| OLD | NEW |
| (Empty) |
| 1 /* This Source Code Form is subject to the terms of the Mozilla Public | |
| 2 * License, v. 2.0. If a copy of the MPL was not distributed with this | |
| 3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ | |
| 4 | |
| 5 #ifndef NSS_DISABLE_ECC | |
| 6 | |
| 7 #ifdef FREEBL_NO_DEPEND | |
| 8 #include "stubs.h" | |
| 9 #endif | |
| 10 | |
| 11 #include "blapi.h" | |
| 12 #include "secoid.h" | |
| 13 #include "secitem.h" | |
| 14 #include "secerr.h" | |
| 15 #include "ec.h" | |
| 16 #include "ecl-curve.h" | |
| 17 | |
| 18 #define CHECK_OK(func) if (func == NULL) goto cleanup | |
| 19 #define CHECK_SEC_OK(func) if (SECSuccess != (rv = func)) goto cleanup | |
| 20 | |
| 21 /* | |
| 22 * Initializes a SECItem from a hexadecimal string | |
| 23 * | |
| 24 * Warning: This function ignores leading 00's, so any leading 00's | |
| 25 * in the hexadecimal string must be optional. | |
| 26 */ | |
| 27 static SECItem * | |
| 28 hexString2SECItem(PLArenaPool *arena, SECItem *item, const char *str) | |
| 29 { | |
| 30 int i = 0; | |
| 31 int byteval = 0; | |
| 32 int tmp = PORT_Strlen(str); | |
| 33 | |
| 34 if ((tmp % 2) != 0) return NULL; | |
| 35 | |
| 36 /* skip leading 00's unless the hex string is "00" */ | |
| 37 while ((tmp > 2) && (str[0] == '0') && (str[1] == '0')) { | |
| 38 str += 2; | |
| 39 tmp -= 2; | |
| 40 } | |
| 41 | |
| 42 item->data = (unsigned char *) PORT_ArenaAlloc(arena, tmp/2); | |
| 43 if (item->data == NULL) return NULL; | |
| 44 item->len = tmp/2; | |
| 45 | |
| 46 while (str[i]) { | |
| 47 if ((str[i] >= '0') && (str[i] <= '9')) | |
| 48 tmp = str[i] - '0'; | |
| 49 else if ((str[i] >= 'a') && (str[i] <= 'f')) | |
| 50 tmp = str[i] - 'a' + 10; | |
| 51 else if ((str[i] >= 'A') && (str[i] <= 'F')) | |
| 52 tmp = str[i] - 'A' + 10; | |
| 53 else | |
| 54 return NULL; | |
| 55 | |
| 56 byteval = byteval * 16 + tmp; | |
| 57 if ((i % 2) != 0) { | |
| 58 item->data[i/2] = byteval; | |
| 59 byteval = 0; | |
| 60 } | |
| 61 i++; | |
| 62 } | |
| 63 | |
| 64 return item; | |
| 65 } | |
| 66 | |
| 67 /* Copy all of the fields from srcParams into dstParams | |
| 68 */ | |
| 69 SECStatus | |
| 70 EC_CopyParams(PLArenaPool *arena, ECParams *dstParams, | |
| 71 const ECParams *srcParams) | |
| 72 { | |
| 73 SECStatus rv = SECFailure; | |
| 74 | |
| 75 dstParams->arena = arena; | |
| 76 dstParams->type = srcParams->type; | |
| 77 dstParams->fieldID.size = srcParams->fieldID.size; | |
| 78 dstParams->fieldID.type = srcParams->fieldID.type; | |
| 79 if (srcParams->fieldID.type == ec_field_GFp) { | |
| 80 CHECK_SEC_OK(SECITEM_CopyItem(arena, &dstParams->fieldID.u.prime, | |
| 81 &srcParams->fieldID.u.prime)); | |
| 82 } else { | |
| 83 CHECK_SEC_OK(SECITEM_CopyItem(arena, &dstParams->fieldID.u.poly, | |
| 84 &srcParams->fieldID.u.poly)); | |
| 85 } | |
| 86 dstParams->fieldID.k1 = srcParams->fieldID.k1; | |
| 87 dstParams->fieldID.k2 = srcParams->fieldID.k2; | |
| 88 dstParams->fieldID.k3 = srcParams->fieldID.k3; | |
| 89 CHECK_SEC_OK(SECITEM_CopyItem(arena, &dstParams->curve.a, | |
| 90 &srcParams->curve.a)); | |
