/src/openssl33/providers/implementations/signature/ecdsa_sig.c
Line | Count | Source |
1 | | /* |
2 | | * Copyright 2020-2023 The OpenSSL Project Authors. All Rights Reserved. |
3 | | * |
4 | | * Licensed under the Apache License 2.0 (the "License"). You may not use |
5 | | * this file except in compliance with the License. You can obtain a copy |
6 | | * in the file LICENSE in the source distribution or at |
7 | | * https://www.openssl.org/source/license.html |
8 | | */ |
9 | | |
10 | | /* |
11 | | * ECDSA low level APIs are deprecated for public use, but still ok for |
12 | | * internal use. |
13 | | */ |
14 | | #include "internal/deprecated.h" |
15 | | |
16 | | #include <string.h> /* memcpy */ |
17 | | #include <openssl/crypto.h> |
18 | | #include <openssl/core_dispatch.h> |
19 | | #include <openssl/core_names.h> |
20 | | #include <openssl/dsa.h> |
21 | | #include <openssl/params.h> |
22 | | #include <openssl/evp.h> |
23 | | #include <openssl/err.h> |
24 | | #include <openssl/proverr.h> |
25 | | #include "internal/nelem.h" |
26 | | #include "internal/sizes.h" |
27 | | #include "internal/cryptlib.h" |
28 | | #include "internal/deterministic_nonce.h" |
29 | | #include "prov/providercommon.h" |
30 | | #include "prov/implementations.h" |
31 | | #include "prov/provider_ctx.h" |
32 | | #include "prov/securitycheck.h" |
33 | | #include "crypto/ec.h" |
34 | | #include "prov/der_ec.h" |
35 | | |
36 | | static OSSL_FUNC_signature_newctx_fn ecdsa_newctx; |
37 | | static OSSL_FUNC_signature_sign_init_fn ecdsa_sign_init; |
38 | | static OSSL_FUNC_signature_verify_init_fn ecdsa_verify_init; |
39 | | static OSSL_FUNC_signature_sign_fn ecdsa_sign; |
40 | | static OSSL_FUNC_signature_verify_fn ecdsa_verify; |
41 | | static OSSL_FUNC_signature_digest_sign_init_fn ecdsa_digest_sign_init; |
42 | | static OSSL_FUNC_signature_digest_sign_update_fn ecdsa_digest_signverify_update; |
43 | | static OSSL_FUNC_signature_digest_sign_final_fn ecdsa_digest_sign_final; |
44 | | static OSSL_FUNC_signature_digest_verify_init_fn ecdsa_digest_verify_init; |
45 | | static OSSL_FUNC_signature_digest_verify_update_fn ecdsa_digest_signverify_update; |
46 | | static OSSL_FUNC_signature_digest_verify_final_fn ecdsa_digest_verify_final; |
47 | | static OSSL_FUNC_signature_freectx_fn ecdsa_freectx; |
48 | | static OSSL_FUNC_signature_dupctx_fn ecdsa_dupctx; |
49 | | static OSSL_FUNC_signature_get_ctx_params_fn ecdsa_get_ctx_params; |
50 | | static OSSL_FUNC_signature_gettable_ctx_params_fn ecdsa_gettable_ctx_params; |
51 | | static OSSL_FUNC_signature_set_ctx_params_fn ecdsa_set_ctx_params; |
52 | | static OSSL_FUNC_signature_settable_ctx_params_fn ecdsa_settable_ctx_params; |
53 | | static OSSL_FUNC_signature_get_ctx_md_params_fn ecdsa_get_ctx_md_params; |
54 | | static OSSL_FUNC_signature_gettable_ctx_md_params_fn ecdsa_gettable_ctx_md_params; |
55 | | static OSSL_FUNC_signature_set_ctx_md_params_fn ecdsa_set_ctx_md_params; |
56 | | static OSSL_FUNC_signature_settable_ctx_md_params_fn ecdsa_settable_ctx_md_params; |
57 | | |
58 | | /* |
