Kev Mann / mbed-dev-OS5_10_4

RTC auf true

features/mbedtls/src/pk_wrap.c@2:7aab896b1a3b, 2019-03-13 (annotated)

Committer:
kevman
Date:
Wed Mar 13 11:03:24 2019 +0000
Revision:
2:7aab896b1a3b
Parent:
0:38ceb79fef03 
2019-03-13

Who changed what in which revision?

UserRevisionLine numberNew contents of line
kevman 0:38ceb79fef03 1 /*
kevman 0:38ceb79fef03 2 * Public Key abstraction layer: wrapper functions
kevman 0:38ceb79fef03 3 *
kevman 0:38ceb79fef03 4 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
kevman 0:38ceb79fef03 5 * SPDX-License-Identifier: Apache-2.0
kevman 0:38ceb79fef03 6 *
kevman 0:38ceb79fef03 7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
kevman 0:38ceb79fef03 8 * not use this file except in compliance with the License.
kevman 0:38ceb79fef03 9 * You may obtain a copy of the License at
kevman 0:38ceb79fef03 10 *
kevman 0:38ceb79fef03 11 * http://www.apache.org/licenses/LICENSE-2.0
kevman 0:38ceb79fef03 12 *
kevman 0:38ceb79fef03 13 * Unless required by applicable law or agreed to in writing, software
kevman 0:38ceb79fef03 14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
kevman 0:38ceb79fef03 15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
kevman 0:38ceb79fef03 16 * See the License for the specific language governing permissions and
kevman 0:38ceb79fef03 17 * limitations under the License.
kevman 0:38ceb79fef03 18 *
kevman 0:38ceb79fef03 19 * This file is part of mbed TLS (https://tls.mbed.org)
kevman 0:38ceb79fef03 20 */
kevman 0:38ceb79fef03 21
kevman 0:38ceb79fef03 22 #if !defined(MBEDTLS_CONFIG_FILE)
kevman 0:38ceb79fef03 23 #include "mbedtls/config.h"
kevman 0:38ceb79fef03 24 #else
kevman 0:38ceb79fef03 25 #include MBEDTLS_CONFIG_FILE
kevman 0:38ceb79fef03 26 #endif
kevman 0:38ceb79fef03 27
kevman 0:38ceb79fef03 28 #if defined(MBEDTLS_PK_C)
kevman 0:38ceb79fef03 29 #include "mbedtls/pk_internal.h"
kevman 0:38ceb79fef03 30
kevman 0:38ceb79fef03 31 /* Even if RSA not activated, for the sake of RSA-alt */
kevman 0:38ceb79fef03 32 #include "mbedtls/rsa.h"
kevman 0:38ceb79fef03 33
kevman 0:38ceb79fef03 34 #include <string.h>
kevman 0:38ceb79fef03 35
kevman 0:38ceb79fef03 36 #if defined(MBEDTLS_ECP_C)
kevman 0:38ceb79fef03 37 #include "mbedtls/ecp.h"
kevman 0:38ceb79fef03 38 #endif
kevman 0:38ceb79fef03 39
kevman 0:38ceb79fef03 40 #if defined(MBEDTLS_ECDSA_C)
kevman 0:38ceb79fef03 41 #include "mbedtls/ecdsa.h"
kevman 0:38ceb79fef03 42 #endif
kevman 0:38ceb79fef03 43
kevman 0:38ceb79fef03 44 #if defined(MBEDTLS_PK_RSA_ALT_SUPPORT)
kevman 0:38ceb79fef03 45 #include "mbedtls/platform_util.h"
kevman 0:38ceb79fef03 46 #endif
kevman 0:38ceb79fef03 47
kevman 0:38ceb79fef03 48 #if defined(MBEDTLS_PLATFORM_C)
kevman 0:38ceb79fef03 49 #include "mbedtls/platform.h"
kevman 0:38ceb79fef03 50 #else
kevman 0:38ceb79fef03 51 #include <stdlib.h>
kevman 0:38ceb79fef03 52 #define mbedtls_calloc calloc
kevman 0:38ceb79fef03 53 #define mbedtls_free free
kevman 0:38ceb79fef03 54 #endif
kevman 0:38ceb79fef03 55
kevman 0:38ceb79fef03 56 #include <limits.h>
kevman 0:38ceb79fef03 57 #include <stdint.h>
kevman 0:38ceb79fef03 58
kevman 0:38ceb79fef03 59 #if defined(MBEDTLS_RSA_C)
kevman 0:38ceb79fef03 60 static int rsa_can_do( mbedtls_pk_type_t type )
kevman 0:38ceb79fef03 61 {
kevman 0:38ceb79fef03 62 return( type == MBEDTLS_PK_RSA ||
