1*0957b409SSimon J. Gerraty /*
2*0957b409SSimon J. Gerraty * Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
3*0957b409SSimon J. Gerraty *
4*0957b409SSimon J. Gerraty * Permission is hereby granted, free of charge, to any person obtaining
5*0957b409SSimon J. Gerraty * a copy of this software and associated documentation files (the
6*0957b409SSimon J. Gerraty * "Software"), to deal in the Software without restriction, including
7*0957b409SSimon J. Gerraty * without limitation the rights to use, copy, modify, merge, publish,
8*0957b409SSimon J. Gerraty * distribute, sublicense, and/or sell copies of the Software, and to
9*0957b409SSimon J. Gerraty * permit persons to whom the Software is furnished to do so, subject to
10*0957b409SSimon J. Gerraty * the following conditions:
11*0957b409SSimon J. Gerraty *
12*0957b409SSimon J. Gerraty * The above copyright notice and this permission notice shall be
13*0957b409SSimon J. Gerraty * included in all copies or substantial portions of the Software.
14*0957b409SSimon J. Gerraty *
15*0957b409SSimon J. Gerraty * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
16*0957b409SSimon J. Gerraty * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
17*0957b409SSimon J. Gerraty * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
18*0957b409SSimon J. Gerraty * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
19*0957b409SSimon J. Gerraty * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
20*0957b409SSimon J. Gerraty * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
21*0957b409SSimon J. Gerraty * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
22*0957b409SSimon J. Gerraty * SOFTWARE.
23*0957b409SSimon J. Gerraty */
24*0957b409SSimon J. Gerraty
25*0957b409SSimon J. Gerraty #include <stdio.h>
26*0957b409SSimon J. Gerraty #include <stdlib.h>
27*0957b409SSimon J. Gerraty #include <string.h>
28*0957b409SSimon J. Gerraty #include <stdint.h>
29*0957b409SSimon J. Gerraty #include <errno.h>
30*0957b409SSimon J. Gerraty
31*0957b409SSimon J. Gerraty #include "brssl.h"
32*0957b409SSimon J. Gerraty #include "bearssl.h"
33*0957b409SSimon J. Gerraty
34*0957b409SSimon J. Gerraty static private_key *
decode_key(const unsigned char * buf,size_t len)35*0957b409SSimon J. Gerraty decode_key(const unsigned char *buf, size_t len)
36*0957b409SSimon J. Gerraty {
37*0957b409SSimon J. Gerraty br_skey_decoder_context dc;
38*0957b409SSimon J. Gerraty int err;
39*0957b409SSimon J. Gerraty private_key *sk;
40*0957b409SSimon J. Gerraty
41*0957b409SSimon J. Gerraty br_skey_decoder_init(&dc);
42*0957b409SSimon J. Gerraty br_skey_decoder_push(&dc, buf, len);
43*0957b409SSimon J. Gerraty err = br_skey_decoder_last_error(&dc);
44*0957b409SSimon J. Gerraty if (err != 0) {
45*0957b409SSimon J. Gerraty const char *errname, *errmsg;
46*0957b409SSimon J. Gerraty
47*0957b409SSimon J. Gerraty fprintf(stderr, "ERROR (decoding): err=%d\n", err);
48*0957b409SSimon J. Gerraty errname = find_error_name(err, &errmsg);
49*0957b409SSimon J. Gerraty if (errname != NULL) {
