| OLD | NEW |
| (Empty) |
| 1 /* apps/ec.c */ | |
| 2 /* | |
| 3 * Written by Nils Larsch for the OpenSSL project. | |
| 4 */ | |
| 5 /* ==================================================================== | |
| 6 * Copyright (c) 1998-2005 The OpenSSL Project. All rights reserved. | |
| 7 * | |
| 8 * Redistribution and use in source and binary forms, with or without | |
| 9 * modification, are permitted provided that the following conditions | |
| 10 * are met: | |
| 11 * | |
| 12 * 1. Redistributions of source code must retain the above copyright | |
| 13 * notice, this list of conditions and the following disclaimer. | |
| 14 * | |
| 15 * 2. Redistributions in binary form must reproduce the above copyright | |
| 16 * notice, this list of conditions and the following disclaimer in | |
| 17 * the documentation and/or other materials provided with the | |
| 18 * distribution. | |
| 19 * | |
| 20 * 3. All advertising materials mentioning features or use of this | |
| 21 * software must display the following acknowledgment: | |
| 22 * "This product includes software developed by the OpenSSL Project | |
| 23 * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" | |
| 24 * | |
| 25 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | |
| 26 * endorse or promote products derived from this software without | |
| 27 * prior written permission. For written permission, please contact | |
| 28 * openssl-core@openssl.org. | |
| 29 * | |
| 30 * 5. Products derived from this software may not be called "OpenSSL" | |
| 31 * nor may "OpenSSL" appear in their names without prior written | |
| 32 * permission of the OpenSSL Project. | |
| 33 * | |
| 34 * 6. Redistributions of any form whatsoever must retain the following | |
| 35 * acknowledgment: | |
| 36 * "This product includes software developed by the OpenSSL Project | |
| 37 * for use in the OpenSSL Toolkit (http://www.openssl.org/)" | |
| 38 * | |
| 39 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | |
| 40 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
| 41 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | |
| 42 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | |
| 43 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | |
| 44 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | |
| 45 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | |
| 46 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
| 47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | |
| 48 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | |
| 49 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | |
| 50 * OF THE POSSIBILITY OF SUCH DAMAGE. | |
| 51 * ==================================================================== | |
| 52 * | |
| 53 * This product includes cryptographic software written by Eric Young | |
| 54 * (eay@cryptsoft.com). This product includes software written by Tim | |
| 55 * Hudson (tjh@cryptsoft.com). | |
| 56 * | |
| 57 */ | |
| 58 | |
| 59 #include <openssl/opensslconf.h> | |
| 60 #ifndef OPENSSL_NO_EC | |
| 61 #include <stdio.h> | |
| 62 #include <stdlib.h> | |
| 63 #include <string.h> | |
| 64 #include "apps.h" | |
| 65 #include <openssl/bio.h> | |
| 66 #include <openssl/err.h> | |
| 67 #include <openssl/evp.h> | |
| 68 #include <openssl/pem.h> | |
| 69 | |
| 70 #undef PROG | |
| 71 #define PROG ec_main | |
| 72 | |
