1*2139Sjp161948 /* crypto/ecdh/ech_lib.c */
2*2139Sjp161948 /* ====================================================================
3*2139Sjp161948 * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
4*2139Sjp161948 *
5*2139Sjp161948 * The Elliptic Curve Public-Key Crypto Library (ECC Code) included
6*2139Sjp161948 * herein is developed by SUN MICROSYSTEMS, INC., and is contributed
7*2139Sjp161948 * to the OpenSSL project.
8*2139Sjp161948 *
9*2139Sjp161948 * The ECC Code is licensed pursuant to the OpenSSL open source
10*2139Sjp161948 * license provided below.
11*2139Sjp161948 *
12*2139Sjp161948 * The ECDH software is originally written by Douglas Stebila of
13*2139Sjp161948 * Sun Microsystems Laboratories.
14*2139Sjp161948 *
15*2139Sjp161948 */
16*2139Sjp161948 /* ====================================================================
17*2139Sjp161948 * Copyright (c) 1998-2003 The OpenSSL Project. All rights reserved.
18*2139Sjp161948 *
19*2139Sjp161948 * Redistribution and use in source and binary forms, with or without
20*2139Sjp161948 * modification, are permitted provided that the following conditions
21*2139Sjp161948 * are met:
22*2139Sjp161948 *
23*2139Sjp161948 * 1. Redistributions of source code must retain the above copyright
24*2139Sjp161948 * notice, this list of conditions and the following disclaimer.
25*2139Sjp161948 *
26*2139Sjp161948 * 2. Redistributions in binary form must reproduce the above copyright
27*2139Sjp161948 * notice, this list of conditions and the following disclaimer in
28*2139Sjp161948 * the documentation and/or other materials provided with the
29*2139Sjp161948 * distribution.
30*2139Sjp161948 *
31*2139Sjp161948 * 3. All advertising materials mentioning features or use of this
32*2139Sjp161948 * software must display the following acknowledgment:
33*2139Sjp161948 * "This product includes software developed by the OpenSSL Project
34*2139Sjp161948 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
35*2139Sjp161948 *
36*2139Sjp161948 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
37*2139Sjp161948 * endorse or promote products derived from this software without
38*2139Sjp161948 * prior written permission. For written permission, please contact
39*2139Sjp161948 * openssl-core@OpenSSL.org.
40*2139Sjp161948 *
41*2139Sjp161948 * 5. Products derived from this software may not be called "OpenSSL"
42*2139Sjp161948 * nor may "OpenSSL" appear in their names without prior written
43*2139Sjp161948 * permission of the OpenSSL Project.
44*2139Sjp161948 *
45*2139Sjp161948 * 6. Redistributions of any form whatsoever must retain the following
46*2139Sjp161948 * acknowledgment:
47*2139Sjp161948 * "This product includes software developed by the OpenSSL Project
48*2139Sjp161948 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
49*2139Sjp161948 *
50*2139Sjp161948 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
51*2139Sjp161948 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
52*2139Sjp161948 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
53*2139Sjp161948 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
54*2139Sjp161948 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
55*2139Sjp161948 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
56*2139Sjp161948 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
57*2139Sjp161948 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
58*2139Sjp161948 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
59*2139Sjp161948 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
60*2139Sjp161948 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
61*2139Sjp161948 * OF THE POSSIBILITY OF SUCH DAMAGE.
62*2139Sjp161948 * ====================================================================
63*2139Sjp161948 *
64*2139Sjp161948 * This product includes cryptographic software written by Eric Young
65*2139Sjp161948 * (eay@cryptsoft.com). This product includes software written by Tim
66*2139Sjp161948 * Hudson (tjh@cryptsoft.com).
