba29 | 397 | } |
Vanger | 0:b86d15c6ba29 | 398 | |
Vanger | 0:b86d15c6ba29 | 399 | return RsaUnPad(in, inLen, out, RSA_BLOCK_TYPE_1); |
Vanger | 0:b86d15c6ba29 | 400 | } |
Vanger | 0:b86d15c6ba29 | 401 | |
Vanger | 0:b86d15c6ba29 | 402 | |
Vanger | 0:b86d15c6ba29 | 403 | int RsaSSL_Verify(const byte* in, word32 inLen, byte* out, word32 outLen, |
Vanger | 0:b86d15c6ba29 | 404 | RsaKey* key) |
Vanger | 0:b86d15c6ba29 | 405 | { |
Vanger | 0:b86d15c6ba29 | 406 | int plainLen; |
Vanger | 0:b86d15c6ba29 | 407 | byte* tmp; |
Vanger | 0:b86d15c6ba29 | 408 | byte* pad = 0; |
Vanger | 0:b86d15c6ba29 | 409 | |
Vanger | 0:b86d15c6ba29 | 410 | #ifdef HAVE_CAVIUM |
Vanger | 0:b86d15c6ba29 | 411 | if (key->magic == CYASSL_RSA_CAVIUM_MAGIC) |
Vanger | 0:b86d15c6ba29 | 412 | return CaviumRsaSSL_Verify(in, inLen, out, outLen, key); |
Vanger | 0:b86d15c6ba29 | 413 | #endif |
Vanger | 0:b86d15c6ba29 | 414 | |
Vanger | 0:b86d15c6ba29 | 415 | tmp = (byte*)XMALLOC(inLen, key->heap, DYNAMIC_TYPE_RSA); |
Vanger | 0:b86d15c6ba29 | 416 | if (tmp == NULL) { |
Vanger | 0:b86d15c6ba29 | 417 | return MEMORY_E; |
Vanger | 0:b86d15c6ba29 | 418 | } |
Vanger | 0:b86d15c6ba29 | 419 | |
Vanger | 0:b86d15c6ba29 | 420 | XMEMCPY(tmp, in, inLen); |
Vanger | 0:b86d15c6ba29 | 421 | |
Vanger | 0:b86d15c6ba29 | 422 | if ( (plainLen = RsaSSL_VerifyInline(tmp, inLen, &pad, key) ) < 0) { |
Vanger | 0:b86d15c6ba29 | 423 | XFREE(tmp, key->heap, DYNAMIC_TYPE_RSA); |
Vanger | 0:b86d15c6ba29 | 424 | return plainLen; |
Vanger | 0:b86d15c6ba29 | 425 | } |
Vanger | 0:b86d15c6ba29 | 426 | |
Vanger | 0:b86d15c6ba29 | 427 | if (plainLen > (int)outLen) |
Vanger | 0:b86d15c6ba29 | 428 | plainLen = BAD_FUNC_ARG; |
Vanger | 0:b86d15c6ba29 | 429 | else |
Vanger | 0:b86d15c6ba29 | 430 | XMEMCPY(out, pad, plainLen); |
Vanger | 0:b86d15c6ba29 | 431 | XMEMSET(tmp, 0x00, inLen); |
Vanger | 0:b86d15c6ba29 | 432 | |
Vanger | 0:b86d15c6ba29 | 433 | XFREE(tmp, key->heap, DYNAMIC_TYPE_RSA); |
Vanger | 0:b86d15c6ba29 | 434 | return plainLen; |
Vanger | 0:b86d15c6ba29 | 435 | } |
Vanger | 0:b86d15c6ba29 | 436 | |
Vanger | 0:b86d15c6ba29 | 437 | |
Vanger | 0:b86d15c6ba29 | 438 | /* for Rsa Sign */ |
Vanger | 0:b86d15c6ba29 | 439 | int RsaSSL_Sign(const byte* in, word32 inLen, byte* out, word32 outLen, |
Vanger | 0:b86d15c6ba29 | 440 | RsaKey* key, RNG* rng) |
Vanger | 0:b86d15c6ba29 | 441 | { |
Vanger | 0:b86d15c6ba29 | 442 | int sz, ret; |
Vanger | 0:b86d15c6ba29 | 443 | |
Vanger | 0:b86d15c6ba29 | 444 | #ifdef HAVE_CAVIUM |
Vanger | 0:b86d15c6ba29 | 445 | if (key->magic == CYASSL_RSA_CAVIUM_MAGIC) |
Vanger | 0:b86d15c6ba29 | 446 | return CaviumRsaSSL_Sign(in, inLen, out, outLen, key); |
Vanger | 0:b86d15c6ba29 | 447 | #endif |
Vanger | 0:b86d15c6ba29 | 448 | |
Vanger | 0:b86d15c6ba29 | 449 | sz = mp_unsigned_bin_size(&key->n); |
Vanger | 0:b86d15c6ba29 | 450 | if (sz > (int)outLen) |
Vanger | 0:b86d15c6ba29 | 451 | return RSA_BUFFER_E; |
Vanger | 0:b86d15c6ba29 | 452 | |
Vanger | 0:b86d15c6ba29 | 453 | if (inLen > (word32)(sz - RSA_MIN_PAD_SZ)) |
Vanger | 0:b86d15c6ba29 | 454 | return RSA_BUFFER_E; |
Vanger | 0:b86d15c6ba29 | 455 | |
