| Index: mozilla/security/nss/lib/cryptohi/dsautil.c
|
| ===================================================================
|
| --- mozilla/security/nss/lib/cryptohi/dsautil.c (revision 191424)
|
| +++ mozilla/security/nss/lib/cryptohi/dsautil.c (working copy)
|
| @@ -1,267 +0,0 @@
|
| -/* This Source Code Form is subject to the terms of the Mozilla Public
|
| - * License, v. 2.0. If a copy of the MPL was not distributed with this
|
| - * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
| -#include "cryptohi.h"
|
| -#include "secasn1.h"
|
| -#include "secitem.h"
|
| -#include "prerr.h"
|
| -
|
| -#ifndef DSA1_SUBPRIME_LEN
|
| -#define DSA1_SUBPRIME_LEN 20 /* bytes */
|
| -#endif
|
| -
|
| -typedef struct {
|
| - SECItem r;
|
| - SECItem s;
|
| -} DSA_ASN1Signature;
|
| -
|
| -const SEC_ASN1Template DSA_SignatureTemplate[] =
|
| -{
|
| - { SEC_ASN1_SEQUENCE, 0, NULL, sizeof(DSA_ASN1Signature) },
|
| - { SEC_ASN1_INTEGER, offsetof(DSA_ASN1Signature,r) },
|
| - { SEC_ASN1_INTEGER, offsetof(DSA_ASN1Signature,s) },
|
| - { 0, }
|
| -};
|
| -
|
| -/* Input is variable length multi-byte integer, MSB first (big endian).
|
| -** Most signficant bit of first byte is NOT treated as a sign bit.
|
| -** May be one or more leading bytes of zeros.
|
| -** Output is variable length multi-byte integer, MSB first (big endian).
|
| -** Most significant bit of first byte will be zero (positive sign bit)
|
| -** No more than one leading zero byte.
|
| -** Caller supplies dest buffer, and assures that it is long enough,
|
| -** e.g. at least one byte longer that src's buffer.
|
| -*/
|
| -void
|
| -DSAU_ConvertUnsignedToSigned(SECItem *dest, SECItem *src)
|
| -{
|
| - unsigned char *pSrc = src->data;
|
| - unsigned char *pDst = dest->data;
|
| - unsigned int cntSrc = src->len;
|
| -
|
| - /* skip any leading zeros. */
|
| - while (cntSrc && !(*pSrc)) {
|
| - pSrc++;
|
| - cntSrc--;
|
| - }
|
| - if (!cntSrc) {
|
| - *pDst = 0;
|
| - dest->len = 1;
|
| - return;
|
| - }
|
| -
|
| - if (*pSrc & 0x80)
|
| - *pDst++ = 0;
|
| -
|
| - PORT_Memcpy(pDst, pSrc, cntSrc);
|
| - dest->len = (pDst - dest->data) + cntSrc;
|
| -}
|
| -
|
| -/*
|
| -** src is a buffer holding a signed variable length integer.
|
| -** dest is a buffer which will be filled with an unsigned integer,
|
| -** MSB first (big endian) with leading zeros, so that the last byte
|
| -** of src will be the LSB of the integer. The result will be exactly
|
| -** the length specified by the caller in dest->len.
|
| -** src can be shorter than dest. src can be longer than dst, but only
|
| -** if the extra leading bytes are zeros.
