1 |
|
|
/* $OpenBSD: dsaparam.c,v 1.8 2017/01/20 08:57:12 deraadt Exp $ */ |
2 |
|
|
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
3 |
|
|
* All rights reserved. |
4 |
|
|
* |
5 |
|
|
* This package is an SSL implementation written |
6 |
|
|
* by Eric Young (eay@cryptsoft.com). |
7 |
|
|
* The implementation was written so as to conform with Netscapes SSL. |
8 |
|
|
* |
9 |
|
|
* This library is free for commercial and non-commercial use as long as |
10 |
|
|
* the following conditions are aheared to. The following conditions |
11 |
|
|
* apply to all code found in this distribution, be it the RC4, RSA, |
12 |
|
|
* lhash, DES, etc., code; not just the SSL code. The SSL documentation |
13 |
|
|
* included with this distribution is covered by the same copyright terms |
14 |
|
|
* except that the holder is Tim Hudson (tjh@cryptsoft.com). |
15 |
|
|
* |
16 |
|
|
* Copyright remains Eric Young's, and as such any Copyright notices in |
17 |
|
|
* the code are not to be removed. |
18 |
|
|
* If this package is used in a product, Eric Young should be given attribution |
19 |
|
|
* as the author of the parts of the library used. |
20 |
|
|
* This can be in the form of a textual message at program startup or |
21 |
|
|
* in documentation (online or textual) provided with the package. |
22 |
|
|
* |
23 |
|
|
* Redistribution and use in source and binary forms, with or without |
24 |
|
|
* modification, are permitted provided that the following conditions |
25 |
|
|
* are met: |
26 |
|
|
* 1. Redistributions of source code must retain the copyright |
27 |
|
|
* notice, this list of conditions and the following disclaimer. |
28 |
|
|
* 2. Redistributions in binary form must reproduce the above copyright |
29 |
|
|
* notice, this list of conditions and the following disclaimer in the |
30 |
|
|
* documentation and/or other materials provided with the distribution. |
31 |
|
|
* 3. All advertising materials mentioning features or use of this software |
32 |
|
|
* must display the following acknowledgement: |
33 |
|
|
* "This product includes cryptographic software written by |
34 |
|
|
* Eric Young (eay@cryptsoft.com)" |
35 |
|
|
* The word 'cryptographic' can be left out if the rouines from the library |
36 |
|
|
* being used are not cryptographic related :-). |
37 |
|
|
* 4. If you include any Windows specific code (or a derivative thereof) from |
38 |
|
|
* the apps directory (application code) you must include an acknowledgement: |
39 |
|
|
* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" |
40 |
|
|
* |
41 |
|
|
* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND |
42 |
|
|
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
43 |
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
44 |
|
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE |
45 |
|
|
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL |
