1*0Sstevel@tonic-gate /* p5_crpt.c */
2*0Sstevel@tonic-gate /* Written by Dr Stephen N Henson (shenson@bigfoot.com) for the OpenSSL
3*0Sstevel@tonic-gate  * project 1999.
4*0Sstevel@tonic-gate  */
5*0Sstevel@tonic-gate /* ====================================================================
6*0Sstevel@tonic-gate  * Copyright (c) 1999 The OpenSSL Project.  All rights reserved.
7*0Sstevel@tonic-gate  *
8*0Sstevel@tonic-gate  * Redistribution and use in source and binary forms, with or without
9*0Sstevel@tonic-gate  * modification, are permitted provided that the following conditions
10*0Sstevel@tonic-gate  * are met:
11*0Sstevel@tonic-gate  *
12*0Sstevel@tonic-gate  * 1. Redistributions of source code must retain the above copyright
13*0Sstevel@tonic-gate  *    notice, this list of conditions and the following disclaimer.
14*0Sstevel@tonic-gate  *
15*0Sstevel@tonic-gate  * 2. Redistributions in binary form must reproduce the above copyright
16*0Sstevel@tonic-gate  *    notice, this list of conditions and the following disclaimer in
17*0Sstevel@tonic-gate  *    the documentation and/or other materials provided with the
18*0Sstevel@tonic-gate  *    distribution.
19*0Sstevel@tonic-gate  *
20*0Sstevel@tonic-gate  * 3. All advertising materials mentioning features or use of this
21*0Sstevel@tonic-gate  *    software must display the following acknowledgment:
22*0Sstevel@tonic-gate  *    "This product includes software developed by the OpenSSL Project
23*0Sstevel@tonic-gate  *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
24*0Sstevel@tonic-gate  *
25*0Sstevel@tonic-gate  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26*0Sstevel@tonic-gate  *    endorse or promote products derived from this software without
27*0Sstevel@tonic-gate  *    prior written permission. For written permission, please contact
28*0Sstevel@tonic-gate  *    licensing@OpenSSL.org.
29*0Sstevel@tonic-gate  *
30*0Sstevel@tonic-gate  * 5. Products derived from this software may not be called "OpenSSL"
31*0Sstevel@tonic-gate  *    nor may "OpenSSL" appear in their names without prior written
32*0Sstevel@tonic-gate  *    permission of the OpenSSL Project.
33*0Sstevel@tonic-gate  *
34*0Sstevel@tonic-gate  * 6. Redistributions of any form whatsoever must retain the following
35*0Sstevel@tonic-gate  *    acknowledgment:
36*0Sstevel@tonic-gate  *    "This product includes software developed by the OpenSSL Project
37*0Sstevel@tonic-gate  *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
38*0Sstevel@tonic-gate  *
39*0Sstevel@tonic-gate  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40*0Sstevel@tonic-gate  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41*0Sstevel@tonic-gate  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42*0Sstevel@tonic-gate  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
43*0Sstevel@tonic-gate  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44*0Sstevel@tonic-gate  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45*0Sstevel@tonic-gate  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46*0Sstevel@tonic-gate  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47*0Sstevel@tonic-gate  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48*0Sstevel@tonic-gate  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49*0Sstevel@tonic-gate  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50*0Sstevel@tonic-gate  * OF THE POSSIBILITY OF SUCH DAMAGE.
51*0Sstevel@tonic-gate  * ====================================================================
52*0Sstevel@tonic-gate  *
53*0Sstevel@tonic-gate  * This product includes cryptographic software written by Eric Young
54*0Sstevel@tonic-gate  * (eay@cryptsoft.com).  This product includes software written by Tim
55*0Sstevel@tonic-gate  * Hudson (tjh@cryptsoft.com).
56*0Sstevel@tonic-gate  *
57*0Sstevel@tonic-gate  */
58*0Sstevel@tonic-gate 
59*0Sstevel@tonic-gate #include <stdio.h>
60*0Sstevel@tonic-gate #include <stdlib.h>
61*0Sstevel@tonic-gate #include "cryptlib.h"
62*0Sstevel@tonic-gate #include <openssl/x509.h>
63*0Sstevel@tonic-gate #include <openssl/evp.h>
64*0Sstevel@tonic-gate 
65*0Sstevel@tonic-gate /* PKCS#5 v1.5 compatible PBE functions: see PKCS#5 v2.0 for more info.