59 | | * What's passed as an actual key is defined by the KEYMGMT interface. |
60 | | * We happen to know that our KEYMGMT simply passes DSA structures, so |
61 | | * we use that here too. |
62 | | */ |
63 | | |
64 | | typedef struct { |
65 | | OSSL_LIB_CTX *libctx; |
66 | | char *propq; |
67 | | EC_KEY *ec; |
68 | | char mdname[OSSL_MAX_NAME_SIZE]; |
69 | | |
70 | | /* |
71 | | * Flag to determine if the hash function can be changed (1) or not (0) |
72 | | * Because it's dangerous to change during a DigestSign or DigestVerify |
73 | | * operation, this flag is cleared by their Init function, and set again |
74 | | * by their Final function. |
75 | | */ |
76 | | unsigned int flag_allow_md : 1; |
77 | | |
78 | | /* The Algorithm Identifier of the combined signature algorithm */ |
79 | | unsigned char aid_buf[OSSL_MAX_ALGORITHM_ID_SIZE]; |
80 | | unsigned char *aid; |
81 | | size_t aid_len; |
82 | | size_t mdsize; |
83 | | int operation; |
84 | | |
85 | | EVP_MD *md; |
86 | | EVP_MD_CTX *mdctx; |
87 | | /* |
88 | | * Internally used to cache the results of calling the EC group |
89 | | * sign_setup() methods which are then passed to the sign operation. |
90 | | * This is used by CAVS failure tests to terminate a loop if the signature |
91 | | * is not valid. |
92 | | * This could of also been done with a simple flag. |
93 | | */ |
94 | | BIGNUM *kinv; |
95 | | BIGNUM *r; |
96 | | #if !defined(OPENSSL_NO_ACVP_TESTS) |
97 | | /* |
98 | | * This indicates that KAT (CAVS) test is running. Externally an app will |
99 | | * override the random callback such that the generated private key and k |
100 | | * are known. |
101 | | * Normal operation will loop to choose a new k if the signature is not |
102 | | * valid - but for this mode of operation it forces a failure instead. |
103 | | */ |
104 | | unsigned int kattest; |
105 | | #endif |
106 | | /* If this is set then the generated k is not random */ |
107 | | unsigned int nonce_type; |
108 | | } PROV_ECDSA_CTX; |
109 | | |
110 | | static void *ecdsa_newctx(void *provctx, const char *propq) |
111 | 19.4k | { |
112 | 19.4k | PROV_ECDSA_CTX *ctx; |
113 | | |
114 | 19.4k | if (!ossl_prov_is_running()) |
115 | 0 | return NULL; |
116 | | |
117 | 19.4k | ctx = OPENSSL_zalloc(sizeof(PROV_ECDSA_CTX)); |
118 | 19.4k | if (ctx == NULL) |
119 | 0 | return NULL; |
120 | | |
121 | 19.4k | ctx->flag_allow_md = 1; |
122 | 19.4k | ctx->libctx = PROV_LIBCTX_OF(provctx); |
123 | 19.4k | if (propq != NULL && (ctx->propq = OPENSSL_strdup(propq)) == NULL) { |
124 | 0 | OPENSSL_free(ctx); |
125 | 0 | ctx = NULL; |
126 | 0 | } |
127 | 19.4k | return ctx; |
128 | 19.4k | } |
129 | | |
130 | | static int ecdsa_signverify_init(void *vctx, void *ec, |
131 | | const OSSL_PARAM params[], int operation) |
132 | 6.40k | { |
133 | 6.40k | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
134 | | |
135 | 6.40k | if (!ossl_prov_is_running() |
136 | 6.40k | || ctx == NULL) |
137 | 0 | return 0; |
138 | | |
139 | 6.40k | if (ec == NULL && ctx->ec == NULL) { |
140 | 0 | ERR_raise(ERR_LIB_PROV, PROV_R_NO_KEY_SET); |