| 91 CHECK_SEC_OK(SECITEM_CopyItem(arena, &dstParams->curve.b, | |
| 92 &srcParams->curve.b)); | |
| 93 CHECK_SEC_OK(SECITEM_CopyItem(arena, &dstParams->curve.seed, | |
| 94 &srcParams->curve.seed)); | |
| 95 CHECK_SEC_OK(SECITEM_CopyItem(arena, &dstParams->base, | |
| 96 &srcParams->base)); | |
| 97 CHECK_SEC_OK(SECITEM_CopyItem(arena, &dstParams->order, | |
| 98 &srcParams->order)); | |
| 99 CHECK_SEC_OK(SECITEM_CopyItem(arena, &dstParams->DEREncoding, | |
| 100 &srcParams->DEREncoding)); | |
| 101 dstParams->name = srcParams->name; | |
| 102 CHECK_SEC_OK(SECITEM_CopyItem(arena, &dstParams->curveOID, | |
| 103 &srcParams->curveOID)); | |
| 104 dstParams->cofactor = srcParams->cofactor; | |
| 105 | |
| 106 return SECSuccess; | |
| 107 | |
| 108 cleanup: | |
| 109 return SECFailure; | |
| 110 } | |
| 111 | |
| 112 static SECStatus | |
| 113 gf_populate_params(ECCurveName name, ECFieldType field_type, ECParams *params) | |
| 114 { | |
| 115 SECStatus rv = SECFailure; | |
| 116 const ECCurveParams *curveParams; | |
| 117 /* 2 ['0'+'4'] + MAX_ECKEY_LEN * 2 [x,y] * 2 [hex string] + 1 ['\0'] */ | |
| 118 char genenc[3 + 2 * 2 * MAX_ECKEY_LEN]; | |
| 119 | |
| 120 if ((name < ECCurve_noName) || (name > ECCurve_pastLastCurve)) goto cleanup; | |
| 121 params->name = name; | |
| 122 curveParams = ecCurve_map[params->name]; | |
| 123 CHECK_OK(curveParams); | |
| 124 params->fieldID.size = curveParams->size; | |
| 125 params->fieldID.type = field_type; | |
| 126 if (field_type == ec_field_GFp) { | |
| 127 CHECK_OK(hexString2SECItem(params->arena, ¶ms->fieldID.u.prime, | |
| 128 curveParams->irr)); | |
| 129 } else { | |
| 130 CHECK_OK(hexString2SECItem(params->arena, ¶ms->fieldID.u.poly, | |
| 131 curveParams->irr)); | |
| 132 } | |
| 133 CHECK_OK(hexString2SECItem(params->arena, ¶ms->curve.a, | |
| 134 curveParams->curvea)); | |
| 135 CHECK_OK(hexString2SECItem(params->arena, ¶ms->curve.b, | |
| 136 curveParams->curveb)); | |
| 137 genenc[0] = '0'; | |
| 138 genenc[1] = '4'; | |
| 139 genenc[2] = '\0'; | |
| 140 strcat(genenc, curveParams->genx); | |
| 141 strcat(genenc, curveParams->geny); | |
| 142 CHECK_OK(hexString2SECItem(params->arena, ¶ms->base, genenc)); | |
| 143 CHECK_OK(hexString2SECItem(params->arena, ¶ms->order, | |
| 144 curveParams->order)); | |
| 145 params->cofactor = curveParams->cofactor; | |
| 146 | |
| 147 rv = SECSuccess; | |
| 148 | |
| 149 cleanup: | |
| 150 return rv; | |
| 151 } | |
| 152 | |
| 153 SECStatus | |
| 154 EC_FillParams(PLArenaPool *arena, const SECItem *encodedParams, | |
| 155 ECParams *params) | |
| 156 { | |
| 157 SECStatus rv = SECFailure; | |
| 158 SECOidTag tag; | |
| 159 SECItem oid = { siBuffer, NULL, 0}; | |
| 160 | |
| 161 #if EC_DEBUG | |
| 162 int i; | |
| 163 | |
| 164 printf("Encoded params in EC_DecodeParams: "); | |
| 165 for (i = 0; i < encodedParams->len; i++) { | |
| 166 printf("%02x:", encodedParams->data[i]); | |
| 167 } | |
| 168 printf("\n"); | |
| 169 #endif | |
| 170 | |
| 171 if ((encodedParams->len != ANSI_X962_CURVE_OID_TOTAL_LEN) && | |
| 172 (encodedParams->len != SECG_CURVE_OID_TOTAL_LEN)) { | |
| 173 PORT_SetError(SEC_ERROR_UNSUPPORTED_ELLIPTIC_CURVE); | |
