1*cca6fc52SDaniel Fojt /* $OpenBSD: prime.c,v 1.13 2019/07/14 03:30:46 guenther Exp $ */
2f5b1c8a1SJohn Marino /* ====================================================================
3f5b1c8a1SJohn Marino * Copyright (c) 2004 The OpenSSL Project. All rights reserved.
4f5b1c8a1SJohn Marino *
5f5b1c8a1SJohn Marino * Redistribution and use in source and binary forms, with or without
6f5b1c8a1SJohn Marino * modification, are permitted provided that the following conditions
7f5b1c8a1SJohn Marino * are met:
8f5b1c8a1SJohn Marino *
9f5b1c8a1SJohn Marino * 1. Redistributions of source code must retain the above copyright
10f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer.
11f5b1c8a1SJohn Marino *
12f5b1c8a1SJohn Marino * 2. Redistributions in binary form must reproduce the above copyright
13f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer in
14f5b1c8a1SJohn Marino * the documentation and/or other materials provided with the
15f5b1c8a1SJohn Marino * distribution.
16f5b1c8a1SJohn Marino *
17f5b1c8a1SJohn Marino * 3. All advertising materials mentioning features or use of this
18f5b1c8a1SJohn Marino * software must display the following acknowledgment:
19f5b1c8a1SJohn Marino * "This product includes software developed by the OpenSSL Project
20f5b1c8a1SJohn Marino * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
21f5b1c8a1SJohn Marino *
22f5b1c8a1SJohn Marino * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
23f5b1c8a1SJohn Marino * endorse or promote products derived from this software without
24f5b1c8a1SJohn Marino * prior written permission. For written permission, please contact
25f5b1c8a1SJohn Marino * openssl-core@openssl.org.
26f5b1c8a1SJohn Marino *
27f5b1c8a1SJohn Marino * 5. Products derived from this software may not be called "OpenSSL"
28f5b1c8a1SJohn Marino * nor may "OpenSSL" appear in their names without prior written
29f5b1c8a1SJohn Marino * permission of the OpenSSL Project.
30f5b1c8a1SJohn Marino *
31f5b1c8a1SJohn Marino * 6. Redistributions of any form whatsoever must retain the following
32f5b1c8a1SJohn Marino * acknowledgment:
33f5b1c8a1SJohn Marino * "This product includes software developed by the OpenSSL Project
34f5b1c8a1SJohn Marino * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
35f5b1c8a1SJohn Marino *
36f5b1c8a1SJohn Marino * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
37f5b1c8a1SJohn Marino * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
38f5b1c8a1SJohn Marino * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
39f5b1c8a1SJohn Marino * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
40f5b1c8a1SJohn Marino * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
41f5b1c8a1SJohn Marino * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
42f5b1c8a1SJohn Marino * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
43f5b1c8a1SJohn Marino * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
44f5b1c8a1SJohn Marino * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
45f5b1c8a1SJohn Marino * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
46f5b1c8a1SJohn Marino * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
47f5b1c8a1SJohn Marino * OF THE POSSIBILITY OF SUCH DAMAGE.
