Coverage Report

Created: 2023-06-08 06:40

/src/openssl/crypto/ffc/ffc_key_validate.c
Line
Count
Source (jump to first uncovered line)
1
/*
2
 * Copyright 2019-2020 The OpenSSL Project Authors. All Rights Reserved.
3
 *
4
 * Licensed under the Apache License 2.0 (the "License").  You may not use
5
 * this file except in compliance with the License.  You can obtain a copy
6
 * in the file LICENSE in the source distribution or at
7
 * https://www.openssl.org/source/license.html
8
 */
9
10
#include "internal/ffc.h"
11
12
/*
13
 * See SP800-56Ar3 Section 5.6.2.3.1 : FFC Partial public key validation.
14
 * To only be used with ephemeral FFC public keys generated using the approved
15
 * safe-prime groups. (Checks that the public key is in the range [2, p - 1]
16
 *
17
 * ret contains 0 on success, or error flags (see FFC_ERROR_PUBKEY_TOO_SMALL)
18
 */
19
int ossl_ffc_validate_public_key_partial(const FFC_PARAMS *params,
20
                                         const BIGNUM *pub_key, int *ret)
21
0
{
22
0
    int ok = 0;
23
0
    BIGNUM *tmp = NULL;
24
0
    BN_CTX *ctx = NULL;
25
26
0
    *ret = 0;
27
0
    if (params == NULL || pub_key == NULL || params->p == NULL) {
28
0
        *ret = FFC_ERROR_PASSED_NULL_PARAM;
29
0
        return 0;
30
0
    }
31
32
0
    ctx = BN_CTX_new_ex(NULL);
33
0
    if (ctx == NULL)
34
0
        goto err;
35
36
0
    BN_CTX_start(ctx);
37
0
    tmp = BN_CTX_get(ctx);
38
    /* Step(1): Verify pub_key >= 2 */
39
0
    if (tmp == NULL
40
0
        || !BN_set_word(tmp, 1))
41
0
        goto err;
42
0
    if (BN_cmp(pub_key, tmp) <= 0) {
43
0
        *ret |= FFC_ERROR_PUBKEY_TOO_SMALL;
44
0
        goto err;
45
0
    }
46
    /* Step(1): Verify pub_key <=  p-2 */
47
0
    if (BN_copy(tmp, params->p) == NULL
48
0
        || !BN_sub_word(tmp, 1))
49
0
        goto err;
50
0
    if (BN_cmp(pub_key, tmp) >= 0) {
51
0
        *ret |= FFC_ERROR_PUBKEY_TOO_LARGE;
52
0
        goto err;
53
0
    }
54
0
    ok = 1;
55
0
 err:
56
0
    if (ctx != NULL) {
57
0
        BN_CTX_end(ctx);
58
0
        BN_CTX_free(ctx);
59
0
    }
60
0
    return ok;
61
0
}
62
63
/*
64
 * See SP800-56Ar3 Section 5.6.2.3.1 : FFC Full public key validation.
65
 */
66
int ossl_ffc_validate_public_key(const FFC_PARAMS *params,
67
                                 const BIGNUM *pub_key, int *ret)
68
0
{
69
0
    int ok = 0;
70
0
    BIGNUM *tmp = NULL;
71
0
    BN_CTX *ctx = NULL;
72
73
0
    if (!ossl_ffc_validate_public_key_partial(params, pub_key, ret))
74
0
        return 0;
75
76
0
    if (params->q != NULL) {
77
0
        ctx = BN_CTX_new_ex(NULL);
78
0
        if (ctx == NULL)
79
0
            goto err;
80
0
        BN_CTX_start(ctx);
81
0
        tmp = BN_CTX_get(ctx);
82
83
        /* Check pub_key^q == 1 mod p */
84
0
        if (tmp == NULL
85
0
            || !BN_mod_exp(tmp, pub_key, params->q, params->p, ctx))
86
0
            goto err;
87
0
        if (!BN_is_one(tmp)) {
88
0
            *ret |= FFC_ERROR_PUBKEY_INVALID;
89
0
            goto err;
90
0
        }
91
0
    }
92
93
0
    ok = 1;
94
0
 err:
95
0
    if (ctx != NULL) {
96
0
        BN_CTX_end(ctx);
97
0
        BN_CTX_free(ctx);
98
0
    }
99
0
    return ok;
100
0
}
101
102
/*
103
 * See SP800-56Ar3 Section 5.6.2.1.2: Owner assurance of Private key validity.
104
 * Verifies priv_key is in the range [1..upper-1]. The passed in value of upper
105
 * is normally params->q but can be 2^N for approved safe prime groups.
106
 * Note: This assumes that the domain parameters are valid.
107
 */
108
int ossl_ffc_validate_private_key(const BIGNUM *upper, const BIGNUM *priv,
109
                                  int *ret)
110
0
{
111
0
    int ok = 0;
112
113
0
    *ret = 0;
114
115
0
    if (priv == NULL || upper == NULL) {
116
0
        *ret = FFC_ERROR_PASSED_NULL_PARAM;
117
0
        goto err;
118
0
    }
119
0
    if (BN_cmp(priv, BN_value_one()) < 0) {
120
0
        *ret |= FFC_ERROR_PRIVKEY_TOO_SMALL;
121
0
        goto err;
122
0
    }
123
0
    if (BN_cmp(priv, upper) >= 0) {
124
0
        *ret |= FFC_ERROR_PRIVKEY_TOO_LARGE;
125
0
        goto err;
126
0
    }
127
0
    ok = 1;
128
0
err:
129
0
    return ok;
130
0
}