| 174 return SECFailure; | |
| 175 }; | |
| 176 | |
| 177 oid.len = encodedParams->len - 2; | |
| 178 oid.data = encodedParams->data + 2; | |
| 179 if ((encodedParams->data[0] != SEC_ASN1_OBJECT_ID) || | |
| 180 ((tag = SECOID_FindOIDTag(&oid)) == SEC_OID_UNKNOWN)) { | |
| 181 PORT_SetError(SEC_ERROR_UNSUPPORTED_ELLIPTIC_CURVE); | |
| 182 return SECFailure; | |
| 183 } | |
| 184 | |
| 185 params->arena = arena; | |
| 186 params->cofactor = 0; | |
| 187 params->type = ec_params_named; | |
| 188 params->name = ECCurve_noName; | |
| 189 | |
| 190 /* For named curves, fill out curveOID */ | |
| 191 params->curveOID.len = oid.len; | |
| 192 params->curveOID.data = (unsigned char *) PORT_ArenaAlloc(arena, oid.len); | |
| 193 if (params->curveOID.data == NULL) goto cleanup; | |
| 194 memcpy(params->curveOID.data, oid.data, oid.len); | |
| 195 | |
| 196 #if EC_DEBUG | |
| 197 printf("Curve: %s\n", SECOID_FindOIDTagDescription(tag)); | |
| 198 #endif | |
| 199 | |
| 200 switch (tag) { | |
| 201 | |
| 202 /* Binary curves */ | |
| 203 | |
| 204 case SEC_OID_ANSIX962_EC_C2PNB163V1: | |
| 205 /* Populate params for c2pnb163v1 */ | |
| 206 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_PNB163V1, ec_field_
GF2m, | |
| 207 params) ); | |
| 208 break; | |
| 209 | |
| 210 case SEC_OID_ANSIX962_EC_C2PNB163V2: | |
| 211 /* Populate params for c2pnb163v2 */ | |
| 212 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_PNB163V2, ec_field_
GF2m, | |
| 213 params) ); | |
| 214 break; | |
| 215 | |
| 216 case SEC_OID_ANSIX962_EC_C2PNB163V3: | |
| 217 /* Populate params for c2pnb163v3 */ | |
| 218 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_PNB163V3, ec_field_
GF2m, | |
| 219 params) ); | |
| 220 break; | |
| 221 | |
| 222 case SEC_OID_ANSIX962_EC_C2PNB176V1: | |
| 223 /* Populate params for c2pnb176v1 */ | |
| 224 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_PNB176V1, ec_field_
GF2m, | |
| 225 params) ); | |
| 226 break; | |
| 227 | |
| 228 case SEC_OID_ANSIX962_EC_C2TNB191V1: | |
| 229 /* Populate params for c2tnb191v1 */ | |
| 230 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_TNB191V1, ec_field_
GF2m, | |
| 231 params) ); | |
| 232 break; | |
| 233 | |
| 234 case SEC_OID_ANSIX962_EC_C2TNB191V2: | |
| 235 /* Populate params for c2tnb191v2 */ | |
| 236 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_TNB191V2, ec_field_
GF2m, | |
| 237 params) ); | |
| 238 break; | |
| 239 | |
| 240 case SEC_OID_ANSIX962_EC_C2TNB191V3: | |
| 241 /* Populate params for c2tnb191v3 */ | |
| 242 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_TNB191V3, ec_field_
GF2m, | |
| 243 params) ); | |
| 244 break; | |
| 245 | |
| 246 case SEC_OID_ANSIX962_EC_C2PNB208W1: | |
| 247 /* Populate params for c2pnb208w1 */ | |
| 248 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_PNB208W1, ec_field_
GF2m, | |
| 249 params) ); | |
| 250 break; | |
| 251 | |
| 252 case SEC_OID_ANSIX962_EC_C2TNB239V1: | |
| 253 /* Populate params for c2tnb239v1 */ | |
| 254 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_TNB239V1, ec_field_
GF2m, | |
| 255 params) ); | |