kevman 0:38ceb79fef03 63 type == MBEDTLS_PK_RSASSA_PSS );
kevman 0:38ceb79fef03 64 }
kevman 0:38ceb79fef03 65
kevman 0:38ceb79fef03 66 static size_t rsa_get_bitlen( const void *ctx )
kevman 0:38ceb79fef03 67 {
kevman 0:38ceb79fef03 68 const mbedtls_rsa_context * rsa = (const mbedtls_rsa_context *) ctx;
kevman 0:38ceb79fef03 69 return( 8 * mbedtls_rsa_get_len( rsa ) );
kevman 0:38ceb79fef03 70 }
kevman 0:38ceb79fef03 71
kevman 0:38ceb79fef03 72 static int rsa_verify_wrap( void *ctx, mbedtls_md_type_t md_alg,
kevman 0:38ceb79fef03 73 const unsigned char *hash, size_t hash_len,
kevman 0:38ceb79fef03 74 const unsigned char *sig, size_t sig_len )
kevman 0:38ceb79fef03 75 {
kevman 0:38ceb79fef03 76 int ret;
kevman 0:38ceb79fef03 77 mbedtls_rsa_context * rsa = (mbedtls_rsa_context *) ctx;
kevman 0:38ceb79fef03 78 size_t rsa_len = mbedtls_rsa_get_len( rsa );
kevman 0:38ceb79fef03 79
kevman 0:38ceb79fef03 80 #if SIZE_MAX > UINT_MAX
kevman 0:38ceb79fef03 81 if( md_alg == MBEDTLS_MD_NONE && UINT_MAX < hash_len )
kevman 0:38ceb79fef03 82 return( MBEDTLS_ERR_PK_BAD_INPUT_DATA );
kevman 0:38ceb79fef03 83 #endif /* SIZE_MAX > UINT_MAX */
kevman 0:38ceb79fef03 84
kevman 0:38ceb79fef03 85 if( sig_len < rsa_len )
kevman 0:38ceb79fef03 86 return( MBEDTLS_ERR_RSA_VERIFY_FAILED );
kevman 0:38ceb79fef03 87
kevman 0:38ceb79fef03 88 if( ( ret = mbedtls_rsa_pkcs1_verify( rsa, NULL, NULL,
kevman 0:38ceb79fef03 89 MBEDTLS_RSA_PUBLIC, md_alg,
kevman 0:38ceb79fef03 90 (unsigned int) hash_len, hash, sig ) ) != 0 )
kevman 0:38ceb79fef03 91 return( ret );
kevman 0:38ceb79fef03 92
kevman 0:38ceb79fef03 93 /* The buffer contains a valid signature followed by extra data.
kevman 0:38ceb79fef03 94 * We have a special error code for that so that so that callers can
kevman 0:38ceb79fef03 95 * use mbedtls_pk_verify() to check "Does the buffer start with a
kevman 0:38ceb79fef03 96 * valid signature?" and not just "Does the buffer contain a valid
kevman 0:38ceb79fef03 97 * signature?". */
kevman 0:38ceb79fef03 98 if( sig_len > rsa_len )
kevman 0:38ceb79fef03 99 return( MBEDTLS_ERR_PK_SIG_LEN_MISMATCH );
kevman 0:38ceb79fef03 100
kevman 0:38ceb79fef03 101 return( 0 );
kevman 0:38ceb79fef03 102 }
kevman 0:38ceb79fef03 103
kevman 0:38ceb79fef03 104 static int rsa_sign_wrap( void *ctx, mbedtls_md_type_t md_alg,
kevman 0:38ceb79fef03 105 const unsigned char *hash, size_t hash_len,
kevman 0:38ceb79fef03 106 unsigned char *sig, size_t *sig_len,
kevman 0:38ceb79fef03 107 int (*f_rng)(void *, unsigned char *, size_t), void *p_rng )
kevman 0:38ceb79fef03 108 {
kevman 0:38ceb79fef03 109 mbedtls_rsa_context * rsa = (mbedtls_rsa_context *) ctx;
kevman 0:38ceb79fef03 110
kevman 0:38ceb79fef03 111 #if SIZE_MAX > UINT_MAX
kevman 0:38ceb79fef03 112 if( md_alg == MBEDTLS_MD_NONE && UINT_MAX < hash_len )
kevman 0:38ceb79fef03 113 return( MBEDTLS_ERR_PK_BAD_INPUT_DATA );
kevman 0:38ceb79fef03 114 #endif /* SIZE_MAX > UINT_MAX */
kevman 0:38ceb79fef03 115
kevman 0:38ceb79fef03 116 *sig_len = mbedtls_rsa_get_len( rsa );
kevman 0:38ceb79fef03 117
kevman 0:38ceb79fef03 118 return( mbedtls_rsa_pkcs1_sign( rsa, f_rng, p_rng, MBEDTLS_RSA_PRIVATE,
kevman 0:38ceb79fef03 119 md_alg, (unsigned int) hash_len, hash, sig ) );
kevman 0:38ceb79fef03 120 }
kevman 0:38ceb79fef03 121