Vanger | 0:b86d15c6ba29 | 456 | ret = RsaPad(in, inLen, out, sz, RSA_BLOCK_TYPE_1, rng); |
Vanger | 0:b86d15c6ba29 | 457 | if (ret != 0) |
Vanger | 0:b86d15c6ba29 | 458 | return ret; |
Vanger | 0:b86d15c6ba29 | 459 | |
Vanger | 0:b86d15c6ba29 | 460 | if ((ret = RsaFunction(out, sz, out, &outLen, RSA_PRIVATE_ENCRYPT,key)) < 0) |
Vanger | 0:b86d15c6ba29 | 461 | sz = ret; |
Vanger | 0:b86d15c6ba29 | 462 | |
Vanger | 0:b86d15c6ba29 | 463 | return sz; |
Vanger | 0:b86d15c6ba29 | 464 | } |
Vanger | 0:b86d15c6ba29 | 465 | |
Vanger | 0:b86d15c6ba29 | 466 | |
Vanger | 0:b86d15c6ba29 | 467 | int RsaEncryptSize(RsaKey* key) |
Vanger | 0:b86d15c6ba29 | 468 | { |
Vanger | 0:b86d15c6ba29 | 469 | #ifdef HAVE_CAVIUM |
Vanger | 0:b86d15c6ba29 | 470 | if (key->magic == CYASSL_RSA_CAVIUM_MAGIC) |
Vanger | 0:b86d15c6ba29 | 471 | return key->c_nSz; |
Vanger | 0:b86d15c6ba29 | 472 | #endif |
Vanger | 0:b86d15c6ba29 | 473 | return mp_unsigned_bin_size(&key->n); |
Vanger | 0:b86d15c6ba29 | 474 | } |
Vanger | 0:b86d15c6ba29 | 475 | |
Vanger | 0:b86d15c6ba29 | 476 | |
Vanger | 0:b86d15c6ba29 | 477 | int RsaFlattenPublicKey(RsaKey* key, byte* e, word32* eSz, byte* n, word32* nSz) |
Vanger | 0:b86d15c6ba29 | 478 | { |
Vanger | 0:b86d15c6ba29 | 479 | int sz, ret; |
Vanger | 0:b86d15c6ba29 | 480 | |
Vanger | 0:b86d15c6ba29 | 481 | if (key == NULL || e == NULL || eSz == NULL || n == NULL || nSz == NULL) |
Vanger | 0:b86d15c6ba29 | 482 | return BAD_FUNC_ARG; |
Vanger | 0:b86d15c6ba29 | 483 | |
Vanger | 0:b86d15c6ba29 | 484 | sz = mp_unsigned_bin_size(&key->e); |
Vanger | 0:b86d15c6ba29 | 485 | if ((word32)sz > *nSz) |
Vanger | 0:b86d15c6ba29 | 486 | return RSA_BUFFER_E; |
Vanger | 0:b86d15c6ba29 | 487 | ret = mp_to_unsigned_bin(&key->e, e); |
Vanger | 0:b86d15c6ba29 | 488 | if (ret != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 489 | return ret; |
Vanger | 0:b86d15c6ba29 | 490 | *eSz = (word32)sz; |
Vanger | 0:b86d15c6ba29 | 491 | |
Vanger | 0:b86d15c6ba29 | 492 | sz = mp_unsigned_bin_size(&key->n); |
Vanger | 0:b86d15c6ba29 | 493 | if ((word32)sz > *nSz) |
Vanger | 0:b86d15c6ba29 | 494 | return RSA_BUFFER_E; |
Vanger | 0:b86d15c6ba29 | 495 | ret = mp_to_unsigned_bin(&key->n, n); |
Vanger | 0:b86d15c6ba29 | 496 | if (ret != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 497 | return ret; |
Vanger | 0:b86d15c6ba29 | 498 | *nSz = (word32)sz; |
Vanger | 0:b86d15c6ba29 | 499 | |
Vanger | 0:b86d15c6ba29 | 500 | return 0; |
Vanger | 0:b86d15c6ba29 | 501 | } |
Vanger | 0:b86d15c6ba29 | 502 | |
Vanger | 0:b86d15c6ba29 | 503 | |
Vanger | 0:b86d15c6ba29 | 504 | #ifdef CYASSL_KEY_GEN |
Vanger | 0:b86d15c6ba29 | 505 | |
Vanger | 0:b86d15c6ba29 | 506 | static const int USE_BBS = 1; |
Vanger | 0:b86d15c6ba29 | 507 | |
Vanger | 0:b86d15c6ba29 | 508 | static int rand_prime(mp_int* N, int len, RNG* rng, void* heap) |
Vanger | 0:b86d15c6ba29 | 509 | { |
Vanger | 0:b86d15c6ba29 | 510 | int err, res, type; |
Vanger | 0:b86d15c6ba29 | 511 | byte* buf; |
Vanger | 0:b86d15c6ba29 | 512 | |
Vanger | 0:b86d15c6ba29 | 513 | (void)heap; |
Vanger | 0:b86d15c6ba29 | 514 | if (N == NULL || rng == NULL) |
Vanger | 0:b86d15c6ba29 | 515 | return BAD_FUNC_ARG; |
