|
Packit |
c4476c |
/*
|
|
Packit |
c4476c |
* Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
|
|
Packit |
c4476c |
*
|
|
Packit |
c4476c |
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
Packit |
c4476c |
* this file except in compliance with the License. You can obtain a copy
|
|
Packit |
c4476c |
* in the file LICENSE in the source distribution or at
|
|
Packit |
c4476c |
* https://www.openssl.org/source/license.html
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
#include <stdio.h>
|
|
Packit |
c4476c |
#include "internal/cryptlib.h"
|
|
Packit |
c4476c |
#include <openssl/asn1t.h>
|
|
Packit |
c4476c |
#include <openssl/x509.h>
|
|
Packit |
c4476c |
#include <openssl/rand.h>
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
/* PKCS#5 password based encryption structure */
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
ASN1_SEQUENCE(PBEPARAM) = {
|
|
Packit |
c4476c |
ASN1_SIMPLE(PBEPARAM, salt, ASN1_OCTET_STRING),
|
|
Packit |
c4476c |
ASN1_SIMPLE(PBEPARAM, iter, ASN1_INTEGER)
|
|
Packit |
c4476c |
} ASN1_SEQUENCE_END(PBEPARAM)
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
IMPLEMENT_ASN1_FUNCTIONS(PBEPARAM)
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
/* Set an algorithm identifier for a PKCS#5 PBE algorithm */
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int PKCS5_pbe_set0_algor(X509_ALGOR *algor, int alg, int iter,
|
|
Packit |
c4476c |
const unsigned char *salt, int saltlen)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
PBEPARAM *pbe = NULL;
|
|
Packit |
c4476c |
ASN1_STRING *pbe_str = NULL;
|
|
Packit |
c4476c |
unsigned char *sstr = NULL;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
pbe = PBEPARAM_new();
|
|
Packit |
c4476c |
if (pbe == NULL) {
|
|
Packit |
c4476c |
ASN1err(ASN1_F_PKCS5_PBE_SET0_ALGOR, ERR_R_MALLOC_FAILURE);
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
if (iter <= 0)
|
|
Packit |
c4476c |
iter = PKCS5_DEFAULT_ITER;
|
|
Packit |
c4476c |
if (!ASN1_INTEGER_set(pbe->iter, iter)) {
|
|
Packit |
c4476c |
ASN1err(ASN1_F_PKCS5_PBE_SET0_ALGOR, ERR_R_MALLOC_FAILURE);
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
if (!saltlen)
|
|
Packit |
c4476c |
saltlen = PKCS5_SALT_LEN;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
sstr = OPENSSL_malloc(saltlen);
|
|
Packit |
c4476c |
if (sstr == NULL) {
|
|
Packit |
c4476c |
ASN1err(ASN1_F_PKCS5_PBE_SET0_ALGOR, ERR_R_MALLOC_FAILURE);
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
if (salt)
|
|
Packit |
c4476c |
memcpy(sstr, salt, saltlen);
|
|
Packit |
c4476c |
else if (RAND_bytes(sstr, saltlen) <= 0)
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
ASN1_STRING_set0(pbe->salt, sstr, saltlen);
|
|
Packit |
c4476c |
sstr = NULL;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (!ASN1_item_pack(pbe, ASN1_ITEM_rptr(PBEPARAM), &pbe_str)) {
|
|
Packit |
c4476c |
ASN1err(ASN1_F_PKCS5_PBE_SET0_ALGOR, ERR_R_MALLOC_FAILURE);
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
PBEPARAM_free(pbe);
|
|
Packit |
c4476c |
pbe = NULL;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (X509_ALGOR_set0(algor, OBJ_nid2obj(alg), V_ASN1_SEQUENCE, pbe_str))
|
|
Packit |
c4476c |
return 1;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
err:
|
|
Packit |
c4476c |
OPENSSL_free(sstr);
|
|
Packit |
c4476c |
PBEPARAM_free(pbe);
|
|
Packit |
c4476c |
ASN1_STRING_free(pbe_str);
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
/* Return an algorithm identifier for a PKCS#5 PBE algorithm */
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
X509_ALGOR *PKCS5_pbe_set(int alg, int iter,
|
|
Packit |
c4476c |
const unsigned char *salt, int saltlen)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
X509_ALGOR *ret;
|
|
Packit |
c4476c |
ret = X509_ALGOR_new();
|
|
Packit |
c4476c |
if (ret == NULL) {
|
|
Packit |
c4476c |
ASN1err(ASN1_F_PKCS5_PBE_SET, ERR_R_MALLOC_FAILURE);
|
|
Packit |
c4476c |
return NULL;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (PKCS5_pbe_set0_algor(ret, alg, iter, salt, saltlen))
|
|
Packit |
c4476c |
return ret;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
X509_ALGOR_free(ret);
|
|
Packit |
c4476c |
return NULL;
|
|
Packit |
c4476c |
}
|