crypto/cms/cms_env.c

   1 /* crypto/cms/cms_env.c */
   2 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
   3  * project.
   4  */
   5 /* ====================================================================
   6  * Copyright (c) 2008 The OpenSSL Project.  All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions
  10  * are met:
  11  *
  12  * 1. Redistributions of source code must retain the above copyright
  13  *    notice, this list of conditions and the following disclaimer.
  14  *
  15  * 2. Redistributions in binary form must reproduce the above copyright
  16  *    notice, this list of conditions and the following disclaimer in
  17  *    the documentation and/or other materials provided with the
  18  *    distribution.
  19  *
  20  * 3. All advertising materials mentioning features or use of this
  21  *    software must display the following acknowledgment:
  22  *    "This product includes software developed by the OpenSSL Project
  23  *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
  24  *
  25  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  26  *    endorse or promote products derived from this software without
  27  *    prior written permission. For written permission, please contact
  28  *    licensing@OpenSSL.org.
  29  *
  30  * 5. Products derived from this software may not be called "OpenSSL"
  31  *    nor may "OpenSSL" appear in their names without prior written
  32  *    permission of the OpenSSL Project.
  33  *
  34  * 6. Redistributions of any form whatsoever must retain the following
  35  *    acknowledgment:
  36  *    "This product includes software developed by the OpenSSL Project
  37  *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
  38  *
  39  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  40  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  41  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  42  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
  43  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  44  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  45  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  46  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  47  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  48  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  49  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  50  * OF THE POSSIBILITY OF SUCH DAMAGE.
  51  * ====================================================================
  52  */
  53
  54 #include "cryptlib.h"
  55 #include <openssl/asn1t.h>
  56 #include <openssl/pem.h>
  57 #include <openssl/x509v3.h>
  58 #include <openssl/err.h>
  59 #include <openssl/cms.h>
  60 #include <openssl/rand.h>
  61 #include <openssl/aes.h>
  62 #include "cms_lcl.h"
  63 #include "asn1_locl.h"
  64
  65 /* CMS EnvelopedData Utilities */
  66
  67 DECLARE_ASN1_ITEM(CMS_EnvelopedData)
  68 DECLARE_ASN1_ITEM(CMS_RecipientInfo)
  69 DECLARE_ASN1_ITEM(CMS_KeyTransRecipientInfo)
  70 DECLARE_ASN1_ITEM(CMS_KEKRecipientInfo)
  71 DECLARE_ASN1_ITEM(CMS_OtherKeyAttribute)
  72
  73 DECLARE_STACK_OF(CMS_RecipientInfo)
  74
  75 static CMS_EnvelopedData *cms_get0_enveloped(CMS_ContentInfo *cms)
  76         {
  77         if (OBJ_obj2nid(cms->contentType) != NID_pkcs7_enveloped)
  78                 {
  79                 CMSerr(CMS_F_CMS_GET0_ENVELOPED,
  80                                 CMS_R_CONTENT_TYPE_NOT_ENVELOPED_DATA);
  81                 return NULL;
  82                 }
  83         return cms->d.envelopedData;
  84         }
  85
  86 static CMS_EnvelopedData *cms_enveloped_data_init(CMS_ContentInfo *cms)
  87         {
  88         if (cms->d.other == NULL)
  89                 {
  90                 cms->d.envelopedData = M_ASN1_new_of(CMS_EnvelopedData);
  91                 if (!cms->d.envelopedData)