66*0Sstevel@tonic-gate  */
67*0Sstevel@tonic-gate 
68*0Sstevel@tonic-gate void PKCS5_PBE_add(void)
69*0Sstevel@tonic-gate {
70*0Sstevel@tonic-gate #ifndef OPENSSL_NO_DES
71*0Sstevel@tonic-gate #  ifndef OPENSSL_NO_MD5
72*0Sstevel@tonic-gate EVP_PBE_alg_add(NID_pbeWithMD5AndDES_CBC, EVP_des_cbc(), EVP_md5(),
73*0Sstevel@tonic-gate 							 PKCS5_PBE_keyivgen);
74*0Sstevel@tonic-gate #  endif
75*0Sstevel@tonic-gate #  ifndef OPENSSL_NO_MD2
76*0Sstevel@tonic-gate EVP_PBE_alg_add(NID_pbeWithMD2AndDES_CBC, EVP_des_cbc(), EVP_md2(),
77*0Sstevel@tonic-gate 							 PKCS5_PBE_keyivgen);
78*0Sstevel@tonic-gate #  endif
79*0Sstevel@tonic-gate #  ifndef OPENSSL_NO_SHA
80*0Sstevel@tonic-gate EVP_PBE_alg_add(NID_pbeWithSHA1AndDES_CBC, EVP_des_cbc(), EVP_sha1(),
81*0Sstevel@tonic-gate 							 PKCS5_PBE_keyivgen);
82*0Sstevel@tonic-gate #  endif
83*0Sstevel@tonic-gate #endif
84*0Sstevel@tonic-gate #ifndef OPENSSL_NO_RC2
85*0Sstevel@tonic-gate #  ifndef OPENSSL_NO_MD5
86*0Sstevel@tonic-gate EVP_PBE_alg_add(NID_pbeWithMD5AndRC2_CBC, EVP_rc2_64_cbc(), EVP_md5(),
87*0Sstevel@tonic-gate 							 PKCS5_PBE_keyivgen);
88*0Sstevel@tonic-gate #  endif
89*0Sstevel@tonic-gate #  ifndef OPENSSL_NO_MD2
90*0Sstevel@tonic-gate EVP_PBE_alg_add(NID_pbeWithMD2AndRC2_CBC, EVP_rc2_64_cbc(), EVP_md2(),
91*0Sstevel@tonic-gate 							 PKCS5_PBE_keyivgen);
92*0Sstevel@tonic-gate #  endif
93*0Sstevel@tonic-gate #  ifndef OPENSSL_NO_SHA
94*0Sstevel@tonic-gate EVP_PBE_alg_add(NID_pbeWithSHA1AndRC2_CBC, EVP_rc2_64_cbc(), EVP_sha1(),
95*0Sstevel@tonic-gate 							 PKCS5_PBE_keyivgen);
96*0Sstevel@tonic-gate #  endif
97*0Sstevel@tonic-gate #endif
98*0Sstevel@tonic-gate #ifndef OPENSSL_NO_HMAC
99*0Sstevel@tonic-gate EVP_PBE_alg_add(NID_pbes2, NULL, NULL, PKCS5_v2_PBE_keyivgen);
100*0Sstevel@tonic-gate #endif
101*0Sstevel@tonic-gate }
102*0Sstevel@tonic-gate 
103*0Sstevel@tonic-gate int PKCS5_PBE_keyivgen(EVP_CIPHER_CTX *cctx, const char *pass, int passlen,
104*0Sstevel@tonic-gate 			 ASN1_TYPE *param, const EVP_CIPHER *cipher, const EVP_MD *md,
105*0Sstevel@tonic-gate 			 int en_de)
106*0Sstevel@tonic-gate {
107*0Sstevel@tonic-gate 	EVP_MD_CTX ctx;
108*0Sstevel@tonic-gate 	unsigned char md_tmp[EVP_MAX_MD_SIZE];
109*0Sstevel@tonic-gate 	unsigned char key[EVP_MAX_KEY_LENGTH], iv[EVP_MAX_IV_LENGTH];
110*0Sstevel@tonic-gate 	int i;
111*0Sstevel@tonic-gate 	PBEPARAM *pbe;
