1b077aed3SPierre Pronchery /*
2*e0c4386eSCy Schubert * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
3b077aed3SPierre Pronchery *
4b077aed3SPierre Pronchery * Licensed under the Apache License 2.0 (the "License"). You may not use
5b077aed3SPierre Pronchery * this file except in compliance with the License. You can obtain a copy
6b077aed3SPierre Pronchery * in the file LICENSE in the source distribution or at
7b077aed3SPierre Pronchery * https://www.openssl.org/source/license.html
8b077aed3SPierre Pronchery */
9b077aed3SPierre Pronchery
10b077aed3SPierre Pronchery /*
11b077aed3SPierre Pronchery * Low level APIs are deprecated for public use, but still ok for internal use.
12b077aed3SPierre Pronchery */
13b077aed3SPierre Pronchery #include "internal/deprecated.h"
14b077aed3SPierre Pronchery
15b077aed3SPierre Pronchery #include <openssl/core.h>
16b077aed3SPierre Pronchery #include <openssl/core_dispatch.h>
17b077aed3SPierre Pronchery #include <openssl/core_names.h>
18b077aed3SPierre Pronchery #include <openssl/crypto.h>
19b077aed3SPierre Pronchery #include <openssl/params.h>
20b077aed3SPierre Pronchery #include <openssl/asn1.h>
21b077aed3SPierre Pronchery #include <openssl/err.h>
22b077aed3SPierre Pronchery #include <openssl/pem.h>
23b077aed3SPierre Pronchery #include <openssl/x509.h>
24b077aed3SPierre Pronchery #include <openssl/pkcs12.h> /* PKCS8_encrypt() */
25b077aed3SPierre Pronchery #include <openssl/dh.h>
26b077aed3SPierre Pronchery #include <openssl/dsa.h>
27b077aed3SPierre Pronchery #include <openssl/ec.h>
28b077aed3SPierre Pronchery #include <openssl/proverr.h>
29b077aed3SPierre Pronchery #include "internal/passphrase.h"
30b077aed3SPierre Pronchery #include "internal/cryptlib.h"
31b077aed3SPierre Pronchery #include "crypto/ecx.h"
32b077aed3SPierre Pronchery #include "crypto/rsa.h"
33b077aed3SPierre Pronchery #include "prov/implementations.h"
34b077aed3SPierre Pronchery #include "prov/bio.h"
35b077aed3SPierre Pronchery #include "prov/provider_ctx.h"
36b077aed3SPierre Pronchery #include "prov/der_rsa.h"
37b077aed3SPierre Pronchery #include "endecoder_local.h"
38b077aed3SPierre Pronchery
39b077aed3SPierre Pronchery #if defined(OPENSSL_NO_DH) && defined(OPENSSL_NO_DSA) && defined(OPENSSL_NO_EC)
40b077aed3SPierre Pronchery # define OPENSSL_NO_KEYPARAMS
41b077aed3SPierre Pronchery #endif
42b077aed3SPierre Pronchery
43b077aed3SPierre Pronchery struct key2any_ctx_st {
44b077aed3SPierre Pronchery PROV_CTX *provctx;
45b077aed3SPierre Pronchery
46b077aed3SPierre Pronchery /* Set to 0 if parameters should not be saved (dsa only) */
47b077aed3SPierre Pronchery int save_parameters;
48b077aed3SPierre Pronchery
49b077aed3SPierre Pronchery /* Set to 1 if intending to encrypt/decrypt, otherwise 0 */
50b077aed3SPierre Pronchery int cipher_intent;
51b077aed3SPierre Pronchery
52b077aed3SPierre Pronchery EVP_CIPHER *cipher;
53b077aed3SPierre Pronchery
54b077aed3SPierre Pronchery struct ossl_passphrase_data_st pwdata;
55b077aed3SPierre Pronchery };
56b077aed3SPierre Pronchery
57b077aed3SPierre Pronchery typedef int check_key_type_fn(const void *key, int nid);
58b077aed3SPierre Pronchery typedef int key_to_paramstring_fn(const void *key, int nid, int save,
59b077aed3SPierre Pronchery void **str, int *strtype);
60b077aed3SPierre Pronchery typedef int key_to_der_fn(BIO *out, const void *key,
61b077aed3SPierre Pronchery int key_nid, const char *pemname,
62b077aed3SPierre Pronchery key_to_paramstring_fn *p2s, i2d_of_void *k2d,
63b077aed3SPierre Pronchery struct key2any_ctx_st *ctx);
64b077aed3SPierre Pronchery typedef int write_bio_of_void_fn(BIO *bp, const void *x);
65b077aed3SPierre Pronchery
66b077aed3SPierre Pronchery
67b077aed3SPierre Pronchery /* Free the blob allocated during key_to_paramstring_fn */
free_asn1_data(int type,void * data)68b077aed3SPierre Pronchery static void free_asn1_data(int type, void *data)
69b077aed3SPierre Pronchery {
70b077aed3SPierre Pronchery switch(type) {
71b077aed3SPierre Pronchery case V_ASN1_OBJECT:
72b077aed3SPierre Pronchery ASN1_OBJECT_free(data);
73b077aed3SPierre Pronchery break;
74b077aed3SPierre Pronchery case V_ASN1_SEQUENCE:
75b077aed3SPierre Pronchery ASN1_STRING_free(data);
76b077aed3SPierre Pronchery break;
77b077aed3SPierre Pronchery }
78b077aed3SPierre Pronchery }
79b077aed3SPierre Pronchery
key_to_p8info(const void * key,int key_nid,void * params,int params_type,i2d_of_void * k2d)80b077aed3SPierre Pronchery static PKCS8_PRIV_KEY_INFO *key_to_p8info(const void *key, int key_nid,
81b077aed3SPierre Pronchery void *params, int params_type,
82b077aed3SPierre Pronchery i2d_of_void *k2d)
83b077aed3SPierre Pronchery {
84b077aed3SPierre Pronchery /* der, derlen store the key DER output and its length */
85b077aed3SPierre Pronchery unsigned char *der = NULL;
86b077aed3SPierre Pronchery int derlen;
87b077aed3SPierre Pronchery /* The final PKCS#8 info */
88b077aed3SPierre Pronchery PKCS8_PRIV_KEY_INFO *p8info = NULL;
89b077aed3SPierre Pronchery
90b077aed3SPierre Pronchery if ((p8info = PKCS8_PRIV_KEY_INFO_new()) == NULL
91b077aed3SPierre Pronchery || (derlen = k2d(key, &der)) <= 0
92b077aed3SPierre Pronchery || !PKCS8_pkey_set0(p8info, OBJ_nid2obj(key_nid), 0,
93b077aed3SPierre Pronchery params_type, params, der, derlen)) {
94b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
95b077aed3SPierre Pronchery PKCS8_PRIV_KEY_INFO_free(p8info);
96b077aed3SPierre Pronchery OPENSSL_free(der);
97b077aed3SPierre Pronchery p8info = NULL;
98b077aed3SPierre Pronchery }
99b077aed3SPierre Pronchery
100b077aed3SPierre Pronchery return p8info;
101b077aed3SPierre Pronchery }
102b077aed3SPierre Pronchery
p8info_to_encp8(PKCS8_PRIV_KEY_INFO * p8info,struct key2any_ctx_st * ctx)103b077aed3SPierre Pronchery static X509_SIG *p8info_to_encp8(PKCS8_PRIV_KEY_INFO *p8info,
104b077aed3SPierre Pronchery struct key2any_ctx_st *ctx)
105b077aed3SPierre Pronchery {
106b077aed3SPierre Pronchery X509_SIG *p8 = NULL;
107b077aed3SPierre Pronchery char kstr[PEM_BUFSIZE];
108b077aed3SPierre Pronchery size_t klen = 0;
109b077aed3SPierre Pronchery OSSL_LIB_CTX *libctx = PROV_LIBCTX_OF(ctx->provctx);
110b077aed3SPierre Pronchery
111b077aed3SPierre Pronchery if (ctx->cipher == NULL)
112b077aed3SPierre Pronchery return NULL;
113b077aed3SPierre Pronchery
114b077aed3SPierre Pronchery if (!ossl_pw_get_passphrase(kstr, sizeof(kstr), &klen, NULL, 1,
115b077aed3SPierre Pronchery &ctx->pwdata)) {
116b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_UNABLE_TO_GET_PASSPHRASE);
117b077aed3SPierre Pronchery return NULL;
118b077aed3SPierre Pronchery }
119b077aed3SPierre Pronchery /* First argument == -1 means "standard" */
120b077aed3SPierre Pronchery p8 = PKCS8_encrypt_ex(-1, ctx->cipher, kstr, klen, NULL, 0, 0, p8info, libctx, NULL);
121b077aed3SPierre Pronchery OPENSSL_cleanse(kstr, klen);
122b077aed3SPierre Pronchery return p8;
123b077aed3SPierre Pronchery }
124b077aed3SPierre Pronchery
key_to_encp8(const void * key,int key_nid,void * params,int params_type,i2d_of_void * k2d,struct key2any_ctx_st * ctx)125b077aed3SPierre Pronchery static X509_SIG *key_to_encp8(const void *key, int key_nid,
126b077aed3SPierre Pronchery void *params, int params_type,
127b077aed3SPierre Pronchery i2d_of_void *k2d, struct key2any_ctx_st *ctx)
128b077aed3SPierre Pronchery {
129b077aed3SPierre Pronchery PKCS8_PRIV_KEY_INFO *p8info =
130b077aed3SPierre Pronchery key_to_p8info(key, key_nid, params, params_type, k2d);
131b077aed3SPierre Pronchery X509_SIG *p8 = NULL;
132b077aed3SPierre Pronchery
133b077aed3SPierre Pronchery if (p8info == NULL) {
134b077aed3SPierre Pronchery free_asn1_data(params_type, params);
135b077aed3SPierre Pronchery } else {
136b077aed3SPierre Pronchery p8 = p8info_to_encp8(p8info, ctx);
137b077aed3SPierre Pronchery PKCS8_PRIV_KEY_INFO_free(p8info);
138b077aed3SPierre Pronchery }
139b077aed3SPierre Pronchery return p8;
140b077aed3SPierre Pronchery }
141b077aed3SPierre Pronchery
key_to_pubkey(const void * key,int key_nid,void * params,int params_type,i2d_of_void k2d)142b077aed3SPierre Pronchery static X509_PUBKEY *key_to_pubkey(const void *key, int key_nid,
143b077aed3SPierre Pronchery void *params, int params_type,
144b077aed3SPierre Pronchery i2d_of_void k2d)
145b077aed3SPierre Pronchery {
146b077aed3SPierre Pronchery /* der, derlen store the key DER output and its length */
147b077aed3SPierre Pronchery unsigned char *der = NULL;
148b077aed3SPierre Pronchery int derlen;
149b077aed3SPierre Pronchery /* The final X509_PUBKEY */
150b077aed3SPierre Pronchery X509_PUBKEY *xpk = NULL;
151b077aed3SPierre Pronchery
152b077aed3SPierre Pronchery
153b077aed3SPierre Pronchery if ((xpk = X509_PUBKEY_new()) == NULL
154b077aed3SPierre Pronchery || (derlen = k2d(key, &der)) <= 0
155b077aed3SPierre Pronchery || !X509_PUBKEY_set0_param(xpk, OBJ_nid2obj(key_nid),
156b077aed3SPierre Pronchery params_type, params, der, derlen)) {
157b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
158b077aed3SPierre Pronchery X509_PUBKEY_free(xpk);
159b077aed3SPierre Pronchery OPENSSL_free(der);
160b077aed3SPierre Pronchery xpk = NULL;
161b077aed3SPierre Pronchery }
162b077aed3SPierre Pronchery
163b077aed3SPierre Pronchery return xpk;
164b077aed3SPierre Pronchery }
165b077aed3SPierre Pronchery
166b077aed3SPierre Pronchery /*
167b077aed3SPierre Pronchery * key_to_epki_* produce encoded output with the private key data in a
168b077aed3SPierre Pronchery * EncryptedPrivateKeyInfo structure (defined by PKCS#8). They require
169b077aed3SPierre Pronchery * that there's an intent to encrypt, anything else is an error.
170b077aed3SPierre Pronchery *
171b077aed3SPierre Pronchery * key_to_pki_* primarly produce encoded output with the private key data
172b077aed3SPierre Pronchery * in a PrivateKeyInfo structure (also defined by PKCS#8). However, if
173b077aed3SPierre Pronchery * there is an intent to encrypt the data, the corresponding key_to_epki_*
174b077aed3SPierre Pronchery * function is used instead.
175b077aed3SPierre Pronchery *
176b077aed3SPierre Pronchery * key_to_spki_* produce encoded output with the public key data in an
177b077aed3SPierre Pronchery * X.509 SubjectPublicKeyInfo.
178b077aed3SPierre Pronchery *
179b077aed3SPierre Pronchery * Key parameters don't have any defined envelopment of this kind, but are
180b077aed3SPierre Pronchery * included in some manner in the output from the functions described above,
181b077aed3SPierre Pronchery * either in the AlgorithmIdentifier's parameter field, or as part of the
182b077aed3SPierre Pronchery * key data itself.