  92                         {
  93                         CMSerr(CMS_F_CMS_ENVELOPED_DATA_INIT,
  94                                                         ERR_R_MALLOC_FAILURE);
  95                         return NULL;
  96                         }
  97                 cms->d.envelopedData->version = 0;
  98                 cms->d.envelopedData->encryptedContentInfo->contentType =
  99                                                 OBJ_nid2obj(NID_pkcs7_data);
 100                 ASN1_OBJECT_free(cms->contentType);
 101                 cms->contentType = OBJ_nid2obj(NID_pkcs7_enveloped);
 102                 return cms->d.envelopedData;
 103                 }
 104         return cms_get0_enveloped(cms);
 105         }
 106
 107 STACK_OF(CMS_RecipientInfo) *CMS_get0_RecipientInfos(CMS_ContentInfo *cms)
 108         {
 109         CMS_EnvelopedData *env;
 110         env = cms_get0_enveloped(cms);
 111         if (!env)
 112                 return NULL;
 113         return env->recipientInfos;
 114         }
 115
 116 int CMS_RecipientInfo_type(CMS_RecipientInfo *ri)
 117         {
 118         return ri->type;
 119         }
 120
 121 CMS_ContentInfo *CMS_EnvelopedData_create(const EVP_CIPHER *cipher)
 122         {
 123         CMS_ContentInfo *cms;
 124         CMS_EnvelopedData *env;
 125         cms = CMS_ContentInfo_new();
 126         if (!cms)
 127                 goto merr;
 128         env = cms_enveloped_data_init(cms);
 129         if (!env)
 130                 goto merr;
 131         if (!cms_EncryptedContent_init(env->encryptedContentInfo,
 132                                         cipher, NULL, 0))
 133                 goto merr;
 134         return cms;
 135         merr:
 136         if (cms)
 137                 CMS_ContentInfo_free(cms);
 138         CMSerr(CMS_F_CMS_ENVELOPEDDATA_CREATE, ERR_R_MALLOC_FAILURE);
 139         return NULL;
 140         }
 141
 142 /* Add a recipient certificate. For now only handle key transport.
 143  * If we ever handle key agreement will need updating.
 144  */
 145 CMS_RecipientInfo *CMS_add1_recipient_cert(CMS_ContentInfo *cms,
 146                                         X509 *recip, unsigned int flags)
 147         {
 148         CMS_RecipientInfo *ri = NULL;
 149         CMS_KeyTransRecipientInfo *ktri;
 150         CMS_EnvelopedData *env;
 151         EVP_PKEY *pk = NULL;
 152         int i, type;
 153         env = cms_get0_enveloped(cms);
 154         if (!env)
 155                 goto err;
 156
 157         /* Initialize recipient info */
 158         ri = M_ASN1_new_of(CMS_RecipientInfo);
 159         if (!ri)
 160                 goto merr;
 161
 162         /* Initialize and add key transport recipient info */
 163
 164         ri->d.ktri = M_ASN1_new_of(CMS_KeyTransRecipientInfo);
 165         if (!ri->d.ktri)
 166                 goto merr;
 167         ri->type = CMS_RECIPINFO_TRANS;
 168
 169         ktri = ri->d.ktri;
 170
 171         X509_check_purpose(recip, -1, -1);
 172         pk = X509_get_pubkey(recip);
 173         if (!pk)
 174                 {
 175                 CMSerr(CMS_F_CMS_ADD1_RECIPIENT_CERT,
 176                                 CMS_R_ERROR_GETTING_PUBLIC_KEY);
 177                 goto err;
 178                 }
 179         CRYPTO_add(&recip->references, 1, CRYPTO_LOCK_X509);
 180         ktri->pkey = pk;
 181         ktri->recip = recip;
 182
 183         if (flags & CMS_USE_KEYID)
 184                 {
 185                 ktri->version = 2;
 186                 type = CMS_RECIPINFO_KEYIDENTIFIER;
 187                 }
 188         else
 189                 {
 190                 ktri->version = 0;
 191                 type = CMS_RECIPINFO_ISSUER_SERIAL;
 192                 }
 193
 194         /* Not a typo: RecipientIdentifier and SignerIdentifier are the
 195          * same structure.
