1e71b7053SJung-uk Kim /*
2b077aed3SPierre Pronchery * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
374664626SKris Kennaway *
4b077aed3SPierre Pronchery * Licensed under the Apache License 2.0 (the "License"). You may not use
5e71b7053SJung-uk Kim * this file except in compliance with the License. You can obtain a copy
6e71b7053SJung-uk Kim * in the file LICENSE in the source distribution or at
7e71b7053SJung-uk Kim * https://www.openssl.org/source/license.html
874664626SKris Kennaway */
974664626SKris Kennaway
1074664626SKris Kennaway #include <stdio.h>
11e71b7053SJung-uk Kim #include "internal/cryptlib.h"
1274664626SKris Kennaway #include <openssl/x509.h>
1374664626SKris Kennaway #include <openssl/objects.h>
1474664626SKris Kennaway #include <openssl/evp.h>
155c87c606SMark Murray #include <openssl/ui.h>
1674664626SKris Kennaway
17b077aed3SPierre Pronchery #ifndef BUFSIZ
18b077aed3SPierre Pronchery # define BUFSIZ 256
19b077aed3SPierre Pronchery #endif
20b077aed3SPierre Pronchery
2174664626SKris Kennaway /* should be init to zeros. */
2274664626SKris Kennaway static char prompt_string[80];
2374664626SKris Kennaway
EVP_set_pw_prompt(const char * prompt)243b4e3dcbSSimon L. B. Nielsen void EVP_set_pw_prompt(const char *prompt)
2574664626SKris Kennaway {
2674664626SKris Kennaway if (prompt == NULL)
2774664626SKris Kennaway prompt_string[0] = '\0';
286f9291ceSJung-uk Kim else {
2974664626SKris Kennaway strncpy(prompt_string, prompt, 79);
305c87c606SMark Murray prompt_string[79] = '\0';
315c87c606SMark Murray }
3274664626SKris Kennaway }
3374664626SKris Kennaway
EVP_get_pw_prompt(void)3474664626SKris Kennaway char *EVP_get_pw_prompt(void)
3574664626SKris Kennaway {
3674664626SKris Kennaway if (prompt_string[0] == '\0')
37e71b7053SJung-uk Kim return NULL;
3874664626SKris Kennaway else
39e71b7053SJung-uk Kim return prompt_string;
4074664626SKris Kennaway }
4174664626SKris Kennaway
426f9291ceSJung-uk Kim /*
436f9291ceSJung-uk Kim * For historical reasons, the standard function for reading passwords is in
446f9291ceSJung-uk Kim * the DES library -- if someone ever wants to disable DES, this function
456f9291ceSJung-uk Kim * will fail
466f9291ceSJung-uk Kim */
EVP_read_pw_string(char * buf,int len,const char * prompt,int verify)4774664626SKris Kennaway int EVP_read_pw_string(char *buf, int len, const char *prompt, int verify)
4874664626SKris Kennaway {
491f13597dSJung-uk Kim return EVP_read_pw_string_min(buf, 0, len, prompt, verify);
501f13597dSJung-uk Kim }
511f13597dSJung-uk Kim
EVP_read_pw_string_min(char * buf,int min,int len,const char * prompt,int verify)526f9291ceSJung-uk Kim int EVP_read_pw_string_min(char *buf, int min, int len, const char *prompt,
536f9291ceSJung-uk Kim int verify)
541f13597dSJung-uk Kim {
5547902a71SJung-uk Kim int ret = -1;
565c87c606SMark Murray char buff[BUFSIZ];
575c87c606SMark Murray UI *ui;
585c87c606SMark Murray
5974664626SKris Kennaway if ((prompt == NULL) && (prompt_string[0] != '\0'))
6074664626SKris Kennaway prompt = prompt_string;
615c87c606SMark Murray ui = UI_new();
6280815a77SJung-uk Kim if (ui == NULL)
6347902a71SJung-uk Kim return ret;
6447902a71SJung-uk Kim if (UI_add_input_string(ui, prompt, 0, buf, min,
6547902a71SJung-uk Kim (len >= BUFSIZ) ? BUFSIZ - 1 : len) < 0
6647902a71SJung-uk Kim || (verify
6747902a71SJung-uk Kim && UI_add_verify_string(ui, prompt, 0, buff, min,
6847902a71SJung-uk Kim (len >= BUFSIZ) ? BUFSIZ - 1 : len,
6947902a71SJung-uk Kim buf) < 0))
7047902a71SJung-uk Kim goto end;
715c87c606SMark Murray ret = UI_process(ui);
725c87c606SMark Murray OPENSSL_cleanse(buff, BUFSIZ);
7347902a71SJung-uk Kim end:
7447902a71SJung-uk Kim UI_free(ui);
755c87c606SMark Murray return ret;
7674664626SKris Kennaway }
7774664626SKris Kennaway
EVP_BytesToKey(const EVP_CIPHER * type,const EVP_MD * md,const unsigned char * salt,const unsigned char * data,int datal,int count,unsigned char * key,unsigned char * iv)785c87c606SMark Murray int EVP_BytesToKey(const EVP_CIPHER *type, const EVP_MD *md,
796f9291ceSJung-uk Kim const unsigned char *salt, const unsigned char *data,
806f9291ceSJung-uk Kim int datal, int count, unsigned char *key,
816f9291ceSJung-uk Kim unsigned char *iv)
8274664626SKris Kennaway {
83e71b7053SJung-uk Kim EVP_MD_CTX *c;
8474664626SKris Kennaway unsigned char md_buf[EVP_MAX_MD_SIZE];
8574664626SKris Kennaway int niv, nkey, addmd = 0;
8674664626SKris Kennaway unsigned int mds = 0, i;
871f13597dSJung-uk Kim int rv = 0;
88b077aed3SPierre Pronchery nkey = EVP_CIPHER_get_key_length(type);
89b077aed3SPierre Pronchery niv = EVP_CIPHER_get_iv_length(type);
905c87c606SMark Murray OPENSSL_assert(nkey <= EVP_MAX_KEY_LENGTH);
915c87c606SMark Murray OPENSSL_assert(niv <= EVP_MAX_IV_LENGTH);
9274664626SKris Kennaway
936f9291ceSJung-uk Kim if (data == NULL)
94e71b7053SJung-uk Kim return nkey;
9574664626SKris Kennaway
96e71b7053SJung-uk Kim c = EVP_MD_CTX_new();
97e71b7053SJung-uk Kim if (c == NULL)
98e71b7053SJung-uk Kim goto err;
996f9291ceSJung-uk Kim for (;;) {
100e71b7053SJung-uk Kim if (!EVP_DigestInit_ex(c, md, NULL))
10180815a77SJung-uk Kim goto err;
10274664626SKris Kennaway if (addmd++)
103e71b7053SJung-uk Kim if (!EVP_DigestUpdate(c, &(md_buf[0]), mds))
1041f13597dSJung-uk Kim goto err;
105e71b7053SJung-uk Kim if (!EVP_DigestUpdate(c, data, datal))
1061f13597dSJung-uk Kim goto err;
10774664626SKris Kennaway if (salt != NULL)
108e71b7053SJung-uk Kim if (!EVP_DigestUpdate(c, salt, PKCS5_SALT_LEN))
1091f13597dSJung-uk Kim goto err;
110e71b7053SJung-uk Kim if (!EVP_DigestFinal_ex(c, &(md_buf[0]), &mds))
1111f13597dSJung-uk Kim goto err;
11274664626SKris Kennaway
1136f9291ceSJung-uk Kim for (i = 1; i < (unsigned int)count; i++) {
114e71b7053SJung-uk Kim if (!EVP_DigestInit_ex(c, md, NULL))
1151f13597dSJung-uk Kim goto err;
116e71b7053SJung-uk Kim if (!EVP_DigestUpdate(c, &(md_buf[0]), mds))
1171f13597dSJung-uk Kim goto err;
118e71b7053SJung-uk Kim if (!EVP_DigestFinal_ex(c, &(md_buf[0]), &mds))
1191f13597dSJung-uk Kim goto err;
12074664626SKris Kennaway }
12174664626SKris Kennaway i = 0;
1226f9291ceSJung-uk Kim if (nkey) {
1236f9291ceSJung-uk Kim for (;;) {
1246f9291ceSJung-uk Kim if (nkey == 0)
1256f9291ceSJung-uk Kim break;
1266f9291ceSJung-uk Kim if (i == mds)
1276f9291ceSJung-uk Kim break;
12874664626SKris Kennaway if (key != NULL)
12974664626SKris Kennaway *(key++) = md_buf[i];
13074664626SKris Kennaway nkey--;
13174664626SKris Kennaway i++;
13274664626SKris Kennaway }
13374664626SKris Kennaway }
1346f9291ceSJung-uk Kim if (niv && (i != mds)) {
1356f9291ceSJung-uk Kim for (;;) {
1366f9291ceSJung-uk Kim if (niv == 0)
1376f9291ceSJung-uk Kim break;
1386f9291ceSJung-uk Kim if (i == mds)
1396f9291ceSJung-uk Kim break;
14074664626SKris Kennaway if (iv != NULL)
14174664626SKris Kennaway *(iv++) = md_buf[i];
14274664626SKris Kennaway niv--;
14374664626SKris Kennaway i++;
14474664626SKris Kennaway }
14574664626SKris Kennaway }
1466f9291ceSJung-uk Kim if ((nkey == 0) && (niv == 0))
1476f9291ceSJung-uk Kim break;
14874664626SKris Kennaway }
149b077aed3SPierre Pronchery rv = EVP_CIPHER_get_key_length(type);
1501f13597dSJung-uk Kim err:
151e71b7053SJung-uk Kim EVP_MD_CTX_free(c);
15280815a77SJung-uk Kim OPENSSL_cleanse(md_buf, sizeof(md_buf));
1531f13597dSJung-uk Kim return rv;
15474664626SKris Kennaway }
155