| 256 break; | |
| 257 | |
| 258 case SEC_OID_ANSIX962_EC_C2TNB239V2: | |
| 259 /* Populate params for c2tnb239v2 */ | |
| 260 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_TNB239V2, ec_field_
GF2m, | |
| 261 params) ); | |
| 262 break; | |
| 263 | |
| 264 case SEC_OID_ANSIX962_EC_C2TNB239V3: | |
| 265 /* Populate params for c2tnb239v3 */ | |
| 266 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_TNB239V3, ec_field_
GF2m, | |
| 267 params) ); | |
| 268 break; | |
| 269 | |
| 270 case SEC_OID_ANSIX962_EC_C2PNB272W1: | |
| 271 /* Populate params for c2pnb272w1 */ | |
| 272 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_PNB272W1, ec_field_
GF2m, | |
| 273 params) ); | |
| 274 break; | |
| 275 | |
| 276 case SEC_OID_ANSIX962_EC_C2PNB304W1: | |
| 277 /* Populate params for c2pnb304w1 */ | |
| 278 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_PNB304W1, ec_field_
GF2m, | |
| 279 params) ); | |
| 280 break; | |
| 281 | |
| 282 case SEC_OID_ANSIX962_EC_C2TNB359V1: | |
| 283 /* Populate params for c2tnb359v1 */ | |
| 284 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_TNB359V1, ec_field_
GF2m, | |
| 285 params) ); | |
| 286 break; | |
| 287 | |
| 288 case SEC_OID_ANSIX962_EC_C2PNB368W1: | |
| 289 /* Populate params for c2pnb368w1 */ | |
| 290 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_PNB368W1, ec_field_
GF2m, | |
| 291 params) ); | |
| 292 break; | |
| 293 | |
| 294 case SEC_OID_ANSIX962_EC_C2TNB431R1: | |
| 295 /* Populate params for c2tnb431r1 */ | |
| 296 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_CHAR2_TNB431R1, ec_field_
GF2m, | |
| 297 params) ); | |
| 298 break; | |
| 299 | |
| 300 case SEC_OID_SECG_EC_SECT113R1: | |
| 301 /* Populate params for sect113r1 */ | |
| 302 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_113R1, ec_field_GF2m
, | |
| 303 params) ); | |
| 304 break; | |
| 305 | |
| 306 case SEC_OID_SECG_EC_SECT113R2: | |
| 307 /* Populate params for sect113r2 */ | |
| 308 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_113R2, ec_field_GF2m
, | |
| 309 params) ); | |
| 310 break; | |
| 311 | |
| 312 case SEC_OID_SECG_EC_SECT131R1: | |
| 313 /* Populate params for sect131r1 */ | |
| 314 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_131R1, ec_field_GF2m
, | |
| 315 params) ); | |
| 316 break; | |
| 317 | |
| 318 case SEC_OID_SECG_EC_SECT131R2: | |
| 319 /* Populate params for sect131r2 */ | |
| 320 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_131R2, ec_field_GF2m
, | |
| 321 params) ); | |
| 322 break; | |
| 323 | |
| 324 case SEC_OID_SECG_EC_SECT163K1: | |
| 325 /* Populate params for sect163k1 | |
| 326 * (the NIST K-163 curve) | |
| 327 */ | |
| 328 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_163K1, ec_field_GF2m
, | |
| 329 params) ); | |
| 330 break; | |
| 331 | |
| 332 case SEC_OID_SECG_EC_SECT163R1: | |
| 333 /* Populate params for sect163r1 */ | |
| 334 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_163R1, ec_field_GF2m
, | |
| 335 params) ); | |
| 336 break; | |
| 337 | |
| 338 case SEC_OID_SECG_EC_SECT163R2: | |
| 339 /* Populate params for sect163r2 | |