kevman 0:38ceb79fef03 122 static int rsa_decrypt_wrap( void *ctx,
kevman 0:38ceb79fef03 123 const unsigned char *input, size_t ilen,
kevman 0:38ceb79fef03 124 unsigned char *output, size_t *olen, size_t osize,
kevman 0:38ceb79fef03 125 int (*f_rng)(void *, unsigned char *, size_t), void *p_rng )
kevman 0:38ceb79fef03 126 {
kevman 0:38ceb79fef03 127 mbedtls_rsa_context * rsa = (mbedtls_rsa_context *) ctx;
kevman 0:38ceb79fef03 128
kevman 0:38ceb79fef03 129 if( ilen != mbedtls_rsa_get_len( rsa ) )
kevman 0:38ceb79fef03 130 return( MBEDTLS_ERR_RSA_BAD_INPUT_DATA );
kevman 0:38ceb79fef03 131
kevman 0:38ceb79fef03 132 return( mbedtls_rsa_pkcs1_decrypt( rsa, f_rng, p_rng,
kevman 0:38ceb79fef03 133 MBEDTLS_RSA_PRIVATE, olen, input, output, osize ) );
kevman 0:38ceb79fef03 134 }
kevman 0:38ceb79fef03 135
kevman 0:38ceb79fef03 136 static int rsa_encrypt_wrap( void *ctx,
kevman 0:38ceb79fef03 137 const unsigned char *input, size_t ilen,
kevman 0:38ceb79fef03 138 unsigned char *output, size_t *olen, size_t osize,
kevman 0:38ceb79fef03 139 int (*f_rng)(void *, unsigned char *, size_t), void *p_rng )
kevman 0:38ceb79fef03 140 {
kevman 0:38ceb79fef03 141 mbedtls_rsa_context * rsa = (mbedtls_rsa_context *) ctx;
kevman 0:38ceb79fef03 142 *olen = mbedtls_rsa_get_len( rsa );
kevman 0:38ceb79fef03 143
kevman 0:38ceb79fef03 144 if( *olen > osize )
kevman 0:38ceb79fef03 145 return( MBEDTLS_ERR_RSA_OUTPUT_TOO_LARGE );
kevman 0:38ceb79fef03 146
kevman 0:38ceb79fef03 147 return( mbedtls_rsa_pkcs1_encrypt( rsa, f_rng, p_rng, MBEDTLS_RSA_PUBLIC,
kevman 0:38ceb79fef03 148 ilen, input, output ) );
kevman 0:38ceb79fef03 149 }
kevman 0:38ceb79fef03 150
kevman 0:38ceb79fef03 151 static int rsa_check_pair_wrap( const void *pub, const void *prv )
kevman 0:38ceb79fef03 152 {
kevman 0:38ceb79fef03 153 return( mbedtls_rsa_check_pub_priv( (const mbedtls_rsa_context *) pub,
kevman 0:38ceb79fef03 154 (const mbedtls_rsa_context *) prv ) );
kevman 0:38ceb79fef03 155 }
kevman 0:38ceb79fef03 156
kevman 0:38ceb79fef03 157 static void *rsa_alloc_wrap( void )
kevman 0:38ceb79fef03 158 {
kevman 0:38ceb79fef03 159 void *ctx = mbedtls_calloc( 1, sizeof( mbedtls_rsa_context ) );
kevman 0:38ceb79fef03 160
kevman 0:38ceb79fef03 161 if( ctx != NULL )
kevman 0:38ceb79fef03 162 mbedtls_rsa_init( (mbedtls_rsa_context *) ctx, 0, 0 );
kevman 0:38ceb79fef03 163
kevman 0:38ceb79fef03 164 return( ctx );
kevman 0:38ceb79fef03 165 }
kevman 0:38ceb79fef03 166
kevman 0:38ceb79fef03 167 static void rsa_free_wrap( void *ctx )
kevman 0:38ceb79fef03 168 {
kevman 0:38ceb79fef03 169 mbedtls_rsa_free( (mbedtls_rsa_context *) ctx );
kevman 0:38ceb79fef03 170 mbedtls_free( ctx );
kevman 0:38ceb79fef03 171 }
kevman 0:38ceb79fef03 172
kevman 0:38ceb79fef03 173 static void rsa_debug( const void *ctx, mbedtls_pk_debug_item *items )
kevman 0:38ceb79fef03 174 {
kevman 0:38ceb79fef03 175 items->type = MBEDTLS_PK_DEBUG_MPI;
kevman 0:38ceb79fef03 176 items->name = "rsa.N";
kevman 0:38ceb79fef03 177 items->value = &( ((mbedtls_rsa_context *) ctx)->N );
kevman 0:38ceb79fef03 178
kevman 0:38ceb79fef03 179 items++;
kevman 0:38ceb79fef03 180
kevman 0:38ceb79fef03 181 items->type = MBEDTLS_PK_DEBUG_MPI;
kevman 0:38ceb79fef03 182 items->name = "rsa.E";
kevman 0:38ceb79fef03 183 items->value = &( ((mbedtls_rsa_context *) ctx)->E );