183b077aed3SPierre Pronchery */
184b077aed3SPierre Pronchery
key_to_epki_der_priv_bio(BIO * out,const void * key,int key_nid,ossl_unused const char * pemname,key_to_paramstring_fn * p2s,i2d_of_void * k2d,struct key2any_ctx_st * ctx)185b077aed3SPierre Pronchery static int key_to_epki_der_priv_bio(BIO *out, const void *key,
186b077aed3SPierre Pronchery int key_nid,
187b077aed3SPierre Pronchery ossl_unused const char *pemname,
188b077aed3SPierre Pronchery key_to_paramstring_fn *p2s,
189b077aed3SPierre Pronchery i2d_of_void *k2d,
190b077aed3SPierre Pronchery struct key2any_ctx_st *ctx)
191b077aed3SPierre Pronchery {
192b077aed3SPierre Pronchery int ret = 0;
193b077aed3SPierre Pronchery void *str = NULL;
194b077aed3SPierre Pronchery int strtype = V_ASN1_UNDEF;
195b077aed3SPierre Pronchery X509_SIG *p8;
196b077aed3SPierre Pronchery
197b077aed3SPierre Pronchery if (!ctx->cipher_intent)
198b077aed3SPierre Pronchery return 0;
199b077aed3SPierre Pronchery
200b077aed3SPierre Pronchery if (p2s != NULL && !p2s(key, key_nid, ctx->save_parameters,
201b077aed3SPierre Pronchery &str, &strtype))
202b077aed3SPierre Pronchery return 0;
203b077aed3SPierre Pronchery
204b077aed3SPierre Pronchery p8 = key_to_encp8(key, key_nid, str, strtype, k2d, ctx);
205b077aed3SPierre Pronchery if (p8 != NULL)
206b077aed3SPierre Pronchery ret = i2d_PKCS8_bio(out, p8);
207b077aed3SPierre Pronchery
208b077aed3SPierre Pronchery X509_SIG_free(p8);
209b077aed3SPierre Pronchery
210b077aed3SPierre Pronchery return ret;
211b077aed3SPierre Pronchery }
212b077aed3SPierre Pronchery
key_to_epki_pem_priv_bio(BIO * out,const void * key,int key_nid,ossl_unused const char * pemname,key_to_paramstring_fn * p2s,i2d_of_void * k2d,struct key2any_ctx_st * ctx)213b077aed3SPierre Pronchery static int key_to_epki_pem_priv_bio(BIO *out, const void *key,
214b077aed3SPierre Pronchery int key_nid,
215b077aed3SPierre Pronchery ossl_unused const char *pemname,
216b077aed3SPierre Pronchery key_to_paramstring_fn *p2s,
217b077aed3SPierre Pronchery i2d_of_void *k2d,
218b077aed3SPierre Pronchery struct key2any_ctx_st *ctx)
219b077aed3SPierre Pronchery {
220b077aed3SPierre Pronchery int ret = 0;
221b077aed3SPierre Pronchery void *str = NULL;
222b077aed3SPierre Pronchery int strtype = V_ASN1_UNDEF;
223b077aed3SPierre Pronchery X509_SIG *p8;
224b077aed3SPierre Pronchery
225b077aed3SPierre Pronchery if (!ctx->cipher_intent)
226b077aed3SPierre Pronchery return 0;
227b077aed3SPierre Pronchery
228b077aed3SPierre Pronchery if (p2s != NULL && !p2s(key, key_nid, ctx->save_parameters,
229b077aed3SPierre Pronchery &str, &strtype))
230b077aed3SPierre Pronchery return 0;
231b077aed3SPierre Pronchery
232b077aed3SPierre Pronchery p8 = key_to_encp8(key, key_nid, str, strtype, k2d, ctx);
233b077aed3SPierre Pronchery if (p8 != NULL)
234b077aed3SPierre Pronchery ret = PEM_write_bio_PKCS8(out, p8);
235b077aed3SPierre Pronchery
236b077aed3SPierre Pronchery X509_SIG_free(p8);
237b077aed3SPierre Pronchery
238b077aed3SPierre Pronchery return ret;
239b077aed3SPierre Pronchery }
240b077aed3SPierre Pronchery
key_to_pki_der_priv_bio(BIO * out,const void * key,int key_nid,ossl_unused const char * pemname,key_to_paramstring_fn * p2s,i2d_of_void * k2d,struct key2any_ctx_st * ctx)241b077aed3SPierre Pronchery static int key_to_pki_der_priv_bio(BIO *out, const void *key,
242b077aed3SPierre Pronchery int key_nid,
243b077aed3SPierre Pronchery ossl_unused const char *pemname,
244b077aed3SPierre Pronchery key_to_paramstring_fn *p2s,
245b077aed3SPierre Pronchery i2d_of_void *k2d,
246b077aed3SPierre Pronchery struct key2any_ctx_st *ctx)
247b077aed3SPierre Pronchery {
248b077aed3SPierre Pronchery int ret = 0;
249b077aed3SPierre Pronchery void *str = NULL;
250b077aed3SPierre Pronchery int strtype = V_ASN1_UNDEF;
251b077aed3SPierre Pronchery PKCS8_PRIV_KEY_INFO *p8info;
252b077aed3SPierre Pronchery
253b077aed3SPierre Pronchery if (ctx->cipher_intent)
254b077aed3SPierre Pronchery return key_to_epki_der_priv_bio(out, key, key_nid, pemname,
255b077aed3SPierre Pronchery p2s, k2d, ctx);
256b077aed3SPierre Pronchery
257b077aed3SPierre Pronchery if (p2s != NULL && !p2s(key, key_nid, ctx->save_parameters,
258b077aed3SPierre Pronchery &str, &strtype))
259b077aed3SPierre Pronchery return 0;
260b077aed3SPierre Pronchery
261b077aed3SPierre Pronchery p8info = key_to_p8info(key, key_nid, str, strtype, k2d);
262b077aed3SPierre Pronchery
263b077aed3SPierre Pronchery if (p8info != NULL)
264b077aed3SPierre Pronchery ret = i2d_PKCS8_PRIV_KEY_INFO_bio(out, p8info);
265b077aed3SPierre Pronchery else
266b077aed3SPierre Pronchery free_asn1_data(strtype, str);
267b077aed3SPierre Pronchery
268b077aed3SPierre Pronchery PKCS8_PRIV_KEY_INFO_free(p8info);
269b077aed3SPierre Pronchery
270b077aed3SPierre Pronchery return ret;
271b077aed3SPierre Pronchery }
272b077aed3SPierre Pronchery
key_to_pki_pem_priv_bio(BIO * out,const void * key,int key_nid,ossl_unused const char * pemname,key_to_paramstring_fn * p2s,i2d_of_void * k2d,struct key2any_ctx_st * ctx)273b077aed3SPierre Pronchery static int key_to_pki_pem_priv_bio(BIO *out, const void *key,
274b077aed3SPierre Pronchery int key_nid,
275b077aed3SPierre Pronchery ossl_unused const char *pemname,
276b077aed3SPierre Pronchery key_to_paramstring_fn *p2s,
277b077aed3SPierre Pronchery i2d_of_void *k2d,
278b077aed3SPierre Pronchery struct key2any_ctx_st *ctx)
279b077aed3SPierre Pronchery {
280b077aed3SPierre Pronchery int ret = 0;
281b077aed3SPierre Pronchery void *str = NULL;
282b077aed3SPierre Pronchery int strtype = V_ASN1_UNDEF;
283b077aed3SPierre Pronchery PKCS8_PRIV_KEY_INFO *p8info;
284b077aed3SPierre Pronchery
285b077aed3SPierre Pronchery if (ctx->cipher_intent)
286b077aed3SPierre Pronchery return key_to_epki_pem_priv_bio(out, key, key_nid, pemname,
287b077aed3SPierre Pronchery p2s, k2d, ctx);
288b077aed3SPierre Pronchery
289b077aed3SPierre Pronchery if (p2s != NULL && !p2s(key, key_nid, ctx->save_parameters,
290b077aed3SPierre Pronchery &str, &strtype))
291b077aed3SPierre Pronchery return 0;
292b077aed3SPierre Pronchery
293b077aed3SPierre Pronchery p8info = key_to_p8info(key, key_nid, str, strtype, k2d);
294b077aed3SPierre Pronchery
295b077aed3SPierre Pronchery if (p8info != NULL)
296b077aed3SPierre Pronchery ret = PEM_write_bio_PKCS8_PRIV_KEY_INFO(out, p8info);
297b077aed3SPierre Pronchery else
298b077aed3SPierre Pronchery free_asn1_data(strtype, str);
299b077aed3SPierre Pronchery
300b077aed3SPierre Pronchery PKCS8_PRIV_KEY_INFO_free(p8info);
301b077aed3SPierre Pronchery
302b077aed3SPierre Pronchery return ret;
303b077aed3SPierre Pronchery }
304b077aed3SPierre Pronchery
key_to_spki_der_pub_bio(BIO * out,const void * key,int key_nid,ossl_unused const char * pemname,key_to_paramstring_fn * p2s,i2d_of_void * k2d,struct key2any_ctx_st * ctx)305b077aed3SPierre Pronchery static int key_to_spki_der_pub_bio(BIO *out, const void *key,
306b077aed3SPierre Pronchery int key_nid,
307b077aed3SPierre Pronchery ossl_unused const char *pemname,
308b077aed3SPierre Pronchery key_to_paramstring_fn *p2s,
309b077aed3SPierre Pronchery i2d_of_void *k2d,
310b077aed3SPierre Pronchery struct key2any_ctx_st *ctx)
311b077aed3SPierre Pronchery {
312b077aed3SPierre Pronchery int ret = 0;
313b077aed3SPierre Pronchery void *str = NULL;
314b077aed3SPierre Pronchery int strtype = V_ASN1_UNDEF;
315b077aed3SPierre Pronchery X509_PUBKEY *xpk = NULL;
316b077aed3SPierre Pronchery
317b077aed3SPierre Pronchery if (p2s != NULL && !p2s(key, key_nid, ctx->save_parameters,
318b077aed3SPierre Pronchery &str, &strtype))
319b077aed3SPierre Pronchery return 0;
320b077aed3SPierre Pronchery
321b077aed3SPierre Pronchery xpk = key_to_pubkey(key, key_nid, str, strtype, k2d);
322b077aed3SPierre Pronchery
323b077aed3SPierre Pronchery if (xpk != NULL)
324b077aed3SPierre Pronchery ret = i2d_X509_PUBKEY_bio(out, xpk);
325b077aed3SPierre Pronchery
326b077aed3SPierre Pronchery /* Also frees |str| */
327b077aed3SPierre Pronchery X509_PUBKEY_free(xpk);
328b077aed3SPierre Pronchery return ret;
329b077aed3SPierre Pronchery }
330b077aed3SPierre Pronchery
key_to_spki_pem_pub_bio(BIO * out,const void * key,int key_nid,ossl_unused const char * pemname,key_to_paramstring_fn * p2s,i2d_of_void * k2d,struct key2any_ctx_st * ctx)331b077aed3SPierre Pronchery static int key_to_spki_pem_pub_bio(BIO *out, const void *key,
332b077aed3SPierre Pronchery int key_nid,
333b077aed3SPierre Pronchery ossl_unused const char *pemname,
334b077aed3SPierre Pronchery key_to_paramstring_fn *p2s,
335b077aed3SPierre Pronchery i2d_of_void *k2d,
336b077aed3SPierre Pronchery struct key2any_ctx_st *ctx)
337b077aed3SPierre Pronchery {
338b077aed3SPierre Pronchery int ret = 0;
339b077aed3SPierre Pronchery void *str = NULL;
340b077aed3SPierre Pronchery int strtype = V_ASN1_UNDEF;
341b077aed3SPierre Pronchery X509_PUBKEY *xpk = NULL;
342b077aed3SPierre Pronchery
343b077aed3SPierre Pronchery if (p2s != NULL && !p2s(key, key_nid, ctx->save_parameters,
344b077aed3SPierre Pronchery &str, &strtype))
345b077aed3SPierre Pronchery return 0;
346b077aed3SPierre Pronchery
347b077aed3SPierre Pronchery xpk = key_to_pubkey(key, key_nid, str, strtype, k2d);
348b077aed3SPierre Pronchery
349b077aed3SPierre Pronchery if (xpk != NULL)
350b077aed3SPierre Pronchery ret = PEM_write_bio_X509_PUBKEY(out, xpk);
351b077aed3SPierre Pronchery else
352b077aed3SPierre Pronchery free_asn1_data(strtype, str);
353b077aed3SPierre Pronchery
354b077aed3SPierre Pronchery /* Also frees |str| */
355b077aed3SPierre Pronchery X509_PUBKEY_free(xpk);
356b077aed3SPierre Pronchery return ret;
357b077aed3SPierre Pronchery }
358b077aed3SPierre Pronchery
359b077aed3SPierre Pronchery /*
360b077aed3SPierre Pronchery * key_to_type_specific_* produce encoded output with type specific key data,
361b077aed3SPierre Pronchery * no envelopment; the same kind of output as the type specific i2d_ and
362b077aed3SPierre Pronchery * PEM_write_ functions, which is often a simple SEQUENCE of INTEGER.
363b077aed3SPierre Pronchery *
364b077aed3SPierre Pronchery * OpenSSL tries to discourage production of new keys in this form, because
365b077aed3SPierre Pronchery * of the ambiguity when trying to recognise them, but can't deny that PKCS#1
366b077aed3SPierre Pronchery * et al still are live standards.
367b077aed3SPierre Pronchery *
368b077aed3SPierre Pronchery * Note that these functions completely ignore p2s, and rather rely entirely
369b077aed3SPierre Pronchery * on k2d to do the complete work.