Vanger | 0:b86d15c6ba29 | 516 | |
Vanger | 0:b86d15c6ba29 | 517 | /* get type */ |
Vanger | 0:b86d15c6ba29 | 518 | if (len < 0) { |
Vanger | 0:b86d15c6ba29 | 519 | type = USE_BBS; |
Vanger | 0:b86d15c6ba29 | 520 | len = -len; |
Vanger | 0:b86d15c6ba29 | 521 | } else { |
Vanger | 0:b86d15c6ba29 | 522 | type = 0; |
Vanger | 0:b86d15c6ba29 | 523 | } |
Vanger | 0:b86d15c6ba29 | 524 | |
Vanger | 0:b86d15c6ba29 | 525 | /* allow sizes between 2 and 512 bytes for a prime size */ |
Vanger | 0:b86d15c6ba29 | 526 | if (len < 2 || len > 512) { |
Vanger | 0:b86d15c6ba29 | 527 | return BAD_FUNC_ARG; |
Vanger | 0:b86d15c6ba29 | 528 | } |
Vanger | 0:b86d15c6ba29 | 529 | |
Vanger | 0:b86d15c6ba29 | 530 | /* allocate buffer to work with */ |
Vanger | 0:b86d15c6ba29 | 531 | buf = (byte*)XMALLOC(len, heap, DYNAMIC_TYPE_RSA); |
Vanger | 0:b86d15c6ba29 | 532 | if (buf == NULL) { |
Vanger | 0:b86d15c6ba29 | 533 | return MEMORY_E; |
Vanger | 0:b86d15c6ba29 | 534 | } |
Vanger | 0:b86d15c6ba29 | 535 | XMEMSET(buf, 0, len); |
Vanger | 0:b86d15c6ba29 | 536 | |
Vanger | 0:b86d15c6ba29 | 537 | do { |
Vanger | 0:b86d15c6ba29 | 538 | #ifdef SHOW_GEN |
Vanger | 0:b86d15c6ba29 | 539 | printf("."); |
Vanger | 0:b86d15c6ba29 | 540 | fflush(stdout); |
Vanger | 0:b86d15c6ba29 | 541 | #endif |
Vanger | 0:b86d15c6ba29 | 542 | /* generate value */ |
Vanger | 0:b86d15c6ba29 | 543 | err = RNG_GenerateBlock(rng, buf, len); |
Vanger | 0:b86d15c6ba29 | 544 | if (err != 0) { |
Vanger | 0:b86d15c6ba29 | 545 | XFREE(buf, heap, DYNAMIC_TYPE_RSA); |
Vanger | 0:b86d15c6ba29 | 546 | return err; |
Vanger | 0:b86d15c6ba29 | 547 | } |
Vanger | 0:b86d15c6ba29 | 548 | |
Vanger | 0:b86d15c6ba29 | 549 | /* munge bits */ |
Vanger | 0:b86d15c6ba29 | 550 | buf[0] |= 0x80 | 0x40; |
Vanger | 0:b86d15c6ba29 | 551 | buf[len-1] |= 0x01 | ((type & USE_BBS) ? 0x02 : 0x00); |
Vanger | 0:b86d15c6ba29 | 552 | |
Vanger | 0:b86d15c6ba29 | 553 | /* load value */ |
Vanger | 0:b86d15c6ba29 | 554 | if ((err = mp_read_unsigned_bin(N, buf, len)) != MP_OKAY) { |
Vanger | 0:b86d15c6ba29 | 555 | XFREE(buf, heap, DYNAMIC_TYPE_RSA); |
Vanger | 0:b86d15c6ba29 | 556 | return err; |
Vanger | 0:b86d15c6ba29 | 557 | } |
Vanger | 0:b86d15c6ba29 | 558 | |
Vanger | 0:b86d15c6ba29 | 559 | /* test */ |
Vanger | 0:b86d15c6ba29 | 560 | if ((err = mp_prime_is_prime(N, 8, &res)) != MP_OKAY) { |
Vanger | 0:b86d15c6ba29 | 561 | XFREE(buf, heap, DYNAMIC_TYPE_RSA); |
Vanger | 0:b86d15c6ba29 | 562 | return err; |
Vanger | 0:b86d15c6ba29 | 563 | } |
Vanger | 0:b86d15c6ba29 | 564 | } while (res == MP_NO); |
Vanger | 0:b86d15c6ba29 | 565 | |
Vanger | 0:b86d15c6ba29 | 566 | #ifdef LTC_CLEAN_STACK |
Vanger | 0:b86d15c6ba29 | 567 | XMEMSET(buf, 0, len); |
Vanger | 0:b86d15c6ba29 | 568 | #endif |
Vanger | 0:b86d15c6ba29 | 569 | |
Vanger | 0:b86d15c6ba29 | 570 | XFREE(buf, heap, DYNAMIC_TYPE_RSA); |
Vanger | 0:b86d15c6ba29 | 571 | return 0; |
Vanger | 0:b86d15c6ba29 | 572 | } |
Vanger | 0:b86d15c6ba29 | 573 | |
Vanger | 0:b86d15c6ba29 | 574 | |
Vanger | 0:b86d15c6ba29 | 575 | /* Make an RSA key for size bits, with e specified, 65537 is a good e */ |