kevman 0:38ceb79fef03 184 }
kevman 0:38ceb79fef03 185
kevman 0:38ceb79fef03 186 const mbedtls_pk_info_t mbedtls_rsa_info = {
kevman 0:38ceb79fef03 187 MBEDTLS_PK_RSA,
kevman 0:38ceb79fef03 188 "RSA",
kevman 0:38ceb79fef03 189 rsa_get_bitlen,
kevman 0:38ceb79fef03 190 rsa_can_do,
kevman 0:38ceb79fef03 191 rsa_verify_wrap,
kevman 0:38ceb79fef03 192 rsa_sign_wrap,
kevman 0:38ceb79fef03 193 rsa_decrypt_wrap,
kevman 0:38ceb79fef03 194 rsa_encrypt_wrap,
kevman 0:38ceb79fef03 195 rsa_check_pair_wrap,
kevman 0:38ceb79fef03 196 rsa_alloc_wrap,
kevman 0:38ceb79fef03 197 rsa_free_wrap,
kevman 0:38ceb79fef03 198 rsa_debug,
kevman 0:38ceb79fef03 199 };
kevman 0:38ceb79fef03 200 #endif /* MBEDTLS_RSA_C */
kevman 0:38ceb79fef03 201
kevman 0:38ceb79fef03 202 #if defined(MBEDTLS_ECP_C)
kevman 0:38ceb79fef03 203 /*
kevman 0:38ceb79fef03 204 * Generic EC key
kevman 0:38ceb79fef03 205 */
kevman 0:38ceb79fef03 206 static int eckey_can_do( mbedtls_pk_type_t type )
kevman 0:38ceb79fef03 207 {
kevman 0:38ceb79fef03 208 return( type == MBEDTLS_PK_ECKEY ||
kevman 0:38ceb79fef03 209 type == MBEDTLS_PK_ECKEY_DH ||
kevman 0:38ceb79fef03 210 type == MBEDTLS_PK_ECDSA );
kevman 0:38ceb79fef03 211 }
kevman 0:38ceb79fef03 212
kevman 0:38ceb79fef03 213 static size_t eckey_get_bitlen( const void *ctx )
kevman 0:38ceb79fef03 214 {
kevman 0:38ceb79fef03 215 return( ((mbedtls_ecp_keypair *) ctx)->grp.pbits );
kevman 0:38ceb79fef03 216 }
kevman 0:38ceb79fef03 217
kevman 0:38ceb79fef03 218 #if defined(MBEDTLS_ECDSA_C)
kevman 0:38ceb79fef03 219 /* Forward declarations */
kevman 0:38ceb79fef03 220 static int ecdsa_verify_wrap( void *ctx, mbedtls_md_type_t md_alg,
kevman 0:38ceb79fef03 221 const unsigned char *hash, size_t hash_len,
kevman 0:38ceb79fef03 222 const unsigned char *sig, size_t sig_len );
kevman 0:38ceb79fef03 223
kevman 0:38ceb79fef03 224 static int ecdsa_sign_wrap( void *ctx, mbedtls_md_type_t md_alg,
kevman 0:38ceb79fef03 225 const unsigned char *hash, size_t hash_len,
kevman 0:38ceb79fef03 226 unsigned char *sig, size_t *sig_len,
kevman 0:38ceb79fef03 227 int (*f_rng)(void *, unsigned char *, size_t), void *p_rng );
kevman 0:38ceb79fef03 228
kevman 0:38ceb79fef03 229 static int eckey_verify_wrap( void *ctx, mbedtls_md_type_t md_alg,
kevman 0:38ceb79fef03 230 const unsigned char *hash, size_t hash_len,
kevman 0:38ceb79fef03 231 const unsigned char *sig, size_t sig_len )
kevman 0:38ceb79fef03 232 {
kevman 0:38ceb79fef03 233 int ret;
kevman 0:38ceb79fef03 234 mbedtls_ecdsa_context ecdsa;
kevman 0:38ceb79fef03 235
kevman 0:38ceb79fef03 236 mbedtls_ecdsa_init( &ecdsa );
kevman 0:38ceb79fef03 237
kevman 0:38ceb79fef03 238 if( ( ret = mbedtls_ecdsa_from_keypair( &ecdsa, ctx ) ) == 0 )
kevman 0:38ceb79fef03 239 ret = ecdsa_verify_wrap( &ecdsa, md_alg, hash, hash_len, sig, sig_len );
kevman 0:38ceb79fef03 240
kevman 0:38ceb79fef03 241 mbedtls_ecdsa_free( &ecdsa );
kevman 0:38ceb79fef03 242
kevman 0:38ceb79fef03 243 return( ret );
kevman 0:38ceb79fef03 244 }
kevman 0:38ceb79fef03 245
kevman 0:38ceb79fef03 246 static int eckey_sign_wrap( void *ctx, mbedtls_md_type_t md_alg,
kevman 0:38ceb79fef03 247 const unsigned char *hash, size_t hash_len,
kevman 0:38ceb79fef03 248 unsigned char *sig, size_t *sig_len,
kevman 0:38ceb79fef03 249 int (*f_rng)(void *, unsigned char *, size_t), void *p_rng )