141 | 0 | return 0; |
142 | 0 | } |
143 | | |
144 | 6.40k | if (ec != NULL) { |
145 | 6.40k | if (!ossl_ec_check_key(ctx->libctx, ec, operation == EVP_PKEY_OP_SIGN)) |
146 | 0 | return 0; |
147 | 6.40k | if (!EC_KEY_up_ref(ec)) |
148 | 0 | return 0; |
149 | 6.40k | EC_KEY_free(ctx->ec); |
150 | 6.40k | ctx->ec = ec; |
151 | 6.40k | } |
152 | | |
153 | 6.40k | ctx->operation = operation; |
154 | | |
155 | 6.40k | if (!ecdsa_set_ctx_params(ctx, params)) |
156 | 0 | return 0; |
157 | | |
158 | 6.40k | return 1; |
159 | 6.40k | } |
160 | | |
161 | | static int ecdsa_sign_init(void *vctx, void *ec, const OSSL_PARAM params[]) |
162 | 0 | { |
163 | 0 | return ecdsa_signverify_init(vctx, ec, params, EVP_PKEY_OP_SIGN); |
164 | 0 | } |
165 | | |
166 | | static int ecdsa_verify_init(void *vctx, void *ec, const OSSL_PARAM params[]) |
167 | 0 | { |
168 | 0 | return ecdsa_signverify_init(vctx, ec, params, EVP_PKEY_OP_VERIFY); |
169 | 0 | } |
170 | | |
171 | | static int ecdsa_sign(void *vctx, unsigned char *sig, size_t *siglen, |
172 | | size_t sigsize, const unsigned char *tbs, size_t tbslen) |
173 | 2.85k | { |
174 | 2.85k | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
175 | 2.85k | int ret; |
176 | 2.85k | unsigned int sltmp; |
177 | 2.85k | size_t ecsize = ECDSA_size(ctx->ec); |
178 | | |
179 | 2.85k | if (!ossl_prov_is_running()) |
180 | 0 | return 0; |
181 | | |
182 | 2.85k | if (sig == NULL) { |
183 | 1.42k | *siglen = ecsize; |
184 | 1.42k | return 1; |
185 | 1.42k | } |
186 | | |
187 | | #if !defined(OPENSSL_NO_ACVP_TESTS) |
188 | | if (ctx->kattest && !ECDSA_sign_setup(ctx->ec, NULL, &ctx->kinv, &ctx->r)) |
189 | | return 0; |
190 | | #endif |
191 | | |
192 | 1.42k | if (sigsize < (size_t)ecsize) |
193 | 0 | return 0; |
194 | | |
195 | 1.42k | if (ctx->mdsize != 0 && tbslen != ctx->mdsize) |
196 | 0 | return 0; |
197 | | |
198 | 1.42k | if (ctx->nonce_type != 0) { |
199 | 0 | const char *mdname = NULL; |
200 | |
|
201 | 0 | if (ctx->mdname[0] != '\0') |
202 | 0 | mdname = ctx->mdname; |
203 | 0 | ret = ossl_ecdsa_deterministic_sign(tbs, tbslen, sig, &sltmp, |
204 | 0 | ctx->ec, ctx->nonce_type, |
205 | 0 | mdname, |
206 | 0 | ctx->libctx, ctx->propq); |
207 | 1.42k | } else { |
208 | 1.42k | ret = ECDSA_sign_ex(0, tbs, tbslen, sig, &sltmp, ctx->kinv, ctx->r, |
209 | 1.42k | ctx->ec); |
210 | 1.42k | } |
211 | 1.42k | if (ret <= 0) |
212 | 0 | return 0; |
213 | | |
214 | 1.42k | *siglen = sltmp; |
215 | 1.42k | return 1; |
216 | 1.42k | } |
217 | | |
218 | | static int ecdsa_verify(void *vctx, const unsigned char *sig, size_t siglen, |
219 | | const unsigned char *tbs, size_t tbslen) |
220 | 874 | { |
221 | 874 | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
222 | | |
223 | 874 | if (!ossl_prov_is_running() || (ctx->mdsize != 0 && tbslen != ctx->mdsize)) |
224 | 0 | return 0; |
225 | | |
226 | 874 | return ECDSA_verify(0, tbs, tbslen, sig, siglen, ctx->ec); |
227 | 874 | } |
228 | | |
229 | | static int ecdsa_setup_md(PROV_ECDSA_CTX *ctx, const char *mdname, |
230 | | const char *mdprops) |
