GCC Code Coverage Report
Directory: ./ Exec Total Coverage
File: usr.bin/openssl/dsaparam.c Lines: 67 145 46.2 %
Date: 2017-11-07 Branches: 37 84 44.0 %

Line Branch Exec Source
1
/* $OpenBSD: dsaparam.c,v 1.8 2017/01/20 08:57:12 deraadt Exp $ */
2
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3
 * All rights reserved.
4
 *
5
 * This package is an SSL implementation written
6
 * by Eric Young (eay@cryptsoft.com).
7
 * The implementation was written so as to conform with Netscapes SSL.
8
 *
9
 * This library is free for commercial and non-commercial use as long as
10
 * the following conditions are aheared to.  The following conditions
11
 * apply to all code found in this distribution, be it the RC4, RSA,
12
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13
 * included with this distribution is covered by the same copyright terms
14
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15
 *
16
 * Copyright remains Eric Young's, and as such any Copyright notices in
17
 * the code are not to be removed.
18
 * If this package is used in a product, Eric Young should be given attribution
19
 * as the author of the parts of the library used.
20
 * This can be in the form of a textual message at program startup or
21
 * in documentation (online or textual) provided with the package.
22
 *
23
 * Redistribution and use in source and binary forms, with or without
24
 * modification, are permitted provided that the following conditions
25
 * are met:
26
 * 1. Redistributions of source code must retain the copyright
27
 *    notice, this list of conditions and the following disclaimer.
28
 * 2. Redistributions in binary form must reproduce the above copyright
29
 *    notice, this list of conditions and the following disclaimer in the
30
 *    documentation and/or other materials provided with the distribution.
31
 * 3. All advertising materials mentioning features or use of this software
32
 *    must display the following acknowledgement:
33
 *    "This product includes cryptographic software written by
34
 *     Eric Young (eay@cryptsoft.com)"
35
 *    The word 'cryptographic' can be left out if the rouines from the library
36
 *    being used are not cryptographic related :-).
37
 * 4. If you include any Windows specific code (or a derivative thereof) from
38
 *    the apps directory (application code) you must include an acknowledgement:
39
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40
 *
41
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51
 * SUCH DAMAGE.
52
 *
53
 * The licence and distribution terms for any publically available version or
54
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
55
 * copied and put under another distribution licence
56
 * [including the GNU Public Licence.]
57
 */
58
59
#include <openssl/opensslconf.h>	/* for OPENSSL_NO_DSA */
60
61
/* Until the key-gen callbacks are modified to use newer prototypes, we allow
62
 * deprecated functions for openssl-internal code */
63
#ifdef OPENSSL_NO_DEPRECATED
64
#undef OPENSSL_NO_DEPRECATED
65
#endif
66
67
#include <limits.h>
68
#include <stdio.h>
69
#include <stdlib.h>
70
#include <string.h>
71
#include <time.h>
72
73
#include "apps.h"
74
75
#include <openssl/bio.h>
76
#include <openssl/bn.h>
77
#include <openssl/err.h>
78
#include <openssl/dsa.h>
79
#include <openssl/pem.h>
80
#include <openssl/x509.h>
81
82
static struct {
83
	int C;
84
	int genkey;
85
	char *infile;
86
	int informat;
87
	int noout;
88
	char *outfile;
89
	int outformat;
90
	int text;
91
} dsaparam_config;
92
93
static struct option dsaparam_options[] = {
94
	{
95
		.name = "C",
96
		.desc = "Convert DSA parameters into C code",
97
		.type = OPTION_FLAG,
98
		.opt.flag = &dsaparam_config.C,
99
	},
100
	{
101
		.name = "genkey",
102
		.desc = "Generate a DSA key",