kevman 0:38ceb79fef03 250 {
kevman 0:38ceb79fef03 251 int ret;
kevman 0:38ceb79fef03 252 mbedtls_ecdsa_context ecdsa;
kevman 0:38ceb79fef03 253
kevman 0:38ceb79fef03 254 mbedtls_ecdsa_init( &ecdsa );
kevman 0:38ceb79fef03 255
kevman 0:38ceb79fef03 256 if( ( ret = mbedtls_ecdsa_from_keypair( &ecdsa, ctx ) ) == 0 )
kevman 0:38ceb79fef03 257 ret = ecdsa_sign_wrap( &ecdsa, md_alg, hash, hash_len, sig, sig_len,
kevman 0:38ceb79fef03 258 f_rng, p_rng );
kevman 0:38ceb79fef03 259
kevman 0:38ceb79fef03 260 mbedtls_ecdsa_free( &ecdsa );
kevman 0:38ceb79fef03 261
kevman 0:38ceb79fef03 262 return( ret );
kevman 0:38ceb79fef03 263 }
kevman 0:38ceb79fef03 264
kevman 0:38ceb79fef03 265 #endif /* MBEDTLS_ECDSA_C */
kevman 0:38ceb79fef03 266
kevman 0:38ceb79fef03 267 static int eckey_check_pair( const void *pub, const void *prv )
kevman 0:38ceb79fef03 268 {
kevman 0:38ceb79fef03 269 return( mbedtls_ecp_check_pub_priv( (const mbedtls_ecp_keypair *) pub,
kevman 0:38ceb79fef03 270 (const mbedtls_ecp_keypair *) prv ) );
kevman 0:38ceb79fef03 271 }
kevman 0:38ceb79fef03 272
kevman 0:38ceb79fef03 273 static void *eckey_alloc_wrap( void )
kevman 0:38ceb79fef03 274 {
kevman 0:38ceb79fef03 275 void *ctx = mbedtls_calloc( 1, sizeof( mbedtls_ecp_keypair ) );
kevman 0:38ceb79fef03 276
kevman 0:38ceb79fef03 277 if( ctx != NULL )
kevman 0:38ceb79fef03 278 mbedtls_ecp_keypair_init( ctx );
kevman 0:38ceb79fef03 279
kevman 0:38ceb79fef03 280 return( ctx );
kevman 0:38ceb79fef03 281 }
kevman 0:38ceb79fef03 282
kevman 0:38ceb79fef03 283 static void eckey_free_wrap( void *ctx )
kevman 0:38ceb79fef03 284 {
kevman 0:38ceb79fef03 285 mbedtls_ecp_keypair_free( (mbedtls_ecp_keypair *) ctx );
kevman 0:38ceb79fef03 286 mbedtls_free( ctx );
kevman 0:38ceb79fef03 287 }
kevman 0:38ceb79fef03 288
kevman 0:38ceb79fef03 289 static void eckey_debug( const void *ctx, mbedtls_pk_debug_item *items )
kevman 0:38ceb79fef03 290 {
kevman 0:38ceb79fef03 291 items->type = MBEDTLS_PK_DEBUG_ECP;
kevman 0:38ceb79fef03 292 items->name = "eckey.Q";
kevman 0:38ceb79fef03 293 items->value = &( ((mbedtls_ecp_keypair *) ctx)->Q );
kevman 0:38ceb79fef03 294 }
kevman 0:38ceb79fef03 295
kevman 0:38ceb79fef03 296 const mbedtls_pk_info_t mbedtls_eckey_info = {
kevman 0:38ceb79fef03 297 MBEDTLS_PK_ECKEY,
kevman 0:38ceb79fef03 298 "EC",
kevman 0:38ceb79fef03 299 eckey_get_bitlen,
kevman 0:38ceb79fef03 300 eckey_can_do,
kevman 0:38ceb79fef03 301 #if defined(MBEDTLS_ECDSA_C)
kevman 0:38ceb79fef03 302 eckey_verify_wrap,
kevman 0:38ceb79fef03 303 eckey_sign_wrap,
kevman 0:38ceb79fef03 304 #else
kevman 0:38ceb79fef03 305 NULL,
kevman 0:38ceb79fef03 306 NULL,
kevman 0:38ceb79fef03 307 #endif
kevman 0:38ceb79fef03 308 NULL,
kevman 0:38ceb79fef03 309 NULL,
kevman 0:38ceb79fef03 310 eckey_check_pair,
kevman 0:38ceb79fef03 311 eckey_alloc_wrap,
kevman 0:38ceb79fef03 312 eckey_free_wrap,
kevman 0:38ceb79fef03 313 eckey_debug,
kevman 0:38ceb79fef03 314 };
kevman 0:38ceb79fef03 315
kevman 0:38ceb79fef03 316 /*
kevman 0:38ceb79fef03 317 * EC key restricted to ECDH
kevman 0:38ceb79fef03 318 */
kevman 0:38ceb79fef03 319 static int eckeydh_can_do( mbedtls_pk_type_t type )
kevman 0:38ceb79fef03 320 {
kevman 0:38ceb79fef03 321 return( type == MBEDTLS_PK_ECKEY ||
kevman 0:38ceb79fef03 322 type == MBEDTLS_PK_ECKEY_DH );