Vanger | 0:b86d15c6ba29 | 576 | int MakeRsaKey(RsaKey* key, int size, long e, RNG* rng) |
Vanger | 0:b86d15c6ba29 | 577 | { |
Vanger | 0:b86d15c6ba29 | 578 | mp_int p, q, tmp1, tmp2, tmp3; |
Vanger | 0:b86d15c6ba29 | 579 | int err; |
Vanger | 0:b86d15c6ba29 | 580 | |
Vanger | 0:b86d15c6ba29 | 581 | if (key == NULL || rng == NULL) |
Vanger | 0:b86d15c6ba29 | 582 | return BAD_FUNC_ARG; |
Vanger | 0:b86d15c6ba29 | 583 | |
Vanger | 0:b86d15c6ba29 | 584 | if (size < RSA_MIN_SIZE || size > RSA_MAX_SIZE) |
Vanger | 0:b86d15c6ba29 | 585 | return BAD_FUNC_ARG; |
Vanger | 0:b86d15c6ba29 | 586 | |
Vanger | 0:b86d15c6ba29 | 587 | if (e < 3 || (e & 1) == 0) |
Vanger | 0:b86d15c6ba29 | 588 | return BAD_FUNC_ARG; |
Vanger | 0:b86d15c6ba29 | 589 | |
Vanger | 0:b86d15c6ba29 | 590 | if ((err = mp_init_multi(&p, &q, &tmp1, &tmp2, &tmp3, NULL)) != MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 591 | return err; |
Vanger | 0:b86d15c6ba29 | 592 | |
Vanger | 0:b86d15c6ba29 | 593 | err = mp_set_int(&tmp3, e); |
Vanger | 0:b86d15c6ba29 | 594 | |
Vanger | 0:b86d15c6ba29 | 595 | /* make p */ |
Vanger | 0:b86d15c6ba29 | 596 | if (err == MP_OKAY) { |
Vanger | 0:b86d15c6ba29 | 597 | do { |
Vanger | 0:b86d15c6ba29 | 598 | err = rand_prime(&p, size/16, rng, key->heap); /* size in bytes/2 */ |
Vanger | 0:b86d15c6ba29 | 599 | |
Vanger | 0:b86d15c6ba29 | 600 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 601 | err = mp_sub_d(&p, 1, &tmp1); /* tmp1 = p-1 */ |
Vanger | 0:b86d15c6ba29 | 602 | |
Vanger | 0:b86d15c6ba29 | 603 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 604 | err = mp_gcd(&tmp1, &tmp3, &tmp2); /* tmp2 = gcd(p-1, e) */ |
Vanger | 0:b86d15c6ba29 | 605 | } while (err == MP_OKAY && mp_cmp_d(&tmp2, 1) != 0); /* e divdes p-1 */ |
Vanger | 0:b86d15c6ba29 | 606 | } |
Vanger | 0:b86d15c6ba29 | 607 | |
Vanger | 0:b86d15c6ba29 | 608 | /* make q */ |
Vanger | 0:b86d15c6ba29 | 609 | if (err == MP_OKAY) { |
Vanger | 0:b86d15c6ba29 | 610 | do { |
Vanger | 0:b86d15c6ba29 | 611 | err = rand_prime(&q, size/16, rng, key->heap); /* size in bytes/2 */ |
Vanger | 0:b86d15c6ba29 | 612 | |
Vanger | 0:b86d15c6ba29 | 613 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 614 | err = mp_sub_d(&q, 1, &tmp1); /* tmp1 = q-1 */ |
Vanger | 0:b86d15c6ba29 | 615 | |
Vanger | 0:b86d15c6ba29 | 616 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 617 | err = mp_gcd(&tmp1, &tmp3, &tmp2); /* tmp2 = gcd(q-1, e) */ |
Vanger | 0:b86d15c6ba29 | 618 | } while (err == MP_OKAY && mp_cmp_d(&tmp2, 1) != 0); /* e divdes q-1 */ |
Vanger | 0:b86d15c6ba29 | 619 | } |
Vanger | 0:b86d15c6ba29 | 620 | |
Vanger | 0:b86d15c6ba29 | 621 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 622 | err = mp_init_multi(&key->n, &key->e, &key->d, &key->p, &key->q, NULL); |
Vanger | 0:b86d15c6ba29 | 623 | |
Vanger | 0:b86d15c6ba29 | 624 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 625 | err = mp_init_multi(&key->dP, &key->dQ, &key->u, NULL, NULL, NULL); |
Vanger | 0:b86d15c6ba29 | 626 | |
Vanger | 0:b86d15c6ba29 | 627 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 628 | err = mp_sub_d(&p, 1, &tmp2); /* tmp2 = p-1 */ |
Vanger | 0:b86d15c6ba29 | 629 | |
