1*de0e0e4dSAntonio Huete Jimenez /* $OpenBSD: ecparam.c,v 1.21 2021/05/10 20:58:32 tb Exp $ */
2f5b1c8a1SJohn Marino /*
3f5b1c8a1SJohn Marino * Written by Nils Larsch for the OpenSSL project.
4f5b1c8a1SJohn Marino */
5f5b1c8a1SJohn Marino /* ====================================================================
6f5b1c8a1SJohn Marino * Copyright (c) 1998-2005 The OpenSSL Project. All rights reserved.
7f5b1c8a1SJohn Marino *
8f5b1c8a1SJohn Marino * Redistribution and use in source and binary forms, with or without
9f5b1c8a1SJohn Marino * modification, are permitted provided that the following conditions
10f5b1c8a1SJohn Marino * are met:
11f5b1c8a1SJohn Marino *
12f5b1c8a1SJohn Marino * 1. Redistributions of source code must retain the above copyright
13f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer.
14f5b1c8a1SJohn Marino *
15f5b1c8a1SJohn Marino * 2. Redistributions in binary form must reproduce the above copyright
16f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer in
17f5b1c8a1SJohn Marino * the documentation and/or other materials provided with the
18f5b1c8a1SJohn Marino * distribution.
19f5b1c8a1SJohn Marino *
20f5b1c8a1SJohn Marino * 3. All advertising materials mentioning features or use of this
21f5b1c8a1SJohn Marino * software must display the following acknowledgment:
22f5b1c8a1SJohn Marino * "This product includes software developed by the OpenSSL Project
23f5b1c8a1SJohn Marino * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
24f5b1c8a1SJohn Marino *
25f5b1c8a1SJohn Marino * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26f5b1c8a1SJohn Marino * endorse or promote products derived from this software without
27f5b1c8a1SJohn Marino * prior written permission. For written permission, please contact
28f5b1c8a1SJohn Marino * openssl-core@openssl.org.
29f5b1c8a1SJohn Marino *
30f5b1c8a1SJohn Marino * 5. Products derived from this software may not be called "OpenSSL"
31f5b1c8a1SJohn Marino * nor may "OpenSSL" appear in their names without prior written
32f5b1c8a1SJohn Marino * permission of the OpenSSL Project.
33f5b1c8a1SJohn Marino *
34f5b1c8a1SJohn Marino * 6. Redistributions of any form whatsoever must retain the following
35f5b1c8a1SJohn Marino * acknowledgment:
36f5b1c8a1SJohn Marino * "This product includes software developed by the OpenSSL Project
37f5b1c8a1SJohn Marino * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
38f5b1c8a1SJohn Marino *
39f5b1c8a1SJohn Marino * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40f5b1c8a1SJohn Marino * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41f5b1c8a1SJohn Marino * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42f5b1c8a1SJohn Marino * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
43f5b1c8a1SJohn Marino * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44f5b1c8a1SJohn Marino * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45f5b1c8a1SJohn Marino * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46f5b1c8a1SJohn Marino * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47f5b1c8a1SJohn Marino * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48f5b1c8a1SJohn Marino * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49f5b1c8a1SJohn Marino * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50f5b1c8a1SJohn Marino * OF THE POSSIBILITY OF SUCH DAMAGE.
51f5b1c8a1SJohn Marino * ====================================================================
52f5b1c8a1SJohn Marino *
53f5b1c8a1SJohn Marino * This product includes cryptographic software written by Eric Young
54f5b1c8a1SJohn Marino * (eay@cryptsoft.com). This product includes software written by Tim
55f5b1c8a1SJohn Marino * Hudson (tjh@cryptsoft.com).
56f5b1c8a1SJohn Marino *
57f5b1c8a1SJohn Marino */
58f5b1c8a1SJohn Marino /* ====================================================================
59f5b1c8a1SJohn Marino * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
60f5b1c8a1SJohn Marino *
61f5b1c8a1SJohn Marino * Portions of the attached software ("Contribution") are developed by
62f5b1c8a1SJohn Marino * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
63f5b1c8a1SJohn Marino *
64f5b1c8a1SJohn Marino * The Contribution is licensed pursuant to the OpenSSL open source
65f5b1c8a1SJohn Marino * license provided above.
66f5b1c8a1SJohn Marino *
67f5b1c8a1SJohn Marino * The elliptic curve binary polynomial software is originally written by
68f5b1c8a1SJohn Marino * Sheueling Chang Shantz and Douglas Stebila of Sun Microsystems Laboratories.