kevman 0:38ceb79fef03 323 }
kevman 0:38ceb79fef03 324
kevman 0:38ceb79fef03 325 const mbedtls_pk_info_t mbedtls_eckeydh_info = {
kevman 0:38ceb79fef03 326 MBEDTLS_PK_ECKEY_DH,
kevman 0:38ceb79fef03 327 "EC_DH",
kevman 0:38ceb79fef03 328 eckey_get_bitlen, /* Same underlying key structure */
kevman 0:38ceb79fef03 329 eckeydh_can_do,
kevman 0:38ceb79fef03 330 NULL,
kevman 0:38ceb79fef03 331 NULL,
kevman 0:38ceb79fef03 332 NULL,
kevman 0:38ceb79fef03 333 NULL,
kevman 0:38ceb79fef03 334 eckey_check_pair,
kevman 0:38ceb79fef03 335 eckey_alloc_wrap, /* Same underlying key structure */
kevman 0:38ceb79fef03 336 eckey_free_wrap, /* Same underlying key structure */
kevman 0:38ceb79fef03 337 eckey_debug, /* Same underlying key structure */
kevman 0:38ceb79fef03 338 };
kevman 0:38ceb79fef03 339 #endif /* MBEDTLS_ECP_C */
kevman 0:38ceb79fef03 340
kevman 0:38ceb79fef03 341 #if defined(MBEDTLS_ECDSA_C)
kevman 0:38ceb79fef03 342 static int ecdsa_can_do( mbedtls_pk_type_t type )
kevman 0:38ceb79fef03 343 {
kevman 0:38ceb79fef03 344 return( type == MBEDTLS_PK_ECDSA );
kevman 0:38ceb79fef03 345 }
kevman 0:38ceb79fef03 346
kevman 0:38ceb79fef03 347 static int ecdsa_verify_wrap( void *ctx, mbedtls_md_type_t md_alg,
kevman 0:38ceb79fef03 348 const unsigned char *hash, size_t hash_len,
kevman 0:38ceb79fef03 349 const unsigned char *sig, size_t sig_len )
kevman 0:38ceb79fef03 350 {
kevman 0:38ceb79fef03 351 int ret;
kevman 0:38ceb79fef03 352 ((void) md_alg);
kevman 0:38ceb79fef03 353
kevman 0:38ceb79fef03 354 ret = mbedtls_ecdsa_read_signature( (mbedtls_ecdsa_context *) ctx,
kevman 0:38ceb79fef03 355 hash, hash_len, sig, sig_len );
kevman 0:38ceb79fef03 356
kevman 0:38ceb79fef03 357 if( ret == MBEDTLS_ERR_ECP_SIG_LEN_MISMATCH )
kevman 0:38ceb79fef03 358 return( MBEDTLS_ERR_PK_SIG_LEN_MISMATCH );
kevman 0:38ceb79fef03 359
kevman 0:38ceb79fef03 360 return( ret );
kevman 0:38ceb79fef03 361 }
kevman 0:38ceb79fef03 362
kevman 0:38ceb79fef03 363 static int ecdsa_sign_wrap( void *ctx, mbedtls_md_type_t md_alg,
kevman 0:38ceb79fef03 364 const unsigned char *hash, size_t hash_len,
kevman 0:38ceb79fef03 365 unsigned char *sig, size_t *sig_len,
kevman 0:38ceb79fef03 366 int (*f_rng)(void *, unsigned char *, size_t), void *p_rng )
kevman 0:38ceb79fef03 367 {
kevman 0:38ceb79fef03 368 return( mbedtls_ecdsa_write_signature( (mbedtls_ecdsa_context *) ctx,
kevman 0:38ceb79fef03 369 md_alg, hash, hash_len, sig, sig_len, f_rng, p_rng ) );
kevman 0:38ceb79fef03 370 }
kevman 0:38ceb79fef03 371
kevman 0:38ceb79fef03 372 static void *ecdsa_alloc_wrap( void )
kevman 0:38ceb79fef03 373 {
kevman 0:38ceb79fef03 374 void *ctx = mbedtls_calloc( 1, sizeof( mbedtls_ecdsa_context ) );
kevman 0:38ceb79fef03 375
kevman 0:38ceb79fef03 376 if( ctx != NULL )
kevman 0:38ceb79fef03 377 mbedtls_ecdsa_init( (mbedtls_ecdsa_context *) ctx );
kevman 0:38ceb79fef03 378
kevman 0:38ceb79fef03 379 return( ctx );
kevman 0:38ceb79fef03 380 }
kevman 0:38ceb79fef03 381
kevman 0:38ceb79fef03 382 static void ecdsa_free_wrap( void *ctx )
kevman 0:38ceb79fef03 383 {
kevman 0:38ceb79fef03 384 mbedtls_ecdsa_free( (mbedtls_ecdsa_context *) ctx );
kevman 0:38ceb79fef03 385 mbedtls_free( ctx );
kevman 0:38ceb79fef03 386 }
kevman 0:38ceb79fef03 387
kevman 0:38ceb79fef03 388 const mbedtls_pk_info_t mbedtls_ecdsa_info = {
