Implement EVP_PKEY_supports_digest in Windows EVP_PKEY wrappers.

net/ssl/openssl_platform_key_win.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/ssl/openssl_platform_key.h"
 
 #include <windows.h>
 #include <NCrypt.h>
 
 #include <string.h>
 
 #include <algorithm>
 #include <vector>
 
 #include <openssl/bn.h>
+#include <openssl/digest.h>
 #include <openssl/ec_key.h>
 #include <openssl/err.h>
 #include <openssl/engine.h>
 #include <openssl/evp.h>
 #include <openssl/md5.h>
+#include <openssl/obj_mac.h>
 #include <openssl/rsa.h>
 #include <openssl/sha.h>
 
 #include "base/debug/debugger.h"
 #include "base/debug/stack_trace.h"
 #include "base/lazy_instance.h"
 #include "base/logging.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/win/windows_version.h"
 #include "crypto/scoped_capi_types.h"
 #include "crypto/wincrypt_shim.h"
 #include "net/base/net_errors.h"
 #include "net/cert/x509_certificate.h"
 #include "net/ssl/openssl_ssl_util.h"
 
-// TODO(davidben): The key needs to inform the choice of hash function in
-// TLS 1.2. See https://crbug.com/278370.
-
 namespace net {
 
 namespace {
 
 using NCryptFreeObjectFunc = SECURITY_STATUS(WINAPI*)(NCRYPT_HANDLE);
 using NCryptGetPropertyFunc =
     SECURITY_STATUS(WINAPI*)(NCRYPT_HANDLE,  // hObject
                              LPCWSTR,  // pszProperty
                              PBYTE,  // pbOutput
                              DWORD,  // cbOutput
@@ skipping 327 matching lines @@
                        uint8_t* out,
                        size_t max_out,
                        const uint8_t* in,
                        size_t in_len,
                        int padding) {
   NOTIMPLEMENTED();
   OPENSSL_PUT_ERROR(RSA, verify_raw, RSA_R_UNKNOWN_ALGORITHM_TYPE);
   return 0;
 }
 
+int RsaMethodSupportsDigest(const RSA* rsa, const EVP_MD* md) {
+  const KeyExData* ex_data = RsaGetExData(rsa);
+  if (!ex_data) {
+    NOTREACHED();
+    return 0;
+  }
+
+  int hash_nid = EVP_MD_type(md);
+  if (ex_data->key->dwKeySpec == CERT_NCRYPT_KEY_SPEC) {
+    // Only hashes which appear in RsaSignPKCS1 are supported.
+    if (hash_nid != NID_sha1 && hash_nid != NID_sha256 &&
+        hash_nid != NID_sha384 && hash_nid != NID_sha512) {
+      return 0;
+    }
+
+    // If the key is a 1024-bit RSA, assume conservatively that it may only be
+    // able to sign SHA-1 hashes. This is the case for older Estonian ID cards
+    // that have 1024-bit RSA keys.
+    //
+    // CNG does provide NCryptIsAlgSupported and NCryptEnumAlgorithms functions,
+    // however they seem to both return NTE_NOT_SUPPORTED when querying the
+    // NCRYPT_PROV_HANDLE at the key's NCRYPT_PROVIDER_HANDLE_PROPERTY.
+    if (ex_data->key_length <= 1024 && hash_nid != NID_sha1)
+      return 0;
+
+    return 1;
+  } else {
+    // If the key is in CAPI, assume conservatively that the CAPI service
+    // provider may only be able to sign SHA-1 hashes.
+    return hash_nid == NID_sha1;
+  }
+}
+
 const RSA_METHOD win_rsa_method = {
     {
      0,  // references
      1,  // is_static
     },
     nullptr,  // app_data
 
     nullptr,  // init
     nullptr,  // finish
     RsaMethodSize,
     RsaMethodSign,
     nullptr,  // verify
     RsaMethodEncrypt,
     RsaMethodSignRaw,
     RsaMethodDecrypt,
     RsaMethodVerifyRaw,
     nullptr,  // private_transform
     nullptr,  // mod_exp
     nullptr,  // bn_mod_exp
     RSA_FLAG_OPAQUE,
     nullptr,  // keygen
+    RsaMethodSupportsDigest,
 };
 
 // Custom ECDSA_METHOD that uses the platform APIs.
 // Note that for now, only signing through ECDSA_sign() is really supported.
 // all other method pointers are either stubs returning errors, or no-ops.
 
 const KeyExData* EcKeyGetExData(const EC_KEY* ec_key) {
   return reinterpret_cast<const KeyExData*>(EC_KEY_get_ex_data(
       ec_key, global_boringssl_engine.Get().ec_key_ex_index()));
 }
@@ skipping 251 matching lines @@
     case EVP_PKEY_RSA:
       return CreateRSAWrapper(key.Pass(), key_length);
     case EVP_PKEY_EC:
       return CreateECDSAWrapper(key.Pass(), key_length);
     default:
       return nullptr;
   }
 }
 
 }  // namespace net