69f5b1c8a1SJohn Marino *
70f5b1c8a1SJohn Marino */
71f5b1c8a1SJohn Marino
72f5b1c8a1SJohn Marino #include <openssl/opensslconf.h>
73f5b1c8a1SJohn Marino
74f5b1c8a1SJohn Marino #ifndef OPENSSL_NO_EC
75f5b1c8a1SJohn Marino
76f5b1c8a1SJohn Marino #include <stdio.h>
77f5b1c8a1SJohn Marino #include <stdlib.h>
78f5b1c8a1SJohn Marino #include <string.h>
79f5b1c8a1SJohn Marino #include <time.h>
80f5b1c8a1SJohn Marino
81f5b1c8a1SJohn Marino #include "apps.h"
82f5b1c8a1SJohn Marino
83f5b1c8a1SJohn Marino #include <openssl/bio.h>
84f5b1c8a1SJohn Marino #include <openssl/bn.h>
85f5b1c8a1SJohn Marino #include <openssl/ec.h>
86f5b1c8a1SJohn Marino #include <openssl/err.h>
87f5b1c8a1SJohn Marino #include <openssl/pem.h>
88f5b1c8a1SJohn Marino #include <openssl/x509.h>
89f5b1c8a1SJohn Marino
90f5b1c8a1SJohn Marino static int ecparam_print_var(BIO *, BIGNUM *, const char *, int,
91f5b1c8a1SJohn Marino unsigned char *);
92f5b1c8a1SJohn Marino
93f5b1c8a1SJohn Marino static struct {
94f5b1c8a1SJohn Marino int C;
95f5b1c8a1SJohn Marino int asn1_flag;
96f5b1c8a1SJohn Marino int check;
97f5b1c8a1SJohn Marino char *curve_name;
98f5b1c8a1SJohn Marino point_conversion_form_t form;
99f5b1c8a1SJohn Marino int genkey;
100f5b1c8a1SJohn Marino char *infile;
101f5b1c8a1SJohn Marino int informat;
102f5b1c8a1SJohn Marino int list_curves;
103f5b1c8a1SJohn Marino int new_asn1_flag;
104f5b1c8a1SJohn Marino int new_form;
105f5b1c8a1SJohn Marino int no_seed;
106f5b1c8a1SJohn Marino int noout;
107f5b1c8a1SJohn Marino char *outfile;
108f5b1c8a1SJohn Marino int outformat;
109f5b1c8a1SJohn Marino int text;
110f5b1c8a1SJohn Marino } ecparam_config;
111f5b1c8a1SJohn Marino
112f5b1c8a1SJohn Marino static int
ecparam_opt_form(char * arg)113f5b1c8a1SJohn Marino ecparam_opt_form(char *arg)
114f5b1c8a1SJohn Marino {
115f5b1c8a1SJohn Marino if (strcmp(arg, "compressed") == 0)
116f5b1c8a1SJohn Marino ecparam_config.form = POINT_CONVERSION_COMPRESSED;
117f5b1c8a1SJohn Marino else if (strcmp(arg, "uncompressed") == 0)
118f5b1c8a1SJohn Marino ecparam_config.form = POINT_CONVERSION_UNCOMPRESSED;
119f5b1c8a1SJohn Marino else if (strcmp(arg, "hybrid") == 0)
120f5b1c8a1SJohn Marino ecparam_config.form = POINT_CONVERSION_HYBRID;
121f5b1c8a1SJohn Marino else
122f5b1c8a1SJohn Marino return (1);
123f5b1c8a1SJohn Marino
124f5b1c8a1SJohn Marino ecparam_config.new_form = 1;
125f5b1c8a1SJohn Marino return (0);
126f5b1c8a1SJohn Marino }
127f5b1c8a1SJohn Marino
128f5b1c8a1SJohn Marino static int
ecparam_opt_enctype(char * arg)129f5b1c8a1SJohn Marino ecparam_opt_enctype(char *arg)
130f5b1c8a1SJohn Marino {
131f5b1c8a1SJohn Marino if (strcmp(arg, "explicit") == 0)
132f5b1c8a1SJohn Marino ecparam_config.asn1_flag = 0;
133f5b1c8a1SJohn Marino else if (strcmp(arg, "named_curve") == 0)
134f5b1c8a1SJohn Marino ecparam_config.asn1_flag = OPENSSL_EC_NAMED_CURVE;
135f5b1c8a1SJohn Marino else
136f5b1c8a1SJohn Marino return (1);
137f5b1c8a1SJohn Marino
138f5b1c8a1SJohn Marino ecparam_config.new_asn1_flag = 1;
139f5b1c8a1SJohn Marino return (0);
140f5b1c8a1SJohn Marino }
141f5b1c8a1SJohn Marino
142cca6fc52SDaniel Fojt static const struct option ecparam_options[] = {
143f5b1c8a1SJohn Marino {
144f5b1c8a1SJohn Marino .name = "C",
145f5b1c8a1SJohn Marino .desc = "Convert the EC parameters into C code",
146f5b1c8a1SJohn Marino .type = OPTION_FLAG,
147f5b1c8a1SJohn Marino .opt.flag = &ecparam_config.C,
148f5b1c8a1SJohn Marino },
149f5b1c8a1SJohn Marino {
150f5b1c8a1SJohn Marino .name = "check",
151f5b1c8a1SJohn Marino .desc = "Validate the elliptic curve parameters",
152f5b1c8a1SJohn Marino .type = OPTION_FLAG,
153f5b1c8a1SJohn Marino .opt.flag = &ecparam_config.check,
154f5b1c8a1SJohn Marino },
155f5b1c8a1SJohn Marino {
156f5b1c8a1SJohn Marino .name = "conv_form",