46 |
|
|
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS |
47 |
|
|
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) |
48 |
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT |
49 |
|
|
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY |
50 |
|
|
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF |
51 |
|
|
* SUCH DAMAGE. |
52 |
|
|
* |
53 |
|
|
* The licence and distribution terms for any publically available version or |
54 |
|
|
* derivative of this code cannot be changed. i.e. this code cannot simply be |
55 |
|
|
* copied and put under another distribution licence |
56 |
|
|
* [including the GNU Public Licence.] |
57 |
|
|
*/ |
58 |
|
|
|
59 |
|
|
#include <openssl/opensslconf.h> /* for OPENSSL_NO_DSA */ |
60 |
|
|
|
61 |
|
|
/* Until the key-gen callbacks are modified to use newer prototypes, we allow |
62 |
|
|
* deprecated functions for openssl-internal code */ |
63 |
|
|
#ifdef OPENSSL_NO_DEPRECATED |
64 |
|
|
#undef OPENSSL_NO_DEPRECATED |
65 |
|
|
#endif |
66 |
|
|
|
67 |
|
|
#include <limits.h> |
68 |
|
|
#include <stdio.h> |
69 |
|
|
#include <stdlib.h> |
70 |
|
|
#include <string.h> |
71 |
|
|
#include <time.h> |
72 |
|
|
|
73 |
|
|
#include "apps.h" |
74 |
|
|
|
75 |
|
|
#include <openssl/bio.h> |
76 |
|
|
#include <openssl/bn.h> |
77 |
|
|
#include <openssl/err.h> |
78 |
|
|
#include <openssl/dsa.h> |
79 |
|
|
#include <openssl/pem.h> |
80 |
|
|
#include <openssl/x509.h> |
81 |
|
|
|
82 |
|
|
static struct { |
83 |
|
|
int C; |
84 |
|
|
int genkey; |
85 |
|
|
char *infile; |
86 |
|
|
int informat; |
87 |
|
|
int noout; |
88 |
|
|
char *outfile; |
89 |
|
|
int outformat; |
90 |
|
|
int text; |
91 |
|
|
} dsaparam_config; |
92 |
|
|
|
93 |
|
|
static struct option dsaparam_options[] = { |
94 |
|
|
{ |
95 |
|
|
.name = "C", |
96 |
|
|
.desc = "Convert DSA parameters into C code", |
97 |
|
|
.type = OPTION_FLAG, |
98 |
|
|
.opt.flag = &dsaparam_config.C, |
99 |
|
|
}, |
100 |
|
|
{ |
101 |
|
|
.name = "genkey", |
102 |
|
|
.desc = "Generate a DSA key", |
103 |
|
|
.type = OPTION_FLAG, |
104 |
|
|
.opt.flag = &dsaparam_config.genkey, |
105 |
|
|
}, |
106 |
|
|
{ |
107 |
|
|
.name = "in", |
108 |
|
|
.argname = "file", |
109 |
|
|
.desc = "Input file (default stdin)", |
110 |
|
|
.type = OPTION_ARG, |
111 |
|
|
.opt.arg = &dsaparam_config.infile, |
112 |
|
|
}, |
113 |
|
|
{ |
114 |
|
|
.name = "inform", |
115 |
|
|
.argname = "format", |
116 |
|
|
.desc = "Input format (DER or PEM (default))", |
117 |
|
|
.type = OPTION_ARG_FORMAT, |
118 |
|
|
.opt.value = &dsaparam_config.informat, |
119 |
|
|
}, |
120 |
|
|
{ |
121 |
|
|
.name = "noout", |
122 |
|
|
.desc = "No output", |
123 |
|
|
.type = OPTION_FLAG, |
124 |
|
|
.opt.flag = &dsaparam_config.noout, |
125 |
|
|
}, |
126 |
|
|
{ |
127 |
|
|
.name = "out", |
128 |
|
|
.argname = "file", |
129 |
|
|