50*0957b409SSimon J. Gerraty fprintf(stderr, " %s: %s\n", errname, errmsg);
51*0957b409SSimon J. Gerraty } else {
52*0957b409SSimon J. Gerraty fprintf(stderr, " (unknown)\n");
53*0957b409SSimon J. Gerraty }
54*0957b409SSimon J. Gerraty return NULL;
55*0957b409SSimon J. Gerraty }
56*0957b409SSimon J. Gerraty switch (br_skey_decoder_key_type(&dc)) {
57*0957b409SSimon J. Gerraty const br_rsa_private_key *rk;
58*0957b409SSimon J. Gerraty const br_ec_private_key *ek;
59*0957b409SSimon J. Gerraty
60*0957b409SSimon J. Gerraty case BR_KEYTYPE_RSA:
61*0957b409SSimon J. Gerraty rk = br_skey_decoder_get_rsa(&dc);
62*0957b409SSimon J. Gerraty sk = xmalloc(sizeof *sk);
63*0957b409SSimon J. Gerraty sk->key_type = BR_KEYTYPE_RSA;
64*0957b409SSimon J. Gerraty sk->key.rsa.n_bitlen = rk->n_bitlen;
65*0957b409SSimon J. Gerraty sk->key.rsa.p = xblobdup(rk->p, rk->plen);
66*0957b409SSimon J. Gerraty sk->key.rsa.plen = rk->plen;
67*0957b409SSimon J. Gerraty sk->key.rsa.q = xblobdup(rk->q, rk->qlen);
68*0957b409SSimon J. Gerraty sk->key.rsa.qlen = rk->qlen;
69*0957b409SSimon J. Gerraty sk->key.rsa.dp = xblobdup(rk->dp, rk->dplen);
70*0957b409SSimon J. Gerraty sk->key.rsa.dplen = rk->dplen;
71*0957b409SSimon J. Gerraty sk->key.rsa.dq = xblobdup(rk->dq, rk->dqlen);
72*0957b409SSimon J. Gerraty sk->key.rsa.dqlen = rk->dqlen;
73*0957b409SSimon J. Gerraty sk->key.rsa.iq = xblobdup(rk->iq, rk->iqlen);
74*0957b409SSimon J. Gerraty sk->key.rsa.iqlen = rk->iqlen;
75*0957b409SSimon J. Gerraty break;
76*0957b409SSimon J. Gerraty
77*0957b409SSimon J. Gerraty case BR_KEYTYPE_EC:
78*0957b409SSimon J. Gerraty ek = br_skey_decoder_get_ec(&dc);
79*0957b409SSimon J. Gerraty sk = xmalloc(sizeof *sk);
80*0957b409SSimon J. Gerraty sk->key_type = BR_KEYTYPE_EC;
81*0957b409SSimon J. Gerraty sk->key.ec.curve = ek->curve;
82*0957b409SSimon J. Gerraty sk->key.ec.x = xblobdup(ek->x, ek->xlen);
83*0957b409SSimon J. Gerraty sk->key.ec.xlen = ek->xlen;
84*0957b409SSimon J. Gerraty break;
85*0957b409SSimon J. Gerraty
86*0957b409SSimon J. Gerraty default:
87*0957b409SSimon J. Gerraty fprintf(stderr, "Unknown key type: %d\n",
88*0957b409SSimon J. Gerraty br_skey_decoder_key_type(&dc));
89*0957b409SSimon J. Gerraty sk = NULL;
90*0957b409SSimon J. Gerraty break;
91*0957b409SSimon J. Gerraty }
92*0957b409SSimon J. Gerraty
93*0957b409SSimon J. Gerraty return sk;
94*0957b409SSimon J. Gerraty }
95*0957b409SSimon J. Gerraty
96*0957b409SSimon J. Gerraty /* see brssl.h */
97*0957b409SSimon J. Gerraty private_key *
read_private_key(const char * fname)98*0957b409SSimon J. Gerraty read_private_key(const char *fname)
99*0957b409SSimon J. Gerraty {
100*0957b409SSimon J. Gerraty unsigned char *buf;
101*0957b409SSimon J. Gerraty size_t len;
102*0957b409SSimon J. Gerraty private_key *sk;
103*0957b409SSimon J. Gerraty pem_object *pos;
104*0957b409SSimon J. Gerraty size_t num, u;
105*0957b409SSimon J. Gerraty
106*0957b409SSimon J. Gerraty buf = NULL;
107*0957b409SSimon J. Gerraty pos = NULL;
108*0957b409SSimon J. Gerraty sk = NULL;