67*2139Sjp161948 *
68*2139Sjp161948 */
69*2139Sjp161948
70*2139Sjp161948 #include "ech_locl.h"
71*2139Sjp161948 #include <string.h>
72*2139Sjp161948 #ifndef OPENSSL_NO_ENGINE
73*2139Sjp161948 #include <openssl/engine.h>
74*2139Sjp161948 #endif
75*2139Sjp161948 #include <openssl/err.h>
76*2139Sjp161948
77*2139Sjp161948 const char *ECDH_version="ECDH" OPENSSL_VERSION_PTEXT;
78*2139Sjp161948
79*2139Sjp161948 static const ECDH_METHOD *default_ECDH_method = NULL;
80*2139Sjp161948
81*2139Sjp161948 static void *ecdh_data_new(void);
82*2139Sjp161948 static void *ecdh_data_dup(void *);
83*2139Sjp161948 static void ecdh_data_free(void *);
84*2139Sjp161948
ECDH_set_default_method(const ECDH_METHOD * meth)85*2139Sjp161948 void ECDH_set_default_method(const ECDH_METHOD *meth)
86*2139Sjp161948 {
87*2139Sjp161948 default_ECDH_method = meth;
88*2139Sjp161948 }
89*2139Sjp161948
ECDH_get_default_method(void)90*2139Sjp161948 const ECDH_METHOD *ECDH_get_default_method(void)
91*2139Sjp161948 {
92*2139Sjp161948 if(!default_ECDH_method)
93*2139Sjp161948 default_ECDH_method = ECDH_OpenSSL();
94*2139Sjp161948 return default_ECDH_method;
95*2139Sjp161948 }
96*2139Sjp161948
ECDH_set_method(EC_KEY * eckey,const ECDH_METHOD * meth)97*2139Sjp161948 int ECDH_set_method(EC_KEY *eckey, const ECDH_METHOD *meth)
98*2139Sjp161948 {
99*2139Sjp161948 const ECDH_METHOD *mtmp;
100*2139Sjp161948 ECDH_DATA *ecdh;
101*2139Sjp161948
102*2139Sjp161948 ecdh = ecdh_check(eckey);
103*2139Sjp161948
104*2139Sjp161948 if (ecdh == NULL)
105*2139Sjp161948 return 0;
106*2139Sjp161948
107*2139Sjp161948 mtmp = ecdh->meth;
108*2139Sjp161948 #if 0
109*2139Sjp161948 if (mtmp->finish)
110*2139Sjp161948 mtmp->finish(eckey);
111*2139Sjp161948 #endif
112*2139Sjp161948 #ifndef OPENSSL_NO_ENGINE
113*2139Sjp161948 if (ecdh->engine)
114*2139Sjp161948 {
115*2139Sjp161948 ENGINE_finish(ecdh->engine);
116*2139Sjp161948 ecdh->engine = NULL;
117*2139Sjp161948 }
118*2139Sjp161948 #endif
119*2139Sjp161948 ecdh->meth = meth;
120*2139Sjp161948 #if 0
121*2139Sjp161948 if (meth->init)
122*2139Sjp161948 meth->init(eckey);
123*2139Sjp161948 #endif
124*2139Sjp161948 return 1;
125*2139Sjp161948 }
126*2139Sjp161948
ECDH_DATA_new_method(ENGINE * engine)127*2139Sjp161948 static ECDH_DATA *ECDH_DATA_new_method(ENGINE *engine)
128*2139Sjp161948 {
129*2139Sjp161948 ECDH_DATA *ret;
130*2139Sjp161948
131*2139Sjp161948 ret=(ECDH_DATA *)OPENSSL_malloc(sizeof(ECDH_DATA));
132*2139Sjp161948 if (ret == NULL)
133*2139Sjp161948 {
134*2139Sjp161948 ECDHerr(ECDH_F_ECDH_DATA_NEW_METHOD, ERR_R_MALLOC_FAILURE);
135*2139Sjp161948 return(NULL);
136*2139Sjp161948 }
137*2139Sjp161948
138*2139Sjp161948 ret->init = NULL;
139*2139Sjp161948
140*2139Sjp161948 ret->meth = ECDH_get_default_method();
141*2139Sjp161948 ret->engine = engine;
142*2139Sjp161948 #ifndef OPENSSL_NO_ENGINE
143*2139Sjp161948 if (!ret->engine)
144*2139Sjp161948 ret->engine = ENGINE_get_default_ECDH();
145*2139Sjp161948 if (ret->engine)
146*2139Sjp161948 {
147*2139Sjp161948 ret->meth = ENGINE_get_ECDH(ret->engine);
148*2139Sjp161948 if (!ret->meth)
149*2139Sjp161948 {
150*2139Sjp161948 ECDHerr(ECDH_F_ECDH_DATA_NEW_METHOD, ERR_R_ENGINE_LIB);
151*2139Sjp161948 ENGINE_finish(ret->engine);
152*2139Sjp161948 OPENSSL_free(ret);
153*2139Sjp161948 return NULL;
154*2139Sjp161948 }
155*2139Sjp161948 }
156*2139Sjp161948 #endif
157*2139Sjp161948
158*2139Sjp161948 ret->flags = ret->meth->flags;
159*2139Sjp161948 CRYPTO_new_ex_data(CRYPTO_EX_INDEX_ECDH, ret, &ret->ex_data);
160*2139Sjp161948 #if 0