| 73 /* -inform arg - input format - default PEM (one of DER, NET or PEM) | |
| 74 * -outform arg - output format - default PEM | |
| 75 * -in arg - input file - default stdin | |
| 76 * -out arg - output file - default stdout | |
| 77 * -des - encrypt output if PEM format with DES in cbc mode | |
| 78 * -text - print a text version | |
| 79 * -param_out - print the elliptic curve parameters | |
| 80 * -conv_form arg - specifies the point encoding form | |
| 81 * -param_enc arg - specifies the parameter encoding | |
| 82 */ | |
| 83 | |
| 84 int MAIN(int, char **); | |
| 85 | |
| 86 int MAIN(int argc, char **argv) | |
| 87 { | |
| 88 int ret = 1; | |
| 89 EC_KEY *eckey = NULL; | |
| 90 const EC_GROUP *group; | |
| 91 int i, badops = 0; | |
| 92 const EVP_CIPHER *enc = NULL; | |
| 93 BIO *in = NULL, *out = NULL; | |
| 94 int informat, outformat, text=0, noout=0; | |
| 95 int pubin = 0, pubout = 0, param_out = 0; | |
| 96 char *infile, *outfile, *prog, *engine; | |
| 97 char *passargin = NULL, *passargout = NULL; | |
| 98 char *passin = NULL, *passout = NULL; | |
| 99 point_conversion_form_t form = POINT_CONVERSION_UNCOMPRESSED; | |
| 100 int new_form = 0; | |
| 101 int asn1_flag = OPENSSL_EC_NAMED_CURVE; | |
| 102 int new_asn1_flag = 0; | |
| 103 | |
| 104 apps_startup(); | |
| 105 | |
| 106 if (bio_err == NULL) | |
| 107 if ((bio_err=BIO_new(BIO_s_file())) != NULL) | |
| 108 BIO_set_fp(bio_err, stderr, BIO_NOCLOSE|BIO_FP_TEXT); | |
| 109 | |
| 110 if (!load_config(bio_err, NULL)) | |
| 111 goto end; | |
| 112 | |
| 113 engine = NULL; | |
| 114 infile = NULL; | |
| 115 outfile = NULL; | |
| 116 informat = FORMAT_PEM; | |
| 117 outformat = FORMAT_PEM; | |
| 118 | |
| 119 prog = argv[0]; | |
| 120 argc--; | |
| 121 argv++; | |
| 122 while (argc >= 1) | |
| 123 { | |
| 124 if (strcmp(*argv,"-inform") == 0) | |
| 125 { | |
| 126 if (--argc < 1) goto bad; | |
| 127 informat=str2fmt(*(++argv)); | |
| 128 } | |
| 129 else if (strcmp(*argv,"-outform") == 0) | |
| 130 { | |
| 131 if (--argc < 1) goto bad; | |
| 132 outformat=str2fmt(*(++argv)); | |
| 133 } | |
| 134 else if (strcmp(*argv,"-in") == 0) | |
| 135 { | |
| 136 if (--argc < 1) goto bad; | |
| 137 infile= *(++argv); | |
| 138 } | |
| 139 else if (strcmp(*argv,"-out") == 0) | |
| 140 { | |
| 141 if (--argc < 1) goto bad; | |
| 142 outfile= *(++argv); | |
| 143 } | |
| 144 else if (strcmp(*argv,"-passin") == 0) | |
| 145 { | |
| 146 if (--argc < 1) goto bad; | |
| 147 passargin= *(++argv); | |
| 148 } | |
| 149 else if (strcmp(*argv,"-passout") == 0) | |
| 150 { | |
| 151 if (--argc < 1) goto bad; | |
| 152 passargout= *(++argv); | |
| 153 } | |
| 154 else if (strcmp(*argv, "-engine") == 0) | |
| 155 { | |
| 156 if (--argc < 1) goto bad; | |
| 157 engine= *(++argv); | |
| 158 } | |
| 159 else if (strcmp(*argv, "-noout") == 0) | |
| 160 noout = 1; | |
| 161 else if (strcmp(*argv, "-text") == 0) | |
| 162 text = 1; | |
| 163 else if (strcmp(*argv, "-conv_form") == 0) | |
| 164 { | |
| 165 if (--argc < 1) | |
| 166 goto bad; | |
| 167 ++argv; | |
| 168 new_form = 1; | |
| 169 if (strcmp(*argv, "compressed") == 0) | |
| 170 form = POINT_CONVERSION_COMPRESSED; | |
| 171 else if (strcmp(*argv, "uncompressed") == 0) | |
| 172 form = POINT_CONVERSION_UNCOMPRESSED; | |
| 173 else if (strcmp(*argv, "hybrid") == 0) | |
| 174 form = POINT_CONVERSION_HYBRID; | |
| 175 else | |
| 176 goto bad; | |