231 | 6.40k | { |
232 | 6.40k | EVP_MD *md = NULL; |
233 | 6.40k | size_t mdname_len; |
234 | 6.40k | int md_nid, sha1_allowed; |
235 | 6.40k | WPACKET pkt; |
236 | | |
237 | 6.40k | if (mdname == NULL) |
238 | 0 | return 1; |
239 | | |
240 | 6.40k | mdname_len = strlen(mdname); |
241 | 6.40k | if (mdname_len >= sizeof(ctx->mdname)) { |
242 | 0 | ERR_raise_data(ERR_LIB_PROV, PROV_R_INVALID_DIGEST, |
243 | 0 | "%s exceeds name buffer length", mdname); |
244 | 0 | return 0; |
245 | 0 | } |
246 | 6.40k | if (mdprops == NULL) |
247 | 6.40k | mdprops = ctx->propq; |
248 | 6.40k | md = EVP_MD_fetch(ctx->libctx, mdname, mdprops); |
249 | 6.40k | if (md == NULL) { |
250 | 0 | ERR_raise_data(ERR_LIB_PROV, PROV_R_INVALID_DIGEST, |
251 | 0 | "%s could not be fetched", mdname); |
252 | 0 | return 0; |
253 | 0 | } |
254 | 6.40k | sha1_allowed = (ctx->operation != EVP_PKEY_OP_SIGN); |
255 | 6.40k | md_nid = ossl_digest_get_approved_nid_with_sha1(ctx->libctx, md, |
256 | 6.40k | sha1_allowed); |
257 | 6.40k | if (md_nid < 0) { |
258 | 0 | ERR_raise_data(ERR_LIB_PROV, PROV_R_DIGEST_NOT_ALLOWED, |
259 | 0 | "digest=%s", mdname); |
260 | 0 | EVP_MD_free(md); |
261 | 0 | return 0; |
262 | 0 | } |
263 | | |
264 | 6.40k | if (!ctx->flag_allow_md) { |
265 | 0 | if (ctx->mdname[0] != '\0' && !EVP_MD_is_a(md, ctx->mdname)) { |
266 | 0 | ERR_raise_data(ERR_LIB_PROV, PROV_R_DIGEST_NOT_ALLOWED, |
267 | 0 | "digest %s != %s", mdname, ctx->mdname); |
268 | 0 | EVP_MD_free(md); |
269 | 0 | return 0; |
270 | 0 | } |
271 | 0 | EVP_MD_free(md); |
272 | 0 | return 1; |
273 | 0 | } |
274 | | |
275 | 6.40k | EVP_MD_CTX_free(ctx->mdctx); |
276 | 6.40k | EVP_MD_free(ctx->md); |
277 | | |
278 | 6.40k | ctx->aid_len = 0; |
279 | 6.40k | if (WPACKET_init_der(&pkt, ctx->aid_buf, sizeof(ctx->aid_buf)) |
280 | 6.40k | && ossl_DER_w_algorithmIdentifier_ECDSA_with_MD(&pkt, -1, ctx->ec, |
281 | 6.40k | md_nid) |
282 | 6.40k | && WPACKET_finish(&pkt)) { |
283 | 6.40k | WPACKET_get_total_written(&pkt, &ctx->aid_len); |
284 | 6.40k | ctx->aid = WPACKET_get_curr(&pkt); |
285 | 6.40k | } |
286 | 6.40k | WPACKET_cleanup(&pkt); |
287 | 6.40k | ctx->mdctx = NULL; |
288 | 6.40k | ctx->md = md; |
289 | 6.40k | ctx->mdsize = EVP_MD_get_size(ctx->md); |
290 | 6.40k | OPENSSL_strlcpy(ctx->mdname, mdname, sizeof(ctx->mdname)); |
291 | | |
292 | 6.40k | return 1; |
293 | 6.40k | } |
294 | | |
295 | | static int ecdsa_digest_signverify_init(void *vctx, const char *mdname, |
296 | | void *ec, const OSSL_PARAM params[], |
297 | | int operation) |
298 | 6.40k | { |
299 | 6.40k | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
300 | | |
301 | 6.40k | if (!ossl_prov_is_running()) |
302 | 0 | return 0; |
303 | | |
304 | 6.40k | if (!ecdsa_signverify_init(vctx, ec, params, operation) |
305 | 6.40k | || !ecdsa_setup_md(ctx, mdname, NULL)) |
306 | 0 | return 0; |
307 | | |
308 | 6.40k | ctx->flag_allow_md = 0; |
309 | | |
310 | 6.40k | if (ctx->mdctx == NULL) { |
311 | 6.40k | ctx->mdctx = EVP_MD_CTX_new(); |
312 | 6.40k | if (ctx->mdctx == NULL) |
