crypto/evp/keymgmt_meth.c

   1 /*
   2  * Copyright 2019 The OpenSSL Project Authors. All Rights Reserved.
   3  *
   4  * Licensed under the Apache License 2.0 (the "License").  You may not use
   5  * this file except in compliance with the License.  You can obtain a copy
   6  * in the file LICENSE in the source distribution or at
   7  * https://www.openssl.org/source/license.html
   8  */
   9
  10 #include <openssl/crypto.h>
  11 #include <openssl/core_numbers.h>
  12 #include <openssl/evp.h>
  13 #include <openssl/err.h>
  14 #include "internal/provider.h"
  15 #include "internal/refcount.h"
  16 #include "crypto/evp.h"
  17 #include "evp_local.h"
  18
  19
  20 static void *keymgmt_new(void)
  21 {
  22     EVP_KEYMGMT *keymgmt = NULL;
  23
  24     if ((keymgmt = OPENSSL_zalloc(sizeof(*keymgmt))) == NULL
  25         || (keymgmt->lock = CRYPTO_THREAD_lock_new()) == NULL) {
  26         EVP_KEYMGMT_free(keymgmt);
  27         EVPerr(0, ERR_R_MALLOC_FAILURE);
  28         return NULL;
  29     }
  30
  31     keymgmt->refcnt = 1;
  32
  33     return keymgmt;
  34 }
  35
  36 static void *keymgmt_from_dispatch(int name_id,
  37                                    const OSSL_DISPATCH *fns,
  38                                    OSSL_PROVIDER *prov)
  39 {
  40     EVP_KEYMGMT *keymgmt = NULL;
  41
  42     if ((keymgmt = keymgmt_new()) == NULL) {
  43         EVP_KEYMGMT_free(keymgmt);
  44         return NULL;
  45     }
  46     keymgmt->name_id = name_id;
  47
  48     for (; fns->function_id != 0; fns++) {
  49         switch (fns->function_id) {
  50         case OSSL_FUNC_KEYMGMT_IMPORTDOMPARAMS:
  51             if (keymgmt->importdomparams != NULL)
  52                 break;
  53             keymgmt->importdomparams =
  54                 OSSL_get_OP_keymgmt_importdomparams(fns);
  55             break;
  56         case OSSL_FUNC_KEYMGMT_GENDOMPARAMS:
  57             if (keymgmt->gendomparams != NULL)
  58                 break;
  59             keymgmt->gendomparams = OSSL_get_OP_keymgmt_gendomparams(fns);
  60             break;
  61         case OSSL_FUNC_KEYMGMT_FREEDOMPARAMS:
  62             if (keymgmt->freedomparams != NULL)
  63                 break;
  64             keymgmt->freedomparams = OSSL_get_OP_keymgmt_freedomparams(fns);
  65             break;
  66         case OSSL_FUNC_KEYMGMT_EXPORTDOMPARAMS:
  67             if (keymgmt->exportdomparams != NULL)
  68                 break;
  69             keymgmt->exportdomparams =
  70                 OSSL_get_OP_keymgmt_exportdomparams(fns);
  71             break;
  72         case OSSL_FUNC_KEYMGMT_IMPORTDOMPARAM_TYPES:
  73             if (keymgmt->importdomparam_types != NULL)
  74                 break;
  75             keymgmt->importdomparam_types =
  76                 OSSL_get_OP_keymgmt_importdomparam_types(fns);
  77             break;
  78         case OSSL_FUNC_KEYMGMT_EXPORTDOMPARAM_TYPES:
  79             if (keymgmt->exportdomparam_types != NULL)
  80                 break;
  81             keymgmt->exportdomparam_types =
  82                 OSSL_get_OP_keymgmt_exportdomparam_types(fns);
  83             break;
  84         case OSSL_FUNC_KEYMGMT_IMPORTKEY:
  85             if (keymgmt->importkey != NULL)
  86                 break;
  87             keymgmt->importkey = OSSL_get_OP_keymgmt_importkey(fns);
  88             break;
  89         case OSSL_FUNC_KEYMGMT_GENKEY:
  90             if (keymgmt->genkey != NULL)
  91                 break;
  92             keymgmt->genkey = OSSL_get_OP_keymgmt_genkey(fns);
  93             break;
  94         case OSSL_FUNC_KEYMGMT_LOADKEY:
  95             if (keymgmt->loadkey != NULL)
  96                 break;
  97             keymgmt->loadkey = OSSL_get_OP_keymgmt_loadkey(fns);
  98             break;
  99         case OSSL_FUNC_KEYMGMT_FREEKEY:
 100             if (keymgmt->freekey != NULL)
 101                 break;
 102             keymgmt->freekey = OSSL_get_OP_keymgmt_freekey(fns);
 103             break;
 104         case OSSL_FUNC_KEYMGMT_EXPORTKEY:
 105             if (keymgmt->exportkey != NULL)
 106                 break;
 107             keymgmt->exportkey = OSSL_get_OP_keymgmt_exportkey(fns);
 108             break;
 109         case OSSL_FUNC_KEYMGMT_IMPORTKEY_TYPES:
 110             if (keymgmt->importkey_types != NULL)
 111                 break;
 112             keymgmt->importkey_types =
 113                 OSSL_get_OP_keymgmt_importkey_types(fns);
 114             break;
 115         case OSSL_FUNC_KEYMGMT_EXPORTKEY_TYPES:
 116             if (keymgmt->exportkey_types != NULL)
 117                 break;
 118             keymgmt->exportkey_types =
 119                 OSSL_get_OP_keymgmt_exportkey_types(fns);
 120             break;
 121         case OSSL_FUNC_KEYMGMT_QUERY_OPERATION_NAME:
 122             if (keymgmt->query_operation_name != NULL)
 123                 break;
 124             keymgmt->query_operation_name =
 125                 OSSL_get_OP_keymgmt_query_operation_name(fns);
 126             break;
 127         }
 128     }
 129     /*
 130      * Try to check that the method is sensible.
