|
Packit |
c4476c |
/*
|
|
Packit |
c4476c |
* Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
|
|
Packit |
c4476c |
*
|
|
Packit |
c4476c |
* Licensed under the OpenSSL license (the "License"). You may not use
|
|
Packit |
c4476c |
* this file except in compliance with the License. You can obtain a copy
|
|
Packit |
c4476c |
* in the file LICENSE in the source distribution or at
|
|
Packit |
c4476c |
* https://www.openssl.org/source/license.html
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
#include <stdio.h>
|
|
Packit |
c4476c |
#include <openssl/crypto.h>
|
|
Packit |
c4476c |
#include "internal/cryptlib.h"
|
|
Packit |
c4476c |
#include "internal/refcount.h"
|
|
Packit |
c4476c |
#include "crypto/bn.h"
|
|
Packit |
c4476c |
#include <openssl/engine.h>
|
|
Packit |
c4476c |
#include <openssl/evp.h>
|
|
Packit |
c4476c |
#include "crypto/evp.h"
|
|
Packit |
c4476c |
#include "rsa_local.h"
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
RSA *RSA_new(void)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return RSA_new_method(NULL);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
const RSA_METHOD *RSA_get_method(const RSA *rsa)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return rsa->meth;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_set_method(RSA *rsa, const RSA_METHOD *meth)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
/*
|
|
Packit |
c4476c |
* NB: The caller is specifically setting a method, so it's not up to us
|
|
Packit |
c4476c |
* to deal with which ENGINE it comes from.
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
const RSA_METHOD *mtmp;
|
|
Packit |
c4476c |
#ifdef OPENSSL_FIPS
|
|
Packit |
c4476c |
if (FIPS_mode() && !(meth->flags & RSA_FLAG_FIPS_METHOD)) {
|
|
Packit |
c4476c |
RSAerr(RSA_F_RSA_SET_METHOD, RSA_R_NON_FIPS_RSA_METHOD);
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
#endif
|
|
Packit |
c4476c |
mtmp = rsa->meth;
|
|
Packit |
c4476c |
if (mtmp->finish)
|
|
Packit |
c4476c |
mtmp->finish(rsa);
|
|
Packit |
c4476c |
#ifndef OPENSSL_NO_ENGINE
|
|
Packit |
c4476c |
ENGINE_finish(rsa->engine);
|
|
Packit |
c4476c |
rsa->engine = NULL;
|
|
Packit |
c4476c |
#endif
|
|
Packit |
c4476c |
rsa->meth = meth;
|
|
Packit |
c4476c |
if (meth->init)
|
|
Packit |
c4476c |
meth->init(rsa);
|
|
Packit |
c4476c |
return 1;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
RSA *RSA_new_method(ENGINE *engine)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
RSA *ret = OPENSSL_zalloc(sizeof(*ret));
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (ret == NULL) {
|
|
Packit |
c4476c |
RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_MALLOC_FAILURE);
|
|
Packit |
c4476c |
return NULL;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
ret->references = 1;
|
|
Packit |
c4476c |
ret->lock = CRYPTO_THREAD_lock_new();
|
|
Packit |
c4476c |
if (ret->lock == NULL) {
|
|
Packit |
c4476c |
RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_MALLOC_FAILURE);
|
|
Packit |
c4476c |
OPENSSL_free(ret);
|
|
Packit |
c4476c |
return NULL;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
ret->meth = RSA_get_default_method();
|
|
Packit |
c4476c |
#ifndef OPENSSL_NO_ENGINE
|
|
Packit |
c4476c |
if (engine) {
|
|
Packit |
c4476c |
if (!ENGINE_init(engine)) {
|
|
Packit |
c4476c |
RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_ENGINE_LIB);
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
ret->engine = engine;
|
|
Packit |
c4476c |
} else {
|
|
Packit |
c4476c |
ret->engine = ENGINE_get_default_RSA();
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
if (ret->engine) {
|
|
Packit |
c4476c |
ret->meth = ENGINE_get_RSA(ret->engine);
|
|
Packit |
c4476c |
if (ret->meth == NULL) {
|
|
Packit |
c4476c |
RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_ENGINE_LIB);
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
#endif
|
|
Packit |
c4476c |
#ifdef OPENSSL_FIPS
|
|
Packit |
c4476c |
if (FIPS_mode() && !(ret->meth->flags & RSA_FLAG_FIPS_METHOD)) {
|
|
Packit |
c4476c |
RSAerr(RSA_F_RSA_NEW_METHOD, RSA_R_NON_FIPS_RSA_METHOD);
|
|
Packit |
c4476c |
# ifndef OPENSSL_NO_ENGINE
|
|
Packit |
c4476c |
if (ret->engine)
|
|