109*0957b409SSimon J. Gerraty buf = read_file(fname, &len);
110*0957b409SSimon J. Gerraty if (buf == NULL) {
111*0957b409SSimon J. Gerraty goto deckey_exit;
112*0957b409SSimon J. Gerraty }
113*0957b409SSimon J. Gerraty if (looks_like_DER(buf, len)) {
114*0957b409SSimon J. Gerraty sk = decode_key(buf, len);
115*0957b409SSimon J. Gerraty goto deckey_exit;
116*0957b409SSimon J. Gerraty } else {
117*0957b409SSimon J. Gerraty pos = decode_pem(buf, len, &num);
118*0957b409SSimon J. Gerraty if (pos == NULL) {
119*0957b409SSimon J. Gerraty goto deckey_exit;
120*0957b409SSimon J. Gerraty }
121*0957b409SSimon J. Gerraty for (u = 0; pos[u].name; u ++) {
122*0957b409SSimon J. Gerraty const char *name;
123*0957b409SSimon J. Gerraty
124*0957b409SSimon J. Gerraty name = pos[u].name;
125*0957b409SSimon J. Gerraty if (eqstr(name, "RSA PRIVATE KEY")
126*0957b409SSimon J. Gerraty || eqstr(name, "EC PRIVATE KEY")
127*0957b409SSimon J. Gerraty || eqstr(name, "PRIVATE KEY"))
128*0957b409SSimon J. Gerraty {
129*0957b409SSimon J. Gerraty sk = decode_key(pos[u].data, pos[u].data_len);
130*0957b409SSimon J. Gerraty goto deckey_exit;
131*0957b409SSimon J. Gerraty }
132*0957b409SSimon J. Gerraty }
133*0957b409SSimon J. Gerraty fprintf(stderr, "ERROR: no private key in file '%s'\n", fname);
134*0957b409SSimon J. Gerraty goto deckey_exit;
135*0957b409SSimon J. Gerraty }
136*0957b409SSimon J. Gerraty
137*0957b409SSimon J. Gerraty deckey_exit:
138*0957b409SSimon J. Gerraty if (buf != NULL) {
139*0957b409SSimon J. Gerraty xfree(buf);
140*0957b409SSimon J. Gerraty }
141*0957b409SSimon J. Gerraty if (pos != NULL) {
142*0957b409SSimon J. Gerraty for (u = 0; pos[u].name; u ++) {
143*0957b409SSimon J. Gerraty free_pem_object_contents(&pos[u]);
144*0957b409SSimon J. Gerraty }
145*0957b409SSimon J. Gerraty xfree(pos);
146*0957b409SSimon J. Gerraty }
147*0957b409SSimon J. Gerraty return sk;
148*0957b409SSimon J. Gerraty }
149*0957b409SSimon J. Gerraty
150*0957b409SSimon J. Gerraty /* see brssl.h */
151*0957b409SSimon J. Gerraty void
free_private_key(private_key * sk)152*0957b409SSimon J. Gerraty free_private_key(private_key *sk)
153*0957b409SSimon J. Gerraty {
154*0957b409SSimon J. Gerraty if (sk == NULL) {
155*0957b409SSimon J. Gerraty return;
156*0957b409SSimon J. Gerraty }
157*0957b409SSimon J. Gerraty switch (sk->key_type) {
158*0957b409SSimon J. Gerraty case BR_KEYTYPE_RSA:
159*0957b409SSimon J. Gerraty xfree(sk->key.rsa.p);
160*0957b409SSimon J. Gerraty xfree(sk->key.rsa.q);
161*0957b409SSimon J. Gerraty xfree(sk->key.rsa.dp);
162*0957b409SSimon J. Gerraty xfree(sk->key.rsa.dq);
163*0957b409SSimon J. Gerraty xfree(sk->key.rsa.iq);
164*0957b409SSimon J. Gerraty break;
165*0957b409SSimon J. Gerraty case BR_KEYTYPE_EC:
166*0957b409SSimon J. Gerraty xfree(sk->key.ec.x);
167*0957b409SSimon J. Gerraty break;
168*0957b409SSimon J. Gerraty }
169*0957b409SSimon J. Gerraty xfree(sk);
170*0957b409SSimon J. Gerraty }
171*0957b409SSimon J. Gerraty
172*0957b409SSimon J. Gerraty /*
173*0957b409SSimon J. Gerraty * OID for hash functions in RSA signatures.