|
| -*/
|
| -SECStatus
|
| -DSAU_ConvertSignedToFixedUnsigned(SECItem *dest, SECItem *src)
|
| -{
|
| - unsigned char *pSrc = src->data;
|
| - unsigned char *pDst = dest->data;
|
| - unsigned int cntSrc = src->len;
|
| - unsigned int cntDst = dest->len;
|
| - int zCount = cntDst - cntSrc;
|
| -
|
| - if (zCount > 0) {
|
| - PORT_Memset(pDst, 0, zCount);
|
| - PORT_Memcpy(pDst + zCount, pSrc, cntSrc);
|
| - return SECSuccess;
|
| - }
|
| - if (zCount <= 0) {
|
| - /* Source is longer than destination. Check for leading zeros. */
|
| - while (zCount++ < 0) {
|
| - if (*pSrc++ != 0)
|
| - goto loser;
|
| - }
|
| - }
|
| - PORT_Memcpy(pDst, pSrc, cntDst);
|
| - return SECSuccess;
|
| -
|
| -loser:
|
| - PORT_SetError( PR_INVALID_ARGUMENT_ERROR );
|
| - return SECFailure;
|
| -}
|
| -
|
| -/* src is a "raw" ECDSA or DSA signature, the first half contains r
|
| - * and the second half contains s. dest is the DER encoded signature.
|
| -*/
|
| -static SECStatus
|
| -common_EncodeDerSig(SECItem *dest, SECItem *src)
|
| -{
|
| - SECItem * item;
|
| - SECItem srcItem;
|
| - DSA_ASN1Signature sig;
|
| - unsigned char *signedR;
|
| - unsigned char *signedS;
|
| - unsigned int len;
|
| -
|
| - /* Allocate memory with room for an extra byte that
|
| - * may be required if the top bit in the first byte
|
| - * is already set.
|
| - */
|
| - len = src->len/2;
|
| - signedR = (unsigned char *) PORT_Alloc(len + 1);
|
| - if (!signedR) return SECFailure;
|
| - signedS = (unsigned char *) PORT_ZAlloc(len + 1);
|
| - if (!signedS) {
|
| - if (signedR) PORT_Free(signedR);
|
| - return SECFailure;
|
| - }
|
| -
|
| - PORT_Memset(&sig, 0, sizeof(sig));
|
| -
|
| - /* Must convert r and s from "unsigned" integers to "signed" integers.
|
| - ** If the high order bit of the first byte (MSB) is 1, then must
|
| - ** prepend with leading zero.
|
| - ** Must remove all but one leading zero byte from numbers.
|
| - */
|
| - sig.r.type = siUnsignedInteger;
|
| - sig.r.data = signedR;
|
| - sig.r.len = sizeof signedR;
|
| - sig.s.type = siUnsignedInteger;
|
| - sig.s.data = signedS;
|
| - sig.s.len = sizeof signedR;
|
| -
|
| - srcItem.data = src->data;
|
| - srcItem.len = len;
|
| -
|
| - DSAU_ConvertUnsignedToSigned(&sig.r, &srcItem);
|
| - srcItem.data += len;
|
| - DSAU_ConvertUnsignedToSigned(&sig.s, &srcItem);
|
| -
|
| - item = SEC_ASN1EncodeItem(NULL, dest, &sig, DSA_SignatureTemplate);
|
| - if (signedR) PORT_Free(signedR);
|
| - if (signedS) PORT_Free(signedS);
|
| - if (item == NULL)
|
| - return SECFailure;
|
| -
|
| - /* XXX leak item? */
|
| - return SECSuccess;
|
| -}
|
| -
|
| -/* src is a DER-encoded ECDSA or DSA signature.
|
| -** Returns a newly-allocated SECItem structure, pointing at a newly allocated
|
| -** buffer containing the "raw" signature, which is len bytes of r,
|
| -** followed by len bytes of s. For DSA, len is the length of q.
|
| -** For ECDSA, len depends on the key size used to create the signature.
|
| -*/
|
| -static SECItem *
|
| -common_DecodeDerSig(const SECItem *item, unsigned int len)
|
| -{
|
| - SECItem * result = NULL;
|
| - SECStatus status;
|
| - DSA_ASN1Signature sig;
|
| - SECItem dst;
|
| -
|
| - PORT_Memset(&sig, 0, sizeof(sig));
|
| -
|
| - result = PORT_ZNew(SECItem);
|
| - if (result == NULL)
|
| - goto loser;
|
| -
|
| - result->len = 2 * len;
|
| - result->data = (unsigned char*)PORT_Alloc(2 * len);
|
| - if (result->data == NULL)
|
| - goto loser;
|
| -
|
| - sig.r.type = siUnsignedInteger;
|
| - sig.s.type = siUnsignedInteger;
|
| - status = SEC_ASN1DecodeItem(NULL, &sig, DSA_SignatureTemplate, item);
|
| - if (status != SECSuccess)
|
| - goto loser;
|
| -
|
| - /* Convert sig.r and sig.s from variable length signed integers to
|
| - ** fixed length unsigned integers.