| 340 * (the NIST B-163 curve) | |
| 341 */ | |
| 342 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_163R2, ec_field_GF2m
, | |
| 343 params) ); | |
| 344 break; | |
| 345 | |
| 346 case SEC_OID_SECG_EC_SECT193R1: | |
| 347 /* Populate params for sect193r1 */ | |
| 348 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_193R1, ec_field_GF2m
, | |
| 349 params) ); | |
| 350 break; | |
| 351 | |
| 352 case SEC_OID_SECG_EC_SECT193R2: | |
| 353 /* Populate params for sect193r2 */ | |
| 354 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_193R2, ec_field_GF2m
, | |
| 355 params) ); | |
| 356 break; | |
| 357 | |
| 358 case SEC_OID_SECG_EC_SECT233K1: | |
| 359 /* Populate params for sect233k1 | |
| 360 * (the NIST K-233 curve) | |
| 361 */ | |
| 362 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_233K1, ec_field_GF2m
, | |
| 363 params) ); | |
| 364 break; | |
| 365 | |
| 366 case SEC_OID_SECG_EC_SECT233R1: | |
| 367 /* Populate params for sect233r1 | |
| 368 * (the NIST B-233 curve) | |
| 369 */ | |
| 370 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_233R1, ec_field_GF2m
, | |
| 371 params) ); | |
| 372 break; | |
| 373 | |
| 374 case SEC_OID_SECG_EC_SECT239K1: | |
| 375 /* Populate params for sect239k1 */ | |
| 376 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_239K1, ec_field_GF2m
, | |
| 377 params) ); | |
| 378 break; | |
| 379 | |
| 380 case SEC_OID_SECG_EC_SECT283K1: | |
| 381 /* Populate params for sect283k1 | |
| 382 * (the NIST K-283 curve) | |
| 383 */ | |
| 384 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_283K1, ec_field_GF2m
, | |
| 385 params) ); | |
| 386 break; | |
| 387 | |
| 388 case SEC_OID_SECG_EC_SECT283R1: | |
| 389 /* Populate params for sect283r1 | |
| 390 * (the NIST B-283 curve) | |
| 391 */ | |
| 392 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_283R1, ec_field_GF2m
, | |
| 393 params) ); | |
| 394 break; | |
| 395 | |
| 396 case SEC_OID_SECG_EC_SECT409K1: | |
| 397 /* Populate params for sect409k1 | |
| 398 * (the NIST K-409 curve) | |
| 399 */ | |
| 400 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_409K1, ec_field_GF2m
, | |
| 401 params) ); | |
| 402 break; | |
| 403 | |
| 404 case SEC_OID_SECG_EC_SECT409R1: | |
| 405 /* Populate params for sect409r1 | |
| 406 * (the NIST B-409 curve) | |
| 407 */ | |
| 408 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_409R1, ec_field_GF2m
, | |
| 409 params) ); | |
| 410 break; | |
| 411 | |
| 412 case SEC_OID_SECG_EC_SECT571K1: | |
| 413 /* Populate params for sect571k1 | |
| 414 * (the NIST K-571 curve) | |
| 415 */ | |
| 416 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_571K1, ec_field_GF2m
, | |
| 417 params) ); | |
| 418 break; | |
| 419 | |
| 420 case SEC_OID_SECG_EC_SECT571R1: | |
| 421 /* Populate params for sect571r1 | |
| 422 * (the NIST B-571 curve) | |
| 423 */ | |
| 424 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_CHAR2_571R1, ec_field_GF2m
, | |
| 425 params) ); | |
| 426 break; | |
| 427 | |
| 428 /* Prime curves */ | |
| 429 | |
| 430 case SEC_OID_ANSIX962_EC_PRIME192V1: | |
| 431 /* Populate params for prime192v1 aka secp192r1 | |