48f5b1c8a1SJohn Marino *
49f5b1c8a1SJohn Marino */
50f5b1c8a1SJohn Marino
51f5b1c8a1SJohn Marino #include <string.h>
52f5b1c8a1SJohn Marino #include <limits.h>
53f5b1c8a1SJohn Marino
54f5b1c8a1SJohn Marino #include "apps.h"
55f5b1c8a1SJohn Marino
56f5b1c8a1SJohn Marino #include <openssl/bn.h>
57f5b1c8a1SJohn Marino #include <openssl/err.h>
58f5b1c8a1SJohn Marino
59f5b1c8a1SJohn Marino struct {
60f5b1c8a1SJohn Marino int bits;
61f5b1c8a1SJohn Marino int checks;
62f5b1c8a1SJohn Marino int generate;
63f5b1c8a1SJohn Marino int hex;
64f5b1c8a1SJohn Marino int safe;
65f5b1c8a1SJohn Marino } prime_config;
66f5b1c8a1SJohn Marino
67*cca6fc52SDaniel Fojt static const struct option prime_options[] = {
68f5b1c8a1SJohn Marino {
69f5b1c8a1SJohn Marino .name = "bits",
70f5b1c8a1SJohn Marino .argname = "n",
71f5b1c8a1SJohn Marino .desc = "Number of bits in the generated prime number",
72f5b1c8a1SJohn Marino .type = OPTION_ARG_INT,
73f5b1c8a1SJohn Marino .opt.value = &prime_config.bits,
74f5b1c8a1SJohn Marino },
75f5b1c8a1SJohn Marino {
76f5b1c8a1SJohn Marino .name = "checks",
77f5b1c8a1SJohn Marino .argname = "n",
78f5b1c8a1SJohn Marino .desc = "Miller-Rabin probablistic primality test iterations",
79f5b1c8a1SJohn Marino .type = OPTION_ARG_INT,
80f5b1c8a1SJohn Marino .opt.value = &prime_config.checks,
81f5b1c8a1SJohn Marino },
82f5b1c8a1SJohn Marino {
83f5b1c8a1SJohn Marino .name = "generate",
84f5b1c8a1SJohn Marino .desc = "Generate a pseudo-random prime number",
85f5b1c8a1SJohn Marino .type = OPTION_FLAG,
86f5b1c8a1SJohn Marino .opt.flag = &prime_config.generate,
87f5b1c8a1SJohn Marino },
88f5b1c8a1SJohn Marino {
89f5b1c8a1SJohn Marino .name = "hex",
90f5b1c8a1SJohn Marino .desc = "Hexadecimal prime numbers",
91f5b1c8a1SJohn Marino .type = OPTION_FLAG,
92f5b1c8a1SJohn Marino .opt.flag = &prime_config.hex,
93f5b1c8a1SJohn Marino },
94f5b1c8a1SJohn Marino {
95f5b1c8a1SJohn Marino .name = "safe",
96f5b1c8a1SJohn Marino .desc = "Generate only \"safe\" prime numbers",
97f5b1c8a1SJohn Marino .type = OPTION_FLAG,
98f5b1c8a1SJohn Marino .opt.flag = &prime_config.safe,
99f5b1c8a1SJohn Marino },
100f5b1c8a1SJohn Marino {NULL},
101f5b1c8a1SJohn Marino };
102f5b1c8a1SJohn Marino
103f5b1c8a1SJohn Marino static void
prime_usage()104f5b1c8a1SJohn Marino prime_usage()
105f5b1c8a1SJohn Marino {
106f5b1c8a1SJohn Marino fprintf(stderr,
107f5b1c8a1SJohn Marino "usage: prime [-bits n] [-checks n] [-generate] [-hex] [-safe] "
108f5b1c8a1SJohn Marino "p\n");
109f5b1c8a1SJohn Marino options_usage(prime_options);
110f5b1c8a1SJohn Marino }
111f5b1c8a1SJohn Marino
112f5b1c8a1SJohn Marino int
prime_main(int argc,char ** argv)113f5b1c8a1SJohn Marino prime_main(int argc, char **argv)
114f5b1c8a1SJohn Marino {
115f5b1c8a1SJohn Marino BIGNUM *bn = NULL;
116f5b1c8a1SJohn Marino char *prime = NULL;
117f5b1c8a1SJohn Marino BIO *bio_out;
118f5b1c8a1SJohn Marino char *s;
11972c33676SMaxim Ag int is_prime, ret = 1;
120f5b1c8a1SJohn Marino
121f5b1c8a1SJohn Marino if (single_execution) {
122f5b1c8a1SJohn Marino if (pledge("stdio rpath", NULL) == -1) {
123f5b1c8a1SJohn Marino perror("pledge");
124f5b1c8a1SJohn Marino exit(1);
125f5b1c8a1SJohn Marino }
126f5b1c8a1SJohn Marino }
127f5b1c8a1SJohn Marino
128f5b1c8a1SJohn Marino memset(&prime_config, 0, sizeof(prime_config));
129f5b1c8a1SJohn Marino
