2 * Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the OpenSSL license (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 #include "internal/cryptlib.h"
12 #include <openssl/asn1t.h>
13 #include <openssl/bn.h>
16 * Custom primitive type for BIGNUM handling. This reads in an ASN1_INTEGER
17 * as a BIGNUM directly. Currently it ignores the sign which isn't a problem
18 * since all BIGNUMs used are non negative and anything that looks negative
19 * is normally due to an encoding error.
22 #define BN_SENSITIVE 1
24 static int bn_new(ASN1_VALUE **pval, const ASN1_ITEM *it);
25 static int bn_secure_new(ASN1_VALUE **pval, const ASN1_ITEM *it);
26 static void bn_free(ASN1_VALUE **pval, const ASN1_ITEM *it);
28 static int bn_i2c(ASN1_VALUE **pval, unsigned char *cont, int *putype,
30 static int bn_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
31 int utype, char *free_cont, const ASN1_ITEM *it);
32 static int bn_secure_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
33 int utype, char *free_cont, const ASN1_ITEM *it);
35 static ASN1_PRIMITIVE_FUNCS bignum_pf = {
44 static ASN1_PRIMITIVE_FUNCS cbignum_pf = {
53 ASN1_ITEM_start(BIGNUM)
54 ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &bignum_pf, 0, "BIGNUM"
57 ASN1_ITEM_start(CBIGNUM)
58 ASN1_ITYPE_PRIMITIVE, V_ASN1_INTEGER, NULL, 0, &cbignum_pf, BN_SENSITIVE, "CBIGNUM"
59 ASN1_ITEM_end(CBIGNUM)
61 static int bn_new(ASN1_VALUE **pval, const ASN1_ITEM *it)
63 *pval = (ASN1_VALUE *)BN_new();
70 static int bn_secure_new(ASN1_VALUE **pval, const ASN1_ITEM *it)
72 *pval = (ASN1_VALUE *)BN_secure_new();
79 static void bn_free(ASN1_VALUE **pval, const ASN1_ITEM *it)
83 if (it->size & BN_SENSITIVE)
84 BN_clear_free((BIGNUM *)*pval);
86 BN_free((BIGNUM *)*pval);
90 static int bn_i2c(ASN1_VALUE **pval, unsigned char *cont, int *putype,
98 /* If MSB set in an octet we need a padding byte */
99 if (BN_num_bits(bn) & 0x7)
108 return pad + BN_num_bytes(bn);
111 static int bn_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
112 int utype, char *free_cont, const ASN1_ITEM *it)
116 if (*pval == NULL && !bn_new(pval, it))
118 bn = (BIGNUM *)*pval;
119 if (!BN_bin2bn(cont, len, bn)) {
126 static int bn_secure_c2i(ASN1_VALUE **pval, const unsigned char *cont, int len,
127 int utype, char *free_cont, const ASN1_ITEM *it)
130 bn_secure_new(pval, it);
131 return bn_c2i(pval, cont, len, utype, free_cont, it);