2 * Copyright 2019-2020 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 * DSA low level APIs are deprecated for public use, but still ok for
14 #include "internal/deprecated.h"
16 #include <openssl/core_numbers.h>
17 #include <openssl/core_names.h>
18 #include <openssl/err.h>
19 #include <openssl/pem.h>
20 #include <openssl/dsa.h>
21 #include <openssl/types.h>
22 #include <openssl/params.h>
24 #include "prov/implementations.h"
25 #include "prov/provider_ctx.h"
26 #include "serializer_local.h"
28 static OSSL_OP_serializer_newctx_fn dsa_priv_newctx;
29 static OSSL_OP_serializer_freectx_fn dsa_priv_freectx;
30 static OSSL_OP_serializer_set_ctx_params_fn dsa_priv_set_ctx_params;
31 static OSSL_OP_serializer_settable_ctx_params_fn dsa_priv_settable_ctx_params;
32 static OSSL_OP_serializer_serialize_data_fn dsa_priv_der_data;
33 static OSSL_OP_serializer_serialize_object_fn dsa_priv_der;
34 static OSSL_OP_serializer_serialize_data_fn dsa_pem_priv_data;
35 static OSSL_OP_serializer_serialize_object_fn dsa_pem_priv;
37 static OSSL_OP_serializer_newctx_fn dsa_print_newctx;
38 static OSSL_OP_serializer_freectx_fn dsa_print_freectx;
39 static OSSL_OP_serializer_serialize_data_fn dsa_priv_print_data;
40 static OSSL_OP_serializer_serialize_object_fn dsa_priv_print;
43 * Context used for private key serialization.
45 struct dsa_priv_ctx_st {
48 struct pkcs8_encrypt_ctx_st sc;
51 /* Private key : context */
52 static void *dsa_priv_newctx(void *provctx)
54 struct dsa_priv_ctx_st *ctx = OPENSSL_zalloc(sizeof(*ctx));
57 ctx->provctx = provctx;
59 /* -1 is the "whatever" indicator, i.e. the PKCS8 library default PBE */
65 static void dsa_priv_freectx(void *vctx)
67 struct dsa_priv_ctx_st *ctx = vctx;
69 EVP_CIPHER_free(ctx->sc.cipher);
70 OPENSSL_free(ctx->sc.cipher_pass);
74 static const OSSL_PARAM *dsa_priv_settable_ctx_params(void)
76 static const OSSL_PARAM settables[] = {
77 OSSL_PARAM_utf8_string(OSSL_SERIALIZER_PARAM_CIPHER, NULL, 0),
78 OSSL_PARAM_octet_string(OSSL_SERIALIZER_PARAM_PASS, NULL, 0),
85 static int dsa_priv_set_ctx_params(void *vctx, const OSSL_PARAM params[])
87 struct dsa_priv_ctx_st *ctx = vctx;
90 if ((p = OSSL_PARAM_locate_const(params, OSSL_SERIALIZER_PARAM_CIPHER))
92 const OSSL_PARAM *propsp =
93 OSSL_PARAM_locate_const(params, OSSL_SERIALIZER_PARAM_PROPERTIES);
94 const char *props = NULL;
96 if (p->data_type != OSSL_PARAM_UTF8_STRING)
98 if (propsp != NULL && propsp->data_type != OSSL_PARAM_UTF8_STRING)
100 props = (propsp != NULL ? propsp->data : NULL);
102 EVP_CIPHER_free(ctx->sc.cipher);
103 ctx->sc.cipher_intent = p->data != NULL;
105 && ((ctx->sc.cipher = EVP_CIPHER_fetch(NULL, p->data, props))
109 if ((p = OSSL_PARAM_locate_const(params, OSSL_SERIALIZER_PARAM_PASS))
111 OPENSSL_free(ctx->sc.cipher_pass);
112 ctx->sc.cipher_pass = NULL;
113 if (!OSSL_PARAM_get_octet_string(p, &ctx->sc.cipher_pass, 0,
114 &ctx->sc.cipher_pass_length))
120 /* Private key : DER */
121 static int dsa_priv_der_data(void *vctx, const OSSL_PARAM params[],
123 OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
125 struct dsa_priv_ctx_st *ctx = vctx;
126 OSSL_OP_keymgmt_new_fn *dsa_new = ossl_prov_get_keymgmt_dsa_new();
127 OSSL_OP_keymgmt_free_fn *dsa_free = ossl_prov_get_keymgmt_dsa_free();
128 OSSL_OP_keymgmt_import_fn *dsa_import = ossl_prov_get_keymgmt_dsa_import();
131 if (dsa_import != NULL) {
134 if ((dsa = dsa_new(ctx->provctx)) != NULL
135 && dsa_import(dsa, OSSL_KEYMGMT_SELECT_KEYPAIR, params)
136 && dsa_priv_der(ctx, dsa, out, cb, cbarg))
143 static int dsa_priv_der(void *vctx, void *dsa, OSSL_CORE_BIO *cout,
144 OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
146 struct dsa_priv_ctx_st *ctx = vctx;