 196          */
 197
 198         if (!cms_set1_SignerIdentifier(ktri->rid, recip, type))
 199                 goto err;
 200
 201         if (pk->ameth && pk->ameth->pkey_ctrl)
 202                 {
 203                 i = pk->ameth->pkey_ctrl(pk, ASN1_PKEY_CTRL_CMS_ENVELOPE,
 204                                                 0, ri);
 205                 if (i == -2)
 206                         {
 207                         CMSerr(CMS_F_CMS_ADD1_RECIPIENT_CERT,
 208                                 CMS_R_NOT_SUPPORTED_FOR_THIS_KEY_TYPE);
 209                         goto err;
 210                         }
 211                 if (i <= 0)
 212                         {
 213                         CMSerr(CMS_F_CMS_ADD1_RECIPIENT_CERT,
 214                                 CMS_R_CTRL_FAILURE);
 215                         goto err;
 216                         }
 217                 }
 218
 219         if (!sk_CMS_RecipientInfo_push(env->recipientInfos, ri))
 220                 goto merr;
 221
 222         return ri;
 223
 224         merr:
 225         CMSerr(CMS_F_CMS_ADD1_RECIPIENT_CERT, ERR_R_MALLOC_FAILURE);
 226         err:
 227         if (ri)
 228                 M_ASN1_free_of(ri, CMS_RecipientInfo);
 229         return NULL;
 230
 231         }
 232
 233 int CMS_RecipientInfo_kekri_get0_id(CMS_RecipientInfo *ri,
 234                                         X509_ALGOR **palg,
 235                                         ASN1_OCTET_STRING **pid,
 236                                         ASN1_GENERALIZEDTIME **pdate,
 237                                         ASN1_OBJECT **potherid,
 238                                         ASN1_TYPE **pothertype)
 239         {
 240         CMS_KEKIdentifier *rkid;
 241         if (ri->type != CMS_RECIPINFO_KEK)
 242                 {
 243                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_GET0_ID, CMS_R_NOT_KEK);
 244                 return 0;
 245                 }
 246         rkid =  ri->d.kekri->kekid;
 247         if (palg)
 248                 *palg = ri->d.kekri->keyEncryptionAlgorithm;
 249         if (pid)
 250                 *pid = rkid->keyIdentifier;
 251         if (pdate)
 252                 *pdate = rkid->date;
 253         if (potherid)
 254                 {
 255                 if (rkid->other)
 256                         *potherid = rkid->other->keyAttrId;
 257                 else
 258                         *potherid = NULL;
 259                 }
 260         if (pothertype)
 261                 {
 262                 if (rkid->other)
 263                         *pothertype = rkid->other->keyAttr;
 264                 else
 265                         *pothertype = NULL;
 266                 }
 267         return 1;
 268         }
 269
 270 /* For now hard code AES key wrap info */
 271
 272 static int aes_wrap_keylen(int nid)
 273         {
 274         switch (nid)
 275                 {
 276                 case NID_id_aes128_wrap:
 277                 return 16;
 278
 279                 case NID_id_aes192_wrap:
 280                 return  24;
 281
 282                 case NID_id_aes256_wrap:
 283                 return  32;
 284
 285                 default:
 286                 return 0;
 287                 }
 288         }
 289
 290
 291 CMS_RecipientInfo *CMS_add0_recipient_key(CMS_ContentInfo *cms, int nid,
 292                                         unsigned char *key, size_t keylen,
 293                                         unsigned char *id, size_t idlen,
 294                                         ASN1_GENERALIZEDTIME *date,
 295                                         ASN1_OBJECT *otherTypeId,
 296                                         ASN1_TYPE *otherType)
 297         {
 298         CMS_RecipientInfo *ri = NULL;
 299         CMS_EnvelopedData *env;
 300         CMS_KEKRecipientInfo *kekri;
 301         size_t exp_keylen = 0;
 302         env = cms_get0_enveloped(cms);
 303         if (!env)
 304                 goto err;
 305
 306         exp_keylen = aes_wrap_keylen(nid);
 307
 308         if (!exp_keylen)
 309                 {
 310                 CMSerr(CMS_F_CMS_ADD0_RECIPIENT_KEY,
 311                                 CMS_R_UNSUPPORTED_KEK_ALGORITHM);