Packit |
c4476c |
ENGINE_finish(ret->engine);
|
|
Packit |
c4476c |
# endif
|
|
Packit |
c4476c |
OPENSSL_free(ret);
|
|
Packit |
c4476c |
return NULL;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
#endif
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
ret->flags = ret->meth->flags;
|
|
Packit |
c4476c |
if (!CRYPTO_new_ex_data(CRYPTO_EX_INDEX_RSA, ret, &ret->ex_data)) {
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if ((ret->meth->init != NULL) && !ret->meth->init(ret)) {
|
|
Packit |
c4476c |
RSAerr(RSA_F_RSA_NEW_METHOD, ERR_R_INIT_FAIL);
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
return ret;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
err:
|
|
Packit |
c4476c |
RSA_free(ret);
|
|
Packit |
c4476c |
return NULL;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
void RSA_free(RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
int i;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (r == NULL)
|
|
Packit |
c4476c |
return;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
CRYPTO_DOWN_REF(&r->references, &i, r->lock);
|
|
Packit |
c4476c |
REF_PRINT_COUNT("RSA", r);
|
|
Packit |
c4476c |
if (i > 0)
|
|
Packit |
c4476c |
return;
|
|
Packit |
c4476c |
REF_ASSERT_ISNT(i < 0);
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (r->meth != NULL && r->meth->finish != NULL)
|
|
Packit |
c4476c |
r->meth->finish(r);
|
|
Packit |
c4476c |
#ifndef OPENSSL_NO_ENGINE
|
|
Packit |
c4476c |
ENGINE_finish(r->engine);
|
|
Packit |
c4476c |
#endif
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
CRYPTO_free_ex_data(CRYPTO_EX_INDEX_RSA, r, &r->ex_data);
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
CRYPTO_THREAD_lock_free(r->lock);
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
BN_free(r->n);
|
|
Packit |
c4476c |
BN_free(r->e);
|
|
Packit |
c4476c |
BN_clear_free(r->d);
|
|
Packit |
c4476c |
BN_clear_free(r->p);
|
|
Packit |
c4476c |
BN_clear_free(r->q);
|
|
Packit |
c4476c |
BN_clear_free(r->dmp1);
|
|
Packit |
c4476c |
BN_clear_free(r->dmq1);
|
|
Packit |
c4476c |
BN_clear_free(r->iqmp);
|
|
Packit |
c4476c |
RSA_PSS_PARAMS_free(r->pss);
|
|
Packit |
c4476c |
sk_RSA_PRIME_INFO_pop_free(r->prime_infos, rsa_multip_info_free);
|
|
Packit |
c4476c |
BN_BLINDING_free(r->blinding);
|
|
Packit |
c4476c |
BN_BLINDING_free(r->mt_blinding);
|
|
Packit |
c4476c |
OPENSSL_free(r->bignum_data);
|
|
Packit |
c4476c |
OPENSSL_free(r);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_up_ref(RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
int i;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (CRYPTO_UP_REF(&r->references, &i, r->lock) <= 0)
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
REF_PRINT_COUNT("RSA", r);
|
|
Packit |
c4476c |
REF_ASSERT_ISNT(i < 2);
|
|
Packit |
c4476c |
return i > 1 ? 1 : 0;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_set_ex_data(RSA *r, int idx, void *arg)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return CRYPTO_set_ex_data(&r->ex_data, idx, arg);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
void *RSA_get_ex_data(const RSA *r, int idx)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return CRYPTO_get_ex_data(&r->ex_data, idx);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_security_bits(const RSA *rsa)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
int bits = BN_num_bits(rsa->n);
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (rsa->version == RSA_ASN1_VERSION_MULTI) {
|
|
Packit |
c4476c |
/* This ought to mean that we have private key at hand. */
|
|
Packit |
c4476c |
int ex_primes = sk_RSA_PRIME_INFO_num(rsa->prime_infos);
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (ex_primes <= 0 || (ex_primes + 2) > rsa_multip_cap(bits))
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
return BN_security_bits(bits, -1);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_set0_key(RSA *r, BIGNUM *n, BIGNUM *e, BIGNUM *d)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
/* If the fields n and e in r are NULL, the corresponding input
|
|
Packit |
c4476c |
* parameters MUST be non-NULL for n and e. d may be
|
|
Packit |
c4476c |
* left NULL (in case only the public key is used).