147 BIO *out = bio_new_from_core_bio(ctx->provctx, cout);
154 ctx->sc.cbarg = cbarg;
156 ret = ossl_prov_write_priv_der_from_obj(out, dsa, EVP_PKEY_DSA,
157 ossl_prov_prepare_dsa_params,
158 ossl_prov_dsa_priv_to_der,
165 /* Private key : PEM */
166 static int dsa_pem_priv_data(void *vctx, const OSSL_PARAM params[],
168 OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
170 struct dsa_priv_ctx_st *ctx = vctx;
171 OSSL_OP_keymgmt_new_fn *dsa_new = ossl_prov_get_keymgmt_dsa_new();
172 OSSL_OP_keymgmt_free_fn *dsa_free = ossl_prov_get_keymgmt_dsa_free();
173 OSSL_OP_keymgmt_import_fn *dsa_import = ossl_prov_get_keymgmt_dsa_import();
176 if (dsa_import != NULL) {
179 if ((dsa = dsa_new(ctx->provctx)) != NULL
180 && dsa_import(dsa, OSSL_KEYMGMT_SELECT_KEYPAIR, params)
181 && dsa_pem_priv(ctx, dsa, out, cb, cbarg))
188 static int dsa_pem_priv(void *vctx, void *dsa, OSSL_CORE_BIO *cout,
189 OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
191 struct dsa_priv_ctx_st *ctx = vctx;
192 BIO *out = bio_new_from_core_bio(ctx->provctx, cout);
199 ctx->sc.cbarg = cbarg;
201 ret = ossl_prov_write_priv_pem_from_obj(out, dsa, EVP_PKEY_DSA,
202 ossl_prov_prepare_dsa_params,
203 ossl_prov_dsa_priv_to_der,
211 * There's no specific print context, so we use the provider context
213 static void *dsa_print_newctx(void *provctx)
218 static void dsa_print_freectx(void *ctx)
222 static int dsa_priv_print_data(void *vctx, const OSSL_PARAM params[],
224 OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
226 struct dsa_priv_ctx_st *ctx = vctx;
227 OSSL_OP_keymgmt_new_fn *dsa_new = ossl_prov_get_keymgmt_dsa_new();
228 OSSL_OP_keymgmt_free_fn *dsa_free = ossl_prov_get_keymgmt_dsa_free();
229 OSSL_OP_keymgmt_import_fn *dsa_import = ossl_prov_get_keymgmt_dsa_import();
232 if (dsa_import != NULL) {
235 if ((dsa = dsa_new(ctx->provctx)) != NULL
236 && dsa_import(dsa, OSSL_KEYMGMT_SELECT_KEYPAIR, params)
237 && dsa_priv_print(ctx, dsa, out, cb, cbarg))
244 static int dsa_priv_print(void *ctx, void *dsa, OSSL_CORE_BIO *cout,
245 OSSL_PASSPHRASE_CALLBACK *cb, void *cbarg)
247 BIO *out = bio_new_from_core_bio(ctx, cout);
253 ret = ossl_prov_print_dsa(out, dsa, dsa_print_priv);
259 const OSSL_DISPATCH dsa_priv_der_serializer_functions[] = {
260 { OSSL_FUNC_SERIALIZER_NEWCTX, (void (*)(void))dsa_priv_newctx },
261 { OSSL_FUNC_SERIALIZER_FREECTX, (void (*)(void))dsa_priv_freectx },
262 { OSSL_FUNC_SERIALIZER_SET_CTX_PARAMS,
263 (void (*)(void))dsa_priv_set_ctx_params },
264 { OSSL_FUNC_SERIALIZER_SETTABLE_CTX_PARAMS,
265 (void (*)(void))dsa_priv_settable_ctx_params },
266 { OSSL_FUNC_SERIALIZER_SERIALIZE_DATA, (void (*)(void))dsa_priv_der_data },
267 { OSSL_FUNC_SERIALIZER_SERIALIZE_OBJECT, (void (*)(void))dsa_priv_der },
271 const OSSL_DISPATCH dsa_priv_pem_serializer_functions[] = {
272 { OSSL_FUNC_SERIALIZER_NEWCTX, (void (*)(void))dsa_priv_newctx },
273 { OSSL_FUNC_SERIALIZER_FREECTX, (void (*)(void))dsa_priv_freectx },
274 { OSSL_FUNC_SERIALIZER_SET_CTX_PARAMS,
275 (void (*)(void))dsa_priv_set_ctx_params },
276 { OSSL_FUNC_SERIALIZER_SETTABLE_CTX_PARAMS,
277 (void (*)(void))dsa_priv_settable_ctx_params },
278 { OSSL_FUNC_SERIALIZER_SERIALIZE_DATA, (void (*)(void))dsa_pem_priv_data },
279 { OSSL_FUNC_SERIALIZER_SERIALIZE_OBJECT, (void (*)(void))dsa_pem_priv },
283 const OSSL_DISPATCH dsa_priv_text_serializer_functions[] = {
284 { OSSL_FUNC_SERIALIZER_NEWCTX, (void (*)(void))dsa_print_newctx },
285 { OSSL_FUNC_SERIALIZER_FREECTX, (void (*)(void))dsa_print_freectx },
286 { OSSL_FUNC_SERIALIZER_SERIALIZE_OBJECT, (void (*)(void))dsa_priv_print },
287 { OSSL_FUNC_SERIALIZER_SERIALIZE_DATA,
288 (void (*)(void))dsa_priv_print_data },