Vanger | 0:b86d15c6ba29 | 630 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 631 | err = mp_lcm(&tmp1, &tmp2, &tmp1); /* tmp1 = lcm(p-1, q-1),last loop */ |
Vanger | 0:b86d15c6ba29 | 632 | |
Vanger | 0:b86d15c6ba29 | 633 | /* make key */ |
Vanger | 0:b86d15c6ba29 | 634 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 635 | err = mp_set_int(&key->e, e); /* key->e = e */ |
Vanger | 0:b86d15c6ba29 | 636 | |
Vanger | 0:b86d15c6ba29 | 637 | if (err == MP_OKAY) /* key->d = 1/e mod lcm(p-1, q-1) */ |
Vanger | 0:b86d15c6ba29 | 638 | err = mp_invmod(&key->e, &tmp1, &key->d); |
Vanger | 0:b86d15c6ba29 | 639 | |
Vanger | 0:b86d15c6ba29 | 640 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 641 | err = mp_mul(&p, &q, &key->n); /* key->n = pq */ |
Vanger | 0:b86d15c6ba29 | 642 | |
Vanger | 0:b86d15c6ba29 | 643 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 644 | err = mp_sub_d(&p, 1, &tmp1); |
Vanger | 0:b86d15c6ba29 | 645 | |
Vanger | 0:b86d15c6ba29 | 646 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 647 | err = mp_sub_d(&q, 1, &tmp2); |
Vanger | 0:b86d15c6ba29 | 648 | |
Vanger | 0:b86d15c6ba29 | 649 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 650 | err = mp_mod(&key->d, &tmp1, &key->dP); |
Vanger | 0:b86d15c6ba29 | 651 | |
Vanger | 0:b86d15c6ba29 | 652 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 653 | err = mp_mod(&key->d, &tmp2, &key->dQ); |
Vanger | 0:b86d15c6ba29 | 654 | |
Vanger | 0:b86d15c6ba29 | 655 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 656 | err = mp_invmod(&q, &p, &key->u); |
Vanger | 0:b86d15c6ba29 | 657 | |
Vanger | 0:b86d15c6ba29 | 658 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 659 | err = mp_copy(&p, &key->p); |
Vanger | 0:b86d15c6ba29 | 660 | |
Vanger | 0:b86d15c6ba29 | 661 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 662 | err = mp_copy(&q, &key->q); |
Vanger | 0:b86d15c6ba29 | 663 | |
Vanger | 0:b86d15c6ba29 | 664 | if (err == MP_OKAY) |
Vanger | 0:b86d15c6ba29 | 665 | key->type = RSA_PRIVATE; |
Vanger | 0:b86d15c6ba29 | 666 | |
Vanger | 0:b86d15c6ba29 | 667 | mp_clear(&tmp3); |
Vanger | 0:b86d15c6ba29 | 668 | mp_clear(&tmp2); |
Vanger | 0:b86d15c6ba29 | 669 | mp_clear(&tmp1); |
Vanger | 0:b86d15c6ba29 | 670 | mp_clear(&q); |
Vanger | 0:b86d15c6ba29 | 671 | mp_clear(&p); |
Vanger | 0:b86d15c6ba29 | 672 | |
Vanger | 0:b86d15c6ba29 | 673 | if (err != MP_OKAY) { |
Vanger | 0:b86d15c6ba29 | 674 | FreeRsaKey(key); |
Vanger | 0:b86d15c6ba29 | 675 | return err; |
Vanger | 0:b86d15c6ba29 | 676 | } |
Vanger | 0:b86d15c6ba29 | 677 | |
Vanger | 0:b86d15c6ba29 | 678 | return 0; |
Vanger | 0:b86d15c6ba29 | 679 | } |
Vanger | 0:b86d15c6ba29 | 680 | |
Vanger | 0:b86d15c6ba29 | 681 | |
Vanger | 0:b86d15c6ba29 | 682 | #endif /* CYASSL_KEY_GEN */ |
Vanger | 0:b86d15c6ba29 | 683 | |
Vanger | 0:b86d15c6ba29 | 684 | |
Vanger | 0:b86d15c6ba29 | 685 | #ifdef HAVE_CAVIUM |
Vanger | 0:b86d15c6ba29 | 686 | |
Vanger | 0:b86d15c6ba29 | 687 | #include <cyassl/ctaocrypt/logging.h> |
Vanger | 0:b86d15c6ba29 | 688 | #include "cavium_common.h" |
Vanger | 0:b86d15c6ba29 | 689 | |
Vanger | 0:b86d15c6ba29 | 690 | /* Initiliaze RSA for use with Nitrox device */ |