370b077aed3SPierre Pronchery */
key_to_type_specific_der_bio(BIO * out,const void * key,int key_nid,ossl_unused const char * pemname,key_to_paramstring_fn * p2s,i2d_of_void * k2d,struct key2any_ctx_st * ctx)371b077aed3SPierre Pronchery static int key_to_type_specific_der_bio(BIO *out, const void *key,
372b077aed3SPierre Pronchery int key_nid,
373b077aed3SPierre Pronchery ossl_unused const char *pemname,
374b077aed3SPierre Pronchery key_to_paramstring_fn *p2s,
375b077aed3SPierre Pronchery i2d_of_void *k2d,
376b077aed3SPierre Pronchery struct key2any_ctx_st *ctx)
377b077aed3SPierre Pronchery {
378b077aed3SPierre Pronchery unsigned char *der = NULL;
379b077aed3SPierre Pronchery int derlen;
380b077aed3SPierre Pronchery int ret;
381b077aed3SPierre Pronchery
382b077aed3SPierre Pronchery if ((derlen = k2d(key, &der)) <= 0) {
383b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
384b077aed3SPierre Pronchery return 0;
385b077aed3SPierre Pronchery }
386b077aed3SPierre Pronchery
387b077aed3SPierre Pronchery ret = BIO_write(out, der, derlen);
388b077aed3SPierre Pronchery OPENSSL_free(der);
389b077aed3SPierre Pronchery return ret > 0;
390b077aed3SPierre Pronchery }
391b077aed3SPierre Pronchery #define key_to_type_specific_der_priv_bio key_to_type_specific_der_bio
392b077aed3SPierre Pronchery #define key_to_type_specific_der_pub_bio key_to_type_specific_der_bio
393b077aed3SPierre Pronchery #define key_to_type_specific_der_param_bio key_to_type_specific_der_bio
394b077aed3SPierre Pronchery
key_to_type_specific_pem_bio_cb(BIO * out,const void * key,int key_nid,const char * pemname,key_to_paramstring_fn * p2s,i2d_of_void * k2d,struct key2any_ctx_st * ctx,pem_password_cb * cb,void * cbarg)395b077aed3SPierre Pronchery static int key_to_type_specific_pem_bio_cb(BIO *out, const void *key,
396b077aed3SPierre Pronchery int key_nid, const char *pemname,
397b077aed3SPierre Pronchery key_to_paramstring_fn *p2s,
398b077aed3SPierre Pronchery i2d_of_void *k2d,
399b077aed3SPierre Pronchery struct key2any_ctx_st *ctx,
400b077aed3SPierre Pronchery pem_password_cb *cb, void *cbarg)
401b077aed3SPierre Pronchery {
402b077aed3SPierre Pronchery return
403b077aed3SPierre Pronchery PEM_ASN1_write_bio(k2d, pemname, out, key, ctx->cipher,
404b077aed3SPierre Pronchery NULL, 0, cb, cbarg) > 0;
405b077aed3SPierre Pronchery }
406b077aed3SPierre Pronchery
key_to_type_specific_pem_priv_bio(BIO * out,const void * key,int key_nid,const char * pemname,key_to_paramstring_fn * p2s,i2d_of_void * k2d,struct key2any_ctx_st * ctx)407b077aed3SPierre Pronchery static int key_to_type_specific_pem_priv_bio(BIO *out, const void *key,
408b077aed3SPierre Pronchery int key_nid, const char *pemname,
409b077aed3SPierre Pronchery key_to_paramstring_fn *p2s,
410b077aed3SPierre Pronchery i2d_of_void *k2d,
411b077aed3SPierre Pronchery struct key2any_ctx_st *ctx)
412b077aed3SPierre Pronchery {
413b077aed3SPierre Pronchery return key_to_type_specific_pem_bio_cb(out, key, key_nid, pemname,
414b077aed3SPierre Pronchery p2s, k2d, ctx,
415b077aed3SPierre Pronchery ossl_pw_pem_password, &ctx->pwdata);
416b077aed3SPierre Pronchery }
417b077aed3SPierre Pronchery
key_to_type_specific_pem_pub_bio(BIO * out,const void * key,int key_nid,const char * pemname,key_to_paramstring_fn * p2s,i2d_of_void * k2d,struct key2any_ctx_st * ctx)418b077aed3SPierre Pronchery static int key_to_type_specific_pem_pub_bio(BIO *out, const void *key,
419b077aed3SPierre Pronchery int key_nid, const char *pemname,
420b077aed3SPierre Pronchery key_to_paramstring_fn *p2s,
421b077aed3SPierre Pronchery i2d_of_void *k2d,
422b077aed3SPierre Pronchery struct key2any_ctx_st *ctx)
423b077aed3SPierre Pronchery {
424b077aed3SPierre Pronchery return key_to_type_specific_pem_bio_cb(out, key, key_nid, pemname,
425b077aed3SPierre Pronchery p2s, k2d, ctx, NULL, NULL);
426b077aed3SPierre Pronchery }
427b077aed3SPierre Pronchery
428b077aed3SPierre Pronchery #ifndef OPENSSL_NO_KEYPARAMS
key_to_type_specific_pem_param_bio(BIO * out,const void * key,int key_nid,const char * pemname,key_to_paramstring_fn * p2s,i2d_of_void * k2d,struct key2any_ctx_st * ctx)429b077aed3SPierre Pronchery static int key_to_type_specific_pem_param_bio(BIO *out, const void *key,
430b077aed3SPierre Pronchery int key_nid, const char *pemname,
431b077aed3SPierre Pronchery key_to_paramstring_fn *p2s,
432b077aed3SPierre Pronchery i2d_of_void *k2d,
433b077aed3SPierre Pronchery struct key2any_ctx_st *ctx)
434b077aed3SPierre Pronchery {
435b077aed3SPierre Pronchery return key_to_type_specific_pem_bio_cb(out, key, key_nid, pemname,
436b077aed3SPierre Pronchery p2s, k2d, ctx, NULL, NULL);
437b077aed3SPierre Pronchery }
438b077aed3SPierre Pronchery #endif
439b077aed3SPierre Pronchery
440b077aed3SPierre Pronchery /* ---------------------------------------------------------------------- */
441b077aed3SPierre Pronchery
442b077aed3SPierre Pronchery #ifndef OPENSSL_NO_DH
prepare_dh_params(const void * dh,int nid,int save,void ** pstr,int * pstrtype)443b077aed3SPierre Pronchery static int prepare_dh_params(const void *dh, int nid, int save,
444b077aed3SPierre Pronchery void **pstr, int *pstrtype)
445b077aed3SPierre Pronchery {
446b077aed3SPierre Pronchery ASN1_STRING *params = ASN1_STRING_new();
447b077aed3SPierre Pronchery
448b077aed3SPierre Pronchery if (params == NULL) {
449b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
450b077aed3SPierre Pronchery return 0;
451b077aed3SPierre Pronchery }
452b077aed3SPierre Pronchery
453b077aed3SPierre Pronchery if (nid == EVP_PKEY_DHX)
454b077aed3SPierre Pronchery params->length = i2d_DHxparams(dh, ¶ms->data);
455b077aed3SPierre Pronchery else
456b077aed3SPierre Pronchery params->length = i2d_DHparams(dh, ¶ms->data);
457b077aed3SPierre Pronchery
458b077aed3SPierre Pronchery if (params->length <= 0) {
459b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
460b077aed3SPierre Pronchery ASN1_STRING_free(params);
461b077aed3SPierre Pronchery return 0;
462b077aed3SPierre Pronchery }
463b077aed3SPierre Pronchery params->type = V_ASN1_SEQUENCE;
464b077aed3SPierre Pronchery
465b077aed3SPierre Pronchery *pstr = params;
466b077aed3SPierre Pronchery *pstrtype = V_ASN1_SEQUENCE;
467b077aed3SPierre Pronchery return 1;
468b077aed3SPierre Pronchery }
469b077aed3SPierre Pronchery
dh_spki_pub_to_der(const void * dh,unsigned char ** pder)470b077aed3SPierre Pronchery static int dh_spki_pub_to_der(const void *dh, unsigned char **pder)
471b077aed3SPierre Pronchery {
472b077aed3SPierre Pronchery const BIGNUM *bn = NULL;
473b077aed3SPierre Pronchery ASN1_INTEGER *pub_key = NULL;
474b077aed3SPierre Pronchery int ret;
475b077aed3SPierre Pronchery
476b077aed3SPierre Pronchery if ((bn = DH_get0_pub_key(dh)) == NULL) {
477b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_NOT_A_PUBLIC_KEY);
478b077aed3SPierre Pronchery return 0;
479b077aed3SPierre Pronchery }
480b077aed3SPierre Pronchery if ((pub_key = BN_to_ASN1_INTEGER(bn, NULL)) == NULL) {
481b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_BN_ERROR);
482b077aed3SPierre Pronchery return 0;
483b077aed3SPierre Pronchery }
484b077aed3SPierre Pronchery
485b077aed3SPierre Pronchery ret = i2d_ASN1_INTEGER(pub_key, pder);
486b077aed3SPierre Pronchery
487b077aed3SPierre Pronchery ASN1_STRING_clear_free(pub_key);
488b077aed3SPierre Pronchery return ret;
489b077aed3SPierre Pronchery }
490b077aed3SPierre Pronchery
dh_pki_priv_to_der(const void * dh,unsigned char ** pder)491b077aed3SPierre Pronchery static int dh_pki_priv_to_der(const void *dh, unsigned char **pder)
492b077aed3SPierre Pronchery {
493b077aed3SPierre Pronchery const BIGNUM *bn = NULL;
494b077aed3SPierre Pronchery ASN1_INTEGER *priv_key = NULL;
495b077aed3SPierre Pronchery int ret;
496b077aed3SPierre Pronchery
497b077aed3SPierre Pronchery if ((bn = DH_get0_priv_key(dh)) == NULL) {
498b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_NOT_A_PRIVATE_KEY);
499b077aed3SPierre Pronchery return 0;
500b077aed3SPierre Pronchery }
501b077aed3SPierre Pronchery if ((priv_key = BN_to_ASN1_INTEGER(bn, NULL)) == NULL) {
502b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_BN_ERROR);
503b077aed3SPierre Pronchery return 0;
504b077aed3SPierre Pronchery }
505b077aed3SPierre Pronchery
506b077aed3SPierre Pronchery ret = i2d_ASN1_INTEGER(priv_key, pder);
507b077aed3SPierre Pronchery
508b077aed3SPierre Pronchery ASN1_STRING_clear_free(priv_key);
509b077aed3SPierre Pronchery return ret;
510b077aed3SPierre Pronchery }
511b077aed3SPierre Pronchery
512b077aed3SPierre Pronchery # define dh_epki_priv_to_der dh_pki_priv_to_der
513b077aed3SPierre Pronchery
dh_type_specific_params_to_der(const void * dh,unsigned char ** pder)514b077aed3SPierre Pronchery static int dh_type_specific_params_to_der(const void *dh, unsigned char **pder)
515b077aed3SPierre Pronchery {
516b077aed3SPierre Pronchery if (DH_test_flags(dh, DH_FLAG_TYPE_DHX))
517b077aed3SPierre Pronchery return i2d_DHxparams(dh, pder);
518b077aed3SPierre Pronchery return i2d_DHparams(dh, pder);
519b077aed3SPierre Pronchery }
520b077aed3SPierre Pronchery
521b077aed3SPierre Pronchery /*
522b077aed3SPierre Pronchery * DH doesn't have i2d_DHPrivateKey or i2d_DHPublicKey, so we can't make
523b077aed3SPierre Pronchery * corresponding functions here.
524b077aed3SPierre Pronchery */
525b077aed3SPierre Pronchery # define dh_type_specific_priv_to_der NULL
526b077aed3SPierre Pronchery # define dh_type_specific_pub_to_der NULL
527b077aed3SPierre Pronchery
dh_check_key_type(const void * dh,int expected_type)528b077aed3SPierre Pronchery static int dh_check_key_type(const void *dh, int expected_type)
529b077aed3SPierre Pronchery {
530b077aed3SPierre Pronchery int type =
531b077aed3SPierre Pronchery DH_test_flags(dh, DH_FLAG_TYPE_DHX) ? EVP_PKEY_DHX : EVP_PKEY_DH;
532b077aed3SPierre Pronchery
533b077aed3SPierre Pronchery return type == expected_type;
534b077aed3SPierre Pronchery }
535b077aed3SPierre Pronchery
536b077aed3SPierre Pronchery # define dh_evp_type EVP_PKEY_DH
537b077aed3SPierre Pronchery # define dhx_evp_type EVP_PKEY_DHX
538b077aed3SPierre Pronchery # define dh_input_type "DH"
539b077aed3SPierre Pronchery # define dhx_input_type "DHX"
540b077aed3SPierre Pronchery # define dh_pem_type "DH"
541b077aed3SPierre Pronchery # define dhx_pem_type "X9.42 DH"
542b077aed3SPierre Pronchery #endif
543b077aed3SPierre Pronchery
544b077aed3SPierre Pronchery /* ---------------------------------------------------------------------- */
545b077aed3SPierre Pronchery
546b077aed3SPierre Pronchery #ifndef OPENSSL_NO_DSA
encode_dsa_params(const void * dsa,int nid,void ** pstr,int * pstrtype)547b077aed3SPierre Pronchery static int encode_dsa_params(const void *dsa, int nid,
548b077aed3SPierre Pronchery void **pstr, int *pstrtype)
549b077aed3SPierre Pronchery {
550b077aed3SPierre Pronchery ASN1_STRING *params = ASN1_STRING_new();
551b077aed3SPierre Pronchery
552b077aed3SPierre Pronchery if (params == NULL) {
553b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
554b077aed3SPierre Pronchery return 0;
555b077aed3SPierre Pronchery }
556b077aed3SPierre Pronchery
557b077aed3SPierre Pronchery params->length = i2d_DSAparams(dsa, ¶ms->data);
558b077aed3SPierre Pronchery
559b077aed3SPierre Pronchery if (params->length <= 0) {
560b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
561b077aed3SPierre Pronchery ASN1_STRING_free(params);
562b077aed3SPierre Pronchery return 0;
563b077aed3SPierre Pronchery }
564b077aed3SPierre Pronchery
565b077aed3SPierre Pronchery *pstrtype = V_ASN1_SEQUENCE;
566b077aed3SPierre Pronchery *pstr = params;
567b077aed3SPierre Pronchery return 1;
568b077aed3SPierre Pronchery }
569b077aed3SPierre Pronchery
prepare_dsa_params(const void * dsa,int nid,int save,void ** pstr,int * pstrtype)570b077aed3SPierre Pronchery static int prepare_dsa_params(const void *dsa, int nid, int save,
571b077aed3SPierre Pronchery void **pstr, int *pstrtype)
572b077aed3SPierre Pronchery {
573b077aed3SPierre Pronchery const BIGNUM *p = DSA_get0_p(dsa);
574b077aed3SPierre Pronchery const BIGNUM *q = DSA_get0_q(dsa);
575b077aed3SPierre Pronchery const BIGNUM *g = DSA_get0_g(dsa);
576b077aed3SPierre Pronchery
577b077aed3SPierre Pronchery if (save && p != NULL && q != NULL && g != NULL)
578b077aed3SPierre Pronchery return encode_dsa_params(dsa, nid, pstr, pstrtype);
579b077aed3SPierre Pronchery
580b077aed3SPierre Pronchery *pstr = NULL;
581b077aed3SPierre Pronchery *pstrtype = V_ASN1_UNDEF;
582b077aed3SPierre Pronchery return 1;
583b077aed3SPierre Pronchery }
584b077aed3SPierre Pronchery
dsa_spki_pub_to_der(const void * dsa,unsigned char ** pder)585b077aed3SPierre Pronchery static int dsa_spki_pub_to_der(const void *dsa, unsigned char **pder)
586b077aed3SPierre Pronchery {
587b077aed3SPierre Pronchery const BIGNUM *bn = NULL;
588b077aed3SPierre Pronchery ASN1_INTEGER *pub_key = NULL;
589b077aed3SPierre Pronchery int ret;
590b077aed3SPierre Pronchery
591b077aed3SPierre Pronchery if ((bn = DSA_get0_pub_key(dsa)) == NULL) {
592b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_NOT_A_PUBLIC_KEY);
593b077aed3SPierre Pronchery return 0;
594b077aed3SPierre Pronchery }
595b077aed3SPierre Pronchery if ((pub_key = BN_to_ASN1_INTEGER(bn, NULL)) == NULL) {
596b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_BN_ERROR);
597b077aed3SPierre Pronchery return 0;
598b077aed3SPierre Pronchery }
599b077aed3SPierre Pronchery
600b077aed3SPierre Pronchery ret = i2d_ASN1_INTEGER(pub_key, pder);
601b077aed3SPierre Pronchery
602b077aed3SPierre Pronchery ASN1_STRING_clear_free(pub_key);
603b077aed3SPierre Pronchery return ret;
604b077aed3SPierre Pronchery }
605b077aed3SPierre Pronchery
dsa_pki_priv_to_der(const void * dsa,unsigned char ** pder)606b077aed3SPierre Pronchery static int dsa_pki_priv_to_der(const void *dsa, unsigned char **pder)
607b077aed3SPierre Pronchery {
608b077aed3SPierre Pronchery const BIGNUM *bn = NULL;
609b077aed3SPierre Pronchery ASN1_INTEGER *priv_key = NULL;
610b077aed3SPierre Pronchery int ret;
611b077aed3SPierre Pronchery
612b077aed3SPierre Pronchery if ((bn = DSA_get0_priv_key(dsa)) == NULL) {
613b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_NOT_A_PRIVATE_KEY);
614b077aed3SPierre Pronchery return 0;
615b077aed3SPierre Pronchery }
616b077aed3SPierre Pronchery if ((priv_key = BN_to_ASN1_INTEGER(bn, NULL)) == NULL) {
617b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_BN_ERROR);
618b077aed3SPierre Pronchery return 0;
619b077aed3SPierre Pronchery }
620b077aed3SPierre Pronchery
621b077aed3SPierre Pronchery ret = i2d_ASN1_INTEGER(priv_key, pder);
622b077aed3SPierre Pronchery
623b077aed3SPierre Pronchery ASN1_STRING_clear_free(priv_key);
624b077aed3SPierre Pronchery return ret;
625b077aed3SPierre Pronchery }
626b077aed3SPierre Pronchery
627b077aed3SPierre Pronchery # define dsa_epki_priv_to_der dsa_pki_priv_to_der
628b077aed3SPierre Pronchery
629b077aed3SPierre Pronchery # define dsa_type_specific_priv_to_der (i2d_of_void *)i2d_DSAPrivateKey
630b077aed3SPierre Pronchery # define dsa_type_specific_pub_to_der (i2d_of_void *)i2d_DSAPublicKey
631b077aed3SPierre Pronchery # define dsa_type_specific_params_to_der (i2d_of_void *)i2d_DSAparams
632b077aed3SPierre Pronchery
633b077aed3SPierre Pronchery # define dsa_check_key_type NULL
634b077aed3SPierre Pronchery # define dsa_evp_type EVP_PKEY_DSA
635b077aed3SPierre Pronchery # define dsa_input_type "DSA"
636b077aed3SPierre Pronchery # define dsa_pem_type "DSA"
637b077aed3SPierre Pronchery #endif
638b077aed3SPierre Pronchery
639b077aed3SPierre Pronchery /* ---------------------------------------------------------------------- */
640b077aed3SPierre Pronchery
641b077aed3SPierre Pronchery #ifndef OPENSSL_NO_EC
prepare_ec_explicit_params(const void * eckey,void ** pstr,int * pstrtype)642b077aed3SPierre Pronchery static int prepare_ec_explicit_params(const void *eckey,
643b077aed3SPierre Pronchery void **pstr, int *pstrtype)
644b077aed3SPierre Pronchery {
645b077aed3SPierre Pronchery ASN1_STRING *params = ASN1_STRING_new();
646b077aed3SPierre Pronchery
647b077aed3SPierre Pronchery if (params == NULL) {
648b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
649b077aed3SPierre Pronchery return 0;
650b077aed3SPierre Pronchery }
651b077aed3SPierre Pronchery
652b077aed3SPierre Pronchery params->length = i2d_ECParameters(eckey, ¶ms->data);
653b077aed3SPierre Pronchery if (params->length <= 0) {
654b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
655b077aed3SPierre Pronchery ASN1_STRING_free(params);
656b077aed3SPierre Pronchery return 0;
657b077aed3SPierre Pronchery }
658b077aed3SPierre Pronchery
659b077aed3SPierre Pronchery *pstrtype = V_ASN1_SEQUENCE;
660b077aed3SPierre Pronchery *pstr = params;
661b077aed3SPierre Pronchery return 1;
662b077aed3SPierre Pronchery }
663b077aed3SPierre Pronchery
664b077aed3SPierre Pronchery /*
665b077aed3SPierre Pronchery * This implements EcpkParameters, where the CHOICE is based on whether there
666b077aed3SPierre Pronchery * is a curve name (curve nid) to be found or not. See RFC 3279 for details.