kevman 0:38ceb79fef03 389 MBEDTLS_PK_ECDSA,
kevman 0:38ceb79fef03 390 "ECDSA",
kevman 0:38ceb79fef03 391 eckey_get_bitlen, /* Compatible key structures */
kevman 0:38ceb79fef03 392 ecdsa_can_do,
kevman 0:38ceb79fef03 393 ecdsa_verify_wrap,
kevman 0:38ceb79fef03 394 ecdsa_sign_wrap,
kevman 0:38ceb79fef03 395 NULL,
kevman 0:38ceb79fef03 396 NULL,
kevman 0:38ceb79fef03 397 eckey_check_pair, /* Compatible key structures */
kevman 0:38ceb79fef03 398 ecdsa_alloc_wrap,
kevman 0:38ceb79fef03 399 ecdsa_free_wrap,
kevman 0:38ceb79fef03 400 eckey_debug, /* Compatible key structures */
kevman 0:38ceb79fef03 401 };
kevman 0:38ceb79fef03 402 #endif /* MBEDTLS_ECDSA_C */
kevman 0:38ceb79fef03 403
kevman 0:38ceb79fef03 404 #if defined(MBEDTLS_PK_RSA_ALT_SUPPORT)
kevman 0:38ceb79fef03 405 /*
kevman 0:38ceb79fef03 406 * Support for alternative RSA-private implementations
kevman 0:38ceb79fef03 407 */
kevman 0:38ceb79fef03 408
kevman 0:38ceb79fef03 409 static int rsa_alt_can_do( mbedtls_pk_type_t type )
kevman 0:38ceb79fef03 410 {
kevman 0:38ceb79fef03 411 return( type == MBEDTLS_PK_RSA );
kevman 0:38ceb79fef03 412 }
kevman 0:38ceb79fef03 413
kevman 0:38ceb79fef03 414 static size_t rsa_alt_get_bitlen( const void *ctx )
kevman 0:38ceb79fef03 415 {
kevman 0:38ceb79fef03 416 const mbedtls_rsa_alt_context *rsa_alt = (const mbedtls_rsa_alt_context *) ctx;
kevman 0:38ceb79fef03 417
kevman 0:38ceb79fef03 418 return( 8 * rsa_alt->key_len_func( rsa_alt->key ) );
kevman 0:38ceb79fef03 419 }
kevman 0:38ceb79fef03 420
kevman 0:38ceb79fef03 421 static int rsa_alt_sign_wrap( void *ctx, mbedtls_md_type_t md_alg,
kevman 0:38ceb79fef03 422 const unsigned char *hash, size_t hash_len,
kevman 0:38ceb79fef03 423 unsigned char *sig, size_t *sig_len,
kevman 0:38ceb79fef03 424 int (*f_rng)(void *, unsigned char *, size_t), void *p_rng )
kevman 0:38ceb79fef03 425 {
kevman 0:38ceb79fef03 426 mbedtls_rsa_alt_context *rsa_alt = (mbedtls_rsa_alt_context *) ctx;
kevman 0:38ceb79fef03 427
kevman 0:38ceb79fef03 428 #if SIZE_MAX > UINT_MAX
kevman 0:38ceb79fef03 429 if( UINT_MAX < hash_len )
kevman 0:38ceb79fef03 430 return( MBEDTLS_ERR_PK_BAD_INPUT_DATA );
kevman 0:38ceb79fef03 431 #endif /* SIZE_MAX > UINT_MAX */
kevman 0:38ceb79fef03 432
kevman 0:38ceb79fef03 433 *sig_len = rsa_alt->key_len_func( rsa_alt->key );
kevman 0:38ceb79fef03 434
kevman 0:38ceb79fef03 435 return( rsa_alt->sign_func( rsa_alt->key, f_rng, p_rng, MBEDTLS_RSA_PRIVATE,
kevman 0:38ceb79fef03 436 md_alg, (unsigned int) hash_len, hash, sig ) );
kevman 0:38ceb79fef03 437 }
kevman 0:38ceb79fef03 438
kevman 0:38ceb79fef03 439 static int rsa_alt_decrypt_wrap( void *ctx,
kevman 0:38ceb79fef03 440 const unsigned char *input, size_t ilen,
kevman 0:38ceb79fef03 441 unsigned char *output, size_t *olen, size_t osize,
kevman 0:38ceb79fef03 442 int (*f_rng)(void *, unsigned char *, size_t), void *p_rng )
kevman 0:38ceb79fef03 443 {
kevman 0:38ceb79fef03 444 mbedtls_rsa_alt_context *rsa_alt = (mbedtls_rsa_alt_context *) ctx;
kevman 0:38ceb79fef03 445
kevman 0:38ceb79fef03 446 ((void) f_rng);
kevman 0:38ceb79fef03 447 ((void) p_rng);
kevman 0:38ceb79fef03 448
kevman 0:38ceb79fef03 449 if( ilen != rsa_alt->key_len_func( rsa_alt->key ) )
kevman 0:38ceb79fef03 450 return( MBEDTLS_ERR_RSA_BAD_INPUT_DATA );
kevman 0:38ceb79fef03 451