313 | 0 | goto error; |
314 | 6.40k | } |
315 | | |
316 | 6.40k | if (!EVP_DigestInit_ex2(ctx->mdctx, ctx->md, params)) |
317 | 0 | goto error; |
318 | 6.40k | return 1; |
319 | 0 | error: |
320 | 0 | EVP_MD_CTX_free(ctx->mdctx); |
321 | 0 | ctx->mdctx = NULL; |
322 | 0 | return 0; |
323 | 6.40k | } |
324 | | |
325 | | static int ecdsa_digest_sign_init(void *vctx, const char *mdname, void *ec, |
326 | | const OSSL_PARAM params[]) |
327 | 17.0k | { |
328 | 17.0k | return ecdsa_digest_signverify_init(vctx, mdname, ec, params, |
329 | 17.0k | EVP_PKEY_OP_SIGN); |
330 | 17.0k | } |
331 | | |
332 | | static int ecdsa_digest_verify_init(void *vctx, const char *mdname, void *ec, |
333 | | const OSSL_PARAM params[]) |
334 | 2.40k | { |
335 | 2.40k | return ecdsa_digest_signverify_init(vctx, mdname, ec, params, |
336 | 2.40k | EVP_PKEY_OP_VERIFY); |
337 | 2.40k | } |
338 | | |
339 | | int ecdsa_digest_signverify_update(void *vctx, const unsigned char *data, |
340 | | size_t datalen) |
341 | 2.96k | { |
342 | 2.96k | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
343 | | |
344 | 2.96k | if (ctx == NULL || ctx->mdctx == NULL) |
345 | 0 | return 0; |
346 | | |
347 | 2.96k | return EVP_DigestUpdate(ctx->mdctx, data, datalen); |
348 | 2.96k | } |
349 | | |
350 | | int ecdsa_digest_sign_final(void *vctx, unsigned char *sig, size_t *siglen, |
351 | | size_t sigsize) |
352 | 4.18k | { |
353 | 4.18k | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
354 | 4.18k | unsigned char digest[EVP_MAX_MD_SIZE]; |
355 | 4.18k | unsigned int dlen = 0; |
356 | | |
357 | 4.18k | if (!ossl_prov_is_running() || ctx == NULL || ctx->mdctx == NULL) |
358 | 0 | return 0; |
359 | | |
360 | | /* |
361 | | * If sig is NULL then we're just finding out the sig size. Other fields |
362 | | * are ignored. Defer to ecdsa_sign. |
363 | | */ |
364 | 4.18k | if (sig != NULL |
365 | 2.09k | && !EVP_DigestFinal_ex(ctx->mdctx, digest, &dlen)) |
366 | 0 | return 0; |
367 | 4.18k | ctx->flag_allow_md = 1; |
368 | 4.18k | return ecdsa_sign(vctx, sig, siglen, sigsize, digest, (size_t)dlen); |
369 | 4.18k | } |
370 | | |
371 | | int ecdsa_digest_verify_final(void *vctx, const unsigned char *sig, |
372 | | size_t siglen) |
373 | 874 | { |
374 | 874 | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
375 | 874 | unsigned char digest[EVP_MAX_MD_SIZE]; |
376 | 874 | unsigned int dlen = 0; |
377 | | |
378 | 874 | if (!ossl_prov_is_running() || ctx == NULL || ctx->mdctx == NULL) |
379 | 0 | return 0; |
380 | | |
381 | 874 | if (!EVP_DigestFinal_ex(ctx->mdctx, digest, &dlen)) |
382 | 0 | return 0; |
383 | 874 | ctx->flag_allow_md = 1; |
384 | 874 | return ecdsa_verify(ctx, sig, siglen, digest, (size_t)dlen); |
385 | 874 | } |
386 | | |
387 | | static void ecdsa_freectx(void *vctx) |
388 | 28.4k | { |
389 | 28.4k | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
390 | | |
391 | 28.4k | OPENSSL_free(ctx->propq); |
392 | 28.4k | EVP_MD_CTX_free(ctx->mdctx); |
393 | 28.4k | EVP_MD_free(ctx->md); |
394 | 28.4k | ctx->propq = NULL; |
395 | 28.4k | ctx->mdctx = NULL; |