Vanger | 0:b86d15c6ba29 | 691 | int RsaInitCavium(RsaKey* rsa, int devId) |
Vanger | 0:b86d15c6ba29 | 692 | { |
Vanger | 0:b86d15c6ba29 | 693 | if (rsa == NULL) |
Vanger | 0:b86d15c6ba29 | 694 | return -1; |
Vanger | 0:b86d15c6ba29 | 695 | |
Vanger | 0:b86d15c6ba29 | 696 | if (CspAllocContext(CONTEXT_SSL, &rsa->contextHandle, devId) != 0) |
Vanger | 0:b86d15c6ba29 | 697 | return -1; |
Vanger | 0:b86d15c6ba29 | 698 | |
Vanger | 0:b86d15c6ba29 | 699 | rsa->devId = devId; |
Vanger | 0:b86d15c6ba29 | 700 | rsa->magic = CYASSL_RSA_CAVIUM_MAGIC; |
Vanger | 0:b86d15c6ba29 | 701 | |
Vanger | 0:b86d15c6ba29 | 702 | return 0; |
Vanger | 0:b86d15c6ba29 | 703 | } |
Vanger | 0:b86d15c6ba29 | 704 | |
Vanger | 0:b86d15c6ba29 | 705 | |
Vanger | 0:b86d15c6ba29 | 706 | /* Free RSA from use with Nitrox device */ |
Vanger | 0:b86d15c6ba29 | 707 | void RsaFreeCavium(RsaKey* rsa) |
Vanger | 0:b86d15c6ba29 | 708 | { |
Vanger | 0:b86d15c6ba29 | 709 | if (rsa == NULL) |
Vanger | 0:b86d15c6ba29 | 710 | return; |
Vanger | 0:b86d15c6ba29 | 711 | |
Vanger | 0:b86d15c6ba29 | 712 | CspFreeContext(CONTEXT_SSL, rsa->contextHandle, rsa->devId); |
Vanger | 0:b86d15c6ba29 | 713 | rsa->magic = 0; |
Vanger | 0:b86d15c6ba29 | 714 | } |
Vanger | 0:b86d15c6ba29 | 715 | |
Vanger | 0:b86d15c6ba29 | 716 | |
Vanger | 0:b86d15c6ba29 | 717 | /* Initialize cavium RSA key */ |
Vanger | 0:b86d15c6ba29 | 718 | static int InitCaviumRsaKey(RsaKey* key, void* heap) |
Vanger | 0:b86d15c6ba29 | 719 | { |
Vanger | 0:b86d15c6ba29 | 720 | if (key == NULL) |
Vanger | 0:b86d15c6ba29 | 721 | return BAD_FUNC_ARG; |
Vanger | 0:b86d15c6ba29 | 722 | |
Vanger | 0:b86d15c6ba29 | 723 | key->heap = heap; |
Vanger | 0:b86d15c6ba29 | 724 | key->type = -1; /* don't know yet */ |
Vanger | 0:b86d15c6ba29 | 725 | |
Vanger | 0:b86d15c6ba29 | 726 | key->c_n = NULL; |
Vanger | 0:b86d15c6ba29 | 727 | key->c_e = NULL; |
Vanger | 0:b86d15c6ba29 | 728 | key->c_d = NULL; |
Vanger | 0:b86d15c6ba29 | 729 | key->c_p = NULL; |
Vanger | 0:b86d15c6ba29 | 730 | key->c_q = NULL; |
Vanger | 0:b86d15c6ba29 | 731 | key->c_dP = NULL; |
Vanger | 0:b86d15c6ba29 | 732 | key->c_dQ = NULL; |
Vanger | 0:b86d15c6ba29 | 733 | key->c_u = NULL; |
Vanger | 0:b86d15c6ba29 | 734 | |
Vanger | 0:b86d15c6ba29 | 735 | key->c_nSz = 0; |
Vanger | 0:b86d15c6ba29 | 736 | key->c_eSz = 0; |
Vanger | 0:b86d15c6ba29 | 737 | key->c_dSz = 0; |
Vanger | 0:b86d15c6ba29 | 738 | key->c_pSz = 0; |
Vanger | 0:b86d15c6ba29 | 739 | key->c_qSz = 0; |
Vanger | 0:b86d15c6ba29 | 740 | key->c_dP_Sz = 0; |
Vanger | 0:b86d15c6ba29 | 741 | key->c_dQ_Sz = 0; |
Vanger | 0:b86d15c6ba29 | 742 | key->c_uSz = 0; |
Vanger | 0:b86d15c6ba29 | 743 | |
Vanger | 0:b86d15c6ba29 | 744 | return 0; |
Vanger | 0:b86d15c6ba29 | 745 | } |
Vanger | 0:b86d15c6ba29 | 746 | |
Vanger | 0:b86d15c6ba29 | 747 | |
Vanger | 0:b86d15c6ba29 | 748 | /* Free cavium RSA key */ |
Vanger | 0:b86d15c6ba29 | 749 | static int FreeCaviumRsaKey(RsaKey* key) |
Vanger | 0:b86d15c6ba29 | 750 | { |
Vanger | 0:b86d15c6ba29 | 751 | if (key == NULL) |
Vanger | 0:b86d15c6ba29 | 752 | return BAD_FUNC_ARG; |
Vanger | 0:b86d15c6ba29 | 753 | |
