2 * Copyright 2020 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 #include <openssl/core_numbers.h>
12 #include <openssl/core_names.h>
13 #include <openssl/params.h>
14 #include "internal/param_build.h"
15 #include "crypto/ecx.h"
16 #include "prov/implementations.h"
17 #include "prov/providercommon.h"
19 static OSSL_OP_keymgmt_new_fn x25519_new_key;
20 static OSSL_OP_keymgmt_new_fn x448_new_key;
21 static OSSL_OP_keymgmt_new_fn ed25519_new_key;
22 static OSSL_OP_keymgmt_new_fn ed448_new_key;
23 static OSSL_OP_keymgmt_get_params_fn x25519_get_params;
24 static OSSL_OP_keymgmt_get_params_fn x448_get_params;
25 static OSSL_OP_keymgmt_get_params_fn ed25519_get_params;
26 static OSSL_OP_keymgmt_get_params_fn ed448_get_params;
27 static OSSL_OP_keymgmt_gettable_params_fn ecx_gettable_params;
28 static OSSL_OP_keymgmt_has_fn ecx_has;
29 static OSSL_OP_keymgmt_import_fn ecx_import;
30 static OSSL_OP_keymgmt_import_types_fn ecx_imexport_types;
31 static OSSL_OP_keymgmt_export_fn ecx_export;
32 static OSSL_OP_keymgmt_export_types_fn ecx_imexport_types;
34 #define ECX_POSSIBLE_SELECTIONS (OSSL_KEYMGMT_SELECT_KEYPAIR)
36 static void *x25519_new_key(void *provctx)
38 return ecx_key_new(ECX_KEY_TYPE_X25519, 0);
41 static void *x448_new_key(void *provctx)
43 return ecx_key_new(ECX_KEY_TYPE_X448, 0);
46 static void *ed25519_new_key(void *provctx)
48 return ecx_key_new(ECX_KEY_TYPE_ED25519, 0);
51 static void *ed448_new_key(void *provctx)
53 return ecx_key_new(ECX_KEY_TYPE_ED448, 0);
56 static int ecx_has(void *keydata, int selection)
58 ECX_KEY *key = keydata;
61 if ((selection & ECX_POSSIBLE_SELECTIONS) == 0)
64 if ((selection & OSSL_KEYMGMT_SELECT_PUBLIC_KEY) != 0)
65 ok = ok && key->haspubkey;
67 if ((selection & OSSL_KEYMGMT_SELECT_PRIVATE_KEY) != 0)
68 ok = ok && key->privkey != NULL;
73 static int ecx_import(void *keydata, int selection, const OSSL_PARAM params[])
75 ECX_KEY *key = keydata;
76 size_t privkeylen = 0, pubkeylen;
77 const OSSL_PARAM *param_priv_key = NULL, *param_pub_key;
78 unsigned char *pubkey;
83 if ((selection & OSSL_KEYMGMT_SELECT_PUBLIC_KEY) == 0)
87 OSSL_PARAM_locate_const(params, OSSL_PKEY_PARAM_PUB_KEY);
89 if ((selection & OSSL_KEYMGMT_SELECT_PRIVATE_KEY) != 0)
91 OSSL_PARAM_locate_const(params, OSSL_PKEY_PARAM_PRIV_KEY);
93 * If a private key is present then a public key must also be present.
94 * Alternatively we've just got a public key.