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
if ((r->n == NULL && n == NULL)
|
|
Packit |
c4476c |
|| (r->e == NULL && e == NULL))
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (n != NULL) {
|
|
Packit |
c4476c |
BN_free(r->n);
|
|
Packit |
c4476c |
r->n = n;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
if (e != NULL) {
|
|
Packit |
c4476c |
BN_free(r->e);
|
|
Packit |
c4476c |
r->e = e;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
if (d != NULL) {
|
|
Packit |
c4476c |
BN_clear_free(r->d);
|
|
Packit |
c4476c |
r->d = d;
|
|
Packit |
c4476c |
BN_set_flags(r->d, BN_FLG_CONSTTIME);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
return 1;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_set0_factors(RSA *r, BIGNUM *p, BIGNUM *q)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
/* If the fields p and q in r are NULL, the corresponding input
|
|
Packit |
c4476c |
* parameters MUST be non-NULL.
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
if ((r->p == NULL && p == NULL)
|
|
Packit |
c4476c |
|| (r->q == NULL && q == NULL))
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (p != NULL) {
|
|
Packit |
c4476c |
BN_clear_free(r->p);
|
|
Packit |
c4476c |
r->p = p;
|
|
Packit |
c4476c |
BN_set_flags(r->p, BN_FLG_CONSTTIME);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
if (q != NULL) {
|
|
Packit |
c4476c |
BN_clear_free(r->q);
|
|
Packit |
c4476c |
r->q = q;
|
|
Packit |
c4476c |
BN_set_flags(r->q, BN_FLG_CONSTTIME);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
return 1;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_set0_crt_params(RSA *r, BIGNUM *dmp1, BIGNUM *dmq1, BIGNUM *iqmp)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
/* If the fields dmp1, dmq1 and iqmp in r are NULL, the corresponding input
|
|
Packit |
c4476c |
* parameters MUST be non-NULL.
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
if ((r->dmp1 == NULL && dmp1 == NULL)
|
|
Packit |
c4476c |
|| (r->dmq1 == NULL && dmq1 == NULL)
|
|
Packit |
c4476c |
|| (r->iqmp == NULL && iqmp == NULL))
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (dmp1 != NULL) {
|
|
Packit |
c4476c |
BN_clear_free(r->dmp1);
|
|
Packit |
c4476c |
r->dmp1 = dmp1;
|
|
Packit |
c4476c |
BN_set_flags(r->dmp1, BN_FLG_CONSTTIME);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
if (dmq1 != NULL) {
|
|
Packit |
c4476c |
BN_clear_free(r->dmq1);
|
|
Packit |
c4476c |
r->dmq1 = dmq1;
|
|
Packit |
c4476c |
BN_set_flags(r->dmq1, BN_FLG_CONSTTIME);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
if (iqmp != NULL) {
|
|
Packit |
c4476c |
BN_clear_free(r->iqmp);
|
|
Packit |
c4476c |
r->iqmp = iqmp;
|
|
Packit |
c4476c |
BN_set_flags(r->iqmp, BN_FLG_CONSTTIME);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
return 1;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
/*
|
|
Packit |
c4476c |
* Is it better to export RSA_PRIME_INFO structure
|
|
Packit |
c4476c |
* and related functions to let user pass a triplet?