157f5b1c8a1SJohn Marino .argname = "form",
158f5b1c8a1SJohn Marino .desc = "Specify point conversion form:\n"
159f5b1c8a1SJohn Marino " compressed, uncompressed (default), hybrid",
160f5b1c8a1SJohn Marino .type = OPTION_ARG_FUNC,
161f5b1c8a1SJohn Marino .opt.argfunc = ecparam_opt_form,
162f5b1c8a1SJohn Marino },
163f5b1c8a1SJohn Marino {
164f5b1c8a1SJohn Marino .name = "genkey",
165f5b1c8a1SJohn Marino .desc = "Generate an EC private key using the specified "
166f5b1c8a1SJohn Marino "parameters",
167f5b1c8a1SJohn Marino .type = OPTION_FLAG,
168f5b1c8a1SJohn Marino .opt.flag = &ecparam_config.genkey,
169f5b1c8a1SJohn Marino },
170f5b1c8a1SJohn Marino {
171f5b1c8a1SJohn Marino .name = "in",
172f5b1c8a1SJohn Marino .argname = "file",
173f5b1c8a1SJohn Marino .desc = "Input file to read parameters from (default stdin)",
174f5b1c8a1SJohn Marino .type = OPTION_ARG,
175f5b1c8a1SJohn Marino .opt.arg = &ecparam_config.infile,
176f5b1c8a1SJohn Marino },
177f5b1c8a1SJohn Marino {
178f5b1c8a1SJohn Marino .name = "inform",
179f5b1c8a1SJohn Marino .argname = "format",
180f5b1c8a1SJohn Marino .desc = "Input format (DER or PEM)",
181f5b1c8a1SJohn Marino .type = OPTION_ARG_FORMAT,
182f5b1c8a1SJohn Marino .opt.value = &ecparam_config.informat,
183f5b1c8a1SJohn Marino },
184f5b1c8a1SJohn Marino {
185f5b1c8a1SJohn Marino .name = "list_curves",
186f5b1c8a1SJohn Marino .desc = "Print list of all currently implemented EC "
187f5b1c8a1SJohn Marino "parameter names",
188f5b1c8a1SJohn Marino .type = OPTION_FLAG,
189f5b1c8a1SJohn Marino .opt.flag = &ecparam_config.list_curves,
190f5b1c8a1SJohn Marino },
191f5b1c8a1SJohn Marino {
192f5b1c8a1SJohn Marino .name = "name",
193f5b1c8a1SJohn Marino .argname = "curve",
194f5b1c8a1SJohn Marino .desc = "Use the EC parameters with the specified name",
195f5b1c8a1SJohn Marino .type = OPTION_ARG,
196f5b1c8a1SJohn Marino .opt.arg = &ecparam_config.curve_name,
197f5b1c8a1SJohn Marino },
198f5b1c8a1SJohn Marino {
199f5b1c8a1SJohn Marino .name = "no_seed",
200f5b1c8a1SJohn Marino .desc = "Do not output seed with explicit parameter encoding",
201f5b1c8a1SJohn Marino .type = OPTION_FLAG,
202f5b1c8a1SJohn Marino .opt.flag = &ecparam_config.no_seed,
203f5b1c8a1SJohn Marino },
204f5b1c8a1SJohn Marino {
205f5b1c8a1SJohn Marino .name = "noout",
206f5b1c8a1SJohn Marino .desc = "Do not output encoded version of EC parameters",
207f5b1c8a1SJohn Marino .type = OPTION_FLAG,
208f5b1c8a1SJohn Marino .opt.flag = &ecparam_config.noout,
209f5b1c8a1SJohn Marino },
210f5b1c8a1SJohn Marino {
211f5b1c8a1SJohn Marino .name = "out",
212f5b1c8a1SJohn Marino .argname = "file",
213f5b1c8a1SJohn Marino .desc = "Output file to write parameters to (default stdout)",
214f5b1c8a1SJohn Marino .type = OPTION_ARG,
215f5b1c8a1SJohn Marino .opt.arg = &ecparam_config.outfile,
216f5b1c8a1SJohn Marino },
217f5b1c8a1SJohn Marino {
218f5b1c8a1SJohn Marino .name = "outform",
219f5b1c8a1SJohn Marino .argname = "format",
220f5b1c8a1SJohn Marino .desc = "Output format (DER or PEM)",
221f5b1c8a1SJohn Marino .type = OPTION_ARG_FORMAT,
222f5b1c8a1SJohn Marino .opt.value = &ecparam_config.outformat,
223f5b1c8a1SJohn Marino },
224f5b1c8a1SJohn Marino {
225f5b1c8a1SJohn Marino .name = "param_enc",
226f5b1c8a1SJohn Marino .argname = "type",
227f5b1c8a1SJohn Marino .desc = "Specify EC parameter ASN.1 encoding type:\n"
228f5b1c8a1SJohn Marino " explicit, named_curve (default)",
229f5b1c8a1SJohn Marino .type = OPTION_ARG_FUNC,
230f5b1c8a1SJohn Marino .opt.argfunc = ecparam_opt_enctype,
231f5b1c8a1SJohn Marino },
232f5b1c8a1SJohn Marino {
233f5b1c8a1SJohn Marino .name = "text",
234f5b1c8a1SJohn Marino .desc = "Print out the EC parameters in human readable form",
235f5b1c8a1SJohn Marino .type = OPTION_FLAG,
236f5b1c8a1SJohn Marino .opt.flag = &ecparam_config.text,