112*0Sstevel@tonic-gate 	int saltlen, iter;
113*0Sstevel@tonic-gate 	unsigned char *salt, *pbuf;
114*0Sstevel@tonic-gate 
115*0Sstevel@tonic-gate 	/* Extract useful info from parameter */
116*0Sstevel@tonic-gate 	pbuf = param->value.sequence->data;
117*0Sstevel@tonic-gate 	if (!param || (param->type != V_ASN1_SEQUENCE) ||
118*0Sstevel@tonic-gate 	   !(pbe = d2i_PBEPARAM (NULL, &pbuf, param->value.sequence->length))) {
119*0Sstevel@tonic-gate 		EVPerr(EVP_F_PKCS5_PBE_KEYIVGEN,EVP_R_DECODE_ERROR);
120*0Sstevel@tonic-gate 		return 0;
121*0Sstevel@tonic-gate 	}
122*0Sstevel@tonic-gate 
123*0Sstevel@tonic-gate 	if (!pbe->iter) iter = 1;
124*0Sstevel@tonic-gate 	else iter = ASN1_INTEGER_get (pbe->iter);
125*0Sstevel@tonic-gate 	salt = pbe->salt->data;
126*0Sstevel@tonic-gate 	saltlen = pbe->salt->length;
127*0Sstevel@tonic-gate 
128*0Sstevel@tonic-gate 	if(!pass) passlen = 0;
129*0Sstevel@tonic-gate 	else if(passlen == -1) passlen = strlen(pass);
130*0Sstevel@tonic-gate 
131*0Sstevel@tonic-gate 	EVP_MD_CTX_init(&ctx);
132*0Sstevel@tonic-gate 	EVP_DigestInit_ex(&ctx, md, NULL);
133*0Sstevel@tonic-gate 	EVP_DigestUpdate(&ctx, pass, passlen);
134*0Sstevel@tonic-gate 	EVP_DigestUpdate(&ctx, salt, saltlen);
135*0Sstevel@tonic-gate 	PBEPARAM_free(pbe);
136*0Sstevel@tonic-gate 	EVP_DigestFinal_ex(&ctx, md_tmp, NULL);
137*0Sstevel@tonic-gate 	for (i = 1; i < iter; i++) {
138*0Sstevel@tonic-gate 		EVP_DigestInit_ex(&ctx, md, NULL);
139*0Sstevel@tonic-gate 		EVP_DigestUpdate(&ctx, md_tmp, EVP_MD_size(md));
140*0Sstevel@tonic-gate 		EVP_DigestFinal_ex (&ctx, md_tmp, NULL);
141*0Sstevel@tonic-gate 	}
142*0Sstevel@tonic-gate 	EVP_MD_CTX_cleanup(&ctx);
143*0Sstevel@tonic-gate 	OPENSSL_assert(EVP_CIPHER_key_length(cipher) <= sizeof md_tmp);
144*0Sstevel@tonic-gate 	memcpy(key, md_tmp, EVP_CIPHER_key_length(cipher));
145*0Sstevel@tonic-gate 	OPENSSL_assert(EVP_CIPHER_iv_length(cipher) <= 16);
146*0Sstevel@tonic-gate 	memcpy(iv, md_tmp + (16 - EVP_CIPHER_iv_length(cipher)),
147*0Sstevel@tonic-gate 						 EVP_CIPHER_iv_length(cipher));
148*0Sstevel@tonic-gate 	EVP_CipherInit_ex(cctx, cipher, NULL, key, iv, en_de);
149*0Sstevel@tonic-gate 	OPENSSL_cleanse(md_tmp, EVP_MAX_MD_SIZE);
150*0Sstevel@tonic-gate 	OPENSSL_cleanse(key, EVP_MAX_KEY_LENGTH);
151*0Sstevel@tonic-gate 	OPENSSL_cleanse(iv, EVP_MAX_IV_LENGTH);
152*0Sstevel@tonic-gate 	return 1;
153*0Sstevel@tonic-gate }
154