172c33676SMaxim Ag /* $OpenBSD: rsa_x931.c,v 1.10 2017/01/29 17:49:23 beck Exp $ */
2f5b1c8a1SJohn Marino /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
3f5b1c8a1SJohn Marino * project 2005.
4f5b1c8a1SJohn Marino */
5f5b1c8a1SJohn Marino /* ====================================================================
6f5b1c8a1SJohn Marino * Copyright (c) 2005 The OpenSSL Project. All rights reserved.
7f5b1c8a1SJohn Marino *
8f5b1c8a1SJohn Marino * Redistribution and use in source and binary forms, with or without
9f5b1c8a1SJohn Marino * modification, are permitted provided that the following conditions
10f5b1c8a1SJohn Marino * are met:
11f5b1c8a1SJohn Marino *
12f5b1c8a1SJohn Marino * 1. Redistributions of source code must retain the above copyright
13f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer.
14f5b1c8a1SJohn Marino *
15f5b1c8a1SJohn Marino * 2. Redistributions in binary form must reproduce the above copyright
16f5b1c8a1SJohn Marino * notice, this list of conditions and the following disclaimer in
17f5b1c8a1SJohn Marino * the documentation and/or other materials provided with the
18f5b1c8a1SJohn Marino * distribution.
19f5b1c8a1SJohn Marino *
20f5b1c8a1SJohn Marino * 3. All advertising materials mentioning features or use of this
21f5b1c8a1SJohn Marino * software must display the following acknowledgment:
22f5b1c8a1SJohn Marino * "This product includes software developed by the OpenSSL Project
23f5b1c8a1SJohn Marino * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
24f5b1c8a1SJohn Marino *
25f5b1c8a1SJohn Marino * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26f5b1c8a1SJohn Marino * endorse or promote products derived from this software without
27f5b1c8a1SJohn Marino * prior written permission. For written permission, please contact
28f5b1c8a1SJohn Marino * licensing@OpenSSL.org.
29f5b1c8a1SJohn Marino *
30f5b1c8a1SJohn Marino * 5. Products derived from this software may not be called "OpenSSL"
31f5b1c8a1SJohn Marino * nor may "OpenSSL" appear in their names without prior written
32f5b1c8a1SJohn Marino * permission of the OpenSSL Project.
33f5b1c8a1SJohn Marino *
34f5b1c8a1SJohn Marino * 6. Redistributions of any form whatsoever must retain the following
35f5b1c8a1SJohn Marino * acknowledgment:
36f5b1c8a1SJohn Marino * "This product includes software developed by the OpenSSL Project
37f5b1c8a1SJohn Marino * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
38f5b1c8a1SJohn Marino *
39f5b1c8a1SJohn Marino * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40f5b1c8a1SJohn Marino * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41f5b1c8a1SJohn Marino * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42f5b1c8a1SJohn Marino * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
43f5b1c8a1SJohn Marino * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44f5b1c8a1SJohn Marino * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45f5b1c8a1SJohn Marino * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46f5b1c8a1SJohn Marino * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47f5b1c8a1SJohn Marino * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48f5b1c8a1SJohn Marino * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49f5b1c8a1SJohn Marino * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50f5b1c8a1SJohn Marino * OF THE POSSIBILITY OF SUCH DAMAGE.
51f5b1c8a1SJohn Marino * ====================================================================
52f5b1c8a1SJohn Marino *
53f5b1c8a1SJohn Marino * This product includes cryptographic software written by Eric Young
54f5b1c8a1SJohn Marino * (eay@cryptsoft.com). This product includes software written by Tim
55f5b1c8a1SJohn Marino * Hudson (tjh@cryptsoft.com).
56f5b1c8a1SJohn Marino *
57f5b1c8a1SJohn Marino */
58f5b1c8a1SJohn Marino
59f5b1c8a1SJohn Marino #include <stdio.h>
60f5b1c8a1SJohn Marino #include <string.h>
61f5b1c8a1SJohn Marino
62f5b1c8a1SJohn Marino #include <openssl/bn.h>
63f5b1c8a1SJohn Marino #include <openssl/err.h>
64f5b1c8a1SJohn Marino #include <openssl/objects.h>
65f5b1c8a1SJohn Marino #include <openssl/rsa.h>
66f5b1c8a1SJohn Marino
67f5b1c8a1SJohn Marino int
RSA_padding_add_X931(unsigned char * to,int tlen,const unsigned char * from,int flen)68f5b1c8a1SJohn Marino RSA_padding_add_X931(unsigned char *to, int tlen, const unsigned char *from,
69f5b1c8a1SJohn Marino int flen)
70f5b1c8a1SJohn Marino {
71f5b1c8a1SJohn Marino int j;
72f5b1c8a1SJohn Marino unsigned char *p;
73f5b1c8a1SJohn Marino
74f5b1c8a1SJohn Marino /*
75f5b1c8a1SJohn Marino * Absolute minimum amount of padding is 1 header nibble, 1 padding
76f5b1c8a1SJohn Marino * nibble and 2 trailer bytes: but 1 hash if is already in 'from'.
