/src/openssl32/providers/common/provider_util.c
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved. |
3 | | * |
4 | | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | | * this file except in compliance with the License. You can obtain a copy |
6 | | * in the file LICENSE in the source distribution or at |
7 | | * https://www.openssl.org/source/license.html |
8 | | */ |
9 | | |
10 | | /* We need to use some engine deprecated APIs */ |
11 | | #define OPENSSL_SUPPRESS_DEPRECATED |
12 | | |
13 | | #include <openssl/evp.h> |
14 | | #include <openssl/core_names.h> |
15 | | #include <openssl/err.h> |
16 | | #include <openssl/proverr.h> |
17 | | #ifndef FIPS_MODULE |
18 | | # include <openssl/engine.h> |
19 | | # include "crypto/evp.h" |
20 | | #endif |
21 | | #include "prov/provider_util.h" |
22 | | |
23 | | void ossl_prov_cipher_reset(PROV_CIPHER *pc) |
24 | 7.21k | { |
25 | 7.21k | EVP_CIPHER_free(pc->alloc_cipher); |
26 | 7.21k | pc->alloc_cipher = NULL; |
27 | 7.21k | pc->cipher = NULL; |
28 | 7.21k | #if !defined(FIPS_MODULE) && !defined(OPENSSL_NO_ENGINE) |
29 | 7.21k | ENGINE_finish(pc->engine); |
30 | 7.21k | #endif |
31 | 7.21k | pc->engine = NULL; |
32 | 7.21k | } |
33 | | |
34 | | int ossl_prov_cipher_copy(PROV_CIPHER *dst, const PROV_CIPHER *src) |
35 | 0 | { |
36 | 0 | if (src->alloc_cipher != NULL && !EVP_CIPHER_up_ref(src->alloc_cipher)) |
37 | 0 | return 0; |
38 | 0 | #if !defined(FIPS_MODULE) && !defined(OPENSSL_NO_ENGINE) |
39 | 0 | if (src->engine != NULL && !ENGINE_init(src->engine)) { |
40 | 0 | EVP_CIPHER_free(src->alloc_cipher); |
41 | 0 | return 0; |
42 | 0 | } |
43 | 0 | #endif |
44 | 0 | dst->engine = src->engine; |
45 | 0 | dst->cipher = src->cipher; |
46 | 0 | dst->alloc_cipher = src->alloc_cipher; |
47 | 0 | return 1; |
48 | 0 | } |
49 | | |
50 | | static int load_common(const OSSL_PARAM params[], const char **propquery, |
51 | | ENGINE **engine) |
52 | 778k | { |
53 | 778k | const OSSL_PARAM *p; |
54 | | |
55 | 778k | *propquery = NULL; |
56 | 778k | p = OSSL_PARAM_locate_const(params, OSSL_ALG_PARAM_PROPERTIES); |
57 | 778k | if (p != NULL) { |
58 | 2.93k | if (p->data_type != OSSL_PARAM_UTF8_STRING) |
59 | 0 | return 0; |
60 | 2.93k | *propquery = p->data; |
61 | 2.93k | } |
62 | | |
63 | 778k | #if !defined(FIPS_MODULE) && !defined(OPENSSL_NO_ENGINE) |
64 | 778k | ENGINE_finish(*engine); |
65 | 778k | #endif |
66 | 778k | *engine = NULL; |
67 | | /* Inside the FIPS module, we don't support legacy ciphers */ |
68 | 778k | #if !defined(FIPS_MODULE) && !defined(OPENSSL_NO_ENGINE) |
69 | 778k | p = OSSL_PARAM_locate_const(params, OSSL_ALG_PARAM_ENGINE); |
70 | 778k | if (p != NULL) { |
71 | 0 | if (p->data_type != OSSL_PARAM_UTF8_STRING) |
72 | 0 | return 0; |
73 | | /* Get a structural reference */ |
74 | 0 | *engine = ENGINE_by_id(p->data); |
75 | 0 | if (*engine == NULL) |
76 | 0 | return 0; |
77 | | /* Get a functional reference */ |
78 | 0 | if (!ENGINE_init(*engine)) { |
79 | 0 | ENGINE_free(*engine); |
80 | 0 | *engine = NULL; |
81 | 0 | return 0; |
82 | 0 | } |
83 | | /* Free the structural reference */ |
84 | 0 | ENGINE_free(*engine); |
85 | 0 | } |
86 | 778k | #endif |
87 | 778k | return 1; |
88 | 778k | } |
89 | | |