kevman 0:38ceb79fef03 452 return( rsa_alt->decrypt_func( rsa_alt->key,
kevman 0:38ceb79fef03 453 MBEDTLS_RSA_PRIVATE, olen, input, output, osize ) );
kevman 0:38ceb79fef03 454 }
kevman 0:38ceb79fef03 455
kevman 0:38ceb79fef03 456 #if defined(MBEDTLS_RSA_C)
kevman 0:38ceb79fef03 457 static int rsa_alt_check_pair( const void *pub, const void *prv )
kevman 0:38ceb79fef03 458 {
kevman 0:38ceb79fef03 459 unsigned char sig[MBEDTLS_MPI_MAX_SIZE];
kevman 0:38ceb79fef03 460 unsigned char hash[32];
kevman 0:38ceb79fef03 461 size_t sig_len = 0;
kevman 0:38ceb79fef03 462 int ret;
kevman 0:38ceb79fef03 463
kevman 0:38ceb79fef03 464 if( rsa_alt_get_bitlen( prv ) != rsa_get_bitlen( pub ) )
kevman 0:38ceb79fef03 465 return( MBEDTLS_ERR_RSA_KEY_CHECK_FAILED );
kevman 0:38ceb79fef03 466
kevman 0:38ceb79fef03 467 memset( hash, 0x2a, sizeof( hash ) );
kevman 0:38ceb79fef03 468
kevman 0:38ceb79fef03 469 if( ( ret = rsa_alt_sign_wrap( (void *) prv, MBEDTLS_MD_NONE,
kevman 0:38ceb79fef03 470 hash, sizeof( hash ),
kevman 0:38ceb79fef03 471 sig, &sig_len, NULL, NULL ) ) != 0 )
kevman 0:38ceb79fef03 472 {
kevman 0:38ceb79fef03 473 return( ret );
kevman 0:38ceb79fef03 474 }
kevman 0:38ceb79fef03 475
kevman 0:38ceb79fef03 476 if( rsa_verify_wrap( (void *) pub, MBEDTLS_MD_NONE,
kevman 0:38ceb79fef03 477 hash, sizeof( hash ), sig, sig_len ) != 0 )
kevman 0:38ceb79fef03 478 {
kevman 0:38ceb79fef03 479 return( MBEDTLS_ERR_RSA_KEY_CHECK_FAILED );
kevman 0:38ceb79fef03 480 }
kevman 0:38ceb79fef03 481
kevman 0:38ceb79fef03 482 return( 0 );
kevman 0:38ceb79fef03 483 }
kevman 0:38ceb79fef03 484 #endif /* MBEDTLS_RSA_C */
kevman 0:38ceb79fef03 485
kevman 0:38ceb79fef03 486 static void *rsa_alt_alloc_wrap( void )
kevman 0:38ceb79fef03 487 {
kevman 0:38ceb79fef03 488 void *ctx = mbedtls_calloc( 1, sizeof( mbedtls_rsa_alt_context ) );
kevman 0:38ceb79fef03 489
kevman 0:38ceb79fef03 490 if( ctx != NULL )
kevman 0:38ceb79fef03 491 memset( ctx, 0, sizeof( mbedtls_rsa_alt_context ) );
kevman 0:38ceb79fef03 492
kevman 0:38ceb79fef03 493 return( ctx );
kevman 0:38ceb79fef03 494 }
kevman 0:38ceb79fef03 495
kevman 0:38ceb79fef03 496 static void rsa_alt_free_wrap( void *ctx )
kevman 0:38ceb79fef03 497 {
kevman 0:38ceb79fef03 498 mbedtls_platform_zeroize( ctx, sizeof( mbedtls_rsa_alt_context ) );
kevman 0:38ceb79fef03 499 mbedtls_free( ctx );
kevman 0:38ceb79fef03 500 }
kevman 0:38ceb79fef03 501
kevman 0:38ceb79fef03 502 const mbedtls_pk_info_t mbedtls_rsa_alt_info = {
kevman 0:38ceb79fef03 503 MBEDTLS_PK_RSA_ALT,
kevman 0:38ceb79fef03 504 "RSA-alt",
kevman 0:38ceb79fef03 505 rsa_alt_get_bitlen,
kevman 0:38ceb79fef03 506 rsa_alt_can_do,
kevman 0:38ceb79fef03 507 NULL,
kevman 0:38ceb79fef03 508 rsa_alt_sign_wrap,
kevman 0:38ceb79fef03 509 rsa_alt_decrypt_wrap,
kevman 0:38ceb79fef03 510 NULL,
kevman 0:38ceb79fef03 511 #if defined(MBEDTLS_RSA_C)
kevman 0:38ceb79fef03 512 rsa_alt_check_pair,
kevman 0:38ceb79fef03 513 #else
kevman 0:38ceb79fef03 514 NULL,
kevman 0:38ceb79fef03 515 #endif
kevman 0:38ceb79fef03 516 rsa_alt_alloc_wrap,
kevman 0:38ceb79fef03 517 rsa_alt_free_wrap,
kevman 0:38ceb79fef03 518 NULL,
kevman 0:38ceb79fef03 519 };
kevman 0:38ceb79fef03 520
kevman 0:38ceb79fef03 521 #endif /* MBEDTLS_PK_RSA_ALT_SUPPORT */
kevman 0:38ceb79fef03 522
kevman 0:38ceb79fef03 523 #endif /* MBEDTLS_PK_C */