161*2139Sjp161948 if ((ret->meth->init != NULL) && !ret->meth->init(ret))
162*2139Sjp161948 {
163*2139Sjp161948 CRYPTO_free_ex_data(CRYPTO_EX_INDEX_ECDH, ret, &ret->ex_data);
164*2139Sjp161948 OPENSSL_free(ret);
165*2139Sjp161948 ret=NULL;
166*2139Sjp161948 }
167*2139Sjp161948 #endif
168*2139Sjp161948 return(ret);
169*2139Sjp161948 }
170*2139Sjp161948
ecdh_data_new(void)171*2139Sjp161948 static void *ecdh_data_new(void)
172*2139Sjp161948 {
173*2139Sjp161948 return (void *)ECDH_DATA_new_method(NULL);
174*2139Sjp161948 }
175*2139Sjp161948
ecdh_data_dup(void * data)176*2139Sjp161948 static void *ecdh_data_dup(void *data)
177*2139Sjp161948 {
178*2139Sjp161948 ECDH_DATA *r = (ECDH_DATA *)data;
179*2139Sjp161948
180*2139Sjp161948 /* XXX: dummy operation */
181*2139Sjp161948 if (r == NULL)
182*2139Sjp161948 return NULL;
183*2139Sjp161948
184*2139Sjp161948 return (void *)ecdh_data_new();
185*2139Sjp161948 }
186*2139Sjp161948
ecdh_data_free(void * data)187*2139Sjp161948 void ecdh_data_free(void *data)
188*2139Sjp161948 {
189*2139Sjp161948 ECDH_DATA *r = (ECDH_DATA *)data;
190*2139Sjp161948
191*2139Sjp161948 #ifndef OPENSSL_NO_ENGINE
192*2139Sjp161948 if (r->engine)
193*2139Sjp161948 ENGINE_finish(r->engine);
194*2139Sjp161948 #endif
195*2139Sjp161948
196*2139Sjp161948 CRYPTO_free_ex_data(CRYPTO_EX_INDEX_ECDH, r, &r->ex_data);
197*2139Sjp161948
198*2139Sjp161948 OPENSSL_cleanse((void *)r, sizeof(ECDH_DATA));
199*2139Sjp161948
200*2139Sjp161948 OPENSSL_free(r);
201*2139Sjp161948 }
202*2139Sjp161948
ecdh_check(EC_KEY * key)203*2139Sjp161948 ECDH_DATA *ecdh_check(EC_KEY *key)
204*2139Sjp161948 {
205*2139Sjp161948 ECDH_DATA *ecdh_data;
206*2139Sjp161948
207*2139Sjp161948 void *data = EC_KEY_get_key_method_data(key, ecdh_data_dup,
208*2139Sjp161948 ecdh_data_free, ecdh_data_free);
209*2139Sjp161948 if (data == NULL)
210*2139Sjp161948 {
211*2139Sjp161948 ecdh_data = (ECDH_DATA *)ecdh_data_new();
212*2139Sjp161948 if (ecdh_data == NULL)
213*2139Sjp161948 return NULL;
214*2139Sjp161948 EC_KEY_insert_key_method_data(key, (void *)ecdh_data,
215*2139Sjp161948 ecdh_data_dup, ecdh_data_free, ecdh_data_free);
216*2139Sjp161948 }
217*2139Sjp161948 else
218*2139Sjp161948 ecdh_data = (ECDH_DATA *)data;
219*2139Sjp161948
220*2139Sjp161948
221*2139Sjp161948 return ecdh_data;
222*2139Sjp161948 }
223*2139Sjp161948
ECDH_get_ex_new_index(long argl,void * argp,CRYPTO_EX_new * new_func,CRYPTO_EX_dup * dup_func,CRYPTO_EX_free * free_func)224*2139Sjp161948 int ECDH_get_ex_new_index(long argl, void *argp, CRYPTO_EX_new *new_func,
225*2139Sjp161948 CRYPTO_EX_dup *dup_func, CRYPTO_EX_free *free_func)
226*2139Sjp161948 {
227*2139Sjp161948 return CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_ECDH, argl, argp,
228*2139Sjp161948 new_func, dup_func, free_func);
229*2139Sjp161948 }
230*2139Sjp161948
ECDH_set_ex_data(EC_KEY * d,int idx,void * arg)231*2139Sjp161948 int ECDH_set_ex_data(EC_KEY *d, int idx, void *arg)
232*2139Sjp161948 {
233*2139Sjp161948 ECDH_DATA *ecdh;
234*2139Sjp161948 ecdh = ecdh_check(d);
235*2139Sjp161948 if (ecdh == NULL)
236*2139Sjp161948 return 0;
237*2139Sjp161948 return(CRYPTO_set_ex_data(&ecdh->ex_data,idx,arg));
238*2139Sjp161948 }
239*2139Sjp161948
ECDH_get_ex_data(EC_KEY * d,int idx)240*2139Sjp161948 void *ECDH_get_ex_data(EC_KEY *d, int idx)
241*2139Sjp161948 {
242*2139Sjp161948 ECDH_DATA *ecdh;
243*2139Sjp161948 ecdh = ecdh_check(d);
244*2139Sjp161948 if (ecdh == NULL)
245*2139Sjp161948 return NULL;
246*2139Sjp161948 return(CRYPTO_get_ex_data(&ecdh->ex_data,idx));
247*2139Sjp161948 }
248