103
		.type = OPTION_FLAG,
104
		.opt.flag = &dsaparam_config.genkey,
105
	},
106
	{
107
		.name = "in",
108
		.argname = "file",
109
		.desc = "Input file (default stdin)",
110
		.type = OPTION_ARG,
111
		.opt.arg = &dsaparam_config.infile,
112
	},
113
	{
114
		.name = "inform",
115
		.argname = "format",
116
		.desc = "Input format (DER or PEM (default))",
117
		.type = OPTION_ARG_FORMAT,
118
		.opt.value = &dsaparam_config.informat,
119
	},
120
	{
121
		.name = "noout",
122
		.desc = "No output",
123
		.type = OPTION_FLAG,
124
		.opt.flag = &dsaparam_config.noout,
125
	},
126
	{
127
		.name = "out",
128
		.argname = "file",
129
		.desc = "Output file (default stdout)",
130
		.type = OPTION_ARG,
131
		.opt.arg = &dsaparam_config.outfile,
132
	},
133
	{
134
		.name = "outform",
135
		.argname = "format",
136
		.desc = "Output format (DER or PEM (default))",
137
		.type = OPTION_ARG_FORMAT,
138
		.opt.value = &dsaparam_config.outformat,
139
	},
140
	{
141
		.name = "text",
142
		.desc = "Print as text",
143
		.type = OPTION_FLAG,
144
		.opt.flag = &dsaparam_config.text,
145
	},
146
	{ NULL },
147
};
148
149
static void
150
dsaparam_usage(void)
151
{
152
16
	fprintf(stderr,
153
	    "usage: dsaparam [-C] [-genkey] [-in file]\n"
154
	    "    [-inform format] [-noout] [-out file] [-outform format]\n"
155
	    "    [-text] [numbits]\n\n");
156
8
	options_usage(dsaparam_options);
157
8
}
158
159
static int dsa_cb(int p, int n, BN_GENCB * cb);
160
161
int
162
dsaparam_main(int argc, char **argv)
163
{
164
	DSA *dsa = NULL;
165
	int i;
166
	BIO *in = NULL, *out = NULL;
167
	int ret = 1;
168
	int numbits = -1;
169
48
	char *strbits = NULL;
170
171
24
	if (single_execution) {
172
24
		if (pledge("stdio cpath wpath rpath flock", NULL) == -1) {
173
			perror("pledge");
174
			exit(1);
175
		}
176
	}
177
178
24
	memset(&dsaparam_config, 0, sizeof(dsaparam_config));
179
180
24
	dsaparam_config.informat = FORMAT_PEM;
181
24
	dsaparam_config.outformat = FORMAT_PEM;
182
183
24
	if (options_parse(argc, argv, dsaparam_options, &strbits, NULL) != 0) {
184
8
		dsaparam_usage();
185
8
		goto end;
186
	}
187
188
16
	if (strbits != NULL) {
189
16
		const char *errstr;
190
16
		numbits = strtonum(strbits, 0, INT_MAX, &errstr);
191
16
		if (errstr) {
192
			fprintf(stderr, "Invalid number of bits: %s", errstr);
193
			goto end;
194
		}
195
32
	}
196
197
16
	in = BIO_new(BIO_s_file());
198
16
	out = BIO_new(BIO_s_file());
199
16
	if (in == NULL || out == NULL) {
200
		ERR_print_errors(bio_err);
201
		goto end;
202
	}
203
16
	if (dsaparam_config.infile == NULL)
204
16
		BIO_set_fp(in, stdin, BIO_NOCLOSE);
205
	else {
206
		if (BIO_read_filename(in, dsaparam_config.infile) <= 0) {
207
			perror(dsaparam_config.infile);
208
			goto end;
209
		}
210
	}
211
16
	if (dsaparam_config.outfile == NULL) {
212
		BIO_set_fp(out, stdout, BIO_NOCLOSE);
213
	} else {
214
16
		if (BIO_write_filename(out, dsaparam_config.outfile) <= 0) {
215
			perror(dsaparam_config.outfile);
216
			goto end;
217
		}
218
	}
219
220
16
	if (numbits > 0) {
221
16
		BN_GENCB cb;
222
16
		BN_GENCB_set(&cb, dsa_cb, bio_err);
223
16
		dsa = DSA_new();
224
16
		if (!dsa) {
225
			BIO_printf(bio_err, "Error allocating DSA object\n");
226
			goto end;
227
		}
228
16
		BIO_printf(bio_err, "Generating DSA parameters, %d bit long prime\n", numbits);
229
16
		BIO_printf(bio_err, "This could take some time\n");
230
16
		if (!DSA_generate_parameters_ex(dsa, numbits, NULL, 0, NULL, NULL, &cb)) {
231
			ERR_print_errors(bio_err);
232
			BIO_printf(bio_err, "Error, DSA key generation failed\n");
233
			goto end;
234
		}
235

48
	} else if (dsaparam_config.informat == FORMAT_ASN1)
236
		dsa = d2i_DSAparams_bio(in, NULL);
237
	else if (dsaparam_config.informat == FORMAT_PEM)
238