| 432 * (the NIST P-192 curve) | |
| 433 */ | |
| 434 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_PRIME_192V1, ec_field_GFp
, | |
| 435 params) ); | |
| 436 break; | |
| 437 | |
| 438 case SEC_OID_ANSIX962_EC_PRIME192V2: | |
| 439 /* Populate params for prime192v2 */ | |
| 440 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_PRIME_192V2, ec_field_GFp
, | |
| 441 params) ); | |
| 442 break; | |
| 443 | |
| 444 case SEC_OID_ANSIX962_EC_PRIME192V3: | |
| 445 /* Populate params for prime192v3 */ | |
| 446 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_PRIME_192V3, ec_field_GFp
, | |
| 447 params) ); | |
| 448 break; | |
| 449 | |
| 450 case SEC_OID_ANSIX962_EC_PRIME239V1: | |
| 451 /* Populate params for prime239v1 */ | |
| 452 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_PRIME_239V1, ec_field_GFp
, | |
| 453 params) ); | |
| 454 break; | |
| 455 | |
| 456 case SEC_OID_ANSIX962_EC_PRIME239V2: | |
| 457 /* Populate params for prime239v2 */ | |
| 458 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_PRIME_239V2, ec_field_GFp
, | |
| 459 params) ); | |
| 460 break; | |
| 461 | |
| 462 case SEC_OID_ANSIX962_EC_PRIME239V3: | |
| 463 /* Populate params for prime239v3 */ | |
| 464 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_PRIME_239V3, ec_field_GFp
, | |
| 465 params) ); | |
| 466 break; | |
| 467 | |
| 468 case SEC_OID_ANSIX962_EC_PRIME256V1: | |
| 469 /* Populate params for prime256v1 aka secp256r1 | |
| 470 * (the NIST P-256 curve) | |
| 471 */ | |
| 472 CHECK_SEC_OK( gf_populate_params(ECCurve_X9_62_PRIME_256V1, ec_field_GFp
, | |
| 473 params) ); | |
| 474 break; | |
| 475 | |
| 476 case SEC_OID_SECG_EC_SECP112R1: | |
| 477 /* Populate params for secp112r1 */ | |
| 478 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_112R1, ec_field_GFp, | |
| 479 params) ); | |
| 480 break; | |
| 481 | |
| 482 case SEC_OID_SECG_EC_SECP112R2: | |
| 483 /* Populate params for secp112r2 */ | |
| 484 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_112R2, ec_field_GFp, | |
| 485 params) ); | |
| 486 break; | |
| 487 | |
| 488 case SEC_OID_SECG_EC_SECP128R1: | |
| 489 /* Populate params for secp128r1 */ | |
| 490 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_128R1, ec_field_GFp, | |
| 491 params) ); | |
| 492 break; | |
| 493 | |
| 494 case SEC_OID_SECG_EC_SECP128R2: | |
| 495 /* Populate params for secp128r2 */ | |
| 496 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_128R2, ec_field_GFp, | |
| 497 params) ); | |
| 498 break; | |
| 499 | |
| 500 case SEC_OID_SECG_EC_SECP160K1: | |
| 501 /* Populate params for secp160k1 */ | |
| 502 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_160K1, ec_field_GFp, | |
| 503 params) ); | |
| 504 break; | |
| 505 | |
| 506 case SEC_OID_SECG_EC_SECP160R1: | |
| 507 /* Populate params for secp160r1 */ | |
| 508 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_160R1, ec_field_GFp, | |
| 509 params) ); | |
| 510 break; | |
| 511 | |
| 512 case SEC_OID_SECG_EC_SECP160R2: | |
| 513 /* Populate params for secp160r1 */ | |
| 514 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_160R2, ec_field_GFp, | |
