| OLD | NEW |
| (Empty) |
| 1 /* p12_key.c */ | |
| 2 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL | |
| 3 * project 1999. | |
| 4 */ | |
| 5 /* ==================================================================== | |
| 6 * Copyright (c) 1999 The OpenSSL Project. All rights reserved. | |
| 7 * | |
| 8 * Redistribution and use in source and binary forms, with or without | |
| 9 * modification, are permitted provided that the following conditions | |
| 10 * are met: | |
| 11 * | |
| 12 * 1. Redistributions of source code must retain the above copyright | |
| 13 * notice, this list of conditions and the following disclaimer. | |
| 14 * | |
| 15 * 2. Redistributions in binary form must reproduce the above copyright | |
| 16 * notice, this list of conditions and the following disclaimer in | |
| 17 * the documentation and/or other materials provided with the | |
| 18 * distribution. | |
| 19 * | |
| 20 * 3. All advertising materials mentioning features or use of this | |
| 21 * software must display the following acknowledgment: | |
| 22 * "This product includes software developed by the OpenSSL Project | |
| 23 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)" | |
| 24 * | |
| 25 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | |
| 26 * endorse or promote products derived from this software without | |
| 27 * prior written permission. For written permission, please contact | |
| 28 * licensing@OpenSSL.org. | |
| 29 * | |
| 30 * 5. Products derived from this software may not be called "OpenSSL" | |
| 31 * nor may "OpenSSL" appear in their names without prior written | |
| 32 * permission of the OpenSSL Project. | |
| 33 * | |
| 34 * 6. Redistributions of any form whatsoever must retain the following | |
| 35 * acknowledgment: | |
| 36 * "This product includes software developed by the OpenSSL Project | |
| 37 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)" | |
| 38 * | |
| 39 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | |
| 40 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
| 41 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | |
| 42 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | |
| 43 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | |
| 44 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | |
| 45 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | |
| 46 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
| 47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | |
| 48 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | |
| 49 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | |
| 50 * OF THE POSSIBILITY OF SUCH DAMAGE. | |
| 51 * ==================================================================== | |
| 52 * | |
| 53 * This product includes cryptographic software written by Eric Young | |
| 54 * (eay@cryptsoft.com). This product includes software written by Tim | |
| 55 * Hudson (tjh@cryptsoft.com). | |
| 56 * | |
| 57 */ | |
| 58 | |
| 59 #include <stdio.h> | |
| 60 #include "cryptlib.h" | |
| 61 #include <openssl/pkcs12.h> | |
| 62 #include <openssl/bn.h> | |
| 63 | |
| 64 /* Uncomment out this line to get debugging info about key generation */ | |
| 65 /*#define DEBUG_KEYGEN*/ | |
| 66 #ifdef DEBUG_KEYGEN | |
| 67 #include <openssl/bio.h> | |
| 68 extern BIO *bio_err; | |
| 69 void h__dump (unsigned char *p, int len); | |
| 70 #endif | |
| 71 | |
| 72 /* PKCS12 compatible key/IV generation */ | |
| 73 #ifndef min | |
| 74 #define min(a,b) ((a) < (b) ? (a) : (b)) | |
| 75 #endif | |
| 76 | |
| 77 int PKCS12_key_gen_asc(const char *pass, int passlen, unsigned char *salt, | |
| 78 int saltlen, int id, int iter, int n, unsigned char *out, | |
| 79 const EVP_MD *md_type) | |
| 80 { | |
| 81 int ret; | |
| 82 unsigned char *unipass; | |
| 83 int uniplen; | |
| 84 | |
| 85 if(!pass) { | |
| 86 unipass = NULL; | |
| 87 uniplen = 0; | |
| 88 } else if (!OPENSSL_asc2uni(pass, passlen, &unipass, &uniplen)) { | |
| 89 PKCS12err(PKCS12_F_PKCS12_KEY_GEN_ASC,ERR_R_MALLOC_FAILURE); | |
| 90 return 0; | |
| 91 } | |
| 92 ret = PKCS12_key_gen_uni(unipass, uniplen, salt, saltlen, | |
| 93 id, iter, n, out, md_type); | |
| 94 if (ret <= 0) | |
| 95 return 0; | |
| 96 if(unipass) { | |
| 97 OPENSSL_cleanse(unipass, uniplen); /* Clear password from m