Vanger | 0:b86d15c6ba29 | 754 | XFREE(key->c_n, key->heap, DYNAMIC_TYPE_CAVIUM_TMP); |
Vanger | 0:b86d15c6ba29 | 755 | XFREE(key->c_e, key->heap, DYNAMIC_TYPE_CAVIUM_TMP); |
Vanger | 0:b86d15c6ba29 | 756 | XFREE(key->c_d, key->heap, DYNAMIC_TYPE_CAVIUM_TMP); |
Vanger | 0:b86d15c6ba29 | 757 | XFREE(key->c_p, key->heap, DYNAMIC_TYPE_CAVIUM_TMP); |
Vanger | 0:b86d15c6ba29 | 758 | XFREE(key->c_q, key->heap, DYNAMIC_TYPE_CAVIUM_TMP); |
Vanger | 0:b86d15c6ba29 | 759 | XFREE(key->c_dP, key->heap, DYNAMIC_TYPE_CAVIUM_TMP); |
Vanger | 0:b86d15c6ba29 | 760 | XFREE(key->c_dQ, key->heap, DYNAMIC_TYPE_CAVIUM_TMP); |
Vanger | 0:b86d15c6ba29 | 761 | XFREE(key->c_u, key->heap, DYNAMIC_TYPE_CAVIUM_TMP); |
Vanger | 0:b86d15c6ba29 | 762 | |
Vanger | 0:b86d15c6ba29 | 763 | return InitCaviumRsaKey(key, key->heap); /* reset pointers */ |
Vanger | 0:b86d15c6ba29 | 764 | } |
Vanger | 0:b86d15c6ba29 | 765 | |
Vanger | 0:b86d15c6ba29 | 766 | |
Vanger | 0:b86d15c6ba29 | 767 | static int CaviumRsaPublicEncrypt(const byte* in, word32 inLen, byte* out, |
Vanger | 0:b86d15c6ba29 | 768 | word32 outLen, RsaKey* key) |
Vanger | 0:b86d15c6ba29 | 769 | { |
Vanger | 0:b86d15c6ba29 | 770 | word32 requestId; |
Vanger | 0:b86d15c6ba29 | 771 | word32 ret; |
Vanger | 0:b86d15c6ba29 | 772 | |
Vanger | 0:b86d15c6ba29 | 773 | if (key == NULL || in == NULL || out == NULL || outLen < (word32)key->c_nSz) |
Vanger | 0:b86d15c6ba29 | 774 | return -1; |
Vanger | 0:b86d15c6ba29 | 775 | |
Vanger | 0:b86d15c6ba29 | 776 | ret = CspPkcs1v15Enc(CAVIUM_BLOCKING, BT2, key->c_nSz, key->c_eSz, |
Vanger | 0:b86d15c6ba29 | 777 | (word16)inLen, key->c_n, key->c_e, (byte*)in, out, |
Vanger | 0:b86d15c6ba29 | 778 | &requestId, key->devId); |
Vanger | 0:b86d15c6ba29 | 779 | if (ret != 0) { |
Vanger | 0:b86d15c6ba29 | 780 | CYASSL_MSG("Cavium Enc BT2 failed"); |
Vanger | 0:b86d15c6ba29 | 781 | return -1; |
Vanger | 0:b86d15c6ba29 | 782 | } |
Vanger | 0:b86d15c6ba29 | 783 | return key->c_nSz; |
Vanger | 0:b86d15c6ba29 | 784 | } |
Vanger | 0:b86d15c6ba29 | 785 | |
Vanger | 0:b86d15c6ba29 | 786 | |
Vanger | 0:b86d15c6ba29 | 787 | static INLINE void ato16(const byte* c, word16* u16) |
Vanger | 0:b86d15c6ba29 | 788 | { |
Vanger | 0:b86d15c6ba29 | 789 | *u16 = (c[0] << 8) | (c[1]); |
Vanger | 0:b86d15c6ba29 | 790 | } |
Vanger | 0:b86d15c6ba29 | 791 | |
Vanger | 0:b86d15c6ba29 | 792 | |
Vanger | 0:b86d15c6ba29 | 793 | static int CaviumRsaPrivateDecrypt(const byte* in, word32 inLen, byte* out, |
Vanger | 0:b86d15c6ba29 | 794 | word32 outLen, RsaKey* key) |
Vanger | 0:b86d15c6ba29 | 795 | { |
Vanger | 0:b86d15c6ba29 | 796 | word32 requestId; |
Vanger | 0:b86d15c6ba29 | 797 | word32 ret; |
Vanger | 0:b86d15c6ba29 | 798 | word16 outSz = (word16)outLen; |
Vanger | 0:b86d15c6ba29 | 799 | |
Vanger | 0:b86d15c6ba29 | 800 | if (key == NULL || in == NULL || out == NULL || inLen != (word32)key->c_nSz) |
Vanger | 0:b86d15c6ba29 | 801 | return -1; |
Vanger | 0:b86d15c6ba29 | 802 | |
Vanger | 0:b86d15c6ba29 | 803 | ret = CspPkcs1v15CrtDec(CAVIUM_BLOCKING, BT2, key->c_nSz, key->c_q, |
Vanger | 0:b86d15c6ba29 | 804 | key->c_dQ, key->c_p, key->c_dP, key->c_u, |