| 515 params) ); | |
| 516 break; | |
| 517 | |
| 518 case SEC_OID_SECG_EC_SECP192K1: | |
| 519 /* Populate params for secp192k1 */ | |
| 520 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_192K1, ec_field_GFp, | |
| 521 params) ); | |
| 522 break; | |
| 523 | |
| 524 case SEC_OID_SECG_EC_SECP224K1: | |
| 525 /* Populate params for secp224k1 */ | |
| 526 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_224K1, ec_field_GFp, | |
| 527 params) ); | |
| 528 break; | |
| 529 | |
| 530 case SEC_OID_SECG_EC_SECP224R1: | |
| 531 /* Populate params for secp224r1 | |
| 532 * (the NIST P-224 curve) | |
| 533 */ | |
| 534 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_224R1, ec_field_GFp, | |
| 535 params) ); | |
| 536 break; | |
| 537 | |
| 538 case SEC_OID_SECG_EC_SECP256K1: | |
| 539 /* Populate params for secp256k1 */ | |
| 540 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_256K1, ec_field_GFp, | |
| 541 params) ); | |
| 542 break; | |
| 543 | |
| 544 case SEC_OID_SECG_EC_SECP384R1: | |
| 545 /* Populate params for secp384r1 | |
| 546 * (the NIST P-384 curve) | |
| 547 */ | |
| 548 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_384R1, ec_field_GFp, | |
| 549 params) ); | |
| 550 break; | |
| 551 | |
| 552 case SEC_OID_SECG_EC_SECP521R1: | |
| 553 /* Populate params for secp521r1 | |
| 554 * (the NIST P-521 curve) | |
| 555 */ | |
| 556 CHECK_SEC_OK( gf_populate_params(ECCurve_SECG_PRIME_521R1, ec_field_GFp, | |
| 557 params) ); | |
| 558 break; | |
| 559 | |
| 560 default: | |
| 561 break; | |
| 562 }; | |
| 563 | |
| 564 cleanup: | |
| 565 if (!params->cofactor) { | |
| 566 PORT_SetError(SEC_ERROR_UNSUPPORTED_ELLIPTIC_CURVE); | |
| 567 #if EC_DEBUG | |
| 568 printf("Unrecognized curve, returning NULL params\n"); | |
| 569 #endif | |
| 570 } | |
| 571 | |
| 572 return rv; | |
| 573 } | |
| 574 | |
| 575 SECStatus | |
| 576 EC_DecodeParams(const SECItem *encodedParams, ECParams **ecparams) | |
| 577 { | |
| 578 PLArenaPool *arena; | |
| 579 ECParams *params; | |
| 580 SECStatus rv = SECFailure; | |
| 581 | |
| 582 /* Initialize an arena for the ECParams structure */ | |
| 583 if (!(arena = PORT_NewArena(NSS_FREEBL_DEFAULT_CHUNKSIZE))) | |
| 584 return SECFailure; | |
| 585 | |
| 586 params = (ECParams *)PORT_ArenaZAlloc(arena, sizeof(ECParams)); | |
| 587 if (!params) { | |
| 588 PORT_FreeArena(arena, PR_TRUE); | |
| 589 return SECFailure; | |
| 590 } | |
| 591 | |
| 592 /* Copy the encoded params */ | |
| 593 SECITEM_AllocItem(arena, &(params->DEREncoding), | |
| 594 encodedParams->len); | |
| 595 memcpy(params->DEREncoding.data, encodedParams->data, encodedParams->len); | |
| 596 | |
| 597 /* Fill out the rest of the ECParams structure based on | |
| 598 * the encoded params | |
| 599 */ | |
| 600 rv = EC_FillParams(arena, encodedParams, params); | |
| 601 if (rv == SECFailure) { | |
| 602 PORT_FreeArena(arena, PR_TRUE); | |
| 603 return SECFailure; | |
| 604 } else { | |
| 605 *ecparams = params;; | |
| 606 return SECSuccess; | |
| 607 } | |
| 608 } | |
| 609 | |
| 610 #endif /* NSS_DISABLE_ECC */ | |
| OLD | NEW |