.desc = "Output file (default stdout)", |
130 |
|
|
.type = OPTION_ARG, |
131 |
|
|
.opt.arg = &dsaparam_config.outfile, |
132 |
|
|
}, |
133 |
|
|
{ |
134 |
|
|
.name = "outform", |
135 |
|
|
.argname = "format", |
136 |
|
|
.desc = "Output format (DER or PEM (default))", |
137 |
|
|
.type = OPTION_ARG_FORMAT, |
138 |
|
|
.opt.value = &dsaparam_config.outformat, |
139 |
|
|
}, |
140 |
|
|
{ |
141 |
|
|
.name = "text", |
142 |
|
|
.desc = "Print as text", |
143 |
|
|
.type = OPTION_FLAG, |
144 |
|
|
.opt.flag = &dsaparam_config.text, |
145 |
|
|
}, |
146 |
|
|
{ NULL }, |
147 |
|
|
}; |
148 |
|
|
|
149 |
|
|
static void |
150 |
|
|
dsaparam_usage(void) |
151 |
|
|
{ |
152 |
|
16 |
fprintf(stderr, |
153 |
|
|
"usage: dsaparam [-C] [-genkey] [-in file]\n" |
154 |
|
|
" [-inform format] [-noout] [-out file] [-outform format]\n" |
155 |
|
|
" [-text] [numbits]\n\n"); |
156 |
|
8 |
options_usage(dsaparam_options); |
157 |
|
8 |
} |
158 |
|
|
|
159 |
|
|
static int dsa_cb(int p, int n, BN_GENCB * cb); |
160 |
|
|
|
161 |
|
|
int |
162 |
|
|
dsaparam_main(int argc, char **argv) |
163 |
|
|
{ |
164 |
|
|
DSA *dsa = NULL; |
165 |
|
|
int i; |
166 |
|
|
BIO *in = NULL, *out = NULL; |
167 |
|
|
int ret = 1; |
168 |
|
|
int numbits = -1; |
169 |
|
48 |
char *strbits = NULL; |
170 |
|
|
|
171 |
✓✗ |
24 |
if (single_execution) { |
172 |
✗✓ |
24 |
if (pledge("stdio cpath wpath rpath flock", NULL) == -1) { |
173 |
|
|
perror("pledge"); |
174 |
|
|
exit(1); |
175 |
|
|
} |
176 |
|
|
} |
177 |
|
|
|
178 |
|
24 |
memset(&dsaparam_config, 0, sizeof(dsaparam_config)); |
179 |
|
|
|
180 |
|
24 |
dsaparam_config.informat = FORMAT_PEM; |
181 |
|
24 |
dsaparam_config.outformat = FORMAT_PEM; |
182 |
|
|
|
183 |
✓✓ |
24 |
if (options_parse(argc, argv, dsaparam_options, &strbits, NULL) != 0) { |
184 |
|
8 |
dsaparam_usage(); |
185 |
|
8 |
goto end; |
186 |
|
|
} |
187 |
|
|
|
188 |
✓✗ |
16 |
if (strbits != NULL) { |
189 |
|
16 |
const char *errstr; |
190 |
|
16 |
numbits = strtonum(strbits, 0, INT_MAX, &errstr); |
191 |
✗✓ |
16 |
if (errstr) { |
192 |
|
|
fprintf(stderr, "Invalid number of bits: %s", errstr); |
193 |
|
|
goto end; |
194 |
|
|
} |
195 |
✓✗✗ |
32 |
} |
196 |
|
|
|
197 |
|
16 |
in = BIO_new(BIO_s_file()); |
198 |
|
16 |
out = BIO_new(BIO_s_file()); |
199 |
✗✓ |
16 |
if (in == NULL || out == NULL) { |
200 |
|
|
ERR_print_errors(bio_err); |
201 |
|
|
goto end; |
202 |
|
|
} |
203 |
✓✗ |
16 |
if (dsaparam_config.infile == NULL) |
204 |
|
16 |
BIO_set_fp(in, stdin, BIO_NOCLOSE); |
205 |
|
|
else { |
206 |
|
|
if (BIO_read_filename(in, dsaparam_config.infile) <= 0) { |
207 |
|
|
perror(dsaparam_config.infile); |
208 |
|
|
goto end; |
209 |
|
|
} |
210 |
|
|
} |
211 |
✗✓ |
16 |
if (dsaparam_config.outfile == NULL) { |
212 |
|
|
BIO_set_fp(out, stdout, BIO_NOCLOSE); |
213 |
|
|
} else { |
214 |
✗✓ |
16 |