Vanger | 0:b86d15c6ba29 | 805 | (byte*)in, &outSz, out, &requestId, key->devId); |
Vanger | 0:b86d15c6ba29 | 806 | if (ret != 0) { |
Vanger | 0:b86d15c6ba29 | 807 | CYASSL_MSG("Cavium CRT Dec BT2 failed"); |
Vanger | 0:b86d15c6ba29 | 808 | return -1; |
Vanger | 0:b86d15c6ba29 | 809 | } |
Vanger | 0:b86d15c6ba29 | 810 | ato16((const byte*)&outSz, &outSz); |
Vanger | 0:b86d15c6ba29 | 811 | |
Vanger | 0:b86d15c6ba29 | 812 | return outSz; |
Vanger | 0:b86d15c6ba29 | 813 | } |
Vanger | 0:b86d15c6ba29 | 814 | |
Vanger | 0:b86d15c6ba29 | 815 | |
Vanger | 0:b86d15c6ba29 | 816 | static int CaviumRsaSSL_Sign(const byte* in, word32 inLen, byte* out, |
Vanger | 0:b86d15c6ba29 | 817 | word32 outLen, RsaKey* key) |
Vanger | 0:b86d15c6ba29 | 818 | { |
Vanger | 0:b86d15c6ba29 | 819 | word32 requestId; |
Vanger | 0:b86d15c6ba29 | 820 | word32 ret; |
Vanger | 0:b86d15c6ba29 | 821 | |
Vanger | 0:b86d15c6ba29 | 822 | if (key == NULL || in == NULL || out == NULL || inLen == 0 || outLen < |
Vanger | 0:b86d15c6ba29 | 823 | (word32)key->c_nSz) |
Vanger | 0:b86d15c6ba29 | 824 | return -1; |
Vanger | 0:b86d15c6ba29 | 825 | |
Vanger | 0:b86d15c6ba29 | 826 | ret = CspPkcs1v15CrtEnc(CAVIUM_BLOCKING, BT1, key->c_nSz, (word16)inLen, |
Vanger | 0:b86d15c6ba29 | 827 | key->c_q, key->c_dQ, key->c_p, key->c_dP, key->c_u, |
Vanger | 0:b86d15c6ba29 | 828 | (byte*)in, out, &requestId, key->devId); |
Vanger | 0:b86d15c6ba29 | 829 | if (ret != 0) { |
Vanger | 0:b86d15c6ba29 | 830 | CYASSL_MSG("Cavium CRT Enc BT1 failed"); |
Vanger | 0:b86d15c6ba29 | 831 | return -1; |
Vanger | 0:b86d15c6ba29 | 832 | } |
Vanger | 0:b86d15c6ba29 | 833 | return key->c_nSz; |
Vanger | 0:b86d15c6ba29 | 834 | } |
Vanger | 0:b86d15c6ba29 | 835 | |
Vanger | 0:b86d15c6ba29 | 836 | |
Vanger | 0:b86d15c6ba29 | 837 | static int CaviumRsaSSL_Verify(const byte* in, word32 inLen, byte* out, |
Vanger | 0:b86d15c6ba29 | 838 | word32 outLen, RsaKey* key) |
Vanger | 0:b86d15c6ba29 | 839 | { |
Vanger | 0:b86d15c6ba29 | 840 | word32 requestId; |
Vanger | 0:b86d15c6ba29 | 841 | word32 ret; |
Vanger | 0:b86d15c6ba29 | 842 | word16 outSz = (word16)outLen; |
Vanger | 0:b86d15c6ba29 | 843 | |
Vanger | 0:b86d15c6ba29 | 844 | if (key == NULL || in == NULL || out == NULL || inLen != (word32)key->c_nSz) |
Vanger | 0:b86d15c6ba29 | 845 | return -1; |
Vanger | 0:b86d15c6ba29 | 846 | |
Vanger | 0:b86d15c6ba29 | 847 | ret = CspPkcs1v15Dec(CAVIUM_BLOCKING, BT1, key->c_nSz, key->c_eSz, |
Vanger | 0:b86d15c6ba29 | 848 | key->c_n, key->c_e, (byte*)in, &outSz, out, |
Vanger | 0:b86d15c6ba29 | 849 | &requestId, key->devId); |
Vanger | 0:b86d15c6ba29 | 850 | if (ret != 0) { |
Vanger | 0:b86d15c6ba29 | 851 | CYASSL_MSG("Cavium Dec BT1 failed"); |
Vanger | 0:b86d15c6ba29 | 852 | return -1; |
Vanger | 0:b86d15c6ba29 | 853 | } |
Vanger | 0:b86d15c6ba29 | 854 | outSz = ntohs(outSz); |
Vanger | 0:b86d15c6ba29 | 855 | |
Vanger | 0:b86d15c6ba29 | 856 | return outSz; |
Vanger | 0:b86d15c6ba29 | 857 | } |
Vanger | 0:b86d15c6ba29 | 858 | |
Vanger | 0:b86d15c6ba29 | 859 | |
Vanger | 0:b86d15c6ba29 | 860 | #endif /* HAVE_CAVIUM */ |
Vanger | 0:b86d15c6ba29 | 861 | |
Vanger | 0:b86d15c6ba29 | 862 | #endif /* NO_RSA */ |