| 177 } | |
| 178 else if (strcmp(*argv, "-param_enc") == 0) | |
| 179 { | |
| 180 if (--argc < 1) | |
| 181 goto bad; | |
| 182 ++argv; | |
| 183 new_asn1_flag = 1; | |
| 184 if (strcmp(*argv, "named_curve") == 0) | |
| 185 asn1_flag = OPENSSL_EC_NAMED_CURVE; | |
| 186 else if (strcmp(*argv, "explicit") == 0) | |
| 187 asn1_flag = 0; | |
| 188 else | |
| 189 goto bad; | |
| 190 } | |
| 191 else if (strcmp(*argv, "-param_out") == 0) | |
| 192 param_out = 1; | |
| 193 else if (strcmp(*argv, "-pubin") == 0) | |
| 194 pubin=1; | |
| 195 else if (strcmp(*argv, "-pubout") == 0) | |
| 196 pubout=1; | |
| 197 else if ((enc=EVP_get_cipherbyname(&(argv[0][1]))) == NULL) | |
| 198 { | |
| 199 BIO_printf(bio_err, "unknown option %s\n", *argv); | |
| 200 badops=1; | |
| 201 break; | |
| 202 } | |
| 203 argc--; | |
| 204 argv++; | |
| 205 } | |
| 206 | |
| 207 if (badops) | |
| 208 { | |
| 209 bad: | |
| 210 BIO_printf(bio_err, "%s [options] <infile >outfile\n", prog); | |
| 211 BIO_printf(bio_err, "where options are\n"); | |
| 212 BIO_printf(bio_err, " -inform arg input format - " | |
| 213 "DER or PEM\n"); | |
| 214 BIO_printf(bio_err, " -outform arg output format - " | |
| 215 "DER or PEM\n"); | |
| 216 BIO_printf(bio_err, " -in arg input file\n"); | |
| 217 BIO_printf(bio_err, " -passin arg input file pass " | |
| 218 "phrase source\n"); | |
| 219 BIO_printf(bio_err, " -out arg output file\n"); | |
| 220 BIO_printf(bio_err, " -passout arg output file pass " | |
| 221 "phrase source\n"); | |
| 222 BIO_printf(bio_err, " -engine e use engine e, " | |
| 223 "possibly a hardware device.\n"); | |
| 224 BIO_printf(bio_err, " -des encrypt PEM output, " | |
| 225 "instead of 'des' every other \n" | |
| 226 " cipher " | |
| 227 "supported by OpenSSL can be used\n"); | |
| 228 BIO_printf(bio_err, " -text print the key\n"); | |
| 229 BIO_printf(bio_err, " -noout don't print key out\n"); | |
| 230 BIO_printf(bio_err, " -param_out print the elliptic " | |
| 231 "curve parameters\n"); | |
| 232 BIO_printf(bio_err, " -conv_form arg specifies the " | |
| 233 "point conversion form \n"); | |
| 234 BIO_printf(bio_err, " possible values:" | |
| 235 " compressed\n"); | |
| 236 BIO_printf(bio_err, " " | |
| 237 " uncompressed (default)\n"); | |
| 238 BIO_printf(bio_err, " " | |
| 239 " hybrid\n"); | |
| 240 BIO_printf(bio_err, " -param_enc arg specifies the way" | |
| 241 " the ec parameters are encoded\n"); | |
| 242 BIO_printf(bio_err, " in the asn1 der " | |
| 243 "encoding\n"); | |
| 244 BIO_printf(bio_err, " possible values:" | |
| 245 " named_curve (default)\n"); | |
| 246 BIO_printf(bio_err," " | |
| 247 "explicit\n"); | |
| 248 goto end; | |
| 249 } | |
| 250 | |
| 251 ERR_load_crypto_strings(); | |
| 252 | |
| 253 #ifndef OPENSSL_NO_ENGINE | |
| 254 setup_engine(bio_err, engine, 0); | |
| 255 #endif | |
| 256 | |
| 257 if(!app_passwd(bio_err, passargin, passargout, &passin, &passout)) | |
| 258 { | |
| 259 BIO_printf(bio_err, "Error getting passwords\n"); | |
| 260 goto end; | |
| 261 } | |
| 262 | |
| 263 in = BIO_new(BIO_s_file()); | |
| 264 out = BIO_new(BIO_s_file()); | |
| 265 if ((in == NULL) || (out == NULL)) | |
| 266 { | |
| 267 ERR_print_errors(bio_err); | |
| 268 goto end; | |
| 269 } | |
| 270 | |
| 271 if (infile == NULL) | |
| 272 BIO_set_fp(in, stdin, BIO_NOCLOSE); | |
| 273 else | |
| 274 { | |