if (BIO_write_filename(out, dsaparam_config.outfile) <= 0) { |
215 |
|
|
perror(dsaparam_config.outfile); |
216 |
|
|
goto end; |
217 |
|
|
} |
218 |
|
|
} |
219 |
|
|
|
220 |
✓✗ |
16 |
if (numbits > 0) { |
221 |
|
16 |
BN_GENCB cb; |
222 |
|
16 |
BN_GENCB_set(&cb, dsa_cb, bio_err); |
223 |
|
16 |
dsa = DSA_new(); |
224 |
✗✓ |
16 |
if (!dsa) { |
225 |
|
|
BIO_printf(bio_err, "Error allocating DSA object\n"); |
226 |
|
|
goto end; |
227 |
|
|
} |
228 |
|
16 |
BIO_printf(bio_err, "Generating DSA parameters, %d bit long prime\n", numbits); |
229 |
|
16 |
BIO_printf(bio_err, "This could take some time\n"); |
230 |
✗✓ |
16 |
if (!DSA_generate_parameters_ex(dsa, numbits, NULL, 0, NULL, NULL, &cb)) { |
231 |
|
|
ERR_print_errors(bio_err); |
232 |
|
|
BIO_printf(bio_err, "Error, DSA key generation failed\n"); |
233 |
|
|
goto end; |
234 |
|
|
} |
235 |
✓✓✓✗ ✗ |
48 |
} else if (dsaparam_config.informat == FORMAT_ASN1) |
236 |
|
|
dsa = d2i_DSAparams_bio(in, NULL); |
237 |
|
|
else if (dsaparam_config.informat == FORMAT_PEM) |
238 |
|
|
dsa = PEM_read_bio_DSAparams(in, NULL, NULL, NULL); |
239 |
|
|
else { |
240 |
|
|
BIO_printf(bio_err, "bad input format specified\n"); |
241 |
|
|
goto end; |
242 |
|
|
} |
243 |
✗✓ |
16 |
if (dsa == NULL) { |
244 |
|
|
BIO_printf(bio_err, "unable to load DSA parameters\n"); |
245 |
|
|
ERR_print_errors(bio_err); |
246 |
|
|
goto end; |
247 |
|
|
} |
248 |
✗✓ |
16 |
if (dsaparam_config.text) { |
249 |
|
|
DSAparams_print(out, dsa); |
250 |
|
|
} |
251 |
✗✓ |
16 |
if (dsaparam_config.C) { |
252 |
|
|
unsigned char *data; |
253 |
|
|
int l, len, bits_p; |
254 |
|
|
|
255 |
|
|
len = BN_num_bytes(dsa->p); |
256 |
|
|
bits_p = BN_num_bits(dsa->p); |
257 |
|
|
data = malloc(len + 20); |
258 |
|
|
if (data == NULL) { |
259 |
|
|
perror("malloc"); |
260 |
|
|
goto end; |
261 |
|
|
} |
262 |
|
|
l = BN_bn2bin(dsa->p, data); |
263 |
|
|
printf("static unsigned char dsa%d_p[] = {", bits_p); |
264 |
|
|
for (i = 0; i < l; i++) { |
265 |
|
|
if ((i % 12) == 0) |
266 |
|
|
printf("\n\t"); |
267 |
|
|
printf("0x%02X, ", data[i]); |
268 |
|
|
} |
269 |
|
|
printf("\n\t};\n"); |
270 |
|
|
|
271 |
|
|
l = BN_bn2bin(dsa->q, data); |
272 |
|
|
printf("static unsigned char dsa%d_q[] = {", bits_p); |
273 |
|
|
for (i = 0; i < l; i++) { |
274 |
|
|
if ((i % 12) == 0) |
275 |
|
|
printf("\n\t"); |
276 |
|
|
printf("0x%02X, ", data[i]); |
277 |
|
|
} |
278 |
|
|
printf("\n\t};\n"); |
279 |
|
|
|
280 |
|
|
l = BN_bn2bin(dsa->g, data); |
281 |
|
|
printf("static unsigned char dsa%d_g[] = {", bits_p); |
282 |
|
|
for (i = 0; i < l; i++) { |
283 |
|
|
if ((i % 12) == 0) |
284 |
|
|
printf("\n\t"); |
285 |
|
|
printf("0x%02X, ", data[i]); |
286 |
|
|
} |
287 |
|
|
free(data); |
288 |
|
|
printf("\n\t};\n\n"); |
289 |
|
|
|
290 |
|
|
printf("DSA *get_dsa%d()\n\t{\n", bits_p); |
291 |
|
|
printf("\tDSA *dsa;\n\n"); |
292 |
|
|