237f5b1c8a1SJohn Marino },
238f5b1c8a1SJohn Marino {NULL},
239f5b1c8a1SJohn Marino };
240f5b1c8a1SJohn Marino
241f5b1c8a1SJohn Marino static void
ecparam_usage(void)242f5b1c8a1SJohn Marino ecparam_usage(void)
243f5b1c8a1SJohn Marino {
244f5b1c8a1SJohn Marino fprintf(stderr, "usage: ecparam [-C] [-check] [-conv_form arg] "
245f5b1c8a1SJohn Marino " [-genkey]\n"
246f5b1c8a1SJohn Marino " [-in file] [-inform DER | PEM] [-list_curves] [-name arg]\n"
247f5b1c8a1SJohn Marino " [-no_seed] [-noout] [-out file] [-outform DER | PEM]\n"
248f5b1c8a1SJohn Marino " [-param_enc arg] [-text]\n\n");
249f5b1c8a1SJohn Marino options_usage(ecparam_options);
250f5b1c8a1SJohn Marino }
251f5b1c8a1SJohn Marino
252f5b1c8a1SJohn Marino int
ecparam_main(int argc,char ** argv)253f5b1c8a1SJohn Marino ecparam_main(int argc, char **argv)
254f5b1c8a1SJohn Marino {
255f5b1c8a1SJohn Marino BIGNUM *ec_p = NULL, *ec_a = NULL, *ec_b = NULL, *ec_gen = NULL;
256f5b1c8a1SJohn Marino BIGNUM *ec_order = NULL, *ec_cofactor = NULL;
257f5b1c8a1SJohn Marino EC_GROUP *group = NULL;
258f5b1c8a1SJohn Marino unsigned char *buffer = NULL;
259f5b1c8a1SJohn Marino BIO *in = NULL, *out = NULL;
260f5b1c8a1SJohn Marino int i, ret = 1;
261f5b1c8a1SJohn Marino
262f5b1c8a1SJohn Marino if (single_execution) {
26372c33676SMaxim Ag if (pledge("stdio cpath wpath rpath", NULL) == -1) {
264f5b1c8a1SJohn Marino perror("pledge");
265f5b1c8a1SJohn Marino exit(1);
266f5b1c8a1SJohn Marino }
267f5b1c8a1SJohn Marino }
268f5b1c8a1SJohn Marino
269f5b1c8a1SJohn Marino memset(&ecparam_config, 0, sizeof(ecparam_config));
270f5b1c8a1SJohn Marino ecparam_config.asn1_flag = OPENSSL_EC_NAMED_CURVE;
271f5b1c8a1SJohn Marino ecparam_config.form = POINT_CONVERSION_UNCOMPRESSED;
272f5b1c8a1SJohn Marino ecparam_config.informat = FORMAT_PEM;
273f5b1c8a1SJohn Marino ecparam_config.outformat = FORMAT_PEM;
274f5b1c8a1SJohn Marino
275f5b1c8a1SJohn Marino if (options_parse(argc, argv, ecparam_options, NULL, NULL) != 0) {
276f5b1c8a1SJohn Marino ecparam_usage();
277f5b1c8a1SJohn Marino goto end;
278f5b1c8a1SJohn Marino }
279f5b1c8a1SJohn Marino
280f5b1c8a1SJohn Marino in = BIO_new(BIO_s_file());
281f5b1c8a1SJohn Marino out = BIO_new(BIO_s_file());
282f5b1c8a1SJohn Marino if ((in == NULL) || (out == NULL)) {
283f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
284f5b1c8a1SJohn Marino goto end;
285f5b1c8a1SJohn Marino }
286f5b1c8a1SJohn Marino if (ecparam_config.infile == NULL)
287f5b1c8a1SJohn Marino BIO_set_fp(in, stdin, BIO_NOCLOSE);
288f5b1c8a1SJohn Marino else {
289f5b1c8a1SJohn Marino if (BIO_read_filename(in, ecparam_config.infile) <= 0) {
290f5b1c8a1SJohn Marino perror(ecparam_config.infile);
291f5b1c8a1SJohn Marino goto end;
292f5b1c8a1SJohn Marino }
293f5b1c8a1SJohn Marino }
294f5b1c8a1SJohn Marino if (ecparam_config.outfile == NULL) {
295f5b1c8a1SJohn Marino BIO_set_fp(out, stdout, BIO_NOCLOSE);
296f5b1c8a1SJohn Marino } else {
297f5b1c8a1SJohn Marino if (BIO_write_filename(out, ecparam_config.outfile) <= 0) {
298f5b1c8a1SJohn Marino perror(ecparam_config.outfile);
299f5b1c8a1SJohn Marino goto end;
300f5b1c8a1SJohn Marino }
301f5b1c8a1SJohn Marino }
302f5b1c8a1SJohn Marino
303f5b1c8a1SJohn Marino if (ecparam_config.list_curves) {
304f5b1c8a1SJohn Marino EC_builtin_curve *curves = NULL;
305f5b1c8a1SJohn Marino size_t crv_len = 0;
306f5b1c8a1SJohn Marino size_t n = 0;
307f5b1c8a1SJohn Marino
308f5b1c8a1SJohn Marino crv_len = EC_get_builtin_curves(NULL, 0);
309f5b1c8a1SJohn Marino
310f5b1c8a1SJohn Marino curves = reallocarray(NULL, crv_len, sizeof(EC_builtin_curve));
311f5b1c8a1SJohn Marino if (curves == NULL)
312f5b1c8a1SJohn Marino goto end;
313f5b1c8a1SJohn Marino
314f5b1c8a1SJohn Marino if (!EC_get_builtin_curves(curves, crv_len)) {