77f5b1c8a1SJohn Marino */
78f5b1c8a1SJohn Marino j = tlen - flen - 2;
79f5b1c8a1SJohn Marino
80f5b1c8a1SJohn Marino if (j < 0) {
8172c33676SMaxim Ag RSAerror(RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE);
82f5b1c8a1SJohn Marino return -1;
83f5b1c8a1SJohn Marino }
84f5b1c8a1SJohn Marino
85f5b1c8a1SJohn Marino p = (unsigned char *)to;
86f5b1c8a1SJohn Marino
87f5b1c8a1SJohn Marino /* If no padding start and end nibbles are in one byte */
88f5b1c8a1SJohn Marino if (j == 0)
89f5b1c8a1SJohn Marino *p++ = 0x6A;
90f5b1c8a1SJohn Marino else {
91f5b1c8a1SJohn Marino *p++ = 0x6B;
92f5b1c8a1SJohn Marino if (j > 1) {
93f5b1c8a1SJohn Marino memset(p, 0xBB, j - 1);
94f5b1c8a1SJohn Marino p += j - 1;
95f5b1c8a1SJohn Marino }
96f5b1c8a1SJohn Marino *p++ = 0xBA;
97f5b1c8a1SJohn Marino }
98f5b1c8a1SJohn Marino memcpy(p, from, flen);
99f5b1c8a1SJohn Marino p += flen;
100f5b1c8a1SJohn Marino *p = 0xCC;
101f5b1c8a1SJohn Marino return 1;
102f5b1c8a1SJohn Marino }
103f5b1c8a1SJohn Marino
104f5b1c8a1SJohn Marino int
RSA_padding_check_X931(unsigned char * to,int tlen,const unsigned char * from,int flen,int num)105f5b1c8a1SJohn Marino RSA_padding_check_X931(unsigned char *to, int tlen, const unsigned char *from,
106f5b1c8a1SJohn Marino int flen, int num)
107f5b1c8a1SJohn Marino {
108f5b1c8a1SJohn Marino int i = 0, j;
109f5b1c8a1SJohn Marino const unsigned char *p = from;
110f5b1c8a1SJohn Marino
111f5b1c8a1SJohn Marino if (num != flen || (*p != 0x6A && *p != 0x6B)) {
11272c33676SMaxim Ag RSAerror(RSA_R_INVALID_HEADER);
113f5b1c8a1SJohn Marino return -1;
114f5b1c8a1SJohn Marino }
115f5b1c8a1SJohn Marino
116f5b1c8a1SJohn Marino if (*p++ == 0x6B) {
117f5b1c8a1SJohn Marino j = flen - 3;
118f5b1c8a1SJohn Marino for (i = 0; i < j; i++) {
119f5b1c8a1SJohn Marino unsigned char c = *p++;
120f5b1c8a1SJohn Marino if (c == 0xBA)
121f5b1c8a1SJohn Marino break;
122f5b1c8a1SJohn Marino if (c != 0xBB) {
12372c33676SMaxim Ag RSAerror(RSA_R_INVALID_PADDING);
124f5b1c8a1SJohn Marino return -1;
125f5b1c8a1SJohn Marino }
126f5b1c8a1SJohn Marino }
127f5b1c8a1SJohn Marino
128f5b1c8a1SJohn Marino if (i == 0) {
12972c33676SMaxim Ag RSAerror(RSA_R_INVALID_PADDING);
130f5b1c8a1SJohn Marino return -1;
131f5b1c8a1SJohn Marino }
132f5b1c8a1SJohn Marino
133f5b1c8a1SJohn Marino j -= i;
134f5b1c8a1SJohn Marino } else
135f5b1c8a1SJohn Marino j = flen - 2;
136f5b1c8a1SJohn Marino
137f5b1c8a1SJohn Marino if (j < 0 || p[j] != 0xCC) {
13872c33676SMaxim Ag RSAerror(RSA_R_INVALID_TRAILER);
139f5b1c8a1SJohn Marino return -1;
140f5b1c8a1SJohn Marino }
141f5b1c8a1SJohn Marino
142f5b1c8a1SJohn Marino memcpy(to, p, j);
143f5b1c8a1SJohn Marino
144f5b1c8a1SJohn Marino return j;
145f5b1c8a1SJohn Marino }
146f5b1c8a1SJohn Marino
147f5b1c8a1SJohn Marino /* Translate between X931 hash ids and NIDs */
148f5b1c8a1SJohn Marino
149f5b1c8a1SJohn Marino int
RSA_X931_hash_id(int nid)150f5b1c8a1SJohn Marino RSA_X931_hash_id(int nid)
151f5b1c8a1SJohn Marino {
152f5b1c8a1SJohn Marino switch (nid) {
153f5b1c8a1SJohn Marino case NID_sha1:
154f5b1c8a1SJohn Marino return 0x33;
155f5b1c8a1SJohn Marino case NID_sha256:
156f5b1c8a1SJohn Marino return 0x34;
157f5b1c8a1SJohn Marino case NID_sha384:
158f5b1c8a1SJohn Marino return 0x36;
159f5b1c8a1SJohn Marino case NID_sha512:
160f5b1c8a1SJohn Marino return 0x35;
161f5b1c8a1SJohn Marino }
162f5b1c8a1SJohn Marino
163f5b1c8a1SJohn Marino return -1;
164f5b1c8a1SJohn Marino }
165