/src/openssl/crypto/asn1/x_bignum.c
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved. |
3 | | * |
4 | | * Licensed under the OpenSSL license (the "License"). You may not use |
5 | | * this file except in compliance with the License. You can obtain a copy |
6 | | * in the file LICENSE in the source distribution or at |
7 | | * https://www.openssl.org/source/license.html |
8 | | */ |
9 | | |
10 | | #include <stdio.h> |
11 | | #include "internal/cryptlib.h" |
12 | | #include <openssl/asn1t.h> |
13 | | #include <openssl/bn.h> |
14 | | |
15 | | /* |
16 | | * Custom primitive type for BIGNUM handling. This reads in an ASN1_INTEGER |
17 | | * as a BIGNUM directly. Currently it ignores the sign which isn't a problem |
18 | | * since all BIGNUMs used are non negative and anything that looks negative |
19 | | * is normally due to an encoding error. |
20 | | */ |
21 | | |
22 | 5.93k | #define BN_SENSITIVE 1 |
23 | | |
24 | | static int bn_new(ASN1_VALUE **pval, const ASN1_ITEM *it); |
25 | | static int bn_secure_new(ASN1_VALUE **pval, const ASN1_ITEM *it); |
26 | | static void bn_free(ASN1_VALUE **pval, const ASN1_ITEM *it); |
27 | | |
28 | | static int bn_i2c(ASN1_VALUE **pval, unsigned char *cont, int *putype, |
29 | | const ASN1_ITEM *it); |
30 | | static int bn_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len, |
31 | | int utype, char *free_cont, const ASN1_ITEM *it); |
32 | | static int bn_secure_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len, |
33 | | int utype, char *free_cont, const ASN1_ITEM *it); |
34 | | static int bn_print(BIO *out, ASN1_VALUE **pval, const ASN1_ITEM *it, |
35 | | int indent, const ASN1_PCTX *pctx); |
36 | | |
37 | | static ASN1_PRIMITIVE_FUNCS bignum_pf = { |
38 | | NULL, 0, |
39 | | bn_new, |
40 | | bn_free, |
41 | | 0, |
42 | | bn_c2i, |
43 | | bn_i2c, |
44 | | bn_print |
45 | | }; |
46 | | |
47 | | static ASN1_PRIMITIVE_FUNCS cbignum_pf = { |
48 | | NULL, 0, |
49 | | bn_secure_new, |
50 | | bn_free, |
51 | | 0, |
52 | | bn_secure_c2i, |
53 | | bn_i2c, |
54 | | bn_print |
55 | | }; |
56 | | |
57 | | ASN1_ITEM_start(BIGNUM) |
58 | | ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &bignum_pf, 0, "BIGNUM" |
59 | | ASN1_ITEM_end(BIGNUM) |
60 | | |
61 | | ASN1_ITEM_start(CBIGNUM) |
62 | | ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &cbignum_pf, BN_SENSITIVE, "CBIGNUM" |
63 | | ASN1_ITEM_end(CBIGNUM) |
64 | | |
65 | | static int bn_new(ASN1_VALUE **pval, const ASN1_ITEM *it) |
66 | 393k | { |
67 | 393k | *pval = (ASN1_VALUE *)BN_new(); |
68 | 393k | if (*pval != NULL) |
69 | 393k | return 1; |
70 | 0 | else |
71 | 0 | return 0; |
72 | 393k | } |
73 | | |
74 | | static int bn_secure_new(ASN1_VALUE **pval, const ASN1_ITEM *it) |
75 | 1.20M | { |
76 | 1.20M | *pval = (ASN1_VALUE *)BN_secure_new(); |
77 | 1.20M | if (*pval != NULL) |
78 | 1.20M | return 1; |
79 | 0 | else |
80 | 0 | return 0; |
81 | 1.20M | } |
82 | | |
83 | | static void bn_free(ASN1_VALUE **pval, const ASN1_ITEM *it) |
84 | 5.93k | { |
85 | 5.93k | if (!*pval) |
86 | 0 | return; |
87 | 5.93k | if (it->size & BN_SENSITIVE) |
88 | 5.93k | BN_clear_free((BIGNUM *)*pval); |
89 | 0 | else |
90 | 0 | BN_free((BIGNUM *)*pval); |
91 | 5.93k | *pval = NULL; |
92 | 5.93k | } |
93 | | |
94 | | static int bn_i2c(ASN1_VALUE **pval, unsigned char *cont, int *putype, |
95 | | const ASN1_ITEM *it) |
96 | 34.0k | { |
97 | 34.0k | BIGNUM *bn; |
98 | 34.0k | int pad; |
99 | 34.0k | if (!*pval) |
100 | 0 | return -1; |
101 | 34.0k | bn = (BIGNUM *)*pval; |
102 | 34.0k | /* If MSB set in an octet we need a padding byte */ |
103 | 34.0k | if (BN_num_bits(bn) & 0x7) |
104 | 17.0k | pad = 0; |
105 | 17.0k | else |
106 | 17.0k | pad = 1; |
107 | 34.0k | if (cont) { |
108 | 8.51k | if (pad) |
109 | 4.26k | *cont++ = 0; |
110 | 8.51k | BN_bn2bin(bn, cont); |
111 | 8.51k | } |
112 | 34.0k | return pad + BN_num_bytes(bn); |
113 | 34.0k | } |
114 | | |
115 | | static int bn_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len, |
116 | | int utype, char *free_cont, const ASN1_ITEM *it) |
117 | 1.59M | { |
118 | 1.59M | BIGNUM *bn; |
119 | 1.59M | |
120 | 1.59M | if (*pval == NULL && !bn_new(pval, it)) |
121 | 0 | return 0; |
122 | 1.59M | bn = (BIGNUM *)*pval; |
123 | 1.59M | if (!BN_bin2bn(cont, len, bn)) { |
124 | 0 | bn_free(pval, it); |
125 | 0 | return 0; |
126 | 0 | } |
127 | 1.59M | return 1; |
128 | 1.59M | } |
129 | | |
130 | | static int bn_secure_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len, |
131 | | int utype, char *free_cont, const ASN1_ITEM *it) |
132 | 1.20M | { |
133 | 1.20M | if (!*pval) |
134 | 764k | bn_secure_new(pval, it); |
135 | 1.20M | return bn_c2i(pval, cont, len, utype, free_cont, it); |
136 | 1.20M | } |
137 | | |
138 | | static int bn_print(BIO *out, ASN1_VALUE **pval, const ASN1_ITEM *it, |
139 | | int indent, const ASN1_PCTX *pctx) |
140 | 0 | { |
141 | 0 | if (!BN_print(out, *(BIGNUM **)pval)) |
142 | 0 | return 0; |
143 | 0 | if (BIO_puts(out, "\n") <= 0) |
144 | 0 | return 0; |
145 | 0 | return 1; |
146 | 0 | } |