667b077aed3SPierre Pronchery */
prepare_ec_params(const void * eckey,int nid,int save,void ** pstr,int * pstrtype)668b077aed3SPierre Pronchery static int prepare_ec_params(const void *eckey, int nid, int save,
669b077aed3SPierre Pronchery void **pstr, int *pstrtype)
670b077aed3SPierre Pronchery {
671b077aed3SPierre Pronchery int curve_nid;
672b077aed3SPierre Pronchery const EC_GROUP *group = EC_KEY_get0_group(eckey);
673b077aed3SPierre Pronchery ASN1_OBJECT *params = NULL;
674b077aed3SPierre Pronchery
675b077aed3SPierre Pronchery if (group == NULL)
676b077aed3SPierre Pronchery return 0;
677b077aed3SPierre Pronchery curve_nid = EC_GROUP_get_curve_name(group);
678b077aed3SPierre Pronchery if (curve_nid != NID_undef) {
679b077aed3SPierre Pronchery params = OBJ_nid2obj(curve_nid);
680b077aed3SPierre Pronchery if (params == NULL)
681b077aed3SPierre Pronchery return 0;
682b077aed3SPierre Pronchery }
683b077aed3SPierre Pronchery
684b077aed3SPierre Pronchery if (curve_nid != NID_undef
685b077aed3SPierre Pronchery && (EC_GROUP_get_asn1_flag(group) & OPENSSL_EC_NAMED_CURVE)) {
686b077aed3SPierre Pronchery /* The CHOICE came to namedCurve */
687b077aed3SPierre Pronchery if (OBJ_length(params) == 0) {
688b077aed3SPierre Pronchery /* Some curves might not have an associated OID */
689b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_MISSING_OID);
690b077aed3SPierre Pronchery ASN1_OBJECT_free(params);
691b077aed3SPierre Pronchery return 0;
692b077aed3SPierre Pronchery }
693b077aed3SPierre Pronchery *pstr = params;
694b077aed3SPierre Pronchery *pstrtype = V_ASN1_OBJECT;
695b077aed3SPierre Pronchery return 1;
696b077aed3SPierre Pronchery } else {
697b077aed3SPierre Pronchery /* The CHOICE came to ecParameters */
698b077aed3SPierre Pronchery return prepare_ec_explicit_params(eckey, pstr, pstrtype);
699b077aed3SPierre Pronchery }
700b077aed3SPierre Pronchery }
701b077aed3SPierre Pronchery
ec_spki_pub_to_der(const void * eckey,unsigned char ** pder)702b077aed3SPierre Pronchery static int ec_spki_pub_to_der(const void *eckey, unsigned char **pder)
703b077aed3SPierre Pronchery {
704b077aed3SPierre Pronchery if (EC_KEY_get0_public_key(eckey) == NULL) {
705b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, PROV_R_NOT_A_PUBLIC_KEY);
706b077aed3SPierre Pronchery return 0;
707b077aed3SPierre Pronchery }
708b077aed3SPierre Pronchery return i2o_ECPublicKey(eckey, pder);
709b077aed3SPierre Pronchery }
710b077aed3SPierre Pronchery
ec_pki_priv_to_der(const void * veckey,unsigned char ** pder)711b077aed3SPierre Pronchery static int ec_pki_priv_to_der(const void *veckey, unsigned char **pder)
712b077aed3SPierre Pronchery {
713b077aed3SPierre Pronchery EC_KEY *eckey = (EC_KEY *)veckey;
714b077aed3SPierre Pronchery unsigned int old_flags;
715b077aed3SPierre Pronchery int ret = 0;
716b077aed3SPierre Pronchery
717b077aed3SPierre Pronchery /*
718b077aed3SPierre Pronchery * For PKCS8 the curve name appears in the PKCS8_PRIV_KEY_INFO object
719b077aed3SPierre Pronchery * as the pkeyalg->parameter field. (For a named curve this is an OID)
720b077aed3SPierre Pronchery * The pkey field is an octet string that holds the encoded
721b077aed3SPierre Pronchery * ECPrivateKey SEQUENCE with the optional parameters field omitted.
722b077aed3SPierre Pronchery * We omit this by setting the EC_PKEY_NO_PARAMETERS flag.
723b077aed3SPierre Pronchery */
724b077aed3SPierre Pronchery old_flags = EC_KEY_get_enc_flags(eckey); /* save old flags */
725b077aed3SPierre Pronchery EC_KEY_set_enc_flags(eckey, old_flags | EC_PKEY_NO_PARAMETERS);
726b077aed3SPierre Pronchery ret = i2d_ECPrivateKey(eckey, pder);
727b077aed3SPierre Pronchery EC_KEY_set_enc_flags(eckey, old_flags); /* restore old flags */
728b077aed3SPierre Pronchery return ret; /* return the length of the der encoded data */
729b077aed3SPierre Pronchery }
730b077aed3SPierre Pronchery
731b077aed3SPierre Pronchery # define ec_epki_priv_to_der ec_pki_priv_to_der
732b077aed3SPierre Pronchery
733b077aed3SPierre Pronchery # define ec_type_specific_params_to_der (i2d_of_void *)i2d_ECParameters
734b077aed3SPierre Pronchery /* No ec_type_specific_pub_to_der, there simply is no such thing */
735b077aed3SPierre Pronchery # define ec_type_specific_priv_to_der (i2d_of_void *)i2d_ECPrivateKey
736b077aed3SPierre Pronchery
737b077aed3SPierre Pronchery # define ec_check_key_type NULL
738b077aed3SPierre Pronchery # define ec_evp_type EVP_PKEY_EC
739b077aed3SPierre Pronchery # define ec_input_type "EC"
740b077aed3SPierre Pronchery # define ec_pem_type "EC"
741b077aed3SPierre Pronchery
742b077aed3SPierre Pronchery # ifndef OPENSSL_NO_SM2
743*e0c4386eSCy Schubert /*
744*e0c4386eSCy Schubert * Albeit SM2 is a slightly different algorithm than ECDSA, the key type
745*e0c4386eSCy Schubert * encoding (in all places where an AlgorithmIdentifier is produced, such
746*e0c4386eSCy Schubert * as PrivateKeyInfo and SubjectPublicKeyInfo) is the same as for ECC keys
747*e0c4386eSCy Schubert * according to the example in GM/T 0015-2012, appendix D.2.
748*e0c4386eSCy Schubert * This leaves the distinction of SM2 keys to the EC group (which is found
749*e0c4386eSCy Schubert * in AlgorithmIdentified.params).
750*e0c4386eSCy Schubert */
751*e0c4386eSCy Schubert # define sm2_evp_type ec_evp_type
752b077aed3SPierre Pronchery # define sm2_input_type "SM2"
753b077aed3SPierre Pronchery # define sm2_pem_type "SM2"
754b077aed3SPierre Pronchery # endif
755b077aed3SPierre Pronchery #endif
756b077aed3SPierre Pronchery
757b077aed3SPierre Pronchery /* ---------------------------------------------------------------------- */
758b077aed3SPierre Pronchery
759b077aed3SPierre Pronchery #ifndef OPENSSL_NO_EC
760b077aed3SPierre Pronchery # define prepare_ecx_params NULL
761b077aed3SPierre Pronchery
ecx_spki_pub_to_der(const void * vecxkey,unsigned char ** pder)762b077aed3SPierre Pronchery static int ecx_spki_pub_to_der(const void *vecxkey, unsigned char **pder)
763b077aed3SPierre Pronchery {
764b077aed3SPierre Pronchery const ECX_KEY *ecxkey = vecxkey;
765b077aed3SPierre Pronchery unsigned char *keyblob;
766b077aed3SPierre Pronchery
767b077aed3SPierre Pronchery if (ecxkey == NULL) {
768b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_PASSED_NULL_PARAMETER);
769b077aed3SPierre Pronchery return 0;
770b077aed3SPierre Pronchery }
771b077aed3SPierre Pronchery
772b077aed3SPierre Pronchery keyblob = OPENSSL_memdup(ecxkey->pubkey, ecxkey->keylen);
773b077aed3SPierre Pronchery if (keyblob == NULL) {
774b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
775b077aed3SPierre Pronchery return 0;
776b077aed3SPierre Pronchery }
777b077aed3SPierre Pronchery
778b077aed3SPierre Pronchery *pder = keyblob;
779b077aed3SPierre Pronchery return ecxkey->keylen;
780b077aed3SPierre Pronchery }
781b077aed3SPierre Pronchery
ecx_pki_priv_to_der(const void * vecxkey,unsigned char ** pder)782b077aed3SPierre Pronchery static int ecx_pki_priv_to_der(const void *vecxkey, unsigned char **pder)
783b077aed3SPierre Pronchery {
784b077aed3SPierre Pronchery const ECX_KEY *ecxkey = vecxkey;
785b077aed3SPierre Pronchery ASN1_OCTET_STRING oct;
786b077aed3SPierre Pronchery int keybloblen;
787b077aed3SPierre Pronchery
788b077aed3SPierre Pronchery if (ecxkey == NULL || ecxkey->privkey == NULL) {
789b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_PASSED_NULL_PARAMETER);
790b077aed3SPierre Pronchery return 0;
791b077aed3SPierre Pronchery }
792b077aed3SPierre Pronchery
793b077aed3SPierre Pronchery oct.data = ecxkey->privkey;
794b077aed3SPierre Pronchery oct.length = ecxkey->keylen;
795b077aed3SPierre Pronchery oct.flags = 0;
796b077aed3SPierre Pronchery
797b077aed3SPierre Pronchery keybloblen = i2d_ASN1_OCTET_STRING(&oct, pder);
798b077aed3SPierre Pronchery if (keybloblen < 0) {
799b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_MALLOC_FAILURE);
800b077aed3SPierre Pronchery return 0;
801b077aed3SPierre Pronchery }
802b077aed3SPierre Pronchery
803b077aed3SPierre Pronchery return keybloblen;
804b077aed3SPierre Pronchery }
805b077aed3SPierre Pronchery
806b077aed3SPierre Pronchery # define ecx_epki_priv_to_der ecx_pki_priv_to_der
807b077aed3SPierre Pronchery
808b077aed3SPierre Pronchery /*
809b077aed3SPierre Pronchery * ED25519, ED448, X25519 and X448 only has PKCS#8 / SubjectPublicKeyInfo
810b077aed3SPierre Pronchery * representation, so we don't define ecx_type_specific_[priv,pub,params]_to_der.
