1 /* 2 * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved. 3 * 4 * Licensed under the OpenSSL license (the "License"). You may not use 5 * this file except in compliance with the License. You can obtain a copy 6 * in the file LICENSE in the source distribution or at 7 * https://www.openssl.org/source/license.html 8 */ 9 10 #include <stdio.h> 11 #include "internal/cryptlib.h" 12 #include <openssl/asn1t.h> 13 #include <openssl/x509.h> 14 #include "crypto/x509.h" 15 16 /* Minor tweak to operation: zero private key data */ 17 static int pkey_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it, 18 void *exarg) 19 { 20 /* Since the structure must still be valid use ASN1_OP_FREE_PRE */ 21 if (operation == ASN1_OP_FREE_PRE) { 22 PKCS8_PRIV_KEY_INFO *key = (PKCS8_PRIV_KEY_INFO *)*pval; 23 if (key->pkey) 24 OPENSSL_cleanse(key->pkey->data, key->pkey->length); 25 } 26 return 1; 27 } 28 29 ASN1_SEQUENCE_cb(PKCS8_PRIV_KEY_INFO, pkey_cb) = { 30 ASN1_SIMPLE(PKCS8_PRIV_KEY_INFO, version, ASN1_INTEGER), 31 ASN1_SIMPLE(PKCS8_PRIV_KEY_INFO, pkeyalg, X509_ALGOR), 32 ASN1_SIMPLE(PKCS8_PRIV_KEY_INFO, pkey, ASN1_OCTET_STRING), 33 ASN1_IMP_SET_OF_OPT(PKCS8_PRIV_KEY_INFO, attributes, X509_ATTRIBUTE, 0) 34 } ASN1_SEQUENCE_END_cb(PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO) 35 36 IMPLEMENT_ASN1_FUNCTIONS(PKCS8_PRIV_KEY_INFO) 37 38 int PKCS8_pkey_set0(PKCS8_PRIV_KEY_INFO *priv, ASN1_OBJECT *aobj, 39 int version, 40 int ptype, void *pval, unsigned char *penc, int penclen) 41 { 42 if (version >= 0) { 43 if (!ASN1_INTEGER_set(priv->version, version)) 44 return 0; 45 } 46 if (!X509_ALGOR_set0(priv->pkeyalg, aobj, ptype, pval)) 47 return 0; 48 if (penc) 49 ASN1_STRING_set0(priv->pkey, penc, penclen); 50 return 1; 51 } 52 53 int PKCS8_pkey_get0(const ASN1_OBJECT **ppkalg, 54 const unsigned char **pk, int *ppklen, 55 const X509_ALGOR **pa, const PKCS8_PRIV_KEY_INFO *p8) 56 { 57 if (ppkalg) 58 *ppkalg = p8->pkeyalg->algorithm; 59 if (pk) { 60 *pk = ASN1_STRING_get0_data(p8->pkey); 61 *ppklen = ASN1_STRING_length(p8->pkey); 62 } 63 if (pa) 64 *pa = p8->pkeyalg; 65 return 1; 66 } 67 68 const STACK_OF(X509_ATTRIBUTE) * 69 PKCS8_pkey_get0_attrs(const PKCS8_PRIV_KEY_INFO *p8) 70 { 71 return p8->attributes; 72 } 73 74 int PKCS8_pkey_add1_attr_by_NID(PKCS8_PRIV_KEY_INFO *p8, int nid, int type, 75 const unsigned char *bytes, int len) 76 { 77 if (X509at_add1_attr_by_NID(&p8->attributes, nid, type, bytes, len) != NULL) 78 return 1; 79 return 0; 80 } 81