315f5b1c8a1SJohn Marino free(curves);
316f5b1c8a1SJohn Marino goto end;
317f5b1c8a1SJohn Marino }
318f5b1c8a1SJohn Marino for (n = 0; n < crv_len; n++) {
319f5b1c8a1SJohn Marino const char *comment;
320f5b1c8a1SJohn Marino const char *sname;
321f5b1c8a1SJohn Marino comment = curves[n].comment;
322f5b1c8a1SJohn Marino sname = OBJ_nid2sn(curves[n].nid);
323f5b1c8a1SJohn Marino if (comment == NULL)
324f5b1c8a1SJohn Marino comment = "CURVE DESCRIPTION NOT AVAILABLE";
325f5b1c8a1SJohn Marino if (sname == NULL)
326f5b1c8a1SJohn Marino sname = "";
327f5b1c8a1SJohn Marino
328f5b1c8a1SJohn Marino BIO_printf(out, " %-10s: ", sname);
329f5b1c8a1SJohn Marino BIO_printf(out, "%s\n", comment);
330f5b1c8a1SJohn Marino }
331f5b1c8a1SJohn Marino
332f5b1c8a1SJohn Marino free(curves);
333f5b1c8a1SJohn Marino ret = 0;
334f5b1c8a1SJohn Marino goto end;
335f5b1c8a1SJohn Marino }
336f5b1c8a1SJohn Marino if (ecparam_config.curve_name != NULL) {
337f5b1c8a1SJohn Marino int nid;
338f5b1c8a1SJohn Marino
339f5b1c8a1SJohn Marino /*
340f5b1c8a1SJohn Marino * workaround for the SECG curve names secp192r1 and
341f5b1c8a1SJohn Marino * secp256r1 (which are the same as the curves prime192v1 and
342f5b1c8a1SJohn Marino * prime256v1 defined in X9.62)
343f5b1c8a1SJohn Marino */
344f5b1c8a1SJohn Marino if (!strcmp(ecparam_config.curve_name, "secp192r1")) {
345f5b1c8a1SJohn Marino BIO_printf(bio_err, "using curve name prime192v1 "
346f5b1c8a1SJohn Marino "instead of secp192r1\n");
347f5b1c8a1SJohn Marino nid = NID_X9_62_prime192v1;
348f5b1c8a1SJohn Marino } else if (!strcmp(ecparam_config.curve_name, "secp256r1")) {
349f5b1c8a1SJohn Marino BIO_printf(bio_err, "using curve name prime256v1 "
350f5b1c8a1SJohn Marino "instead of secp256r1\n");
351f5b1c8a1SJohn Marino nid = NID_X9_62_prime256v1;
352f5b1c8a1SJohn Marino } else
353f5b1c8a1SJohn Marino nid = OBJ_sn2nid(ecparam_config.curve_name);
354f5b1c8a1SJohn Marino
355f5b1c8a1SJohn Marino if (nid == 0)
356f5b1c8a1SJohn Marino nid = EC_curve_nist2nid(ecparam_config.curve_name);
357f5b1c8a1SJohn Marino
358f5b1c8a1SJohn Marino if (nid == 0) {
359f5b1c8a1SJohn Marino BIO_printf(bio_err, "unknown curve name (%s)\n",
360f5b1c8a1SJohn Marino ecparam_config.curve_name);
361f5b1c8a1SJohn Marino goto end;
362f5b1c8a1SJohn Marino }
363f5b1c8a1SJohn Marino group = EC_GROUP_new_by_curve_name(nid);
364f5b1c8a1SJohn Marino if (group == NULL) {
365f5b1c8a1SJohn Marino BIO_printf(bio_err, "unable to create curve (%s)\n",
366f5b1c8a1SJohn Marino ecparam_config.curve_name);
367f5b1c8a1SJohn Marino goto end;
368f5b1c8a1SJohn Marino }
369f5b1c8a1SJohn Marino EC_GROUP_set_asn1_flag(group, ecparam_config.asn1_flag);
370f5b1c8a1SJohn Marino EC_GROUP_set_point_conversion_form(group, ecparam_config.form);
371f5b1c8a1SJohn Marino } else if (ecparam_config.informat == FORMAT_ASN1) {
372f5b1c8a1SJohn Marino group = d2i_ECPKParameters_bio(in, NULL);
373f5b1c8a1SJohn Marino } else if (ecparam_config.informat == FORMAT_PEM) {
374f5b1c8a1SJohn Marino group = PEM_read_bio_ECPKParameters(in, NULL, NULL, NULL);
375f5b1c8a1SJohn Marino } else {
376f5b1c8a1SJohn Marino BIO_printf(bio_err, "bad input format specified\n");
377f5b1c8a1SJohn Marino goto end;
378f5b1c8a1SJohn Marino }
379f5b1c8a1SJohn Marino
380f5b1c8a1SJohn Marino if (group == NULL) {
381f5b1c8a1SJohn Marino BIO_printf(bio_err,
382f5b1c8a1SJohn Marino "unable to load elliptic curve parameters\n");
383f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
384f5b1c8a1SJohn Marino goto end;
385f5b1c8a1SJohn Marino }
386f5b1c8a1SJohn Marino if (ecparam_config.new_form)
387f5b1c8a1SJohn Marino EC_GROUP_set_point_conversion_form(group, ecparam_config.form);
388f5b1c8a1SJohn Marino
389f5b1c8a1SJohn Marino if (ecparam_config.new_asn1_flag)