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
int RSA_set0_multi_prime_params(RSA *r, BIGNUM *primes[], BIGNUM *exps[],
|
|
Packit |
c4476c |
BIGNUM *coeffs[], int pnum)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
STACK_OF(RSA_PRIME_INFO) *prime_infos, *old = NULL;
|
|
Packit |
c4476c |
RSA_PRIME_INFO *pinfo;
|
|
Packit |
c4476c |
int i;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (primes == NULL || exps == NULL || coeffs == NULL || pnum == 0)
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
prime_infos = sk_RSA_PRIME_INFO_new_reserve(NULL, pnum);
|
|
Packit |
c4476c |
if (prime_infos == NULL)
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (r->prime_infos != NULL)
|
|
Packit |
c4476c |
old = r->prime_infos;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
for (i = 0; i < pnum; i++) {
|
|
Packit |
c4476c |
pinfo = rsa_multip_info_new();
|
|
Packit |
c4476c |
if (pinfo == NULL)
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
if (primes[i] != NULL && exps[i] != NULL && coeffs[i] != NULL) {
|
|
Packit |
c4476c |
BN_clear_free(pinfo->r);
|
|
Packit |
c4476c |
BN_clear_free(pinfo->d);
|
|
Packit |
c4476c |
BN_clear_free(pinfo->t);
|
|
Packit |
c4476c |
pinfo->r = primes[i];
|
|
Packit |
c4476c |
pinfo->d = exps[i];
|
|
Packit |
c4476c |
pinfo->t = coeffs[i];
|
|
Packit |
c4476c |
BN_set_flags(pinfo->r, BN_FLG_CONSTTIME);
|
|
Packit |
c4476c |
BN_set_flags(pinfo->d, BN_FLG_CONSTTIME);
|
|
Packit |
c4476c |
BN_set_flags(pinfo->t, BN_FLG_CONSTTIME);
|
|
Packit |
c4476c |
} else {
|
|
Packit |
c4476c |
rsa_multip_info_free(pinfo);
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
(void)sk_RSA_PRIME_INFO_push(prime_infos, pinfo);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
r->prime_infos = prime_infos;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (!rsa_multip_calc_product(r)) {
|
|
Packit |
c4476c |
r->prime_infos = old;
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (old != NULL) {
|
|
Packit |
c4476c |
/*
|
|
Packit |
c4476c |
* This is hard to deal with, since the old infos could
|
|
Packit |
c4476c |
* also be set by this function and r, d, t should not
|
|
Packit |
c4476c |
* be freed in that case. So currently, stay consistent
|
|
Packit |
c4476c |
* with other *set0* functions: just free it...
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
sk_RSA_PRIME_INFO_pop_free(old, rsa_multip_info_free);
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
r->version = RSA_ASN1_VERSION_MULTI;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
return 1;
|
|
Packit |
c4476c |
err:
|
|
Packit |
c4476c |
/* r, d, t should not be freed */
|
|
Packit |
c4476c |
sk_RSA_PRIME_INFO_pop_free(prime_infos, rsa_multip_info_free_ex);
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
void RSA_get0_key(const RSA *r,
|
|
Packit |
c4476c |
const BIGNUM **n, const BIGNUM **e, const BIGNUM **d)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
if (n != NULL)
|
|
Packit |
c4476c |
*n = r->n;
|
|
Packit |
c4476c |
if (e != NULL)
|
|
Packit |
c4476c |
*e = r->e;
|
|
Packit |
c4476c |
if (d != NULL)
|
|
Packit |
c4476c |
*d = r->d;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
void RSA_get0_factors(const RSA *r, const BIGNUM **p, const BIGNUM **q)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
if (p != NULL)
|
|
Packit |
c4476c |
*p = r->p;
|
|
Packit |
c4476c |
if (q != NULL)
|
|
Packit |
c4476c |
*q = r->q;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_get_multi_prime_extra_count(const RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
int pnum;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
pnum = sk_RSA_PRIME_INFO_num(r->prime_infos);
|
|
Packit |
c4476c |
if (pnum <= 0)
|
|
Packit |
c4476c |
pnum = 0;
|
|
Packit |
c4476c |
return pnum;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_get0_multi_prime_factors(const RSA *r, const BIGNUM *primes[])
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
int pnum, i;
|
|
Packit |
c4476c |
RSA_PRIME_INFO *pinfo;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if ((pnum = RSA_get_multi_prime_extra_count(r)) == 0)
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
/*
|
|
Packit |
c4476c |
* return other primes
|
|
Packit |
c4476c |
* it's caller's responsibility to allocate oth_primes[pnum]
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
for (i = 0; i < pnum; i++) {
|
|
Packit |
c4476c |