90 | | int ossl_prov_cipher_load_from_params(PROV_CIPHER *pc, |
91 | | const OSSL_PARAM params[], |
92 | | OSSL_LIB_CTX *ctx) |
93 | 0 | { |
94 | 0 | const OSSL_PARAM *p; |
95 | 0 | const char *propquery; |
96 | |
|
97 | 0 | if (params == NULL) |
98 | 0 | return 1; |
99 | | |
100 | 0 | if (!load_common(params, &propquery, &pc->engine)) |
101 | 0 | return 0; |
102 | | |
103 | 0 | p = OSSL_PARAM_locate_const(params, OSSL_ALG_PARAM_CIPHER); |
104 | 0 | if (p == NULL) |
105 | 0 | return 1; |
106 | 0 | if (p->data_type != OSSL_PARAM_UTF8_STRING) |
107 | 0 | return 0; |
108 | | |
109 | 0 | EVP_CIPHER_free(pc->alloc_cipher); |
110 | 0 | ERR_set_mark(); |
111 | 0 | pc->cipher = pc->alloc_cipher = EVP_CIPHER_fetch(ctx, p->data, propquery); |
112 | 0 | #ifndef FIPS_MODULE /* Inside the FIPS module, we don't support legacy ciphers */ |
113 | 0 | if (pc->cipher == NULL) { |
114 | 0 | const EVP_CIPHER *cipher; |
115 | |
|
116 | 0 | cipher = EVP_get_cipherbyname(p->data); |
117 | | /* Do not use global EVP_CIPHERs */ |
118 | 0 | if (cipher != NULL && cipher->origin != EVP_ORIG_GLOBAL) |
119 | 0 | pc->cipher = cipher; |
120 | 0 | } |
121 | 0 | #endif |
122 | 0 | if (pc->cipher != NULL) |
123 | 0 | ERR_pop_to_mark(); |
124 | 0 | else |
125 | 0 | ERR_clear_last_mark(); |
126 | 0 | return pc->cipher != NULL; |
127 | 0 | } |
128 | | |
129 | | const EVP_CIPHER *ossl_prov_cipher_cipher(const PROV_CIPHER *pc) |
130 | 110 | { |
131 | 110 | return pc->cipher; |
132 | 110 | } |
133 | | |
134 | | ENGINE *ossl_prov_cipher_engine(const PROV_CIPHER *pc) |
135 | 86 | { |
136 | 86 | return pc->engine; |
137 | 86 | } |
138 | | |
139 | | void ossl_prov_digest_reset(PROV_DIGEST *pd) |
140 | 1.25M | { |
141 | 1.25M | EVP_MD_free(pd->alloc_md); |
142 | 1.25M | pd->alloc_md = NULL; |
143 | 1.25M | pd->md = NULL; |
144 | 1.25M | #if !defined(FIPS_MODULE) && !defined(OPENSSL_NO_ENGINE) |
145 | 1.25M | ENGINE_finish(pd->engine); |
146 | 1.25M | #endif |
147 | 1.25M | pd->engine = NULL; |
148 | 1.25M | } |
149 | | |
150 | | int ossl_prov_digest_copy(PROV_DIGEST *dst, const PROV_DIGEST *src) |
151 | 523k | { |
152 | 523k | if (src->alloc_md != NULL && !EVP_MD_up_ref(src->alloc_md)) |
153 | 0 | return 0; |
154 | 523k | #if !defined(FIPS_MODULE) && !defined(OPENSSL_NO_ENGINE) |
155 | 523k | if (src->engine != NULL && !ENGINE_init(src->engine)) { |
156 | 0 | EVP_MD_free(src->alloc_md); |
157 | 0 | return 0; |
158 | 0 | } |
159 | 523k | #endif |
160 | 523k | dst->engine = src->engine; |
161 | 523k | dst->md = src->md; |
162 | 523k | dst->alloc_md = src->alloc_md; |
163 | 523k | return 1; |
164 | 523k | } |
165 | | |
166 | | const EVP_MD *ossl_prov_digest_fetch(PROV_DIGEST *pd, OSSL_LIB_CTX *libctx, |
167 | | const char *mdname, const char *propquery) |
168 | 726k | { |
169 | 726k | EVP_MD_free(pd->alloc_md); |
170 | 726k | pd->md = pd->alloc_md = EVP_MD_fetch(libctx, mdname, propquery); |
171 | | |
172 | 726k | return pd->md; |
173 | 726k | } |
174 | | |
175 | | int ossl_prov_digest_load_from_params(PROV_DIGEST *pd, |
176 | | const OSSL_PARAM params[], |
177 | | OSSL_LIB_CTX *ctx) |
178 | 381k | { |
179 | 381k | const OSSL_PARAM *p; |
180 | 381k | const char *propquery; |
181 | | |
182 | 381k | if (params == NULL) |
183 | 0 | return 1; |
