crypto/asn1/p8_pkey.c

   1 /*
   2  * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
   3  *
   4  * Licensed under the OpenSSL license (the "License").  You may not use
   5  * this file except in compliance with the License.  You can obtain a copy
   6  * in the file LICENSE in the source distribution or at
   7  * https://www.openssl.org/source/license.html
   8  */
   9
  10 #include <stdio.h>
  11 #include "internal/cryptlib.h"
  12 #include <openssl/asn1t.h>
  13 #include <openssl/x509.h>
  14 #include "internal/x509_int.h"
  15
  16 /* Minor tweak to operation: zero private key data */
  17 static int pkey_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
  18                    void *exarg)
  19 {
  20     /* Since the structure must still be valid use ASN1_OP_FREE_PRE */
  21     if (operation == ASN1_OP_FREE_PRE) {
  22         PKCS8_PRIV_KEY_INFO *key = (PKCS8_PRIV_KEY_INFO *)*pval;
  23         if (key->pkey)
  24             OPENSSL_cleanse(key->pkey->data, key->pkey->length);
  25     }
  26     return 1;
  27 }
  28
  29 ASN1_SEQUENCE_cb(PKCS8_PRIV_KEY_INFO, pkey_cb) = {
  30         ASN1_SIMPLE(PKCS8_PRIV_KEY_INFO, version, ASN1_INTEGER),
  31         ASN1_SIMPLE(PKCS8_PRIV_KEY_INFO, pkeyalg, X509_ALGOR),
  32         ASN1_SIMPLE(PKCS8_PRIV_KEY_INFO, pkey, ASN1_OCTET_STRING),
  33         ASN1_IMP_SET_OF_OPT(PKCS8_PRIV_KEY_INFO, attributes, X509_ATTRIBUTE, 0)
  34 } ASN1_SEQUENCE_END_cb(PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO)
  35
  36 IMPLEMENT_ASN1_FUNCTIONS(PKCS8_PRIV_KEY_INFO)
  37
  38 int PKCS8_pkey_set0(PKCS8_PRIV_KEY_INFO *priv, ASN1_OBJECT *aobj,
  39                     int version,
  40                     int ptype, void *pval, unsigned char *penc, int penclen)
  41 {
  42     if (version >= 0) {
  43         if (!ASN1_INTEGER_set(priv->version, version))
  44             return 0;
  45     }
  46     if (!X509_ALGOR_set0(priv->pkeyalg, aobj, ptype, pval))
  47         return 0;
  48     if (penc)
  49         ASN1_STRING_set0(priv->pkey, penc, penclen);
  50     return 1;
  51 }
  52
  53 int PKCS8_pkey_get0(const ASN1_OBJECT **ppkalg,
  54                     const unsigned char **pk, int *ppklen,
  55                     const X509_ALGOR **pa, const PKCS8_PRIV_KEY_INFO *p8)
  56 {
  57     if (ppkalg)
  58         *ppkalg = p8->pkeyalg->algorithm;
  59     if (pk) {
  60         *pk = ASN1_STRING_get0_data(p8->pkey);
  61         *ppklen = ASN1_STRING_length(p8->pkey);
  62     }
  63     if (pa)
  64         *pa = p8->pkeyalg;
  65     return 1;
  66 }
  67
  68 const STACK_OF(X509_ATTRIBUTE) *
  69 PKCS8_pkey_get0_attrs(const PKCS8_PRIV_KEY_INFO *p8)
  70 {
  71     return p8->attributes;
  72 }
  73
  74 int PKCS8_pkey_add1_attr_by_NID(PKCS8_PRIV_KEY_INFO *p8, int nid, int type,
  75                                 const unsigned char *bytes, int len)
  76 {
  77     if (X509at_add1_attr_by_NID(&p8->attributes, nid, type, bytes, len) != NULL)
  78         return 1;
  79     return 0;
  80 }