811b077aed3SPierre Pronchery */
812b077aed3SPierre Pronchery
813b077aed3SPierre Pronchery # define ecx_check_key_type NULL
814b077aed3SPierre Pronchery
815b077aed3SPierre Pronchery # define ed25519_evp_type EVP_PKEY_ED25519
816b077aed3SPierre Pronchery # define ed448_evp_type EVP_PKEY_ED448
817b077aed3SPierre Pronchery # define x25519_evp_type EVP_PKEY_X25519
818b077aed3SPierre Pronchery # define x448_evp_type EVP_PKEY_X448
819b077aed3SPierre Pronchery # define ed25519_input_type "ED25519"
820b077aed3SPierre Pronchery # define ed448_input_type "ED448"
821b077aed3SPierre Pronchery # define x25519_input_type "X25519"
822b077aed3SPierre Pronchery # define x448_input_type "X448"
823b077aed3SPierre Pronchery # define ed25519_pem_type "ED25519"
824b077aed3SPierre Pronchery # define ed448_pem_type "ED448"
825b077aed3SPierre Pronchery # define x25519_pem_type "X25519"
826b077aed3SPierre Pronchery # define x448_pem_type "X448"
827b077aed3SPierre Pronchery #endif
828b077aed3SPierre Pronchery
829b077aed3SPierre Pronchery /* ---------------------------------------------------------------------- */
830b077aed3SPierre Pronchery
831b077aed3SPierre Pronchery /*
832b077aed3SPierre Pronchery * Helper functions to prepare RSA-PSS params for encoding. We would
833b077aed3SPierre Pronchery * have simply written the whole AlgorithmIdentifier, but existing libcrypto
834b077aed3SPierre Pronchery * functionality doesn't allow that.
835b077aed3SPierre Pronchery */
836b077aed3SPierre Pronchery
prepare_rsa_params(const void * rsa,int nid,int save,void ** pstr,int * pstrtype)837b077aed3SPierre Pronchery static int prepare_rsa_params(const void *rsa, int nid, int save,
838b077aed3SPierre Pronchery void **pstr, int *pstrtype)
839b077aed3SPierre Pronchery {
840b077aed3SPierre Pronchery const RSA_PSS_PARAMS_30 *pss = ossl_rsa_get0_pss_params_30((RSA *)rsa);
841b077aed3SPierre Pronchery
842b077aed3SPierre Pronchery *pstr = NULL;
843b077aed3SPierre Pronchery
844b077aed3SPierre Pronchery switch (RSA_test_flags(rsa, RSA_FLAG_TYPE_MASK)) {
845b077aed3SPierre Pronchery case RSA_FLAG_TYPE_RSA:
846b077aed3SPierre Pronchery /* If plain RSA, the parameters shall be NULL */
847b077aed3SPierre Pronchery *pstrtype = V_ASN1_NULL;
848b077aed3SPierre Pronchery return 1;
849b077aed3SPierre Pronchery case RSA_FLAG_TYPE_RSASSAPSS:
850b077aed3SPierre Pronchery if (ossl_rsa_pss_params_30_is_unrestricted(pss)) {
851b077aed3SPierre Pronchery *pstrtype = V_ASN1_UNDEF;
852b077aed3SPierre Pronchery return 1;
853b077aed3SPierre Pronchery } else {
854b077aed3SPierre Pronchery ASN1_STRING *astr = NULL;
855b077aed3SPierre Pronchery WPACKET pkt;
856b077aed3SPierre Pronchery unsigned char *str = NULL;
857b077aed3SPierre Pronchery size_t str_sz = 0;
858b077aed3SPierre Pronchery int i;
859b077aed3SPierre Pronchery
860b077aed3SPierre Pronchery for (i = 0; i < 2; i++) {
861b077aed3SPierre Pronchery switch (i) {
862b077aed3SPierre Pronchery case 0:
863b077aed3SPierre Pronchery if (!WPACKET_init_null_der(&pkt))
864b077aed3SPierre Pronchery goto err;
865b077aed3SPierre Pronchery break;
866b077aed3SPierre Pronchery case 1:
867b077aed3SPierre Pronchery if ((str = OPENSSL_malloc(str_sz)) == NULL
868b077aed3SPierre Pronchery || !WPACKET_init_der(&pkt, str, str_sz)) {
8696f1af0d7SPierre Pronchery WPACKET_cleanup(&pkt);
870b077aed3SPierre Pronchery goto err;
871b077aed3SPierre Pronchery }
872b077aed3SPierre Pronchery break;
873b077aed3SPierre Pronchery }
874b077aed3SPierre Pronchery if (!ossl_DER_w_RSASSA_PSS_params(&pkt, -1, pss)
875b077aed3SPierre Pronchery || !WPACKET_finish(&pkt)
8766f1af0d7SPierre Pronchery || !WPACKET_get_total_written(&pkt, &str_sz)) {
8776f1af0d7SPierre Pronchery WPACKET_cleanup(&pkt);
878b077aed3SPierre Pronchery goto err;
8796f1af0d7SPierre Pronchery }
880b077aed3SPierre Pronchery WPACKET_cleanup(&pkt);
881b077aed3SPierre Pronchery
882b077aed3SPierre Pronchery /*
883b077aed3SPierre Pronchery * If no PSS parameters are going to be written, there's no
884b077aed3SPierre Pronchery * point going for another iteration.
885b077aed3SPierre Pronchery * This saves us from getting |str| allocated just to have it
886b077aed3SPierre Pronchery * immediately de-allocated.
887b077aed3SPierre Pronchery */
888b077aed3SPierre Pronchery if (str_sz == 0)
889b077aed3SPierre Pronchery break;
890b077aed3SPierre Pronchery }
891b077aed3SPierre Pronchery
892b077aed3SPierre Pronchery if ((astr = ASN1_STRING_new()) == NULL)
893b077aed3SPierre Pronchery goto err;
894b077aed3SPierre Pronchery *pstrtype = V_ASN1_SEQUENCE;
895b077aed3SPierre Pronchery ASN1_STRING_set0(astr, str, (int)str_sz);
896b077aed3SPierre Pronchery *pstr = astr;
897b077aed3SPierre Pronchery
898b077aed3SPierre Pronchery return 1;
899b077aed3SPierre Pronchery err:
900b077aed3SPierre Pronchery OPENSSL_free(str);
901b077aed3SPierre Pronchery return 0;
902b077aed3SPierre Pronchery }
903b077aed3SPierre Pronchery }
904b077aed3SPierre Pronchery
905b077aed3SPierre Pronchery /* Currently unsupported RSA key type */
906b077aed3SPierre Pronchery return 0;
907b077aed3SPierre Pronchery }
908b077aed3SPierre Pronchery
909b077aed3SPierre Pronchery /*
910b077aed3SPierre Pronchery * RSA is extremely simple, as PKCS#1 is used for the PKCS#8 |privateKey|
911b077aed3SPierre Pronchery * field as well as the SubjectPublicKeyInfo |subjectPublicKey| field.
912b077aed3SPierre Pronchery */
913b077aed3SPierre Pronchery #define rsa_pki_priv_to_der rsa_type_specific_priv_to_der
914b077aed3SPierre Pronchery #define rsa_epki_priv_to_der rsa_type_specific_priv_to_der
915b077aed3SPierre Pronchery #define rsa_spki_pub_to_der rsa_type_specific_pub_to_der
916b077aed3SPierre Pronchery #define rsa_type_specific_priv_to_der (i2d_of_void *)i2d_RSAPrivateKey
917b077aed3SPierre Pronchery #define rsa_type_specific_pub_to_der (i2d_of_void *)i2d_RSAPublicKey
918b077aed3SPierre Pronchery #define rsa_type_specific_params_to_der NULL
919b077aed3SPierre Pronchery
rsa_check_key_type(const void * rsa,int expected_type)920b077aed3SPierre Pronchery static int rsa_check_key_type(const void *rsa, int expected_type)
921b077aed3SPierre Pronchery {
922b077aed3SPierre Pronchery switch (RSA_test_flags(rsa, RSA_FLAG_TYPE_MASK)) {
923b077aed3SPierre Pronchery case RSA_FLAG_TYPE_RSA:
924b077aed3SPierre Pronchery return expected_type == EVP_PKEY_RSA;
925b077aed3SPierre Pronchery case RSA_FLAG_TYPE_RSASSAPSS:
926b077aed3SPierre Pronchery return expected_type == EVP_PKEY_RSA_PSS;
927b077aed3SPierre Pronchery }
928b077aed3SPierre Pronchery
929b077aed3SPierre Pronchery /* Currently unsupported RSA key type */
930b077aed3SPierre Pronchery return EVP_PKEY_NONE;
931b077aed3SPierre Pronchery }
932b077aed3SPierre Pronchery
933b077aed3SPierre Pronchery #define rsa_evp_type EVP_PKEY_RSA
934b077aed3SPierre Pronchery #define rsapss_evp_type EVP_PKEY_RSA_PSS
935b077aed3SPierre Pronchery #define rsa_input_type "RSA"
936b077aed3SPierre Pronchery #define rsapss_input_type "RSA-PSS"
937b077aed3SPierre Pronchery #define rsa_pem_type "RSA"
938b077aed3SPierre Pronchery #define rsapss_pem_type "RSA-PSS"
939b077aed3SPierre Pronchery
940b077aed3SPierre Pronchery /* ---------------------------------------------------------------------- */
941b077aed3SPierre Pronchery
942b077aed3SPierre Pronchery static OSSL_FUNC_decoder_newctx_fn key2any_newctx;
943b077aed3SPierre Pronchery static OSSL_FUNC_decoder_freectx_fn key2any_freectx;
944b077aed3SPierre Pronchery
key2any_newctx(void * provctx)945b077aed3SPierre Pronchery static void *key2any_newctx(void *provctx)
946b077aed3SPierre Pronchery {
947b077aed3SPierre Pronchery struct key2any_ctx_st *ctx = OPENSSL_zalloc(sizeof(*ctx));
948b077aed3SPierre Pronchery
949b077aed3SPierre Pronchery if (ctx != NULL) {
950b077aed3SPierre Pronchery ctx->provctx = provctx;
951b077aed3SPierre Pronchery ctx->save_parameters = 1;
952b077aed3SPierre Pronchery }
953b077aed3SPierre Pronchery
954b077aed3SPierre Pronchery return ctx;
955b077aed3SPierre Pronchery }
956b077aed3SPierre Pronchery
key2any_freectx(void * vctx)957b077aed3SPierre Pronchery static void key2any_freectx(void *vctx)
958b077aed3SPierre Pronchery {
959b077aed3SPierre Pronchery struct key2any_ctx_st *ctx = vctx;
960b077aed3SPierre Pronchery
961b077aed3SPierre Pronchery ossl_pw_clear_passphrase_data(&ctx->pwdata);
962b077aed3SPierre Pronchery EVP_CIPHER_free(ctx->cipher);
963b077aed3SPierre Pronchery OPENSSL_free(ctx);
964b077aed3SPierre Pronchery }
965b077aed3SPierre Pronchery
key2any_settable_ctx_params(ossl_unused void * provctx)966b077aed3SPierre Pronchery static const OSSL_PARAM *key2any_settable_ctx_params(ossl_unused void *provctx)
967b077aed3SPierre Pronchery {
968b077aed3SPierre Pronchery static const OSSL_PARAM settables[] = {
969b077aed3SPierre Pronchery OSSL_PARAM_utf8_string(OSSL_ENCODER_PARAM_CIPHER, NULL, 0),
970b077aed3SPierre Pronchery OSSL_PARAM_utf8_string(OSSL_ENCODER_PARAM_PROPERTIES, NULL, 0),
971b077aed3SPierre Pronchery OSSL_PARAM_END,
972b077aed3SPierre Pronchery };
973b077aed3SPierre Pronchery
974b077aed3SPierre Pronchery return settables;
975b077aed3SPierre Pronchery }
976b077aed3SPierre Pronchery
key2any_set_ctx_params(void * vctx,const OSSL_PARAM params[])977b077aed3SPierre Pronchery static int key2any_set_ctx_params(void *vctx, const OSSL_PARAM params[])
978b077aed3SPierre Pronchery {
979b077aed3SPierre Pronchery struct key2any_ctx_st *ctx = vctx;
980b077aed3SPierre Pronchery OSSL_LIB_CTX *libctx = ossl_prov_ctx_get0_libctx(ctx->provctx);
981b077aed3SPierre Pronchery const OSSL_PARAM *cipherp =
982b077aed3SPierre Pronchery OSSL_PARAM_locate_const(params, OSSL_ENCODER_PARAM_CIPHER);
983b077aed3SPierre Pronchery const OSSL_PARAM *propsp =
984b077aed3SPierre Pronchery OSSL_PARAM_locate_const(params, OSSL_ENCODER_PARAM_PROPERTIES);
985b077aed3SPierre Pronchery const OSSL_PARAM *save_paramsp =
986b077aed3SPierre Pronchery OSSL_PARAM_locate_const(params, OSSL_ENCODER_PARAM_SAVE_PARAMETERS);
987b077aed3SPierre Pronchery
988b077aed3SPierre Pronchery if (cipherp != NULL) {
989b077aed3SPierre Pronchery const char *ciphername = NULL;
990b077aed3SPierre Pronchery const char *props = NULL;
991b077aed3SPierre Pronchery
992b077aed3SPierre Pronchery if (!OSSL_PARAM_get_utf8_string_ptr(cipherp, &ciphername))
993b077aed3SPierre Pronchery return 0;
994b077aed3SPierre Pronchery if (propsp != NULL && !OSSL_PARAM_get_utf8_string_ptr(propsp, &props))
995b077aed3SPierre Pronchery return 0;
996b077aed3SPierre Pronchery
997b077aed3SPierre Pronchery EVP_CIPHER_free(ctx->cipher);
998b077aed3SPierre Pronchery ctx->cipher = NULL;
999b077aed3SPierre Pronchery ctx->cipher_intent = ciphername != NULL;
1000b077aed3SPierre Pronchery if (ciphername != NULL
1001b077aed3SPierre Pronchery && ((ctx->cipher =
1002b077aed3SPierre Pronchery EVP_CIPHER_fetch(libctx, ciphername, props)) == NULL))
1003b077aed3SPierre Pronchery return 0;
1004b077aed3SPierre Pronchery }
1005b077aed3SPierre Pronchery
1006b077aed3SPierre Pronchery if (save_paramsp != NULL) {
1007b077aed3SPierre Pronchery if (!OSSL_PARAM_get_int(save_paramsp, &ctx->save_parameters))
1008b077aed3SPierre Pronchery return 0;
1009b077aed3SPierre Pronchery }
1010b077aed3SPierre Pronchery return 1;
1011b077aed3SPierre Pronchery }
1012b077aed3SPierre Pronchery
key2any_check_selection(int selection,int selection_mask)1013b077aed3SPierre Pronchery static int key2any_check_selection(int selection, int selection_mask)
1014b077aed3SPierre Pronchery {
1015b077aed3SPierre Pronchery /*
1016b077aed3SPierre Pronchery * The selections are kinda sorta "levels", i.e. each selection given
1017b077aed3SPierre Pronchery * here is assumed to include those following.