390f5b1c8a1SJohn Marino EC_GROUP_set_asn1_flag(group, ecparam_config.asn1_flag);
391f5b1c8a1SJohn Marino
392f5b1c8a1SJohn Marino if (ecparam_config.no_seed)
393f5b1c8a1SJohn Marino EC_GROUP_set_seed(group, NULL, 0);
394f5b1c8a1SJohn Marino
395f5b1c8a1SJohn Marino if (ecparam_config.text) {
396f5b1c8a1SJohn Marino if (!ECPKParameters_print(out, group, 0))
397f5b1c8a1SJohn Marino goto end;
398f5b1c8a1SJohn Marino }
399f5b1c8a1SJohn Marino if (ecparam_config.check) {
400f5b1c8a1SJohn Marino BIO_printf(bio_err, "checking elliptic curve parameters: ");
401f5b1c8a1SJohn Marino if (!EC_GROUP_check(group, NULL)) {
402f5b1c8a1SJohn Marino BIO_printf(bio_err, "failed\n");
403f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
404f5b1c8a1SJohn Marino } else
405f5b1c8a1SJohn Marino BIO_printf(bio_err, "ok\n");
406f5b1c8a1SJohn Marino
407f5b1c8a1SJohn Marino }
408f5b1c8a1SJohn Marino if (ecparam_config.C) {
409f5b1c8a1SJohn Marino size_t buf_len = 0, tmp_len = 0;
410f5b1c8a1SJohn Marino const EC_POINT *point;
411f5b1c8a1SJohn Marino int is_prime, len = 0;
412f5b1c8a1SJohn Marino const EC_METHOD *meth = EC_GROUP_method_of(group);
413f5b1c8a1SJohn Marino
414f5b1c8a1SJohn Marino if ((ec_p = BN_new()) == NULL || (ec_a = BN_new()) == NULL ||
415f5b1c8a1SJohn Marino (ec_b = BN_new()) == NULL || (ec_gen = BN_new()) == NULL ||
416f5b1c8a1SJohn Marino (ec_order = BN_new()) == NULL ||
417f5b1c8a1SJohn Marino (ec_cofactor = BN_new()) == NULL) {
418f5b1c8a1SJohn Marino perror("malloc");
419f5b1c8a1SJohn Marino goto end;
420f5b1c8a1SJohn Marino }
421f5b1c8a1SJohn Marino is_prime = (EC_METHOD_get_field_type(meth) ==
422f5b1c8a1SJohn Marino NID_X9_62_prime_field);
423f5b1c8a1SJohn Marino
424*de0e0e4dSAntonio Huete Jimenez if (!EC_GROUP_get_curve(group, ec_p, ec_a, ec_b, NULL))
425f5b1c8a1SJohn Marino goto end;
426f5b1c8a1SJohn Marino
427f5b1c8a1SJohn Marino if ((point = EC_GROUP_get0_generator(group)) == NULL)
428f5b1c8a1SJohn Marino goto end;
429f5b1c8a1SJohn Marino if (!EC_POINT_point2bn(group, point,
430f5b1c8a1SJohn Marino EC_GROUP_get_point_conversion_form(group), ec_gen,
431f5b1c8a1SJohn Marino NULL))
432f5b1c8a1SJohn Marino goto end;
433f5b1c8a1SJohn Marino if (!EC_GROUP_get_order(group, ec_order, NULL))
434f5b1c8a1SJohn Marino goto end;
435f5b1c8a1SJohn Marino if (!EC_GROUP_get_cofactor(group, ec_cofactor, NULL))
436f5b1c8a1SJohn Marino goto end;
437f5b1c8a1SJohn Marino
438f5b1c8a1SJohn Marino len = BN_num_bits(ec_order);
439f5b1c8a1SJohn Marino
440f5b1c8a1SJohn Marino if ((tmp_len = (size_t) BN_num_bytes(ec_p)) > buf_len)
441f5b1c8a1SJohn Marino buf_len = tmp_len;
442f5b1c8a1SJohn Marino if ((tmp_len = (size_t) BN_num_bytes(ec_a)) > buf_len)
443f5b1c8a1SJohn Marino buf_len = tmp_len;
444f5b1c8a1SJohn Marino if ((tmp_len = (size_t) BN_num_bytes(ec_b)) > buf_len)
445f5b1c8a1SJohn Marino buf_len = tmp_len;
446f5b1c8a1SJohn Marino if ((tmp_len = (size_t) BN_num_bytes(ec_gen)) > buf_len)
447f5b1c8a1SJohn Marino buf_len = tmp_len;
448f5b1c8a1SJohn Marino if ((tmp_len = (size_t) BN_num_bytes(ec_order)) > buf_len)
449f5b1c8a1SJohn Marino buf_len = tmp_len;
450f5b1c8a1SJohn Marino if ((tmp_len = (size_t) BN_num_bytes(ec_cofactor)) > buf_len)
451f5b1c8a1SJohn Marino buf_len = tmp_len;
452f5b1c8a1SJohn Marino
453f5b1c8a1SJohn Marino buffer = malloc(buf_len);
454f5b1c8a1SJohn Marino
455f5b1c8a1SJohn Marino if (buffer == NULL) {
456f5b1c8a1SJohn Marino perror("malloc");
457f5b1c8a1SJohn Marino goto end;
458f5b1c8a1SJohn Marino }
459f5b1c8a1SJohn Marino ecparam_print_var(out, ec_p, "ec_p", len, buffer);
460f5b1c8a1SJohn Marino ecparam_print_var(out, ec_a, "ec_a", len, buffer);
461f5b1c8a1SJohn Marino ecparam_print_var(out, ec_b, "ec_b", len, buffer);
462f5b1c8a1SJohn Marino ecparam_print_var(out, ec_gen, "ec_gen", len, buffer);