pinfo = sk_RSA_PRIME_INFO_value(r->prime_infos, i);
|
|
Packit |
c4476c |
primes[i] = pinfo->r;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
return 1;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
void RSA_get0_crt_params(const RSA *r,
|
|
Packit |
c4476c |
const BIGNUM **dmp1, const BIGNUM **dmq1,
|
|
Packit |
c4476c |
const BIGNUM **iqmp)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
if (dmp1 != NULL)
|
|
Packit |
c4476c |
*dmp1 = r->dmp1;
|
|
Packit |
c4476c |
if (dmq1 != NULL)
|
|
Packit |
c4476c |
*dmq1 = r->dmq1;
|
|
Packit |
c4476c |
if (iqmp != NULL)
|
|
Packit |
c4476c |
*iqmp = r->iqmp;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_get0_multi_prime_crt_params(const RSA *r, const BIGNUM *exps[],
|
|
Packit |
c4476c |
const BIGNUM *coeffs[])
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
int pnum;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if ((pnum = RSA_get_multi_prime_extra_count(r)) == 0)
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
/* return other primes */
|
|
Packit |
c4476c |
if (exps != NULL || coeffs != NULL) {
|
|
Packit |
c4476c |
RSA_PRIME_INFO *pinfo;
|
|
Packit |
c4476c |
int i;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
/* it's the user's job to guarantee the buffer length */
|
|
Packit |
c4476c |
for (i = 0; i < pnum; i++) {
|
|
Packit |
c4476c |
pinfo = sk_RSA_PRIME_INFO_value(r->prime_infos, i);
|
|
Packit |
c4476c |
if (exps != NULL)
|
|
Packit |
c4476c |
exps[i] = pinfo->d;
|
|
Packit |
c4476c |
if (coeffs != NULL)
|
|
Packit |
c4476c |
coeffs[i] = pinfo->t;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
return 1;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
const BIGNUM *RSA_get0_n(const RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return r->n;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
const BIGNUM *RSA_get0_e(const RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return r->e;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
const BIGNUM *RSA_get0_d(const RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return r->d;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
const BIGNUM *RSA_get0_p(const RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return r->p;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
const BIGNUM *RSA_get0_q(const RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return r->q;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
const BIGNUM *RSA_get0_dmp1(const RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return r->dmp1;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
const BIGNUM *RSA_get0_dmq1(const RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return r->dmq1;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
const BIGNUM *RSA_get0_iqmp(const RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return r->iqmp;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
const RSA_PSS_PARAMS *RSA_get0_pss_params(const RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return r->pss;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
void RSA_clear_flags(RSA *r, int flags)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
r->flags &= ~flags;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_test_flags(const RSA *r, int flags)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return r->flags & flags;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
void RSA_set_flags(RSA *r, int flags)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
r->flags |= flags;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_get_version(RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
/* { two-prime(0), multi(1) } */
|
|
Packit |
c4476c |
return r->version;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
ENGINE *RSA_get0_engine(const RSA *r)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
return r->engine;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
int RSA_pkey_ctx_ctrl(EVP_PKEY_CTX *ctx, int optype, int cmd, int p1, void *p2)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
/* If key type not RSA or RSA-PSS return error */
|
|
Packit |
c4476c |
if (ctx != NULL && ctx->pmeth != NULL
|
|
Packit |
c4476c |
&& ctx->pmeth->pkey_id != EVP_PKEY_RSA
|
|
Packit |
c4476c |
&& ctx->pmeth->pkey_id != EVP_PKEY_RSA_PSS)
|
|
Packit |
c4476c |
return -1;
|
|
Packit |
c4476c |
return EVP_PKEY_CTX_ctrl(ctx, -1, optype, cmd, p1, p2);
|
|
Packit |
c4476c |
}
|