96 if (param_pub_key == NULL)
99 if (param_priv_key != NULL
100 && !OSSL_PARAM_get_octet_string(param_priv_key,
101 (void **)&key->privkey, key->keylen,
105 pubkey = key->pubkey;
106 if (!OSSL_PARAM_get_octet_string(param_pub_key,
108 sizeof(key->pubkey), &pubkeylen))
111 if (pubkeylen != key->keylen
112 || (param_priv_key != NULL && privkeylen != key->keylen))
120 static int key_to_params(ECX_KEY *key, OSSL_PARAM_BLD *tmpl)
125 if (!ossl_param_bld_push_octet_string(tmpl, OSSL_PKEY_PARAM_PUB_KEY,
126 key->pubkey, key->keylen))
129 if (key->privkey != NULL
130 && !ossl_param_bld_push_octet_string(tmpl, OSSL_PKEY_PARAM_PRIV_KEY,
131 key->privkey, key->keylen))
137 static int ecx_export(void *keydata, int selection, OSSL_CALLBACK *param_cb,
140 ECX_KEY *key = keydata;
142 OSSL_PARAM *params = NULL;
148 if ((selection & OSSL_KEYMGMT_SELECT_KEYPAIR) != 0
149 && !key_to_params(key, &tmpl))
152 ossl_param_bld_init(&tmpl);
153 params = ossl_param_bld_to_param(&tmpl);
154 if (params == NULL) {
155 ossl_param_bld_free(params);
159 ret = param_cb(params, cbarg);
160 ossl_param_bld_free(params);
164 static const OSSL_PARAM ecx_key_types[] = {
165 OSSL_PARAM_octet_string(OSSL_PKEY_PARAM_PUB_KEY, NULL, 0),
166 OSSL_PARAM_octet_string(OSSL_PKEY_PARAM_PRIV_KEY, NULL, 0),
169 static const OSSL_PARAM *ecx_imexport_types(int selection)
171 if ((selection & OSSL_KEYMGMT_SELECT_KEYPAIR) != 0)
172 return ecx_key_types;
176 static int ecx_get_params(OSSL_PARAM params[], int bits, int secbits,
181 if ((p = OSSL_PARAM_locate(params, OSSL_PKEY_PARAM_BITS)) != NULL
182 && !OSSL_PARAM_set_int(p, bits))
184 if ((p = OSSL_PARAM_locate(params, OSSL_PKEY_PARAM_SECURITY_BITS)) != NULL
185 && !OSSL_PARAM_set_int(p, secbits))
187 if ((p = OSSL_PARAM_locate(params, OSSL_PKEY_PARAM_MAX_SIZE)) != NULL
188 && !OSSL_PARAM_set_int(p, size))
193 static int x25519_get_params(void *key, OSSL_PARAM params[])
195 return ecx_get_params(params, X25519_BITS, X25519_SECURITY_BITS, X25519_KEYLEN);
198 static int x448_get_params(void *key, OSSL_PARAM params[])
200 return ecx_get_params(params, X448_BITS, X448_SECURITY_BITS, X448_KEYLEN);
203 static int ed25519_get_params(void *key, OSSL_PARAM params[])
205 return ecx_get_params(params, ED25519_BITS, ED25519_SECURITY_BITS, ED25519_KEYLEN);
208 static int ed448_get_params(void *key, OSSL_PARAM params[])
210 return ecx_get_params(params, ED448_BITS, ED448_SECURITY_BITS, ED448_KEYLEN);
213 static const OSSL_PARAM ecx_params[] = {
214 OSSL_PARAM_int(OSSL_PKEY_PARAM_BITS, NULL),
215 OSSL_PARAM_int(OSSL_PKEY_PARAM_SECURITY_BITS, NULL),
216 OSSL_PARAM_int(OSSL_PKEY_PARAM_MAX_SIZE, NULL),
220 static const OSSL_PARAM *ecx_gettable_params(void)
225 #define MAKE_KEYMGMT_FUNCTIONS(alg) \
226 const OSSL_DISPATCH alg##_keymgmt_functions[] = { \
227 { OSSL_FUNC_KEYMGMT_NEW, (void (*)(void))alg##_new_key }, \
228 { OSSL_FUNC_KEYMGMT_FREE, (void (*)(void))ecx_key_free }, \
229 { OSSL_FUNC_KEYMGMT_GET_PARAMS, (void (*) (void))alg##_get_params }, \
230 { OSSL_FUNC_KEYMGMT_GETTABLE_PARAMS, (void (*) (void))ecx_gettable_params }, \
231 { OSSL_FUNC_KEYMGMT_HAS, (void (*)(void))ecx_has }, \
232 { OSSL_FUNC_KEYMGMT_IMPORT, (void (*)(void))ecx_import }, \
233 { OSSL_FUNC_KEYMGMT_IMPORT_TYPES, (void (*)(void))ecx_imexport_types }, \
234 { OSSL_FUNC_KEYMGMT_EXPORT, (void (*)(void))ecx_export }, \
235 { OSSL_FUNC_KEYMGMT_EXPORT_TYPES, (void (*)(void))ecx_imexport_types }, \
239 MAKE_KEYMGMT_FUNCTIONS(x25519)
240 MAKE_KEYMGMT_FUNCTIONS(x448)
241 MAKE_KEYMGMT_FUNCTIONS(ed25519)
242 MAKE_KEYMGMT_FUNCTIONS(ed448)