1018b077aed3SPierre Pronchery */
1019b077aed3SPierre Pronchery int checks[] = {
1020b077aed3SPierre Pronchery OSSL_KEYMGMT_SELECT_PRIVATE_KEY,
1021b077aed3SPierre Pronchery OSSL_KEYMGMT_SELECT_PUBLIC_KEY,
1022b077aed3SPierre Pronchery OSSL_KEYMGMT_SELECT_ALL_PARAMETERS
1023b077aed3SPierre Pronchery };
1024b077aed3SPierre Pronchery size_t i;
1025b077aed3SPierre Pronchery
1026b077aed3SPierre Pronchery /* The decoder implementations made here support guessing */
1027b077aed3SPierre Pronchery if (selection == 0)
1028b077aed3SPierre Pronchery return 1;
1029b077aed3SPierre Pronchery
1030b077aed3SPierre Pronchery for (i = 0; i < OSSL_NELEM(checks); i++) {
1031b077aed3SPierre Pronchery int check1 = (selection & checks[i]) != 0;
1032b077aed3SPierre Pronchery int check2 = (selection_mask & checks[i]) != 0;
1033b077aed3SPierre Pronchery
1034b077aed3SPierre Pronchery /*
1035b077aed3SPierre Pronchery * If the caller asked for the currently checked bit(s), return
1036b077aed3SPierre Pronchery * whether the decoder description says it's supported.
1037b077aed3SPierre Pronchery */
1038b077aed3SPierre Pronchery if (check1)
1039b077aed3SPierre Pronchery return check2;
1040b077aed3SPierre Pronchery }
1041b077aed3SPierre Pronchery
1042b077aed3SPierre Pronchery /* This should be dead code, but just to be safe... */
1043b077aed3SPierre Pronchery return 0;
1044b077aed3SPierre Pronchery }
1045b077aed3SPierre Pronchery
key2any_encode(struct key2any_ctx_st * ctx,OSSL_CORE_BIO * cout,const void * key,int type,const char * pemname,check_key_type_fn * checker,key_to_der_fn * writer,OSSL_PASSPHRASE_CALLBACK * pwcb,void * pwcbarg,key_to_paramstring_fn * key2paramstring,i2d_of_void * key2der)1046b077aed3SPierre Pronchery static int key2any_encode(struct key2any_ctx_st *ctx, OSSL_CORE_BIO *cout,
1047b077aed3SPierre Pronchery const void *key, int type, const char *pemname,
1048b077aed3SPierre Pronchery check_key_type_fn *checker,
1049b077aed3SPierre Pronchery key_to_der_fn *writer,
1050b077aed3SPierre Pronchery OSSL_PASSPHRASE_CALLBACK *pwcb, void *pwcbarg,
1051b077aed3SPierre Pronchery key_to_paramstring_fn *key2paramstring,
1052b077aed3SPierre Pronchery i2d_of_void *key2der)
1053b077aed3SPierre Pronchery {
1054b077aed3SPierre Pronchery int ret = 0;
1055b077aed3SPierre Pronchery
1056b077aed3SPierre Pronchery if (key == NULL) {
1057b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_PASSED_NULL_PARAMETER);
1058b077aed3SPierre Pronchery } else if (writer != NULL
1059b077aed3SPierre Pronchery && (checker == NULL || checker(key, type))) {
1060b077aed3SPierre Pronchery BIO *out = ossl_bio_new_from_core_bio(ctx->provctx, cout);
1061b077aed3SPierre Pronchery
1062b077aed3SPierre Pronchery if (out != NULL
1063b077aed3SPierre Pronchery && (pwcb == NULL
1064b077aed3SPierre Pronchery || ossl_pw_set_ossl_passphrase_cb(&ctx->pwdata, pwcb, pwcbarg)))
1065b077aed3SPierre Pronchery ret =
1066b077aed3SPierre Pronchery writer(out, key, type, pemname, key2paramstring, key2der, ctx);
1067b077aed3SPierre Pronchery
1068b077aed3SPierre Pronchery BIO_free(out);
1069b077aed3SPierre Pronchery } else {
1070b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_PASSED_INVALID_ARGUMENT);
1071b077aed3SPierre Pronchery }
1072b077aed3SPierre Pronchery return ret;
1073b077aed3SPierre Pronchery }
1074b077aed3SPierre Pronchery
1075b077aed3SPierre Pronchery #define DO_PRIVATE_KEY_selection_mask OSSL_KEYMGMT_SELECT_PRIVATE_KEY
1076b077aed3SPierre Pronchery #define DO_PRIVATE_KEY(impl, type, kind, output) \
1077b077aed3SPierre Pronchery if ((selection & DO_PRIVATE_KEY_selection_mask) != 0) \
1078b077aed3SPierre Pronchery return key2any_encode(ctx, cout, key, impl##_evp_type, \
1079b077aed3SPierre Pronchery impl##_pem_type " PRIVATE KEY", \
1080b077aed3SPierre Pronchery type##_check_key_type, \
1081b077aed3SPierre Pronchery key_to_##kind##_##output##_priv_bio, \
1082b077aed3SPierre Pronchery cb, cbarg, prepare_##type##_params, \
1083b077aed3SPierre Pronchery type##_##kind##_priv_to_der);
1084b077aed3SPierre Pronchery
1085b077aed3SPierre Pronchery #define DO_PUBLIC_KEY_selection_mask OSSL_KEYMGMT_SELECT_PUBLIC_KEY
1086b077aed3SPierre Pronchery #define DO_PUBLIC_KEY(impl, type, kind, output) \
1087b077aed3SPierre Pronchery if ((selection & DO_PUBLIC_KEY_selection_mask) != 0) \
1088b077aed3SPierre Pronchery return key2any_encode(ctx, cout, key, impl##_evp_type, \
1089b077aed3SPierre Pronchery impl##_pem_type " PUBLIC KEY", \
1090b077aed3SPierre Pronchery type##_check_key_type, \
1091b077aed3SPierre Pronchery key_to_##kind##_##output##_pub_bio, \
1092b077aed3SPierre Pronchery cb, cbarg, prepare_##type##_params, \
1093b077aed3SPierre Pronchery type##_##kind##_pub_to_der);
1094b077aed3SPierre Pronchery
1095b077aed3SPierre Pronchery #define DO_PARAMETERS_selection_mask OSSL_KEYMGMT_SELECT_ALL_PARAMETERS
1096b077aed3SPierre Pronchery #define DO_PARAMETERS(impl, type, kind, output) \
1097b077aed3SPierre Pronchery if ((selection & DO_PARAMETERS_selection_mask) != 0) \
1098b077aed3SPierre Pronchery return key2any_encode(ctx, cout, key, impl##_evp_type, \
1099b077aed3SPierre Pronchery impl##_pem_type " PARAMETERS", \
1100b077aed3SPierre Pronchery type##_check_key_type, \
1101b077aed3SPierre Pronchery key_to_##kind##_##output##_param_bio, \
1102b077aed3SPierre Pronchery NULL, NULL, NULL, \
1103b077aed3SPierre Pronchery type##_##kind##_params_to_der);
1104b077aed3SPierre Pronchery
1105b077aed3SPierre Pronchery /*-
1106b077aed3SPierre Pronchery * Implement the kinds of output structure that can be produced. They are
1107b077aed3SPierre Pronchery * referred to by name, and for each name, the following macros are defined
1108b077aed3SPierre Pronchery * (braces not included):
1109b077aed3SPierre Pronchery *
1110b077aed3SPierre Pronchery * DO_{kind}_selection_mask
1111b077aed3SPierre Pronchery *
1112b077aed3SPierre Pronchery * A mask of selection bits that must not be zero. This is used as a
1113b077aed3SPierre Pronchery * selection criterion for each implementation.
1114b077aed3SPierre Pronchery * This mask must never be zero.
1115b077aed3SPierre Pronchery *
1116b077aed3SPierre Pronchery * DO_{kind}
1117b077aed3SPierre Pronchery *
1118b077aed3SPierre Pronchery * The performing macro. It must use the DO_ macros defined above,
1119b077aed3SPierre Pronchery * always in this order:
1120b077aed3SPierre Pronchery *
1121b077aed3SPierre Pronchery * - DO_PRIVATE_KEY
1122b077aed3SPierre Pronchery * - DO_PUBLIC_KEY
1123b077aed3SPierre Pronchery * - DO_PARAMETERS
1124b077aed3SPierre Pronchery *
1125b077aed3SPierre Pronchery * Any of those may be omitted, but the relative order must still be
1126b077aed3SPierre Pronchery * the same.
1127b077aed3SPierre Pronchery */
1128b077aed3SPierre Pronchery
1129b077aed3SPierre Pronchery /*
1130b077aed3SPierre Pronchery * PKCS#8 defines two structures for private keys only:
1131b077aed3SPierre Pronchery * - PrivateKeyInfo (raw unencrypted form)
1132b077aed3SPierre Pronchery * - EncryptedPrivateKeyInfo (encrypted wrapping)
1133b077aed3SPierre Pronchery *
1134b077aed3SPierre Pronchery * To allow a certain amount of flexibility, we allow the routines
1135b077aed3SPierre Pronchery * for PrivateKeyInfo to also produce EncryptedPrivateKeyInfo if a
1136b077aed3SPierre Pronchery * passphrase callback has been passed to them.
1137b077aed3SPierre Pronchery */
1138b077aed3SPierre Pronchery #define DO_PrivateKeyInfo_selection_mask DO_PRIVATE_KEY_selection_mask
1139b077aed3SPierre Pronchery #define DO_PrivateKeyInfo(impl, type, output) \
1140b077aed3SPierre Pronchery DO_PRIVATE_KEY(impl, type, pki, output)
1141b077aed3SPierre Pronchery
1142b077aed3SPierre Pronchery #define DO_EncryptedPrivateKeyInfo_selection_mask DO_PRIVATE_KEY_selection_mask
1143b077aed3SPierre Pronchery #define DO_EncryptedPrivateKeyInfo(impl, type, output) \
1144b077aed3SPierre Pronchery DO_PRIVATE_KEY(impl, type, epki, output)
1145b077aed3SPierre Pronchery
1146b077aed3SPierre Pronchery /* SubjectPublicKeyInfo is a structure for public keys only */
1147b077aed3SPierre Pronchery #define DO_SubjectPublicKeyInfo_selection_mask DO_PUBLIC_KEY_selection_mask
1148b077aed3SPierre Pronchery #define DO_SubjectPublicKeyInfo(impl, type, output) \
1149b077aed3SPierre Pronchery DO_PUBLIC_KEY(impl, type, spki, output)
1150b077aed3SPierre Pronchery
1151b077aed3SPierre Pronchery /*
1152b077aed3SPierre Pronchery * "type-specific" is a uniform name for key type specific output for private
1153b077aed3SPierre Pronchery * and public keys as well as key parameters. This is used internally in
1154b077aed3SPierre Pronchery * libcrypto so it doesn't have to have special knowledge about select key
1155b077aed3SPierre Pronchery * types, but also when no better name has been found. If there are more
1156b077aed3SPierre Pronchery * expressive DO_ names above, those are preferred.
1157b077aed3SPierre Pronchery *
1158b077aed3SPierre Pronchery * Three forms exist:
1159b077aed3SPierre Pronchery *
1160b077aed3SPierre Pronchery * - type_specific_keypair Only supports private and public key
1161b077aed3SPierre Pronchery * - type_specific_params Only supports parameters
1162b077aed3SPierre Pronchery * - type_specific Supports all parts of an EVP_PKEY
1163b077aed3SPierre Pronchery * - type_specific_no_pub Supports all parts of an EVP_PKEY
1164b077aed3SPierre Pronchery * except public key
1165b077aed3SPierre Pronchery */
1166b077aed3SPierre Pronchery #define DO_type_specific_params_selection_mask DO_PARAMETERS_selection_mask
1167b077aed3SPierre Pronchery #define DO_type_specific_params(impl, type, output) \
1168b077aed3SPierre Pronchery DO_PARAMETERS(impl, type, type_specific, output)
1169b077aed3SPierre Pronchery #define DO_type_specific_keypair_selection_mask \
1170b077aed3SPierre Pronchery ( DO_PRIVATE_KEY_selection_mask | DO_PUBLIC_KEY_selection_mask )
1171b077aed3SPierre Pronchery #define DO_type_specific_keypair(impl, type, output) \
1172b077aed3SPierre Pronchery DO_PRIVATE_KEY(impl, type, type_specific, output) \
1173b077aed3SPierre Pronchery DO_PUBLIC_KEY(impl, type, type_specific, output)
1174b077aed3SPierre Pronchery #define DO_type_specific_selection_mask \
1175b077aed3SPierre Pronchery ( DO_type_specific_keypair_selection_mask \
1176b077aed3SPierre Pronchery | DO_type_specific_params_selection_mask )
1177b077aed3SPierre Pronchery #define DO_type_specific(impl, type, output) \
1178b077aed3SPierre Pronchery DO_type_specific_keypair(impl, type, output) \
1179b077aed3SPierre Pronchery DO_type_specific_params(impl, type, output)
1180b077aed3SPierre Pronchery #define DO_type_specific_no_pub_selection_mask \
1181b077aed3SPierre Pronchery ( DO_PRIVATE_KEY_selection_mask | DO_PARAMETERS_selection_mask)
1182b077aed3SPierre Pronchery #define DO_type_specific_no_pub(impl, type, output) \
1183b077aed3SPierre Pronchery DO_PRIVATE_KEY(impl, type, type_specific, output) \
1184b077aed3SPierre Pronchery DO_type_specific_params(impl, type, output)
1185b077aed3SPierre Pronchery
1186b077aed3SPierre Pronchery /*
1187b077aed3SPierre Pronchery * Type specific aliases for the cases where we need to refer to them by
1188b077aed3SPierre Pronchery * type name.
1189b077aed3SPierre Pronchery * This only covers key types that are represented with i2d_{TYPE}PrivateKey,
1190b077aed3SPierre Pronchery * i2d_{TYPE}PublicKey and i2d_{TYPE}params / i2d_{TYPE}Parameters.