463f5b1c8a1SJohn Marino ecparam_print_var(out, ec_order, "ec_order", len, buffer);
464f5b1c8a1SJohn Marino ecparam_print_var(out, ec_cofactor, "ec_cofactor", len,
465f5b1c8a1SJohn Marino buffer);
466f5b1c8a1SJohn Marino
467f5b1c8a1SJohn Marino BIO_printf(out, "\n\n");
468f5b1c8a1SJohn Marino
469f5b1c8a1SJohn Marino BIO_printf(out, "EC_GROUP *get_ec_group_%d(void)\n\t{\n", len);
470f5b1c8a1SJohn Marino BIO_printf(out, "\tint ok=0;\n");
471f5b1c8a1SJohn Marino BIO_printf(out, "\tEC_GROUP *group = NULL;\n");
472f5b1c8a1SJohn Marino BIO_printf(out, "\tEC_POINT *point = NULL;\n");
473f5b1c8a1SJohn Marino BIO_printf(out, "\tBIGNUM *tmp_1 = NULL, *tmp_2 = NULL, "
474f5b1c8a1SJohn Marino "*tmp_3 = NULL;\n\n");
475f5b1c8a1SJohn Marino BIO_printf(out, "\tif ((tmp_1 = BN_bin2bn(ec_p_%d, "
476f5b1c8a1SJohn Marino "sizeof(ec_p_%d), NULL)) == NULL)\n\t\t"
477f5b1c8a1SJohn Marino "goto err;\n", len, len);
478f5b1c8a1SJohn Marino BIO_printf(out, "\tif ((tmp_2 = BN_bin2bn(ec_a_%d, "
479f5b1c8a1SJohn Marino "sizeof(ec_a_%d), NULL)) == NULL)\n\t\t"
480f5b1c8a1SJohn Marino "goto err;\n", len, len);
481f5b1c8a1SJohn Marino BIO_printf(out, "\tif ((tmp_3 = BN_bin2bn(ec_b_%d, "
482f5b1c8a1SJohn Marino "sizeof(ec_b_%d), NULL)) == NULL)\n\t\t"
483f5b1c8a1SJohn Marino "goto err;\n", len, len);
484f5b1c8a1SJohn Marino if (is_prime) {
485f5b1c8a1SJohn Marino BIO_printf(out, "\tif ((group = EC_GROUP_new_curve_"
486f5b1c8a1SJohn Marino "GFp(tmp_1, tmp_2, tmp_3, NULL)) == NULL)"
487f5b1c8a1SJohn Marino "\n\t\tgoto err;\n\n");
488f5b1c8a1SJohn Marino } else {
489f5b1c8a1SJohn Marino BIO_printf(out, "\tif ((group = EC_GROUP_new_curve_"
490f5b1c8a1SJohn Marino "GF2m(tmp_1, tmp_2, tmp_3, NULL)) == NULL)"
491f5b1c8a1SJohn Marino "\n\t\tgoto err;\n\n");
492f5b1c8a1SJohn Marino }
493f5b1c8a1SJohn Marino BIO_printf(out, "\t/* build generator */\n");
494f5b1c8a1SJohn Marino BIO_printf(out, "\tif ((tmp_1 = BN_bin2bn(ec_gen_%d, "
495f5b1c8a1SJohn Marino "sizeof(ec_gen_%d), tmp_1)) == NULL)"
496f5b1c8a1SJohn Marino "\n\t\tgoto err;\n", len, len);
497f5b1c8a1SJohn Marino BIO_printf(out, "\tpoint = EC_POINT_bn2point(group, tmp_1, "
498f5b1c8a1SJohn Marino "NULL, NULL);\n");
499f5b1c8a1SJohn Marino BIO_printf(out, "\tif (point == NULL)\n\t\tgoto err;\n");
500f5b1c8a1SJohn Marino BIO_printf(out, "\tif ((tmp_2 = BN_bin2bn(ec_order_%d, "
501f5b1c8a1SJohn Marino "sizeof(ec_order_%d), tmp_2)) == NULL)"
502f5b1c8a1SJohn Marino "\n\t\tgoto err;\n", len, len);
503f5b1c8a1SJohn Marino BIO_printf(out, "\tif ((tmp_3 = BN_bin2bn(ec_cofactor_%d, "
504f5b1c8a1SJohn Marino "sizeof(ec_cofactor_%d), tmp_3)) == NULL)"
505f5b1c8a1SJohn Marino "\n\t\tgoto err;\n", len, len);
506f5b1c8a1SJohn Marino BIO_printf(out, "\tif (!EC_GROUP_set_generator(group, point,"
507f5b1c8a1SJohn Marino " tmp_2, tmp_3))\n\t\tgoto err;\n");
508f5b1c8a1SJohn Marino BIO_printf(out, "\n\tok=1;\n");
509f5b1c8a1SJohn Marino BIO_printf(out, "err:\n");
510f5b1c8a1SJohn Marino BIO_printf(out, "\tif (tmp_1)\n\t\tBN_free(tmp_1);\n");
511f5b1c8a1SJohn Marino BIO_printf(out, "\tif (tmp_2)\n\t\tBN_free(tmp_2);\n");
512f5b1c8a1SJohn Marino BIO_printf(out, "\tif (tmp_3)\n\t\tBN_free(tmp_3);\n");
513f5b1c8a1SJohn Marino BIO_printf(out, "\tif (point)\n\t\tEC_POINT_free(point);\n");
514f5b1c8a1SJohn Marino BIO_printf(out, "\tif (!ok)\n");
515f5b1c8a1SJohn Marino BIO_printf(out, "\t\t{\n");
516f5b1c8a1SJohn Marino BIO_printf(out, "\t\tEC_GROUP_free(group);\n");
517f5b1c8a1SJohn Marino BIO_printf(out, "\t\tgroup = NULL;\n");
518f5b1c8a1SJohn Marino BIO_printf(out, "\t\t}\n");
519f5b1c8a1SJohn Marino BIO_printf(out, "\treturn(group);\n\t}\n");
520f5b1c8a1SJohn Marino }
521f5b1c8a1SJohn Marino if (!ecparam_config.noout) {
522f5b1c8a1SJohn Marino if (ecparam_config.outformat == FORMAT_ASN1)
