2 * Copyright 1999-2020 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 #include "internal/cryptlib.h"
12 #include <openssl/asn1t.h>
13 #include <openssl/x509.h>
14 #include <openssl/rand.h>
16 /* PKCS#5 password based encryption structure */
18 ASN1_SEQUENCE(PBEPARAM) = {
19 ASN1_SIMPLE(PBEPARAM, salt, ASN1_OCTET_STRING),
20 ASN1_SIMPLE(PBEPARAM, iter, ASN1_INTEGER)
21 } ASN1_SEQUENCE_END(PBEPARAM)
23 IMPLEMENT_ASN1_FUNCTIONS(PBEPARAM)
25 /* Set an algorithm identifier for a PKCS#5 PBE algorithm */
27 int PKCS5_pbe_set0_algor(X509_ALGOR *algor, int alg, int iter,
28 const unsigned char *salt, int saltlen)
31 ASN1_STRING *pbe_str = NULL;
32 unsigned char *sstr = NULL;
36 ERR_raise(ERR_LIB_ASN1, ERR_R_MALLOC_FAILURE);
40 iter = PKCS5_DEFAULT_ITER;
41 if (!ASN1_INTEGER_set(pbe->iter, iter)) {
42 ERR_raise(ERR_LIB_ASN1, ERR_R_MALLOC_FAILURE);
46 saltlen = PKCS5_SALT_LEN;
50 sstr = OPENSSL_malloc(saltlen);
52 ERR_raise(ERR_LIB_ASN1, ERR_R_MALLOC_FAILURE);
56 memcpy(sstr, salt, saltlen);
57 else if (RAND_bytes(sstr, saltlen) <= 0)
60 ASN1_STRING_set0(pbe->salt, sstr, saltlen);
63 if (!ASN1_item_pack(pbe, ASN1_ITEM_rptr(PBEPARAM), &pbe_str)) {
64 ERR_raise(ERR_LIB_ASN1, ERR_R_MALLOC_FAILURE);
71 if (X509_ALGOR_set0(algor, OBJ_nid2obj(alg), V_ASN1_SEQUENCE, pbe_str))
77 ASN1_STRING_free(pbe_str);
81 /* Return an algorithm identifier for a PKCS#5 PBE algorithm */
83 X509_ALGOR *PKCS5_pbe_set(int alg, int iter,
84 const unsigned char *salt, int saltlen)
87 ret = X509_ALGOR_new();
89 ERR_raise(ERR_LIB_ASN1, ERR_R_MALLOC_FAILURE);
93 if (PKCS5_pbe_set0_algor(ret, alg, iter, salt, saltlen))