| 275 if (BIO_read_filename(in, infile) <= 0) | |
| 276 { | |
| 277 perror(infile); | |
| 278 goto end; | |
| 279 } | |
| 280 } | |
| 281 | |
| 282 BIO_printf(bio_err, "read EC key\n"); | |
| 283 if (informat == FORMAT_ASN1) | |
| 284 { | |
| 285 if (pubin) | |
| 286 eckey = d2i_EC_PUBKEY_bio(in, NULL); | |
| 287 else | |
| 288 eckey = d2i_ECPrivateKey_bio(in, NULL); | |
| 289 } | |
| 290 else if (informat == FORMAT_PEM) | |
| 291 { | |
| 292 if (pubin) | |
| 293 eckey = PEM_read_bio_EC_PUBKEY(in, NULL, NULL, | |
| 294 NULL); | |
| 295 else | |
| 296 eckey = PEM_read_bio_ECPrivateKey(in, NULL, NULL, | |
| 297 passin); | |
| 298 } | |
| 299 else | |
| 300 { | |
| 301 BIO_printf(bio_err, "bad input format specified for key\n"); | |
| 302 goto end; | |
| 303 } | |
| 304 if (eckey == NULL) | |
| 305 { | |
| 306 BIO_printf(bio_err,"unable to load Key\n"); | |
| 307 ERR_print_errors(bio_err); | |
| 308 goto end; | |
| 309 } | |
| 310 | |
| 311 if (outfile == NULL) | |
| 312 { | |
| 313 BIO_set_fp(out, stdout, BIO_NOCLOSE); | |
| 314 #ifdef OPENSSL_SYS_VMS | |
| 315 { | |
| 316 BIO *tmpbio = BIO_new(BIO_f_linebuffer()); | |
| 317 out = BIO_push(tmpbio, out); | |
| 318 } | |
| 319 #endif | |
| 320 } | |
| 321 else | |
| 322 { | |
| 323 if (BIO_write_filename(out, outfile) <= 0) | |
| 324 { | |
| 325 perror(outfile); | |
| 326 goto end; | |
| 327 } | |
| 328 } | |
| 329 | |
| 330 group = EC_KEY_get0_group(eckey); | |
| 331 | |
| 332 if (new_form) | |
| 333 EC_KEY_set_conv_form(eckey, form); | |
| 334 | |
| 335 if (new_asn1_flag) | |
| 336 EC_KEY_set_asn1_flag(eckey, asn1_flag); | |
| 337 | |
| 338 if (text) | |
| 339 if (!EC_KEY_print(out, eckey, 0)) | |
| 340 { | |
| 341 perror(outfile); | |
| 342 ERR_print_errors(bio_err); | |
| 343 goto end; | |
| 344 } | |
| 345 | |
| 346 if (noout) | |
| 347 { | |
| 348 ret = 0; | |
| 349 goto end; | |
| 350 } | |
| 351 | |
| 352 BIO_printf(bio_err, "writing EC key\n"); | |
| 353 if (outformat == FORMAT_ASN1) | |
| 354 { | |
| 355 if (param_out) | |
| 356 i = i2d_ECPKParameters_bio(out, group); | |
| 357 else if (pubin || pubout) | |
| 358 i = i2d_EC_PUBKEY_bio(out, eckey); | |
| 359 else | |
| 360 i = i2d_ECPrivateKey_bio(out, eckey); | |
| 361 } | |
| 362 else if (outformat == FORMAT_PEM) | |
| 363 { | |
| 364 if (param_out) | |
| 365 i = PEM_write_bio_ECPKParameters(out, group); | |
| 366 else if (pubin || pubout) | |
| 367 i = PEM_write_bio_EC_PUBKEY(out, eckey); | |
| 368 else | |
| 369 i = PEM_write_bio_ECPrivateKey(out, eckey, enc, | |
| 370 NULL, 0, NULL, passout); | |
| 371 } | |
| 372 else | |
| 373 { | |
| 374 BIO_printf(bio_err, "bad output format specified for " | |
| 375 "outfile\n"); | |
| 376 goto end; | |
| 377 } | |
| 378 | |
| 379 if (!i) | |
| 380 { | |
| 381 BIO_printf(bio_err, "unable to write private key\n"); | |
| 382 ERR_print_errors(bio_err); | |
| 383 } | |
| 384 else | |
| 385 ret=0; | |
| 386 end: | |
| 387 if (in) | |
| 388 BIO_free(in); | |
| 389 if (out) | |
| 390 BIO_free_all(out); | |
| 391 if (eckey) | |
| 392 EC_KEY_free(eckey); | |
| 393 if (passin) | |
| 394 OPENSSL_free(passin); | |
| 395 if (passout) | |
| 396 OPENSSL_free(passout); | |
| 397 apps_shutdown(); | |
| 398 OPENSSL_EXIT(ret); | |
| 399 } | |
| 400 #else /* !OPENSSL_NO_EC */ | |
| 401 | |
| 402 # if PEDANTIC | |
| 403 static void *dummy=&dummy; | |
| 404 # endif | |
| 405 | |
| 406 #endif | |
| OLD | NEW |