/*

 * Copyright (C) 2000-2012 Free Software Foundation, Inc.

 * Copyright (C) 2017 Red Hat, Inc.

 *

 * Author: Nikos Mavrogiannopoulos

 *

 * This file is part of GnuTLS.

 *

 * The GnuTLS is free software; you can redistribute it and/or

 * modify it under the terms of the GNU Lesser General Public License

 * as published by the Free Software Foundation; either version 2.1 of

 * the License, or (at your option) any later version.

 *

 * This library is distributed in the hope that it will be useful, but

 * WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU

 * Lesser General Public License for more details.

 *

 * You should have received a copy of the GNU Lesser General Public License

 * along with this program.  If not, see <https://www.gnu.org/licenses/>

 *

 */

/* This file contains everything for the Ephemeral Diffie-Hellman

 * (DHE) key exchange.  This is used in the handshake procedure of the

 * certificate authentication.

 */

#include "gnutls_int.h"

#include "auth.h"

#include "errors.h"

#include "dh.h"

#include "num.h"

#include "tls-sig.h"

#include "datum.h"

#include "algorithms.h"

#include "auth/cert.h"

#include "x509.h"

#include "state.h"

#include "auth/dh_common.h"

#include "auth/ecdhe.h"

static int gen_dhe_server_kx(gnutls_session_t, gnutls_buffer_st *);

static int proc_dhe_server_kx(gnutls_session_t, uint8_t *, size_t);

static int proc_dhe_client_kx(gnutls_session_t, uint8_t *, size_t);

#ifdef ENABLE_DHE

const mod_auth_st dhe_rsa_auth_struct = {

  "DHE_RSA",

  _gnutls_gen_cert_server_crt,

  _gnutls_gen_cert_client_crt,

  gen_dhe_server_kx,

  _gnutls_gen_dh_common_client_kx,

  _gnutls_gen_cert_client_crt_vrfy, /* gen client cert vrfy */

  _gnutls_gen_cert_server_cert_req, /* server cert request */

  _gnutls_proc_crt,

  _gnutls_proc_crt,

  proc_dhe_server_kx,

  proc_dhe_client_kx,

  _gnutls_proc_cert_client_crt_vrfy, /* proc client cert vrfy */

  _gnutls_proc_cert_cert_req /* proc server cert request */

};

const mod_auth_st dhe_dss_auth_struct = {

  "DHE_DSS",

  _gnutls_gen_cert_server_crt,

  _gnutls_gen_cert_client_crt,

  gen_dhe_server_kx,

  _gnutls_gen_dh_common_client_kx,

  _gnutls_gen_cert_client_crt_vrfy, /* gen client cert vrfy */

  _gnutls_gen_cert_server_cert_req, /* server cert request */

  _gnutls_proc_crt,

  _gnutls_proc_crt,

  proc_dhe_server_kx,

  proc_dhe_client_kx,

  _gnutls_proc_cert_client_crt_vrfy, /* proc client cert vrfy */

  _gnutls_proc_cert_cert_req /* proc server cert request */

};

#endif

static int gen_dhe_server_kx(gnutls_session_t session, gnutls_buffer_st *data)

{

  int ret = 0;

  gnutls_certificate_credentials_t cred;

  unsigned sig_pos;

  cred = (gnutls_certificate_credentials_t)_gnutls_get_cred(

    session, GNUTLS_CRD_CERTIFICATE);

  if (cred == NULL) {

    gnutls_assert();

    return GNUTLS_E_INSUFFICIENT_CREDENTIALS;

  }

  if ((ret = _gnutls_auth_info_init(session, GNUTLS_CRD_CERTIFICATE,

            sizeof(cert_auth_info_st), 1)) < 0) {

    gnutls_assert();

    return ret;

  }

  ret = _gnutls_figure_dh_params(session, cred->dh_params,

               cred->params_func, cred->dh_sec_param);

  if (ret < 0) {

    return gnutls_assert_val(ret);

  }

  sig_pos = data->length;

  ret = _gnutls_dh_common_print_server_kx(session, data);

  if (ret < 0) {

    gnutls_assert();

    return ret;

  }

  /* Generate the signature. */

  return _gnutls_gen_dhe_signature(session, data, &data->data[sig_pos],

           data->length - sig_pos);

}

static int proc_dhe_server_kx(gnutls_session_t session, uint8_t *data,

            size_t _data_size)

{

  gnutls_datum_t vdata;

  int ret;

  ret = _gnutls_proc_dh_common_server_kx(session, data, _data_size);

  if (ret < 0)

    return gnutls_assert_val(ret);

  vdata.data = data;

  vdata.size = ret;

  return _gnutls_proc_dhe_signature(session, data + ret, _data_size - ret,

            &vdata);

}

static int proc_dhe_client_kx(gnutls_session_t session, uint8_t *data,

            size_t _data_size)

{

  return _gnutls_proc_dh_common_client_kx(session, data, _data_size,

            NULL);

}