printf("\tif ((dsa = DSA_new()) == NULL) return(NULL);\n"); |
293 |
|
|
printf("\tdsa->p = BN_bin2bn(dsa%d_p, sizeof(dsa%d_p), NULL);\n", |
294 |
|
|
bits_p, bits_p); |
295 |
|
|
printf("\tdsa->q = BN_bin2bn(dsa%d_q, sizeof(dsa%d_q), NULL);\n", |
296 |
|
|
bits_p, bits_p); |
297 |
|
|
printf("\tdsa->g = BN_bin2bn(dsa%d_g, sizeof(dsa%d_g), NULL);\n", |
298 |
|
|
bits_p, bits_p); |
299 |
|
|
printf("\tif ((dsa->p == NULL) || (dsa->q == NULL) || (dsa->g == NULL))\n"); |
300 |
|
|
printf("\t\t{ DSA_free(dsa); return(NULL); }\n"); |
301 |
|
|
printf("\treturn(dsa);\n\t}\n"); |
302 |
|
|
} |
303 |
✓✗ |
16 |
if (!dsaparam_config.noout) { |
304 |
✗✓ |
16 |
if (dsaparam_config.outformat == FORMAT_ASN1) |
305 |
|
|
i = i2d_DSAparams_bio(out, dsa); |
306 |
✓✗ |
16 |
else if (dsaparam_config.outformat == FORMAT_PEM) |
307 |
|
16 |
i = PEM_write_bio_DSAparams(out, dsa); |
308 |
|
|
else { |
309 |
|
|
BIO_printf(bio_err, "bad output format specified for outfile\n"); |
310 |
|
|
goto end; |
311 |
|
|
} |
312 |
✗✓ |
16 |
if (!i) { |
313 |
|
|
BIO_printf(bio_err, "unable to write DSA parameters\n"); |
314 |
|
|
ERR_print_errors(bio_err); |
315 |
|
|
goto end; |
316 |
|
|
} |
317 |
|
|
} |
318 |
✓✓ |
16 |
if (dsaparam_config.genkey) { |
319 |
|
|
DSA *dsakey; |
320 |
|
|
|
321 |
✗✓ |
8 |
if ((dsakey = DSAparams_dup(dsa)) == NULL) |
322 |
|
|
goto end; |
323 |
✗✓ |
8 |
if (!DSA_generate_key(dsakey)) { |
324 |
|
|
ERR_print_errors(bio_err); |
325 |
|
|
DSA_free(dsakey); |
326 |
|
|
goto end; |
327 |
|
|
} |
328 |
✗✓ |
8 |
if (dsaparam_config.outformat == FORMAT_ASN1) |
329 |
|
|
i = i2d_DSAPrivateKey_bio(out, dsakey); |
330 |
✓✗ |
8 |
else if (dsaparam_config.outformat == FORMAT_PEM) |
331 |
|
8 |
i = PEM_write_bio_DSAPrivateKey(out, dsakey, NULL, NULL, 0, NULL, NULL); |
332 |
|
|
else { |
333 |
|
|
BIO_printf(bio_err, "bad output format specified for outfile\n"); |
334 |
|
|
DSA_free(dsakey); |
335 |
|
|
goto end; |
336 |
|
|
} |
337 |
|
8 |
DSA_free(dsakey); |
338 |
✓✓✓ |
8 |
} |
339 |
|
16 |
ret = 0; |
340 |
|
|
|
341 |
|
|
end: |
342 |
|
24 |
BIO_free(in); |
343 |
✓✓ |
24 |
if (out != NULL) |
344 |
|
16 |
BIO_free_all(out); |
345 |
✓✓ |
24 |
if (dsa != NULL) |
346 |
|
16 |
DSA_free(dsa); |
347 |
|
|
|
348 |
|
24 |
return (ret); |
349 |
|
24 |
} |
350 |
|
|
|
351 |
|
|
static int |
352 |
|
|
dsa_cb(int p, int n, BN_GENCB * cb) |
353 |
|
|
{ |
354 |
|
11906 |
char c = '*'; |
355 |
|
|
|
356 |
|
5953 |
if (p == 0) |
357 |
|
|
c = '.'; |
358 |
|
5953 |
if (p == 1) |
359 |
|
|
c = '+'; |
360 |
|
5953 |
if (p == 2) |
361 |
|
|
c = '*'; |
362 |
|
5953 |
if (p == 3) |
363 |
|
5953 |
c = '\n'; |
364 |
|
5953 |
BIO_write(cb->arg, &c, 1); |
365 |
|
5953 |
(void) BIO_flush(cb->arg); |
366 |
|
|
#ifdef GENCB_TEST |
367 |
|
|
if (stop_keygen_flag) |
368 |
|
|
return 0; |
369 |
|
|
#endif |
370 |
|
5953 |
return 1; |
371 |
|
5953 |
} |