184 | | |
185 | 381k | if (!load_common(params, &propquery, &pd->engine)) |
186 | 0 | return 0; |
187 | | |
188 | 381k | p = OSSL_PARAM_locate_const(params, OSSL_ALG_PARAM_DIGEST); |
189 | 381k | if (p == NULL) |
190 | 15.1k | return 1; |
191 | 366k | if (p->data_type != OSSL_PARAM_UTF8_STRING) |
192 | 0 | return 0; |
193 | | |
194 | 366k | ERR_set_mark(); |
195 | 366k | ossl_prov_digest_fetch(pd, ctx, p->data, propquery); |
196 | 366k | #ifndef FIPS_MODULE /* Inside the FIPS module, we don't support legacy digests */ |
197 | 366k | if (pd->md == NULL) { |
198 | 3 | const EVP_MD *md; |
199 | | |
200 | 3 | md = EVP_get_digestbyname(p->data); |
201 | | /* Do not use global EVP_MDs */ |
202 | 3 | if (md != NULL && md->origin != EVP_ORIG_GLOBAL) |
203 | 0 | pd->md = md; |
204 | 3 | } |
205 | 366k | #endif |
206 | 366k | if (pd->md != NULL) |
207 | 366k | ERR_pop_to_mark(); |
208 | 3 | else |
209 | 3 | ERR_clear_last_mark(); |
210 | 366k | return pd->md != NULL; |
211 | 366k | } |
212 | | |
213 | | const EVP_MD *ossl_prov_digest_md(const PROV_DIGEST *pd) |
214 | 1.07M | { |
215 | 1.07M | return pd->md; |
216 | 1.07M | } |
217 | | |
218 | | ENGINE *ossl_prov_digest_engine(const PROV_DIGEST *pd) |
219 | 118k | { |
220 | 118k | return pd->engine; |
221 | 118k | } |
222 | | |
223 | | int ossl_prov_set_macctx(EVP_MAC_CTX *macctx, |
224 | | const OSSL_PARAM params[], |
225 | | const char *ciphername, |
226 | | const char *mdname, |
227 | | const char *engine, |
228 | | const char *properties, |
229 | | const unsigned char *key, |
230 | | size_t keylen) |
231 | 43.2k | { |
232 | 43.2k | const OSSL_PARAM *p; |
233 | 43.2k | OSSL_PARAM mac_params[6], *mp = mac_params; |
234 | | |
235 | 43.2k | if (params != NULL) { |
236 | 36.1k | if (mdname == NULL) { |
237 | 21.4k | if ((p = OSSL_PARAM_locate_const(params, |
238 | 21.4k | OSSL_ALG_PARAM_DIGEST)) != NULL) { |
239 | 21.4k | if (p->data_type != OSSL_PARAM_UTF8_STRING) |
240 | 0 | return 0; |
241 | 21.4k | mdname = p->data; |
242 | 21.4k | } |
243 | 21.4k | } |
244 | 36.1k | if (ciphername == NULL) { |
245 | 36.1k | if ((p = OSSL_PARAM_locate_const(params, |
246 | 36.1k | OSSL_ALG_PARAM_CIPHER)) != NULL) { |
247 | 83 | if (p->data_type != OSSL_PARAM_UTF8_STRING) |
248 | 0 | return 0; |
249 | 83 | ciphername = p->data; |
250 | 83 | } |
251 | 36.1k | } |
252 | 36.1k | if (engine == NULL) { |
253 | 36.1k | if ((p = OSSL_PARAM_locate_const(params, OSSL_ALG_PARAM_ENGINE)) |
254 | 36.1k | != NULL) { |
255 | 0 | if (p->data_type != OSSL_PARAM_UTF8_STRING) |
256 | 0 | return 0; |
257 | 0 | engine = p->data; |
258 | 0 | } |
259 | 36.1k | } |
260 | 36.1k | } |
261 | | |
262 | 43.2k | if (mdname != NULL) |
263 | 43.2k | *mp++ = OSSL_PARAM_construct_utf8_string(OSSL_MAC_PARAM_DIGEST, |
264 | 43.2k | (char *)mdname, 0); |
265 | 43.2k | if (ciphername != NULL) |
266 | 83 | *mp++ = OSSL_PARAM_construct_utf8_string(OSSL_MAC_PARAM_CIPHER, |
267 | 83 | (char *)ciphername, 0); |
268 | 43.2k | if (properties != NULL) |
269 | 1.57k | *mp++ = OSSL_PARAM_construct_utf8_string(OSSL_MAC_PARAM_PROPERTIES, |
270 | 1.57k | (char *)properties, 0); |
271 | | |
272 | 43.2k | #if !defined(OPENSSL_NO_ENGINE) && !defined(FIPS_MODULE) |
273 | 43.2k | if (engine != NULL) |