523f5b1c8a1SJohn Marino i = i2d_ECPKParameters_bio(out, group);
524f5b1c8a1SJohn Marino else if (ecparam_config.outformat == FORMAT_PEM)
525f5b1c8a1SJohn Marino i = PEM_write_bio_ECPKParameters(out, group);
526f5b1c8a1SJohn Marino else {
527f5b1c8a1SJohn Marino BIO_printf(bio_err, "bad output format specified for"
528f5b1c8a1SJohn Marino " outfile\n");
529f5b1c8a1SJohn Marino goto end;
530f5b1c8a1SJohn Marino }
531f5b1c8a1SJohn Marino if (!i) {
532f5b1c8a1SJohn Marino BIO_printf(bio_err, "unable to write elliptic "
533f5b1c8a1SJohn Marino "curve parameters\n");
534f5b1c8a1SJohn Marino ERR_print_errors(bio_err);
535f5b1c8a1SJohn Marino goto end;
536f5b1c8a1SJohn Marino }
537f5b1c8a1SJohn Marino }
538f5b1c8a1SJohn Marino if (ecparam_config.genkey) {
539f5b1c8a1SJohn Marino EC_KEY *eckey = EC_KEY_new();
540f5b1c8a1SJohn Marino
541f5b1c8a1SJohn Marino if (eckey == NULL)
542f5b1c8a1SJohn Marino goto end;
543f5b1c8a1SJohn Marino
544f5b1c8a1SJohn Marino if (EC_KEY_set_group(eckey, group) == 0) {
545f5b1c8a1SJohn Marino EC_KEY_free(eckey);
546f5b1c8a1SJohn Marino goto end;
547f5b1c8a1SJohn Marino }
548f5b1c8a1SJohn Marino
549f5b1c8a1SJohn Marino if (!EC_KEY_generate_key(eckey)) {
550f5b1c8a1SJohn Marino EC_KEY_free(eckey);
551f5b1c8a1SJohn Marino goto end;
552f5b1c8a1SJohn Marino }
553f5b1c8a1SJohn Marino if (ecparam_config.outformat == FORMAT_ASN1)
554f5b1c8a1SJohn Marino i = i2d_ECPrivateKey_bio(out, eckey);
555f5b1c8a1SJohn Marino else if (ecparam_config.outformat == FORMAT_PEM)
556f5b1c8a1SJohn Marino i = PEM_write_bio_ECPrivateKey(out, eckey, NULL,
557f5b1c8a1SJohn Marino NULL, 0, NULL, NULL);
558f5b1c8a1SJohn Marino else {
559f5b1c8a1SJohn Marino BIO_printf(bio_err, "bad output format specified "
560f5b1c8a1SJohn Marino "for outfile\n");
561f5b1c8a1SJohn Marino EC_KEY_free(eckey);
562f5b1c8a1SJohn Marino goto end;
563f5b1c8a1SJohn Marino }
564f5b1c8a1SJohn Marino EC_KEY_free(eckey);
565f5b1c8a1SJohn Marino }
566f5b1c8a1SJohn Marino ret = 0;
567f5b1c8a1SJohn Marino
568f5b1c8a1SJohn Marino end:
569f5b1c8a1SJohn Marino BN_free(ec_p);
570f5b1c8a1SJohn Marino BN_free(ec_a);
571f5b1c8a1SJohn Marino BN_free(ec_b);
572f5b1c8a1SJohn Marino BN_free(ec_gen);
573f5b1c8a1SJohn Marino BN_free(ec_order);
574f5b1c8a1SJohn Marino BN_free(ec_cofactor);
575f5b1c8a1SJohn Marino
576f5b1c8a1SJohn Marino free(buffer);
577f5b1c8a1SJohn Marino
578f5b1c8a1SJohn Marino BIO_free(in);
579f5b1c8a1SJohn Marino BIO_free_all(out);
580f5b1c8a1SJohn Marino EC_GROUP_free(group);
581f5b1c8a1SJohn Marino
582f5b1c8a1SJohn Marino return (ret);
583f5b1c8a1SJohn Marino }
584f5b1c8a1SJohn Marino
585f5b1c8a1SJohn Marino static int
ecparam_print_var(BIO * out,BIGNUM * in,const char * var,int len,unsigned char * buffer)586f5b1c8a1SJohn Marino ecparam_print_var(BIO * out, BIGNUM * in, const char *var,
587f5b1c8a1SJohn Marino int len, unsigned char *buffer)
588f5b1c8a1SJohn Marino {
589f5b1c8a1SJohn Marino BIO_printf(out, "static unsigned char %s_%d[] = {", var, len);
590f5b1c8a1SJohn Marino if (BN_is_zero(in))
591f5b1c8a1SJohn Marino BIO_printf(out, "\n\t0x00");
592f5b1c8a1SJohn Marino else {
593f5b1c8a1SJohn Marino int i, l;
594f5b1c8a1SJohn Marino
595f5b1c8a1SJohn Marino l = BN_bn2bin(in, buffer);
596f5b1c8a1SJohn Marino for (i = 0; i < l - 1; i++) {
597f5b1c8a1SJohn Marino if ((i % 12) == 0)
598f5b1c8a1SJohn Marino BIO_printf(out, "\n\t");
599f5b1c8a1SJohn Marino BIO_printf(out, "0x%02X,", buffer[i]);
600f5b1c8a1SJohn Marino }
601f5b1c8a1SJohn Marino if ((i % 12) == 0)
602f5b1c8a1SJohn Marino BIO_printf(out, "\n\t");
603f5b1c8a1SJohn Marino BIO_printf(out, "0x%02X", buffer[i]);
604f5b1c8a1SJohn Marino }
605f5b1c8a1SJohn Marino BIO_printf(out, "\n\t};\n\n");
606f5b1c8a1SJohn Marino return 1;
607f5b1c8a1SJohn Marino }
608f5b1c8a1SJohn Marino #endif
609