174*0957b409SSimon J. Gerraty */
175*0957b409SSimon J. Gerraty static const unsigned char HASH_OID_SHA1[] = {
176*0957b409SSimon J. Gerraty 0x05, 0x2B, 0x0E, 0x03, 0x02, 0x1A
177*0957b409SSimon J. Gerraty };
178*0957b409SSimon J. Gerraty
179*0957b409SSimon J. Gerraty static const unsigned char HASH_OID_SHA224[] = {
180*0957b409SSimon J. Gerraty 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x04
181*0957b409SSimon J. Gerraty };
182*0957b409SSimon J. Gerraty
183*0957b409SSimon J. Gerraty static const unsigned char HASH_OID_SHA256[] = {
184*0957b409SSimon J. Gerraty 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x01
185*0957b409SSimon J. Gerraty };
186*0957b409SSimon J. Gerraty
187*0957b409SSimon J. Gerraty static const unsigned char HASH_OID_SHA384[] = {
188*0957b409SSimon J. Gerraty 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x02
189*0957b409SSimon J. Gerraty };
190*0957b409SSimon J. Gerraty
191*0957b409SSimon J. Gerraty static const unsigned char HASH_OID_SHA512[] = {
192*0957b409SSimon J. Gerraty 0x09, 0x60, 0x86, 0x48, 0x01, 0x65, 0x03, 0x04, 0x02, 0x03
193*0957b409SSimon J. Gerraty };
194*0957b409SSimon J. Gerraty
195*0957b409SSimon J. Gerraty static const unsigned char *HASH_OID[] = {
196*0957b409SSimon J. Gerraty HASH_OID_SHA1,
197*0957b409SSimon J. Gerraty HASH_OID_SHA224,
198*0957b409SSimon J. Gerraty HASH_OID_SHA256,
199*0957b409SSimon J. Gerraty HASH_OID_SHA384,
200*0957b409SSimon J. Gerraty HASH_OID_SHA512
201*0957b409SSimon J. Gerraty };
202*0957b409SSimon J. Gerraty
203*0957b409SSimon J. Gerraty /* see brssl.h */
204*0957b409SSimon J. Gerraty const unsigned char *
get_hash_oid(int id)205*0957b409SSimon J. Gerraty get_hash_oid(int id)
206*0957b409SSimon J. Gerraty {
207*0957b409SSimon J. Gerraty if (id >= 2 && id <= 6) {
208*0957b409SSimon J. Gerraty return HASH_OID[id - 2];
209*0957b409SSimon J. Gerraty } else {
210*0957b409SSimon J. Gerraty return NULL;
211*0957b409SSimon J. Gerraty }
212*0957b409SSimon J. Gerraty }
213*0957b409SSimon J. Gerraty
214*0957b409SSimon J. Gerraty /* see brssl.h */
215*0957b409SSimon J. Gerraty const br_hash_class *
get_hash_impl(int hash_id)216*0957b409SSimon J. Gerraty get_hash_impl(int hash_id)
217*0957b409SSimon J. Gerraty {
218*0957b409SSimon J. Gerraty size_t u;
219*0957b409SSimon J. Gerraty
220*0957b409SSimon J. Gerraty if (hash_id == 0) {
221*0957b409SSimon J. Gerraty return &br_md5sha1_vtable;
222*0957b409SSimon J. Gerraty }
223*0957b409SSimon J. Gerraty for (u = 0; hash_functions[u].name; u ++) {
224*0957b409SSimon J. Gerraty const br_hash_class *hc;
225*0957b409SSimon J. Gerraty int id;
226*0957b409SSimon J. Gerraty
227*0957b409SSimon J. Gerraty hc = hash_functions[u].hclass;
228*0957b409SSimon J. Gerraty id = (hc->desc >> BR_HASHDESC_ID_OFF) & BR_HASHDESC_ID_MASK;
229*0957b409SSimon J. Gerraty if (id == hash_id) {
230*0957b409SSimon J. Gerraty return hc;
231*0957b409SSimon J. Gerraty }
232*0957b409SSimon J. Gerraty }
233*0957b409SSimon J. Gerraty return NULL;
234*0957b409SSimon J. Gerraty }
235