 312                 goto err;
 313                 }
 314
 315         if (keylen != exp_keylen)
 316                 {
 317                 CMSerr(CMS_F_CMS_ADD0_RECIPIENT_KEY, CMS_R_INVALID_KEY_LENGTH);
 318                 goto err;
 319                 }
 320
 321         /* Initialize recipient info */
 322         ri = M_ASN1_new_of(CMS_RecipientInfo);
 323         if (!ri)
 324                 goto merr;
 325
 326         ri->d.kekri = M_ASN1_new_of(CMS_KEKRecipientInfo);
 327         if (!ri->d.kekri)
 328                 goto merr;
 329         ri->type = CMS_RECIPINFO_KEK;
 330
 331         kekri = ri->d.kekri;
 332
 333         if (otherTypeId)
 334                 {
 335                 kekri->kekid->other = M_ASN1_new_of(CMS_OtherKeyAttribute);
 336                 if (kekri->kekid->other == NULL)
 337                         goto merr;
 338                 }
 339
 340         if (!sk_CMS_RecipientInfo_push(env->recipientInfos, ri))
 341                 goto merr;
 342
 343         /* After this point no calls can fail */
 344
 345         kekri->version = 4;
 346
 347         kekri->key = key;
 348         kekri->keylen = keylen;
 349
 350         ASN1_STRING_set0(kekri->kekid->keyIdentifier, id, idlen);
 351
 352         kekri->kekid->date = date;
 353
 354         kekri->kekid->other->keyAttrId = otherTypeId;
 355         kekri->kekid->other->keyAttr = otherType;
 356
 357         X509_ALGOR_set0(kekri->keyEncryptionAlgorithm,
 358                                 OBJ_nid2obj(nid), V_ASN1_UNDEF, NULL);
 359
 360         return ri;
 361
 362         merr:
 363         CMSerr(CMS_F_CMS_ADD0_RECIPIENT_KEY, ERR_R_MALLOC_FAILURE);
 364         err:
 365         if (ri)
 366                 M_ASN1_free_of(ri, CMS_RecipientInfo);
 367         return NULL;
 368
 369         }
 370
 371 int CMS_RecipientInfo_ktri_get0_algs(CMS_RecipientInfo *ri,
 372                                         EVP_PKEY **pk, X509 **recip,
 373                                         X509_ALGOR **palg)
 374         {
 375         CMS_KeyTransRecipientInfo *ktri;
 376         if (ri->type != CMS_RECIPINFO_TRANS)
 377                 {
 378                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_ALGS,
 379                         CMS_R_NOT_KEY_TRANSPORT);
 380                 return 0;
 381                 }
 382
 383         ktri = ri->d.ktri;
 384
 385         if (pk)
 386                 *pk = ktri->pkey;
 387         if (recip)
 388                 *recip = ktri->recip;
 389         if (palg)
 390                 *palg = ktri->keyEncryptionAlgorithm;
 391         return 1;
 392         }
 393
 394 int CMS_RecipientInfo_ktri_get0_signer_id(CMS_RecipientInfo *ri,
 395                                         ASN1_OCTET_STRING **keyid,
 396                                         X509_NAME **issuer, ASN1_INTEGER **sno)
 397         {
 398         CMS_KeyTransRecipientInfo *ktri;
 399         if (ri->type != CMS_RECIPINFO_TRANS)
 400                 {
 401                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_GET0_SIGNER_ID,
 402                         CMS_R_NOT_KEY_TRANSPORT);
 403                 return 0;
 404                 }
 405         ktri = ri->d.ktri;
 406
 407         return cms_SignerIdentifier_get0_signer_id(ktri->rid,
 408                                                         keyid, issuer, sno);
 409         }
 410
 411 int CMS_RecipientInfo_ktri_cert_cmp(CMS_RecipientInfo *ri, X509 *cert)
 412         {
 413         if (ri->type != CMS_RECIPINFO_TRANS)
 414                 {
 415                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_CERT_CMP,
 416                         CMS_R_NOT_KEY_TRANSPORT);
 417                 return -2;
 418                 }
 419         return cms_SignerIdentifier_cert_cmp(ri->d.ktri->rid, cert);
 420         }
 421
 422 int CMS_RecipientInfo_set0_pkey(CMS_RecipientInfo *ri, EVP_PKEY *pkey)
 423         {
 424         if (ri->type != CMS_RECIPINFO_TRANS)
 425                 {
 426                 CMSerr(CMS_F_CMS_RECIPIENTINFO_SET0_PKEY,
 427                         CMS_R_NOT_KEY_TRANSPORT);
 428                 return 0;
 429                 }
 430         ri->d.ktri->pkey = pkey;
 431         return 1;