		dsa = PEM_read_bio_DSAparams(in, NULL, NULL, NULL);
239
	else {
240
		BIO_printf(bio_err, "bad input format specified\n");
241
		goto end;
242
	}
243
16
	if (dsa == NULL) {
244
		BIO_printf(bio_err, "unable to load DSA parameters\n");
245
		ERR_print_errors(bio_err);
246
		goto end;
247
	}
248
16
	if (dsaparam_config.text) {
249
		DSAparams_print(out, dsa);
250
	}
251
16
	if (dsaparam_config.C) {
252
		unsigned char *data;
253
		int l, len, bits_p;
254
255
		len = BN_num_bytes(dsa->p);
256
		bits_p = BN_num_bits(dsa->p);
257
		data = malloc(len + 20);
258
		if (data == NULL) {
259
			perror("malloc");
260
			goto end;
261
		}
262
		l = BN_bn2bin(dsa->p, data);
263
		printf("static unsigned char dsa%d_p[] = {", bits_p);
264
		for (i = 0; i < l; i++) {
265
			if ((i % 12) == 0)
266
				printf("\n\t");
267
			printf("0x%02X, ", data[i]);
268
		}
269
		printf("\n\t};\n");
270
271
		l = BN_bn2bin(dsa->q, data);
272
		printf("static unsigned char dsa%d_q[] = {", bits_p);
273
		for (i = 0; i < l; i++) {
274
			if ((i % 12) == 0)
275
				printf("\n\t");
276
			printf("0x%02X, ", data[i]);
277
		}
278
		printf("\n\t};\n");
279
280
		l = BN_bn2bin(dsa->g, data);
281
		printf("static unsigned char dsa%d_g[] = {", bits_p);
282
		for (i = 0; i < l; i++) {
283
			if ((i % 12) == 0)
284
				printf("\n\t");
285
			printf("0x%02X, ", data[i]);
286
		}
287
		free(data);
288
		printf("\n\t};\n\n");
289
290
		printf("DSA *get_dsa%d()\n\t{\n", bits_p);
291
		printf("\tDSA *dsa;\n\n");
292
		printf("\tif ((dsa = DSA_new()) == NULL) return(NULL);\n");
293
		printf("\tdsa->p = BN_bin2bn(dsa%d_p, sizeof(dsa%d_p), NULL);\n",
294
		    bits_p, bits_p);
295
		printf("\tdsa->q = BN_bin2bn(dsa%d_q, sizeof(dsa%d_q), NULL);\n",
296
		    bits_p, bits_p);
297
		printf("\tdsa->g = BN_bin2bn(dsa%d_g, sizeof(dsa%d_g), NULL);\n",
298
		    bits_p, bits_p);
299
		printf("\tif ((dsa->p == NULL) || (dsa->q == NULL) || (dsa->g == NULL))\n");
300
		printf("\t\t{ DSA_free(dsa); return(NULL); }\n");
301
		printf("\treturn(dsa);\n\t}\n");
302
	}
303
16
	if (!dsaparam_config.noout) {
304
16
		if (dsaparam_config.outformat == FORMAT_ASN1)
305
			i = i2d_DSAparams_bio(out, dsa);
306
16
		else if (dsaparam_config.outformat == FORMAT_PEM)
307
16
			i = PEM_write_bio_DSAparams(out, dsa);
308
		else {
309
			BIO_printf(bio_err, "bad output format specified for outfile\n");
310
			goto end;
311
		}
312
16
		if (!i) {
313
			BIO_printf(bio_err, "unable to write DSA parameters\n");
314
			ERR_print_errors(bio_err);
315
			goto end;
316
		}
317
	}
318
16
	if (dsaparam_config.genkey) {
319
		DSA *dsakey;
320
321
8
		if ((dsakey = DSAparams_dup(dsa)) == NULL)
322
			goto end;
323
8
		if (!DSA_generate_key(dsakey)) {
324
			ERR_print_errors(bio_err);
325
			DSA_free(dsakey);
326
			goto end;
327
		}
328
8
		if (dsaparam_config.outformat == FORMAT_ASN1)
329
			i = i2d_DSAPrivateKey_bio(out, dsakey);
330
8
		else if (dsaparam_config.outformat == FORMAT_PEM)
331
8
			i = PEM_write_bio_DSAPrivateKey(out, dsakey, NULL, NULL, 0, NULL, NULL);
332
		else {
333
			BIO_printf(bio_err, "bad output format specified for outfile\n");
334
			DSA_free(dsakey);
335
			goto end;
336
		}
337
8
		DSA_free(dsakey);
338
8
	}
339
16
	ret = 0;
340
341
end:
342
24
	BIO_free(in);
343
24
	if (out != NULL)
344
16
		BIO_free_all(out);
345
24
	if (dsa != NULL)
346
16
		DSA_free(dsa);
347
348
24
	return (ret);
349
24
}
350
351
static int
352
dsa_cb(int p, int n, BN_GENCB * cb)
353
{
354
11906
	char c = '*';
355
356
5953
	if (p == 0)
357
		c = '.';
358
5953
	if (p == 1)
359
		c = '+';
360
5953
	if (p == 2)
361
		c = '*';
362
5953
	if (p == 3)
363
5953
		c = '\n';
364
5953
	BIO_write(cb->arg, &c, 1);
365
5953
	(void) BIO_flush(cb->arg);
366
#ifdef GENCB_TEST
367
	if (stop_keygen_flag)
368
		return 0;
369
#endif
370
5953
	return 1;
371
5953
}