emory */ | |
| 98 OPENSSL_free(unipass); | |
| 99 } | |
| 100 return ret; | |
| 101 } | |
| 102 | |
| 103 int PKCS12_key_gen_uni(unsigned char *pass, int passlen, unsigned char *salt, | |
| 104 int saltlen, int id, int iter, int n, unsigned char *out, | |
| 105 const EVP_MD *md_type) | |
| 106 { | |
| 107 unsigned char *B, *D, *I, *p, *Ai; | |
| 108 int Slen, Plen, Ilen, Ijlen; | |
| 109 int i, j, u, v; | |
| 110 int ret = 0; | |
| 111 BIGNUM *Ij, *Bpl1; /* These hold Ij and B + 1 */ | |
| 112 EVP_MD_CTX ctx; | |
| 113 #ifdef DEBUG_KEYGEN | |
| 114 unsigned char *tmpout = out; | |
| 115 int tmpn = n; | |
| 116 #endif | |
| 117 | |
| 118 #if 0 | |
| 119 if (!pass) { | |
| 120 PKCS12err(PKCS12_F_PKCS12_KEY_GEN_UNI,ERR_R_PASSED_NULL_PARAMETE
R); | |
| 121 return 0; | |
| 122 } | |
| 123 #endif | |
| 124 | |
| 125 EVP_MD_CTX_init(&ctx); | |
| 126 #ifdef DEBUG_KEYGEN | |
| 127 fprintf(stderr, "KEYGEN DEBUG\n"); | |
| 128 fprintf(stderr, "ID %d, ITER %d\n", id, iter); | |
| 129 fprintf(stderr, "Password (length %d):\n", passlen); | |
| 130 h__dump(pass, passlen); | |
| 131 fprintf(stderr, "Salt (length %d):\n", saltlen); | |
| 132 h__dump(salt, saltlen); | |
| 133 #endif | |
| 134 v = EVP_MD_block_size (md_type); | |
| 135 u = EVP_MD_size (md_type); | |
| 136 if (u < 0) | |
| 137 return 0; | |
| 138 D = OPENSSL_malloc (v); | |
| 139 Ai = OPENSSL_malloc (u); | |
| 140 B = OPENSSL_malloc (v + 1); | |
| 141 Slen = v * ((saltlen+v-1)/v); | |
| 142 if(passlen) Plen = v * ((passlen+v-1)/v); | |
| 143 else Plen = 0; | |
| 144 Ilen = Slen + Plen; | |
| 145 I = OPENSSL_malloc (Ilen); | |
| 146 Ij = BN_new(); | |
| 147 Bpl1 = BN_new(); | |
| 148 if (!D || !Ai || !B || !I || !Ij || !Bpl1) | |
| 149 goto err; | |
| 150 for (i = 0; i < v; i++) D[i] = id; | |
| 151 p = I; | |
| 152 for (i = 0; i < Slen; i++) *p++ = salt[i % saltlen]; | |
| 153 for (i = 0; i < Plen; i++) *p++ = pass[i % passlen]; | |
| 154 for (;;) { | |
| 155 if (!EVP_DigestInit_ex(&ctx, md_type, NULL) | |
| 156 || !EVP_DigestUpdate(&ctx, D, v) | |
| 157 || !EVP_DigestUpdate(&ctx, I, Ilen) | |
| 158 || !EVP_DigestFinal_ex(&ctx, Ai, NULL)) | |
| 159 goto err; | |
| 160 for (j = 1; j < iter; j++) { | |
| 161 if (!EVP_DigestInit_ex(&ctx, md_type, NULL) | |
| 162 || !EVP_DigestUpdate(&ctx, Ai, u) | |
| 163 || !EVP_DigestFinal_ex(&ctx, Ai, NULL)) | |
| 164 goto err; | |
| 165 } | |
| 166 memcpy (out, Ai, min (n, u)); | |
| 167 if (u >= n) { | |
| 168 #ifdef DEBUG_KEYGEN | |
| 169 fprintf(stderr, "Output KEY (length %d)\n", tmpn); | |
| 170 h__dump(tmpout, tmpn); | |
| 171 #endif | |
| 172 ret = 1; | |
| 173 goto end; | |
| 174 } | |
| 175 n -= u; | |
| 176 out += u; | |
| 177 for (j = 0; j < v; j++) B[j] = Ai[j % u]; | |
| 178 /* Work out B + 1 first then can use B as tmp space */ | |
| 179 if (!BN_bin2bn (B, v, Bpl1)) | |
| 180 goto err; | |
| 181 if (!BN_add_word (Bpl1, 1)) | |
| 182 goto err; | |
| 183 for (j = 0; j < Ilen ; j+=v) { | |
| 184 if (!BN_bin2bn(I + j, v, Ij)) | |
| 185 goto err; | |
| 186 if (!BN_add(Ij, Ij, Bpl1)) | |
| 187 goto err; | |
| 188 if (!BN_bn2bin(Ij, B)) | |
| 189 goto err; | |
| 190 Ijlen = BN_num_bytes (Ij); | |
| 191 /* If more than 2^(v*8) - 1 cut off MSB */ | |
| 192 if (Ijlen > v) { | |
| 193 if (!BN_bn2bin (Ij, B)) | |
| 194 goto err; | |
| 195 memcpy (I + j, B + 1, v); | |
| 196 #ifndef PKCS12_BROKEN_KEYGEN | |
| 197 /* If less than v bytes pad with zeroes */ | |
| 198 } else if (Ijlen < v) { | |
| 199 memset(I + j, 0, v - Ijlen); | |
| 200 if (!BN_bn2bin(Ij, I + j + v - Ijlen)) | |
| 201 goto err; | |
| 202 #endif | |
| 203 } else if (!BN_bn2bin (Ij, I + j)) | |
| 204 goto err; | |
| 205 } | |
| 206 } | |
| 207 | |
| 208 err: | |
| 209 PKCS12err(PKCS12_F_PKCS12_KEY_GEN_UNI,ERR_R_MALLOC_FAILURE); | |
| 210 | |
| 211 end: | |
| 212 OPENSSL_free (Ai); | |
| 213 OPENSSL_free (B); | |
| 214 OPENSSL_free (D); | |
| 215 OPENSSL_free (I); | |
| 216 BN_free (Ij); | |
| 217 BN_free (Bpl1); | |
| 218 EVP_MD_CTX_cleanup(&ctx); | |
| 219 return ret; | |
| 220 } | |
| 221 #ifdef DEBUG_KEYGEN | |
| 222 void h__dump (unsigned char *p, int len) | |
| 223 { | |
| 224 for (; len --; p++) fprintf(stderr, "%02X", *p); | |
| 225 fprintf(stderr, "\n"); | |
| 226 } | |
| 227 #endif | |
| OLD | NEW |