1191b077aed3SPierre Pronchery */
1192b077aed3SPierre Pronchery #define DO_RSA_selection_mask DO_type_specific_keypair_selection_mask
1193b077aed3SPierre Pronchery #define DO_RSA(impl, type, output) DO_type_specific_keypair(impl, type, output)
1194b077aed3SPierre Pronchery
1195b077aed3SPierre Pronchery #define DO_DH_selection_mask DO_type_specific_params_selection_mask
1196b077aed3SPierre Pronchery #define DO_DH(impl, type, output) DO_type_specific_params(impl, type, output)
1197b077aed3SPierre Pronchery
1198b077aed3SPierre Pronchery #define DO_DHX_selection_mask DO_type_specific_params_selection_mask
1199b077aed3SPierre Pronchery #define DO_DHX(impl, type, output) DO_type_specific_params(impl, type, output)
1200b077aed3SPierre Pronchery
1201b077aed3SPierre Pronchery #define DO_DSA_selection_mask DO_type_specific_selection_mask
1202b077aed3SPierre Pronchery #define DO_DSA(impl, type, output) DO_type_specific(impl, type, output)
1203b077aed3SPierre Pronchery
1204b077aed3SPierre Pronchery #define DO_EC_selection_mask DO_type_specific_no_pub_selection_mask
1205b077aed3SPierre Pronchery #define DO_EC(impl, type, output) DO_type_specific_no_pub(impl, type, output)
1206b077aed3SPierre Pronchery
1207b077aed3SPierre Pronchery #define DO_SM2_selection_mask DO_type_specific_no_pub_selection_mask
1208b077aed3SPierre Pronchery #define DO_SM2(impl, type, output) DO_type_specific_no_pub(impl, type, output)
1209b077aed3SPierre Pronchery
1210b077aed3SPierre Pronchery /* PKCS#1 defines a structure for RSA private and public keys */
1211b077aed3SPierre Pronchery #define DO_PKCS1_selection_mask DO_RSA_selection_mask
1212b077aed3SPierre Pronchery #define DO_PKCS1(impl, type, output) DO_RSA(impl, type, output)
1213b077aed3SPierre Pronchery
1214b077aed3SPierre Pronchery /* PKCS#3 defines a structure for DH parameters */
1215b077aed3SPierre Pronchery #define DO_PKCS3_selection_mask DO_DH_selection_mask
1216b077aed3SPierre Pronchery #define DO_PKCS3(impl, type, output) DO_DH(impl, type, output)
1217b077aed3SPierre Pronchery /* X9.42 defines a structure for DHx parameters */
1218b077aed3SPierre Pronchery #define DO_X9_42_selection_mask DO_DHX_selection_mask
1219b077aed3SPierre Pronchery #define DO_X9_42(impl, type, output) DO_DHX(impl, type, output)
1220b077aed3SPierre Pronchery
1221b077aed3SPierre Pronchery /* X9.62 defines a structure for EC keys and parameters */
1222b077aed3SPierre Pronchery #define DO_X9_62_selection_mask DO_EC_selection_mask
1223b077aed3SPierre Pronchery #define DO_X9_62(impl, type, output) DO_EC(impl, type, output)
1224b077aed3SPierre Pronchery
1225b077aed3SPierre Pronchery /*
1226b077aed3SPierre Pronchery * MAKE_ENCODER is the single driver for creating OSSL_DISPATCH tables.
1227b077aed3SPierre Pronchery * It takes the following arguments:
1228b077aed3SPierre Pronchery *
1229b077aed3SPierre Pronchery * impl This is the key type name that's being implemented.
1230b077aed3SPierre Pronchery * type This is the type name for the set of functions that implement
1231b077aed3SPierre Pronchery * the key type. For example, ed25519, ed448, x25519 and x448
1232b077aed3SPierre Pronchery * are all implemented with the exact same set of functions.
1233b077aed3SPierre Pronchery * evp_type The corresponding EVP_PKEY_xxx type macro for each key.
1234b077aed3SPierre Pronchery * Necessary because we currently use EVP_PKEY with legacy
1235b077aed3SPierre Pronchery * native keys internally. This will need to be refactored
1236b077aed3SPierre Pronchery * when that legacy support goes away.
1237b077aed3SPierre Pronchery * kind What kind of support to implement. These translate into
1238b077aed3SPierre Pronchery * the DO_##kind macros above.
1239b077aed3SPierre Pronchery * output The output type to implement. may be der or pem.
1240b077aed3SPierre Pronchery *
1241b077aed3SPierre Pronchery * The resulting OSSL_DISPATCH array gets the following name (expressed in
1242b077aed3SPierre Pronchery * C preprocessor terms) from those arguments:
1243b077aed3SPierre Pronchery *
1244b077aed3SPierre Pronchery * ossl_##impl##_to_##kind##_##output##_encoder_functions
1245b077aed3SPierre Pronchery */
1246b077aed3SPierre Pronchery #define MAKE_ENCODER(impl, type, evp_type, kind, output) \
1247b077aed3SPierre Pronchery static OSSL_FUNC_encoder_import_object_fn \
1248b077aed3SPierre Pronchery impl##_to_##kind##_##output##_import_object; \
1249b077aed3SPierre Pronchery static OSSL_FUNC_encoder_free_object_fn \
1250b077aed3SPierre Pronchery impl##_to_##kind##_##output##_free_object; \
1251b077aed3SPierre Pronchery static OSSL_FUNC_encoder_encode_fn \
1252b077aed3SPierre Pronchery impl##_to_##kind##_##output##_encode; \
1253b077aed3SPierre Pronchery \
1254b077aed3SPierre Pronchery static void * \
1255b077aed3SPierre Pronchery impl##_to_##kind##_##output##_import_object(void *vctx, int selection, \
1256b077aed3SPierre Pronchery const OSSL_PARAM params[]) \
1257b077aed3SPierre Pronchery { \
1258b077aed3SPierre Pronchery struct key2any_ctx_st *ctx = vctx; \
1259b077aed3SPierre Pronchery \
1260b077aed3SPierre Pronchery return ossl_prov_import_key(ossl_##impl##_keymgmt_functions, \
1261b077aed3SPierre Pronchery ctx->provctx, selection, params); \
1262b077aed3SPierre Pronchery } \
1263b077aed3SPierre Pronchery static void impl##_to_##kind##_##output##_free_object(void *key) \
1264b077aed3SPierre Pronchery { \
1265b077aed3SPierre Pronchery ossl_prov_free_key(ossl_##impl##_keymgmt_functions, key); \
1266b077aed3SPierre Pronchery } \
1267b077aed3SPierre Pronchery static int impl##_to_##kind##_##output##_does_selection(void *ctx, \
1268b077aed3SPierre Pronchery int selection) \
1269b077aed3SPierre Pronchery { \
1270b077aed3SPierre Pronchery return key2any_check_selection(selection, \
1271b077aed3SPierre Pronchery DO_##kind##_selection_mask); \
1272b077aed3SPierre Pronchery } \
1273b077aed3SPierre Pronchery static int \
1274b077aed3SPierre Pronchery impl##_to_##kind##_##output##_encode(void *ctx, OSSL_CORE_BIO *cout, \
1275b077aed3SPierre Pronchery const void *key, \
1276b077aed3SPierre Pronchery const OSSL_PARAM key_abstract[], \
1277b077aed3SPierre Pronchery int selection, \
1278b077aed3SPierre Pronchery OSSL_PASSPHRASE_CALLBACK *cb, \
1279b077aed3SPierre Pronchery void *cbarg) \
1280b077aed3SPierre Pronchery { \
1281b077aed3SPierre Pronchery /* We don't deal with abstract objects */ \
1282b077aed3SPierre Pronchery if (key_abstract != NULL) { \
1283b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_PASSED_INVALID_ARGUMENT); \
1284b077aed3SPierre Pronchery return 0; \
1285b077aed3SPierre Pronchery } \
1286b077aed3SPierre Pronchery DO_##kind(impl, type, output) \
1287b077aed3SPierre Pronchery \
1288b077aed3SPierre Pronchery ERR_raise(ERR_LIB_PROV, ERR_R_PASSED_INVALID_ARGUMENT); \
1289b077aed3SPierre Pronchery return 0; \
1290b077aed3SPierre Pronchery } \
1291b077aed3SPierre Pronchery const OSSL_DISPATCH \
1292b077aed3SPierre Pronchery ossl_##impl##_to_##kind##_##output##_encoder_functions[] = { \
1293b077aed3SPierre Pronchery { OSSL_FUNC_ENCODER_NEWCTX, \
1294b077aed3SPierre Pronchery (void (*)(void))key2any_newctx }, \
1295b077aed3SPierre Pronchery { OSSL_FUNC_ENCODER_FREECTX, \
1296b077aed3SPierre Pronchery (void (*)(void))key2any_freectx }, \
1297b077aed3SPierre Pronchery { OSSL_FUNC_ENCODER_SETTABLE_CTX_PARAMS, \
1298b077aed3SPierre Pronchery (void (*)(void))key2any_settable_ctx_params }, \
1299b077aed3SPierre Pronchery { OSSL_FUNC_ENCODER_SET_CTX_PARAMS, \
1300b077aed3SPierre Pronchery (void (*)(void))key2any_set_ctx_params }, \
1301b077aed3SPierre Pronchery { OSSL_FUNC_ENCODER_DOES_SELECTION, \
1302b077aed3SPierre Pronchery (void (*)(void))impl##_to_##kind##_##output##_does_selection }, \
1303b077aed3SPierre Pronchery { OSSL_FUNC_ENCODER_IMPORT_OBJECT, \
1304b077aed3SPierre Pronchery (void (*)(void))impl##_to_##kind##_##output##_import_object }, \
1305b077aed3SPierre Pronchery { OSSL_FUNC_ENCODER_FREE_OBJECT, \
1306b077aed3SPierre Pronchery (void (*)(void))impl##_to_##kind##_##output##_free_object }, \
1307b077aed3SPierre Pronchery { OSSL_FUNC_ENCODER_ENCODE, \
1308b077aed3SPierre Pronchery (void (*)(void))impl##_to_##kind##_##output##_encode }, \
1309b077aed3SPierre Pronchery { 0, NULL } \
1310b077aed3SPierre Pronchery }
1311b077aed3SPierre Pronchery
1312b077aed3SPierre Pronchery /*
1313b077aed3SPierre Pronchery * Replacements for i2d_{TYPE}PrivateKey, i2d_{TYPE}PublicKey,
1314b077aed3SPierre Pronchery * i2d_{TYPE}params, as they exist.
1315b077aed3SPierre Pronchery */
1316b077aed3SPierre Pronchery MAKE_ENCODER(rsa, rsa, EVP_PKEY_RSA, type_specific_keypair, der);
1317b077aed3SPierre Pronchery #ifndef OPENSSL_NO_DH
1318b077aed3SPierre Pronchery MAKE_ENCODER(dh, dh, EVP_PKEY_DH, type_specific_params, der);
1319b077aed3SPierre Pronchery MAKE_ENCODER(dhx, dh, EVP_PKEY_DHX, type_specific_params, der);
1320b077aed3SPierre Pronchery #endif
1321b077aed3SPierre Pronchery #ifndef OPENSSL_NO_DSA
1322b077aed3SPierre Pronchery MAKE_ENCODER(dsa, dsa, EVP_PKEY_DSA, type_specific, der);
1323b077aed3SPierre Pronchery #endif
1324b077aed3SPierre Pronchery #ifndef OPENSSL_NO_EC
1325b077aed3SPierre Pronchery MAKE_ENCODER(ec, ec, EVP_PKEY_EC, type_specific_no_pub, der);
1326b077aed3SPierre Pronchery # ifndef OPENSSL_NO_SM2
1327b077aed3SPierre Pronchery MAKE_ENCODER(sm2, ec, EVP_PKEY_EC, type_specific_no_pub, der);
1328b077aed3SPierre Pronchery # endif
1329b077aed3SPierre Pronchery #endif
1330b077aed3SPierre Pronchery
1331b077aed3SPierre Pronchery /*
1332b077aed3SPierre Pronchery * Replacements for PEM_write_bio_{TYPE}PrivateKey,
1333b077aed3SPierre Pronchery * PEM_write_bio_{TYPE}PublicKey, PEM_write_bio_{TYPE}params, as they exist.
1334b077aed3SPierre Pronchery */
1335b077aed3SPierre Pronchery MAKE_ENCODER(rsa, rsa, EVP_PKEY_RSA, type_specific_keypair, pem);
1336b077aed3SPierre Pronchery #ifndef OPENSSL_NO_DH
1337b077aed3SPierre Pronchery MAKE_ENCODER(dh, dh, EVP_PKEY_DH, type_specific_params, pem);
1338b077aed3SPierre Pronchery MAKE_ENCODER(dhx, dh, EVP_PKEY_DHX, type_specific_params, pem);
1339b077aed3SPierre Pronchery #endif
1340b077aed3SPierre Pronchery #ifndef OPENSSL_NO_DSA
1341b077aed3SPierre Pronchery MAKE_ENCODER(dsa, dsa, EVP_PKEY_DSA, type_specific, pem);
1342b077aed3SPierre Pronchery #endif
1343b077aed3SPierre Pronchery #ifndef OPENSSL_NO_EC
1344b077aed3SPierre Pronchery MAKE_ENCODER(ec, ec, EVP_PKEY_EC, type_specific_no_pub, pem);
1345b077aed3SPierre Pronchery # ifndef OPENSSL_NO_SM2
1346b077aed3SPierre Pronchery MAKE_ENCODER(sm2, ec, EVP_PKEY_EC, type_specific_no_pub, pem);
1347b077aed3SPierre Pronchery # endif
1348b077aed3SPierre Pronchery #endif
1349b077aed3SPierre Pronchery
1350b077aed3SPierre Pronchery /*
1351b077aed3SPierre Pronchery * PKCS#8 and SubjectPublicKeyInfo support. This may duplicate some of the
1352b077aed3SPierre Pronchery * implementations specified above, but are more specific.
1353b077aed3SPierre Pronchery * The SubjectPublicKeyInfo implementations also replace the
1354b077aed3SPierre Pronchery * PEM_write_bio_{TYPE}_PUBKEY functions.
1355b077aed3SPierre Pronchery * For PEM, these are expected to be used by PEM_write_bio_PrivateKey(),
1356b077aed3SPierre Pronchery * PEM_write_bio_PUBKEY() and PEM_write_bio_Parameters().