 432         }
 433
 434 int CMS_RecipientInfo_set0_key(CMS_RecipientInfo *ri,
 435                                 unsigned char *key, size_t keylen)
 436         {
 437         CMS_KEKRecipientInfo *kekri;
 438         int wrap_nid;
 439         if (ri->type != CMS_RECIPINFO_KEK)
 440                 {
 441                 CMSerr(CMS_F_CMS_RECIPIENTINFO_SET0_KEY, CMS_R_NOT_KEK);
 442                 return 0;
 443                 }
 444         wrap_nid = OBJ_obj2nid(kekri->keyEncryptionAlgorithm->algorithm);
 445         if (aes_wrap_keylen(wrap_nid) != keylen)
 446                 {
 447                 CMSerr(CMS_F_CMS_RECIPIENTINFO_SET0_KEY,
 448                         CMS_R_INVALID_KEY_LENGTH);
 449                 return 0;
 450                 }
 451         kekri->key = key;
 452         kekri->keylen = keylen;
 453         return 1;
 454         }
 455
 456 /* Encrypt content key in key transport recipient info */
 457
 458 static int cms_RecipientInfo_ktri_encrypt(CMS_ContentInfo *cms,
 459                                         CMS_RecipientInfo *ri)
 460         {
 461         CMS_KeyTransRecipientInfo *ktri;
 462         CMS_EncryptedContentInfo *ec;
 463         EVP_PKEY_CTX *pctx = NULL;
 464         unsigned char *ek = NULL;
 465         size_t eklen;
 466
 467         int ret = 0;
 468
 469         if (ri->type != CMS_RECIPINFO_TRANS)
 470                 {
 471                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_ENCRYPT,
 472                         CMS_R_NOT_KEY_TRANSPORT);
 473                 return 0;
 474                 }
 475         ktri = ri->d.ktri;
 476         ec = cms->d.envelopedData->encryptedContentInfo;
 477
 478         pctx = EVP_PKEY_CTX_new(ktri->pkey, NULL);
 479         if (!pctx)
 480                 return 0;
 481
 482         if (EVP_PKEY_encrypt_init(pctx) <= 0)
 483                 goto err;
 484
 485         if (EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_ENCRYPT,
 486                                 EVP_PKEY_CTRL_CMS_ENCRYPT, 0, ri) <= 0)
 487                 {
 488                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_ENCRYPT, CMS_R_CTRL_ERROR);
 489                 goto err;
 490                 }
 491
 492         if (EVP_PKEY_encrypt(pctx, NULL, &eklen, ec->key, ec->keylen) <= 0)
 493                 goto err;
 494
 495         ek = OPENSSL_malloc(eklen);
 496
 497         if (ek == NULL)
 498                 {
 499                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_ENCRYPT,
 500                                                         ERR_R_MALLOC_FAILURE);
 501                 goto err;
 502                 }
 503
 504         if (EVP_PKEY_encrypt(pctx, ek, &eklen, ec->key, ec->keylen) <= 0)
 505                 goto err;
 506
 507         ASN1_STRING_set0(ktri->encryptedKey, ek, eklen);
 508         ek = NULL;
 509
 510         ret = 1;
 511
 512         err:
 513         if (pctx)
 514                 EVP_PKEY_CTX_free(pctx);
 515         if (ek)
 516                 OPENSSL_free(ek);
 517         return ret;
 518
 519         }
 520
 521 static int cms_RecipientInfo_ktri_decrypt(CMS_ContentInfo *cms,
 522                                                         CMS_RecipientInfo *ri)
 523         {
 524         CMS_KeyTransRecipientInfo *ktri = ri->d.ktri;
 525         EVP_PKEY_CTX *pctx = NULL;
 526         unsigned char *ek = NULL;
 527         size_t eklen;
 528         int ret;
 529
 530         if (ktri->pkey == NULL)
 531                 {
 532                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT,
 533                         CMS_R_NO_PRIVATE_KEY);
 534                 return 0;
 535                 }
 536
 537         pctx = EVP_PKEY_CTX_new(ktri->pkey, NULL);
 538         if (!pctx)
 539                 return 0;
 540
 541         if (EVP_PKEY_decrypt_init(pctx) <= 0)
 542                 goto err;
 543
 544         if (EVP_PKEY_CTX_ctrl(pctx, -1, EVP_PKEY_OP_DECRYPT,
 545                                 EVP_PKEY_CTRL_CMS_DECRYPT, 0, ri) <= 0)
 546                 {
 547                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT, CMS_R_CTRL_ERROR);
 548                 goto err;
 549                 }
 550