396 | 28.4k | ctx->md = NULL; |
397 | 28.4k | ctx->mdsize = 0; |
398 | 28.4k | EC_KEY_free(ctx->ec); |
399 | 28.4k | BN_clear_free(ctx->kinv); |
400 | 28.4k | BN_clear_free(ctx->r); |
401 | 28.4k | OPENSSL_free(ctx); |
402 | 28.4k | } |
403 | | |
404 | | static void *ecdsa_dupctx(void *vctx) |
405 | 2.96k | { |
406 | 2.96k | PROV_ECDSA_CTX *srcctx = (PROV_ECDSA_CTX *)vctx; |
407 | 2.96k | PROV_ECDSA_CTX *dstctx; |
408 | | |
409 | | /* Test KATS should not need to be supported */ |
410 | 2.96k | if (!ossl_prov_is_running() |
411 | 2.96k | || srcctx->kinv != NULL |
412 | 2.96k | || srcctx->r != NULL |
413 | 2.96k | || (dstctx = OPENSSL_memdup(srcctx, sizeof(*srcctx))) == NULL) |
414 | 0 | return NULL; |
415 | | |
416 | 2.96k | dstctx->ec = NULL; |
417 | 2.96k | dstctx->md = NULL; |
418 | 2.96k | dstctx->mdctx = NULL; |
419 | 2.96k | dstctx->propq = NULL; |
420 | | |
421 | 2.96k | if (srcctx->ec != NULL && !EC_KEY_up_ref(srcctx->ec)) |
422 | 0 | goto err; |
423 | 2.96k | dstctx->ec = srcctx->ec; |
424 | | |
425 | 2.96k | if (srcctx->md != NULL && !EVP_MD_up_ref(srcctx->md)) |
426 | 0 | goto err; |
427 | 2.96k | dstctx->md = srcctx->md; |
428 | | |
429 | 2.96k | if (srcctx->mdctx != NULL |
430 | 2.96k | && ((dstctx->mdctx = EVP_MD_CTX_new()) == NULL |
431 | 2.96k | || !EVP_MD_CTX_copy_ex(dstctx->mdctx, srcctx->mdctx))) |
432 | 0 | goto err; |
433 | 2.96k | if (srcctx->propq != NULL |
434 | 0 | && (dstctx->propq = OPENSSL_strdup(srcctx->propq)) == NULL) |
435 | 0 | goto err; |
436 | | |
437 | 2.96k | return dstctx; |
438 | 0 | err: |
439 | 0 | ecdsa_freectx(dstctx); |
440 | 0 | return NULL; |
441 | 2.96k | } |
442 | | |
443 | | static int ecdsa_get_ctx_params(void *vctx, OSSL_PARAM *params) |
444 | 0 | { |
445 | 0 | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
446 | 0 | OSSL_PARAM *p; |
447 | |
|
448 | 0 | if (ctx == NULL) |
449 | 0 | return 0; |
450 | | |
451 | 0 | p = OSSL_PARAM_locate(params, OSSL_SIGNATURE_PARAM_ALGORITHM_ID); |
452 | 0 | if (p != NULL && !OSSL_PARAM_set_octet_string(p, ctx->aid, ctx->aid_len)) |
453 | 0 | return 0; |
454 | | |
455 | 0 | p = OSSL_PARAM_locate(params, OSSL_SIGNATURE_PARAM_DIGEST_SIZE); |
456 | 0 | if (p != NULL && !OSSL_PARAM_set_size_t(p, ctx->mdsize)) |
457 | 0 | return 0; |
458 | | |
459 | 0 | p = OSSL_PARAM_locate(params, OSSL_SIGNATURE_PARAM_DIGEST); |
460 | 0 | if (p != NULL && !OSSL_PARAM_set_utf8_string(p, ctx->md == NULL ? ctx->mdname : EVP_MD_get0_name(ctx->md))) |
461 | 0 | return 0; |
462 | | |
463 | 0 | p = OSSL_PARAM_locate(params, OSSL_SIGNATURE_PARAM_NONCE_TYPE); |
464 | 0 | if (p != NULL && !OSSL_PARAM_set_uint(p, ctx->nonce_type)) |
465 | 0 | return 0; |
466 | | |
467 | 0 | return 1; |
468 | 0 | } |
469 | | |
470 | | static const OSSL_PARAM known_gettable_ctx_params[] = { |
471 | | OSSL_PARAM_octet_string(OSSL_SIGNATURE_PARAM_ALGORITHM_ID, NULL, 0), |
472 | | OSSL_PARAM_size_t(OSSL_SIGNATURE_PARAM_DIGEST_SIZE, NULL), |
473 | | OSSL_PARAM_utf8_string(OSSL_SIGNATURE_PARAM_DIGEST, NULL, 0), |
474 | | OSSL_PARAM_uint(OSSL_SIGNATURE_PARAM_NONCE_TYPE, NULL), |