130f5b1c8a1SJohn Marino /* Default iterations for Miller-Rabin probabilistic primality test. */
131f5b1c8a1SJohn Marino prime_config.checks = 20;
132f5b1c8a1SJohn Marino
133f5b1c8a1SJohn Marino if (options_parse(argc, argv, prime_options, &prime, NULL) != 0) {
134f5b1c8a1SJohn Marino prime_usage();
135f5b1c8a1SJohn Marino return (1);
136f5b1c8a1SJohn Marino }
137f5b1c8a1SJohn Marino
138f5b1c8a1SJohn Marino if (prime == NULL && prime_config.generate == 0) {
139f5b1c8a1SJohn Marino BIO_printf(bio_err, "No prime specified.\n");
140f5b1c8a1SJohn Marino prime_usage();
141f5b1c8a1SJohn Marino return (1);
142f5b1c8a1SJohn Marino }
143f5b1c8a1SJohn Marino
144f5b1c8a1SJohn Marino if ((bio_out = BIO_new(BIO_s_file())) == NULL) {
145f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
146f5b1c8a1SJohn Marino return (1);
147f5b1c8a1SJohn Marino }
148f5b1c8a1SJohn Marino BIO_set_fp(bio_out, stdout, BIO_NOCLOSE);
149f5b1c8a1SJohn Marino
150f5b1c8a1SJohn Marino if (prime_config.generate != 0) {
151f5b1c8a1SJohn Marino if (prime_config.bits == 0) {
152f5b1c8a1SJohn Marino BIO_printf(bio_err, "Specify the number of bits.\n");
153f5b1c8a1SJohn Marino goto end;
154f5b1c8a1SJohn Marino }
155f5b1c8a1SJohn Marino bn = BN_new();
156f5b1c8a1SJohn Marino if (!bn) {
157f5b1c8a1SJohn Marino BIO_printf(bio_err, "Out of memory.\n");
158f5b1c8a1SJohn Marino goto end;
159f5b1c8a1SJohn Marino }
160f5b1c8a1SJohn Marino if (!BN_generate_prime_ex(bn, prime_config.bits,
161f5b1c8a1SJohn Marino prime_config.safe, NULL, NULL, NULL)) {
162f5b1c8a1SJohn Marino BIO_printf(bio_err, "Prime generation error.\n");
163f5b1c8a1SJohn Marino goto end;
164f5b1c8a1SJohn Marino }
165f5b1c8a1SJohn Marino s = prime_config.hex ? BN_bn2hex(bn) : BN_bn2dec(bn);
166f5b1c8a1SJohn Marino if (s == NULL) {
167f5b1c8a1SJohn Marino BIO_printf(bio_err, "Out of memory.\n");
168f5b1c8a1SJohn Marino goto end;
169f5b1c8a1SJohn Marino }
170f5b1c8a1SJohn Marino BIO_printf(bio_out, "%s\n", s);
171f5b1c8a1SJohn Marino free(s);
172f5b1c8a1SJohn Marino } else {
173f5b1c8a1SJohn Marino if (prime_config.hex) {
174f5b1c8a1SJohn Marino if (!BN_hex2bn(&bn, prime)) {
175f5b1c8a1SJohn Marino BIO_printf(bio_err, "%s is an invalid hex "
176f5b1c8a1SJohn Marino "value.\n", prime);
177f5b1c8a1SJohn Marino goto end;
178f5b1c8a1SJohn Marino }
179f5b1c8a1SJohn Marino } else {
180f5b1c8a1SJohn Marino if (!BN_dec2bn(&bn, prime)) {
181f5b1c8a1SJohn Marino BIO_printf(bio_err, "%s is an invalid decimal "
182f5b1c8a1SJohn Marino "value.\n", prime);
183f5b1c8a1SJohn Marino goto end;
184f5b1c8a1SJohn Marino }
185f5b1c8a1SJohn Marino }
186f5b1c8a1SJohn Marino
18772c33676SMaxim Ag is_prime = BN_is_prime_ex(bn, prime_config.checks, NULL, NULL);
18872c33676SMaxim Ag if (is_prime < 0) {
18972c33676SMaxim Ag BIO_printf(bio_err, "BN_is_prime_ex failed.\n");
19072c33676SMaxim Ag goto end;
19172c33676SMaxim Ag }
192f5b1c8a1SJohn Marino BIO_printf(bio_out, "%s is %sprime\n", prime,
19372c33676SMaxim Ag is_prime == 1 ? "" : "not ");
194f5b1c8a1SJohn Marino }
195f5b1c8a1SJohn Marino
196f5b1c8a1SJohn Marino ret = 0;
197f5b1c8a1SJohn Marino
198f5b1c8a1SJohn Marino end:
199f5b1c8a1SJohn Marino BN_free(bn);
200f5b1c8a1SJohn Marino BIO_free_all(bio_out);
201f5b1c8a1SJohn Marino
202f5b1c8a1SJohn Marino return (ret);
203f5b1c8a1SJohn Marino }
204