274 | 0 | *mp++ = OSSL_PARAM_construct_utf8_string(OSSL_ALG_PARAM_ENGINE, |
275 | 0 | (char *) engine, 0); |
276 | 43.2k | #endif |
277 | | |
278 | 43.2k | if (key != NULL) |
279 | 0 | *mp++ = OSSL_PARAM_construct_octet_string(OSSL_MAC_PARAM_KEY, |
280 | 0 | (unsigned char *)key, |
281 | 0 | keylen); |
282 | | |
283 | 43.2k | *mp = OSSL_PARAM_construct_end(); |
284 | | |
285 | 43.2k | return EVP_MAC_CTX_set_params(macctx, mac_params); |
286 | | |
287 | 43.2k | } |
288 | | |
289 | | int ossl_prov_macctx_load_from_params(EVP_MAC_CTX **macctx, |
290 | | const OSSL_PARAM params[], |
291 | | const char *macname, |
292 | | const char *ciphername, |
293 | | const char *mdname, |
294 | | OSSL_LIB_CTX *libctx) |
295 | 36.3k | { |
296 | 36.3k | const OSSL_PARAM *p; |
297 | 36.3k | const char *properties = NULL; |
298 | | |
299 | 36.3k | if (macname == NULL |
300 | 36.3k | && (p = OSSL_PARAM_locate_const(params, OSSL_ALG_PARAM_MAC)) != NULL) { |
301 | 192 | if (p->data_type != OSSL_PARAM_UTF8_STRING) |
302 | 0 | return 0; |
303 | 192 | macname = p->data; |
304 | 192 | } |
305 | 36.3k | if ((p = OSSL_PARAM_locate_const(params, |
306 | 36.3k | OSSL_ALG_PARAM_PROPERTIES)) != NULL) { |
307 | 1.77k | if (p->data_type != OSSL_PARAM_UTF8_STRING) |
308 | 0 | return 0; |
309 | 1.77k | properties = p->data; |
310 | 1.77k | } |
311 | | |
312 | | /* If we got a new mac name, we make a new EVP_MAC_CTX */ |
313 | 36.3k | if (macname != NULL) { |
314 | 36.3k | EVP_MAC *mac = EVP_MAC_fetch(libctx, macname, properties); |
315 | | |
316 | 36.3k | EVP_MAC_CTX_free(*macctx); |
317 | 36.3k | *macctx = mac == NULL ? NULL : EVP_MAC_CTX_new(mac); |
318 | | /* The context holds on to the MAC */ |
319 | 36.3k | EVP_MAC_free(mac); |
320 | 36.3k | if (*macctx == NULL) |
321 | 206 | return 0; |
322 | 36.3k | } |
323 | | |
324 | | /* |
325 | | * If there is no MAC yet (and therefore, no MAC context), we ignore |
326 | | * all other parameters. |
327 | | */ |
328 | 36.1k | if (*macctx == NULL) |
329 | 0 | return 1; |
330 | | |
331 | 36.1k | if (ossl_prov_set_macctx(*macctx, params, ciphername, mdname, NULL, |
332 | 36.1k | properties, NULL, 0)) |
333 | 35.6k | return 1; |
334 | | |
335 | 493 | EVP_MAC_CTX_free(*macctx); |
336 | 493 | *macctx = NULL; |
337 | 493 | return 0; |
338 | 36.1k | } |
339 | | |
340 | | void ossl_prov_cache_exported_algorithms(const OSSL_ALGORITHM_CAPABLE *in, |
341 | | OSSL_ALGORITHM *out) |
342 | 45 | { |
343 | 45 | int i, j; |
344 | | |
345 | 45 | if (out[0].algorithm_names == NULL) { |
346 | 5.87k | for (i = j = 0; in[i].alg.algorithm_names != NULL; ++i) { |
347 | 5.83k | if (in[i].capable == NULL || in[i].capable()) |
348 | 5.65k | out[j++] = in[i].alg; |
349 | 5.83k | } |
350 | 44 | out[j++] = in[i].alg; |
351 | 44 | } |
352 | 45 | } |
353 | | |
354 | | /* Duplicate a lump of memory safely */ |
355 | | int ossl_prov_memdup(const void *src, size_t src_len, |
356 | | unsigned char **dest, size_t *dest_len) |
357 | 0 | { |
358 | 0 | if (src != NULL) { |
359 | 0 | if ((*dest = OPENSSL_memdup(src, src_len)) == NULL) |
360 | 0 | return 0; |
361 | 0 | *dest_len = src_len; |
362 | 0 | } else { |
363 | 0 | *dest = NULL; |
364 | 0 | *dest_len = 0; |
365 | 0 | } |
366 | 0 | return 1; |
367 | 0 | } |