 551         if (EVP_PKEY_decrypt(pctx, NULL, &eklen,
 552                                 ktri->encryptedKey->data,
 553                                 ktri->encryptedKey->length) <= 0)
 554                 goto err;
 555
 556         ek = OPENSSL_malloc(eklen);
 557
 558         if (ek == NULL)
 559                 {
 560                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT,
 561                                                         ERR_R_MALLOC_FAILURE);
 562                 goto err;
 563                 }
 564
 565         if (EVP_PKEY_decrypt(pctx, ek, &eklen,
 566                                 ktri->encryptedKey->data,
 567                                 ktri->encryptedKey->length) <= 0)
 568                 {
 569                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KTRI_DECRYPT, CMS_R_CMS_LIB);
 570                 goto err;
 571                 }
 572
 573         ret = 1;
 574
 575         cms->d.envelopedData->encryptedContentInfo->key = ek;
 576         cms->d.envelopedData->encryptedContentInfo->keylen = eklen;
 577
 578         err:
 579         if (pctx)
 580                 EVP_PKEY_CTX_free(pctx);
 581         if (!ret && ek)
 582                 OPENSSL_free(ek);
 583
 584         return ret;
 585         }
 586
 587
 588 /* Encrypt content key in KEK recipient info */
 589
 590 static int cms_RecipientInfo_kekri_encrypt(CMS_ContentInfo *cms,
 591                                         CMS_RecipientInfo *ri)
 592         {
 593         CMS_EncryptedContentInfo *ec;
 594         CMS_KEKRecipientInfo *kekri;
 595         AES_KEY actx;
 596         unsigned char *wkey = NULL;
 597         int wkeylen;
 598         int r = 0;
 599
 600         ec = cms->d.envelopedData->encryptedContentInfo;
 601
 602         kekri = ri->d.kekri;
 603
 604         if (!kekri->key)
 605                 {
 606                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT, CMS_R_NO_KEY);
 607                 return 0;
 608                 }
 609
 610         if (AES_set_encrypt_key(kekri->key, kekri->keylen << 3, &actx))
 611                 {
 612                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT,
 613                                                 CMS_R_ERROR_SETTING_KEY);
 614                 goto err;
 615                 }
 616
 617         wkey = OPENSSL_malloc(ec->keylen + 8);
 618
 619         if (!wkey)
 620                 {
 621                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT,
 622                                                 ERR_R_MALLOC_FAILURE);
 623                 goto err;
 624                 }
 625
 626         wkeylen = AES_wrap_key(&actx, NULL, wkey, ec->key, ec->keylen);
 627
 628         if (wkeylen <= 0)
 629                 {
 630                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_ENCRYPT, CMS_R_WRAP_ERROR);
 631                 goto err;
 632                 }
 633
 634         ASN1_STRING_set0(kekri->encryptedKey, wkey, wkeylen);
 635
 636         r = 1;
 637
 638         err:
 639
 640         if (!r && wkey)
 641                 OPENSSL_free(wkey);
 642         OPENSSL_cleanse(&actx, sizeof(actx));
 643
 644         return r;
 645
 646         }
 647
 648 static int cms_RecipientInfo_kekri_decrypt(CMS_ContentInfo *cms,
 649                                         CMS_RecipientInfo *ri)
 650         {
 651         CMS_EncryptedContentInfo *ec;
 652         CMS_KEKRecipientInfo *kekri;
 653         AES_KEY actx;
 654         unsigned char *ukey = NULL;
 655         int ukeylen;
 656         int r = 0;
 657
 658         ec = cms->d.envelopedData->encryptedContentInfo;
 659
 660         kekri = ri->d.kekri;
 661
 662         if (!kekri->key)
 663                 {
 664                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT, CMS_R_NO_KEY);
 665                 return 0;
 666                 }
 667
 668         /* If encrypted key length is invalid don't bother */
 669
 670         if (kekri->encryptedKey->length < 16)
 671                 {
 672                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT,
 673                                         CMS_R_INVALID_ENCRYPTED_KEY_LENGTH);
 674                 goto err;
 675                 }