475 | | OSSL_PARAM_END |
476 | | }; |
477 | | |
478 | | static const OSSL_PARAM *ecdsa_gettable_ctx_params(ossl_unused void *vctx, |
479 | | ossl_unused void *provctx) |
480 | 0 | { |
481 | 0 | return known_gettable_ctx_params; |
482 | 0 | } |
483 | | |
484 | | static int ecdsa_set_ctx_params(void *vctx, const OSSL_PARAM params[]) |
485 | 3.39k | { |
486 | 3.39k | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
487 | 3.39k | const OSSL_PARAM *p; |
488 | 3.39k | size_t mdsize = 0; |
489 | | |
490 | 3.39k | if (ctx == NULL) |
491 | 0 | return 0; |
492 | 3.39k | if (params == NULL) |
493 | 3.39k | return 1; |
494 | | |
495 | | #if !defined(OPENSSL_NO_ACVP_TESTS) |
496 | | p = OSSL_PARAM_locate_const(params, OSSL_SIGNATURE_PARAM_KAT); |
497 | | if (p != NULL && !OSSL_PARAM_get_uint(p, &ctx->kattest)) |
498 | | return 0; |
499 | | #endif |
500 | | |
501 | 0 | p = OSSL_PARAM_locate_const(params, OSSL_SIGNATURE_PARAM_DIGEST); |
502 | 0 | if (p != NULL) { |
503 | 0 | char mdname[OSSL_MAX_NAME_SIZE] = "", *pmdname = mdname; |
504 | 0 | char mdprops[OSSL_MAX_PROPQUERY_SIZE] = "", *pmdprops = mdprops; |
505 | 0 | const OSSL_PARAM *propsp = OSSL_PARAM_locate_const(params, |
506 | 0 | OSSL_SIGNATURE_PARAM_PROPERTIES); |
507 | |
|
508 | 0 | if (!OSSL_PARAM_get_utf8_string(p, &pmdname, sizeof(mdname))) |
509 | 0 | return 0; |
510 | 0 | if (propsp != NULL |
511 | 0 | && !OSSL_PARAM_get_utf8_string(propsp, &pmdprops, sizeof(mdprops))) |
512 | 0 | return 0; |
513 | 0 | if (!ecdsa_setup_md(ctx, mdname, mdprops)) |
514 | 0 | return 0; |
515 | 0 | } |
516 | | |
517 | 0 | p = OSSL_PARAM_locate_const(params, OSSL_SIGNATURE_PARAM_DIGEST_SIZE); |
518 | 0 | if (p != NULL) { |
519 | 0 | if (!OSSL_PARAM_get_size_t(p, &mdsize) |
520 | 0 | || (!ctx->flag_allow_md && mdsize != ctx->mdsize)) |
521 | 0 | return 0; |
522 | 0 | ctx->mdsize = mdsize; |
523 | 0 | } |
524 | 0 | p = OSSL_PARAM_locate_const(params, OSSL_SIGNATURE_PARAM_NONCE_TYPE); |
525 | 0 | if (p != NULL |
526 | 0 | && !OSSL_PARAM_get_uint(p, &ctx->nonce_type)) |
527 | 0 | return 0; |
528 | | |
529 | 0 | return 1; |
530 | 0 | } |
531 | | |
532 | | static const OSSL_PARAM settable_ctx_params[] = { |
533 | | OSSL_PARAM_utf8_string(OSSL_SIGNATURE_PARAM_DIGEST, NULL, 0), |
534 | | OSSL_PARAM_size_t(OSSL_SIGNATURE_PARAM_DIGEST_SIZE, NULL), |
535 | | OSSL_PARAM_utf8_string(OSSL_SIGNATURE_PARAM_PROPERTIES, NULL, 0), |
536 | | OSSL_PARAM_uint(OSSL_SIGNATURE_PARAM_KAT, NULL), |
537 | | OSSL_PARAM_uint(OSSL_SIGNATURE_PARAM_NONCE_TYPE, NULL), |
538 | | OSSL_PARAM_END |
539 | | }; |
540 | | |
541 | | static const OSSL_PARAM *ecdsa_settable_ctx_params(void *vctx, |
542 | | ossl_unused void *provctx) |
543 | 5 | { |
544 | 5 | return settable_ctx_params; |
545 | 5 | } |
546 | | |
547 | | static int ecdsa_get_ctx_md_params(void *vctx, OSSL_PARAM *params) |
548 | 0 | { |
549 | 0 | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
550 | |
|
551 | 0 | if (ctx->mdctx == NULL) |
552 | 0 | return 0; |
553 | | |
554 | 0 | return EVP_MD_CTX_get_params(ctx->mdctx, params); |