|
| - */
|
| - dst.data = result->data;
|
| - dst.len = len;
|
| - status = DSAU_ConvertSignedToFixedUnsigned(&dst, &sig.r);
|
| - if (status != SECSuccess)
|
| - goto loser;
|
| -
|
| - dst.data += len;
|
| - status = DSAU_ConvertSignedToFixedUnsigned(&dst, &sig.s);
|
| - if (status != SECSuccess)
|
| - goto loser;
|
| -
|
| -done:
|
| - if (sig.r.data != NULL)
|
| - PORT_Free(sig.r.data);
|
| - if (sig.s.data != NULL)
|
| - PORT_Free(sig.s.data);
|
| -
|
| - return result;
|
| -
|
| -loser:
|
| - if (result != NULL) {
|
| - SECITEM_FreeItem(result, PR_TRUE);
|
| - result = NULL;
|
| - }
|
| - goto done;
|
| -}
|
| -
|
| -/* src is a "raw" DSA1 signature, 20 bytes of r followed by 20 bytes of s.
|
| -** dest is the signature DER encoded. ?
|
| -*/
|
| -SECStatus
|
| -DSAU_EncodeDerSig(SECItem *dest, SECItem *src)
|
| -{
|
| - PORT_Assert(src->len == 2 * DSA1_SUBPRIME_LEN);
|
| - if (src->len != 2 * DSA1_SUBPRIME_LEN) {
|
| - PORT_SetError( PR_INVALID_ARGUMENT_ERROR );
|
| - return SECFailure;
|
| - }
|
| -
|
| - return common_EncodeDerSig(dest, src);
|
| -}
|
| -
|
| -/* src is a "raw" DSA signature of length len (len/2 bytes of r followed
|
| -** by len/2 bytes of s). dest is the signature DER encoded.
|
| -*/
|
| -SECStatus
|
| -DSAU_EncodeDerSigWithLen(SECItem *dest, SECItem *src, unsigned int len)
|
| -{
|
| -
|
| - PORT_Assert((src->len == len) && (len % 2 == 0));
|
| - if ((src->len != len) || (src->len % 2 != 0)) {
|
| - PORT_SetError( PR_INVALID_ARGUMENT_ERROR );
|
| - return SECFailure;
|
| - }
|
| -
|
| - return common_EncodeDerSig(dest, src);
|
| -}
|
| -
|
| -/* src is a DER-encoded DSA signature.
|
| -** Returns a newly-allocated SECItem structure, pointing at a newly allocated
|
| -** buffer containing the "raw" DSA1 signature, which is 20 bytes of r,
|
| -** followed by 20 bytes of s.
|
| -*/
|
| -SECItem *
|
| -DSAU_DecodeDerSig(const SECItem *item)
|
| -{
|
| - return common_DecodeDerSig(item, DSA1_SUBPRIME_LEN);
|
| -}
|
| -
|
| -/* src is a DER-encoded ECDSA signature.
|
| -** Returns a newly-allocated SECItem structure, pointing at a newly allocated
|
| -** buffer containing the "raw" ECDSA signature of length len containing
|
| -** r followed by s (both padded to take up exactly len/2 bytes).
|
| -*/
|
| -SECItem *
|
| -DSAU_DecodeDerSigToLen(const SECItem *item, unsigned int len)
|
| -{
|
| - return common_DecodeDerSig(item, len/2);
|
| -}
|
|
|