 676
 677         if (AES_set_decrypt_key(kekri->key, kekri->keylen << 3, &actx))
 678                 {
 679                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT,
 680                                                 CMS_R_ERROR_SETTING_KEY);
 681                 goto err;
 682                 }
 683
 684         ukey = OPENSSL_malloc(kekri->encryptedKey->length - 8);
 685
 686         if (!ukey)
 687                 {
 688                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT,
 689                                                 ERR_R_MALLOC_FAILURE);
 690                 goto err;
 691                 }
 692
 693         ukeylen = AES_unwrap_key(&actx, NULL, ukey,
 694                                         kekri->encryptedKey->data,
 695                                         kekri->encryptedKey->length);
 696
 697         if (ukeylen <= 0)
 698                 {
 699                 CMSerr(CMS_F_CMS_RECIPIENTINFO_KEKRI_DECRYPT,
 700                                                         CMS_R_UNWRAP_ERROR);
 701                 goto err;
 702                 }
 703
 704         ec->key = ukey;
 705         ec->keylen = ukeylen;
 706
 707         r = 1;
 708
 709         err:
 710
 711         if (!r && ukey)
 712                 OPENSSL_free(ukey);
 713         OPENSSL_cleanse(&actx, sizeof(actx));
 714
 715         return r;
 716
 717         }
 718
 719 int CMS_RecipientInfo_decrypt(CMS_ContentInfo *cms, CMS_RecipientInfo *ri)
 720         {
 721         switch(ri->type)
 722                 {
 723                 case CMS_RECIPINFO_TRANS:
 724                 return cms_RecipientInfo_ktri_decrypt(cms, ri);
 725
 726                 case CMS_RECIPINFO_KEK:
 727                 return cms_RecipientInfo_kekri_decrypt(cms, ri);
 728
 729                 default:
 730                 CMSerr(CMS_F_CMS_RECIPIENTINFO_DECRYPT,
 731                         CMS_R_UNSUPPORTED_RECPIENTINFO_TYPE);
 732                 return 0;
 733                 }
 734         }
 735
 736 BIO *cms_EnvelopedData_init_bio(CMS_ContentInfo *cms)
 737         {
 738         CMS_EncryptedContentInfo *ec;
 739         STACK_OF(CMS_RecipientInfo) *rinfos;
 740         CMS_RecipientInfo *ri;
 741         int i, r, ok = 0;
 742         BIO *ret;
 743
 744         /* Get BIO first to set up key */
 745
 746         ec = cms->d.envelopedData->encryptedContentInfo;
 747         ret = cms_EncryptedContent_init_bio(ec);
 748
 749         /* If error or no cipher end of processing */
 750
 751         if (!ret || !ec->cipher)
 752                 return ret;
 753
 754         rinfos = cms->d.envelopedData->recipientInfos;
 755
 756         for (i = 0; i < sk_CMS_RecipientInfo_num(rinfos); i++)
 757                 {
 758                 ri = sk_CMS_RecipientInfo_value(rinfos, i);
 759
 760                 switch (ri->type)
 761                         {
 762                         case CMS_RECIPINFO_TRANS:
 763                         r = cms_RecipientInfo_ktri_encrypt(cms, ri);
 764                         break;
 765
 766                         case CMS_RECIPINFO_KEK:
 767                         r = cms_RecipientInfo_kekri_encrypt(cms, ri);
 768                         break;
 769
 770                         default:
 771                         CMSerr(CMS_F_CMS_ENVELOPEDDATA_INIT_BIO,
 772                                 CMS_R_UNSUPPORTED_RECIPIENT_TYPE);
 773                         goto err;
 774                         }
 775
 776                 if (r <= 0)
 777                         {
 778                         CMSerr(CMS_F_CMS_ENVELOPEDDATA_INIT_BIO,
 779                                 CMS_R_ERROR_SETTING_RECIPIENTINFO);
 780                         goto err;
 781                         }
 782                 }
 783
 784         ok = 1;
 785
 786         err:
 787         ec->cipher = NULL;
 788         if (ec->key)
 789                 {
 790                 OPENSSL_cleanse(ec->key, ec->keylen);
 791                 OPENSSL_free(ec->key);
 792                 ec->key = NULL;
 793                 ec->keylen = 0;
 794                 }
 795         if (ok)
 796                 return ret;
 797         BIO_free(ret);
 798         return NULL;
 799
 800         }