555 | 0 | } |
556 | | |
557 | | static const OSSL_PARAM *ecdsa_gettable_ctx_md_params(void *vctx) |
558 | 0 | { |
559 | 0 | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
560 | |
|
561 | 0 | if (ctx->md == NULL) |
562 | 0 | return 0; |
563 | | |
564 | 0 | return EVP_MD_gettable_ctx_params(ctx->md); |
565 | 0 | } |
566 | | |
567 | | static int ecdsa_set_ctx_md_params(void *vctx, const OSSL_PARAM params[]) |
568 | 0 | { |
569 | 0 | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
570 | |
|
571 | 0 | if (ctx->mdctx == NULL) |
572 | 0 | return 0; |
573 | | |
574 | 0 | return EVP_MD_CTX_set_params(ctx->mdctx, params); |
575 | 0 | } |
576 | | |
577 | | static const OSSL_PARAM *ecdsa_settable_ctx_md_params(void *vctx) |
578 | 0 | { |
579 | 0 | PROV_ECDSA_CTX *ctx = (PROV_ECDSA_CTX *)vctx; |
580 | |
|
581 | 0 | if (ctx->md == NULL) |
582 | 0 | return 0; |
583 | | |
584 | 0 | return EVP_MD_settable_ctx_params(ctx->md); |
585 | 0 | } |
586 | | |
587 | | const OSSL_DISPATCH ossl_ecdsa_signature_functions[] = { |
588 | | { OSSL_FUNC_SIGNATURE_NEWCTX, (void (*)(void))ecdsa_newctx }, |
589 | | { OSSL_FUNC_SIGNATURE_SIGN_INIT, (void (*)(void))ecdsa_sign_init }, |
590 | | { OSSL_FUNC_SIGNATURE_SIGN, (void (*)(void))ecdsa_sign }, |
591 | | { OSSL_FUNC_SIGNATURE_VERIFY_INIT, (void (*)(void))ecdsa_verify_init }, |
592 | | { OSSL_FUNC_SIGNATURE_VERIFY, (void (*)(void))ecdsa_verify }, |
593 | | { OSSL_FUNC_SIGNATURE_DIGEST_SIGN_INIT, |
594 | | (void (*)(void))ecdsa_digest_sign_init }, |
595 | | { OSSL_FUNC_SIGNATURE_DIGEST_SIGN_UPDATE, |
596 | | (void (*)(void))ecdsa_digest_signverify_update }, |
597 | | { OSSL_FUNC_SIGNATURE_DIGEST_SIGN_FINAL, |
598 | | (void (*)(void))ecdsa_digest_sign_final }, |
599 | | { OSSL_FUNC_SIGNATURE_DIGEST_VERIFY_INIT, |
600 | | (void (*)(void))ecdsa_digest_verify_init }, |
601 | | { OSSL_FUNC_SIGNATURE_DIGEST_VERIFY_UPDATE, |
602 | | (void (*)(void))ecdsa_digest_signverify_update }, |
603 | | { OSSL_FUNC_SIGNATURE_DIGEST_VERIFY_FINAL, |
604 | | (void (*)(void))ecdsa_digest_verify_final }, |
605 | | { OSSL_FUNC_SIGNATURE_FREECTX, (void (*)(void))ecdsa_freectx }, |
606 | | { OSSL_FUNC_SIGNATURE_DUPCTX, (void (*)(void))ecdsa_dupctx }, |
607 | | { OSSL_FUNC_SIGNATURE_GET_CTX_PARAMS, (void (*)(void))ecdsa_get_ctx_params }, |
608 | | { OSSL_FUNC_SIGNATURE_GETTABLE_CTX_PARAMS, |
609 | | (void (*)(void))ecdsa_gettable_ctx_params }, |
610 | | { OSSL_FUNC_SIGNATURE_SET_CTX_PARAMS, (void (*)(void))ecdsa_set_ctx_params }, |
611 | | { OSSL_FUNC_SIGNATURE_SETTABLE_CTX_PARAMS, |
612 | | (void (*)(void))ecdsa_settable_ctx_params }, |
613 | | { OSSL_FUNC_SIGNATURE_GET_CTX_MD_PARAMS, |
614 | | (void (*)(void))ecdsa_get_ctx_md_params }, |
615 | | { OSSL_FUNC_SIGNATURE_GETTABLE_CTX_MD_PARAMS, |
616 | | (void (*)(void))ecdsa_gettable_ctx_md_params }, |
617 | | { OSSL_FUNC_SIGNATURE_SET_CTX_MD_PARAMS, |
618 | | (void (*)(void))ecdsa_set_ctx_md_params }, |
619 | | { OSSL_FUNC_SIGNATURE_SETTABLE_CTX_MD_PARAMS, |
620 | | (void (*)(void))ecdsa_settable_ctx_md_params }, |
621 | | OSSL_DISPATCH_END |
622 | | }; |