1357b077aed3SPierre Pronchery */
1358b077aed3SPierre Pronchery MAKE_ENCODER(rsa, rsa, EVP_PKEY_RSA, EncryptedPrivateKeyInfo, der);
1359b077aed3SPierre Pronchery MAKE_ENCODER(rsa, rsa, EVP_PKEY_RSA, EncryptedPrivateKeyInfo, pem);
1360b077aed3SPierre Pronchery MAKE_ENCODER(rsa, rsa, EVP_PKEY_RSA, PrivateKeyInfo, der);
1361b077aed3SPierre Pronchery MAKE_ENCODER(rsa, rsa, EVP_PKEY_RSA, PrivateKeyInfo, pem);
1362b077aed3SPierre Pronchery MAKE_ENCODER(rsa, rsa, EVP_PKEY_RSA, SubjectPublicKeyInfo, der);
1363b077aed3SPierre Pronchery MAKE_ENCODER(rsa, rsa, EVP_PKEY_RSA, SubjectPublicKeyInfo, pem);
1364b077aed3SPierre Pronchery MAKE_ENCODER(rsapss, rsa, EVP_PKEY_RSA_PSS, EncryptedPrivateKeyInfo, der);
1365b077aed3SPierre Pronchery MAKE_ENCODER(rsapss, rsa, EVP_PKEY_RSA_PSS, EncryptedPrivateKeyInfo, pem);
1366b077aed3SPierre Pronchery MAKE_ENCODER(rsapss, rsa, EVP_PKEY_RSA_PSS, PrivateKeyInfo, der);
1367b077aed3SPierre Pronchery MAKE_ENCODER(rsapss, rsa, EVP_PKEY_RSA_PSS, PrivateKeyInfo, pem);
1368b077aed3SPierre Pronchery MAKE_ENCODER(rsapss, rsa, EVP_PKEY_RSA_PSS, SubjectPublicKeyInfo, der);
1369b077aed3SPierre Pronchery MAKE_ENCODER(rsapss, rsa, EVP_PKEY_RSA_PSS, SubjectPublicKeyInfo, pem);
1370b077aed3SPierre Pronchery #ifndef OPENSSL_NO_DH
1371b077aed3SPierre Pronchery MAKE_ENCODER(dh, dh, EVP_PKEY_DH, EncryptedPrivateKeyInfo, der);
1372b077aed3SPierre Pronchery MAKE_ENCODER(dh, dh, EVP_PKEY_DH, EncryptedPrivateKeyInfo, pem);
1373b077aed3SPierre Pronchery MAKE_ENCODER(dh, dh, EVP_PKEY_DH, PrivateKeyInfo, der);
1374b077aed3SPierre Pronchery MAKE_ENCODER(dh, dh, EVP_PKEY_DH, PrivateKeyInfo, pem);
1375b077aed3SPierre Pronchery MAKE_ENCODER(dh, dh, EVP_PKEY_DH, SubjectPublicKeyInfo, der);
1376b077aed3SPierre Pronchery MAKE_ENCODER(dh, dh, EVP_PKEY_DH, SubjectPublicKeyInfo, pem);
1377b077aed3SPierre Pronchery MAKE_ENCODER(dhx, dh, EVP_PKEY_DHX, EncryptedPrivateKeyInfo, der);
1378b077aed3SPierre Pronchery MAKE_ENCODER(dhx, dh, EVP_PKEY_DHX, EncryptedPrivateKeyInfo, pem);
1379b077aed3SPierre Pronchery MAKE_ENCODER(dhx, dh, EVP_PKEY_DHX, PrivateKeyInfo, der);
1380b077aed3SPierre Pronchery MAKE_ENCODER(dhx, dh, EVP_PKEY_DHX, PrivateKeyInfo, pem);
1381b077aed3SPierre Pronchery MAKE_ENCODER(dhx, dh, EVP_PKEY_DHX, SubjectPublicKeyInfo, der);
1382b077aed3SPierre Pronchery MAKE_ENCODER(dhx, dh, EVP_PKEY_DHX, SubjectPublicKeyInfo, pem);
1383b077aed3SPierre Pronchery #endif
1384b077aed3SPierre Pronchery #ifndef OPENSSL_NO_DSA
1385b077aed3SPierre Pronchery MAKE_ENCODER(dsa, dsa, EVP_PKEY_DSA, EncryptedPrivateKeyInfo, der);
1386b077aed3SPierre Pronchery MAKE_ENCODER(dsa, dsa, EVP_PKEY_DSA, EncryptedPrivateKeyInfo, pem);
1387b077aed3SPierre Pronchery MAKE_ENCODER(dsa, dsa, EVP_PKEY_DSA, PrivateKeyInfo, der);
1388b077aed3SPierre Pronchery MAKE_ENCODER(dsa, dsa, EVP_PKEY_DSA, PrivateKeyInfo, pem);
1389b077aed3SPierre Pronchery MAKE_ENCODER(dsa, dsa, EVP_PKEY_DSA, SubjectPublicKeyInfo, der);
1390b077aed3SPierre Pronchery MAKE_ENCODER(dsa, dsa, EVP_PKEY_DSA, SubjectPublicKeyInfo, pem);
1391b077aed3SPierre Pronchery #endif
1392b077aed3SPierre Pronchery #ifndef OPENSSL_NO_EC
1393b077aed3SPierre Pronchery MAKE_ENCODER(ec, ec, EVP_PKEY_EC, EncryptedPrivateKeyInfo, der);
1394b077aed3SPierre Pronchery MAKE_ENCODER(ec, ec, EVP_PKEY_EC, EncryptedPrivateKeyInfo, pem);
1395b077aed3SPierre Pronchery MAKE_ENCODER(ec, ec, EVP_PKEY_EC, PrivateKeyInfo, der);
1396b077aed3SPierre Pronchery MAKE_ENCODER(ec, ec, EVP_PKEY_EC, PrivateKeyInfo, pem);
1397b077aed3SPierre Pronchery MAKE_ENCODER(ec, ec, EVP_PKEY_EC, SubjectPublicKeyInfo, der);
1398b077aed3SPierre Pronchery MAKE_ENCODER(ec, ec, EVP_PKEY_EC, SubjectPublicKeyInfo, pem);
1399b077aed3SPierre Pronchery # ifndef OPENSSL_NO_SM2
1400b077aed3SPierre Pronchery MAKE_ENCODER(sm2, ec, EVP_PKEY_EC, EncryptedPrivateKeyInfo, der);
1401b077aed3SPierre Pronchery MAKE_ENCODER(sm2, ec, EVP_PKEY_EC, EncryptedPrivateKeyInfo, pem);
1402b077aed3SPierre Pronchery MAKE_ENCODER(sm2, ec, EVP_PKEY_EC, PrivateKeyInfo, der);
1403b077aed3SPierre Pronchery MAKE_ENCODER(sm2, ec, EVP_PKEY_EC, PrivateKeyInfo, pem);
1404b077aed3SPierre Pronchery MAKE_ENCODER(sm2, ec, EVP_PKEY_EC, SubjectPublicKeyInfo, der);
1405b077aed3SPierre Pronchery MAKE_ENCODER(sm2, ec, EVP_PKEY_EC, SubjectPublicKeyInfo, pem);
1406b077aed3SPierre Pronchery # endif
1407b077aed3SPierre Pronchery MAKE_ENCODER(ed25519, ecx, EVP_PKEY_ED25519, EncryptedPrivateKeyInfo, der);
1408b077aed3SPierre Pronchery MAKE_ENCODER(ed25519, ecx, EVP_PKEY_ED25519, EncryptedPrivateKeyInfo, pem);
1409b077aed3SPierre Pronchery MAKE_ENCODER(ed25519, ecx, EVP_PKEY_ED25519, PrivateKeyInfo, der);
1410b077aed3SPierre Pronchery MAKE_ENCODER(ed25519, ecx, EVP_PKEY_ED25519, PrivateKeyInfo, pem);
1411b077aed3SPierre Pronchery MAKE_ENCODER(ed25519, ecx, EVP_PKEY_ED25519, SubjectPublicKeyInfo, der);
1412b077aed3SPierre Pronchery MAKE_ENCODER(ed25519, ecx, EVP_PKEY_ED25519, SubjectPublicKeyInfo, pem);
1413b077aed3SPierre Pronchery MAKE_ENCODER(ed448, ecx, EVP_PKEY_ED448, EncryptedPrivateKeyInfo, der);
1414b077aed3SPierre Pronchery MAKE_ENCODER(ed448, ecx, EVP_PKEY_ED448, EncryptedPrivateKeyInfo, pem);
1415b077aed3SPierre Pronchery MAKE_ENCODER(ed448, ecx, EVP_PKEY_ED448, PrivateKeyInfo, der);
1416b077aed3SPierre Pronchery MAKE_ENCODER(ed448, ecx, EVP_PKEY_ED448, PrivateKeyInfo, pem);
1417b077aed3SPierre Pronchery MAKE_ENCODER(ed448, ecx, EVP_PKEY_ED448, SubjectPublicKeyInfo, der);
1418b077aed3SPierre Pronchery MAKE_ENCODER(ed448, ecx, EVP_PKEY_ED448, SubjectPublicKeyInfo, pem);
1419b077aed3SPierre Pronchery MAKE_ENCODER(x25519, ecx, EVP_PKEY_X25519, EncryptedPrivateKeyInfo, der);
1420b077aed3SPierre Pronchery MAKE_ENCODER(x25519, ecx, EVP_PKEY_X25519, EncryptedPrivateKeyInfo, pem);
1421b077aed3SPierre Pronchery MAKE_ENCODER(x25519, ecx, EVP_PKEY_X25519, PrivateKeyInfo, der);
1422b077aed3SPierre Pronchery MAKE_ENCODER(x25519, ecx, EVP_PKEY_X25519, PrivateKeyInfo, pem);
1423b077aed3SPierre Pronchery MAKE_ENCODER(x25519, ecx, EVP_PKEY_X25519, SubjectPublicKeyInfo, der);
1424b077aed3SPierre Pronchery MAKE_ENCODER(x25519, ecx, EVP_PKEY_X25519, SubjectPublicKeyInfo, pem);
1425b077aed3SPierre Pronchery MAKE_ENCODER(x448, ecx, EVP_PKEY_ED448, EncryptedPrivateKeyInfo, der);
1426b077aed3SPierre Pronchery MAKE_ENCODER(x448, ecx, EVP_PKEY_ED448, EncryptedPrivateKeyInfo, pem);
1427b077aed3SPierre Pronchery MAKE_ENCODER(x448, ecx, EVP_PKEY_ED448, PrivateKeyInfo, der);
1428b077aed3SPierre Pronchery MAKE_ENCODER(x448, ecx, EVP_PKEY_ED448, PrivateKeyInfo, pem);
1429b077aed3SPierre Pronchery MAKE_ENCODER(x448, ecx, EVP_PKEY_ED448, SubjectPublicKeyInfo, der);
1430b077aed3SPierre Pronchery MAKE_ENCODER(x448, ecx, EVP_PKEY_ED448, SubjectPublicKeyInfo, pem);
1431b077aed3SPierre Pronchery #endif
1432b077aed3SPierre Pronchery
1433b077aed3SPierre Pronchery /*
1434b077aed3SPierre Pronchery * Support for key type specific output formats. Not all key types have
1435b077aed3SPierre Pronchery * this, we only aim to duplicate what is available in 1.1.1 as
1436b077aed3SPierre Pronchery * i2d_TYPEPrivateKey(), i2d_TYPEPublicKey() and i2d_TYPEparams().
1437b077aed3SPierre Pronchery * For example, there are no publicly available i2d_ function for
1438b077aed3SPierre Pronchery * ED25519, ED448, X25519 or X448, and they therefore only have PKCS#8
1439b077aed3SPierre Pronchery * and SubjectPublicKeyInfo implementations as implemented above.
1440b077aed3SPierre Pronchery */
1441b077aed3SPierre Pronchery MAKE_ENCODER(rsa, rsa, EVP_PKEY_RSA, RSA, der);
1442b077aed3SPierre Pronchery MAKE_ENCODER(rsa, rsa, EVP_PKEY_RSA, RSA, pem);
1443b077aed3SPierre Pronchery #ifndef OPENSSL_NO_DH
1444b077aed3SPierre Pronchery MAKE_ENCODER(dh, dh, EVP_PKEY_DH, DH, der);
1445b077aed3SPierre Pronchery MAKE_ENCODER(dh, dh, EVP_PKEY_DH, DH, pem);
1446b077aed3SPierre Pronchery MAKE_ENCODER(dhx, dh, EVP_PKEY_DHX, DHX, der);
1447b077aed3SPierre Pronchery MAKE_ENCODER(dhx, dh, EVP_PKEY_DHX, DHX, pem);
1448b077aed3SPierre Pronchery #endif
1449b077aed3SPierre Pronchery #ifndef OPENSSL_NO_DSA
1450b077aed3SPierre Pronchery MAKE_ENCODER(dsa, dsa, EVP_PKEY_DSA, DSA, der);
1451b077aed3SPierre Pronchery MAKE_ENCODER(dsa, dsa, EVP_PKEY_DSA, DSA, pem);
1452b077aed3SPierre Pronchery #endif
1453b077aed3SPierre Pronchery #ifndef OPENSSL_NO_EC
1454b077aed3SPierre Pronchery MAKE_ENCODER(ec, ec, EVP_PKEY_EC, EC, der);
1455b077aed3SPierre Pronchery MAKE_ENCODER(ec, ec, EVP_PKEY_EC, EC, pem);
1456b077aed3SPierre Pronchery # ifndef OPENSSL_NO_SM2
1457b077aed3SPierre Pronchery MAKE_ENCODER(sm2, ec, EVP_PKEY_EC, SM2, der);
1458b077aed3SPierre Pronchery MAKE_ENCODER(sm2, ec, EVP_PKEY_EC, SM2, pem);
1459b077aed3SPierre Pronchery # endif
1460b077aed3SPierre Pronchery #endif
1461b077aed3SPierre Pronchery
1462b077aed3SPierre Pronchery /* Convenience structure names */
1463b077aed3SPierre Pronchery MAKE_ENCODER(rsa, rsa, EVP_PKEY_RSA, PKCS1, der);
1464b077aed3SPierre Pronchery MAKE_ENCODER(rsa, rsa, EVP_PKEY_RSA, PKCS1, pem);
1465b077aed3SPierre Pronchery MAKE_ENCODER(rsapss, rsa, EVP_PKEY_RSA_PSS, PKCS1, der);
1466b077aed3SPierre Pronchery MAKE_ENCODER(rsapss, rsa, EVP_PKEY_RSA_PSS, PKCS1, pem);
1467b077aed3SPierre Pronchery #ifndef OPENSSL_NO_DH
1468b077aed3SPierre Pronchery MAKE_ENCODER(dh, dh, EVP_PKEY_DH, PKCS3, der); /* parameters only */
1469b077aed3SPierre Pronchery MAKE_ENCODER(dh, dh, EVP_PKEY_DH, PKCS3, pem); /* parameters only */
1470b077aed3SPierre Pronchery MAKE_ENCODER(dhx, dh, EVP_PKEY_DHX, X9_42, der); /* parameters only */
1471b077aed3SPierre Pronchery MAKE_ENCODER(dhx, dh, EVP_PKEY_DHX, X9_42, pem); /* parameters only */
1472b077aed3SPierre Pronchery #endif
1473b077aed3SPierre Pronchery #ifndef OPENSSL_NO_EC
1474b077aed3SPierre Pronchery MAKE_ENCODER(ec, ec, EVP_PKEY_EC, X9_62, der);
1475b077aed3SPierre Pronchery MAKE_ENCODER(ec, ec, EVP_PKEY_EC, X9_62, pem);
1476b077aed3SPierre Pronchery #endif
1477