 131      * It makes no sense being able to free stuff if you can't create it.
 132      * It makes no sense providing OSSL_PARAM descriptors for import and
 133      * export if you can't import or export.
 134      */
 135     if ((keymgmt->freedomparams != NULL
 136          && (keymgmt->importdomparams == NULL
 137              && keymgmt->gendomparams == NULL))
 138         || (keymgmt->freekey != NULL
 139             && (keymgmt->importkey == NULL
 140                 && keymgmt->genkey == NULL
 141                 && keymgmt->loadkey == NULL))
 142         || (keymgmt->importdomparam_types != NULL
 143             && keymgmt->importdomparams == NULL)
 144         || (keymgmt->exportdomparam_types != NULL
 145             && keymgmt->exportdomparams == NULL)
 146         || (keymgmt->importkey_types != NULL
 147             && keymgmt->importkey == NULL)
 148         || (keymgmt->exportkey_types != NULL
 149             && keymgmt->exportkey == NULL)) {
 150         EVP_KEYMGMT_free(keymgmt);
 151         EVPerr(0, EVP_R_INVALID_PROVIDER_FUNCTIONS);
 152         return NULL;
 153     }
 154     keymgmt->prov = prov;
 155     if (prov != NULL)
 156         ossl_provider_up_ref(prov);
 157
 158     return keymgmt;
 159 }
 160
 161 EVP_KEYMGMT *evp_keymgmt_fetch_by_number(OPENSSL_CTX *ctx, int name_id,
 162                                          const char *properties)
 163 {
 164     return evp_generic_fetch_by_number(ctx,
 165                                        OSSL_OP_KEYMGMT, name_id, properties,
 166                                        keymgmt_from_dispatch,
 167                                        (int (*)(void *))EVP_KEYMGMT_up_ref,
 168                                        (void (*)(void *))EVP_KEYMGMT_free);
 169 }
 170
 171 EVP_KEYMGMT *EVP_KEYMGMT_fetch(OPENSSL_CTX *ctx, const char *algorithm,
 172                                const char *properties)
 173 {
 174     return evp_generic_fetch(ctx, OSSL_OP_KEYMGMT, algorithm, properties,
 175                              keymgmt_from_dispatch,
 176                              (int (*)(void *))EVP_KEYMGMT_up_ref,
 177                              (void (*)(void *))EVP_KEYMGMT_free);
 178 }
 179
 180 int EVP_KEYMGMT_up_ref(EVP_KEYMGMT *keymgmt)
 181 {
 182     int ref = 0;
 183
 184     CRYPTO_UP_REF(&keymgmt->refcnt, &ref, keymgmt->lock);
 185     return 1;
 186 }
 187
 188 void EVP_KEYMGMT_free(EVP_KEYMGMT *keymgmt)
 189 {
 190     int ref = 0;
 191
 192     if (keymgmt == NULL)
 193         return;
 194
 195     CRYPTO_DOWN_REF(&keymgmt->refcnt, &ref, keymgmt->lock);
 196     if (ref > 0)
 197         return;
 198     ossl_provider_free(keymgmt->prov);
 199     CRYPTO_THREAD_lock_free(keymgmt->lock);
 200     OPENSSL_free(keymgmt);
 201 }
 202
 203 const OSSL_PROVIDER *EVP_KEYMGMT_provider(const EVP_KEYMGMT *keymgmt)
 204 {
 205     return keymgmt->prov;
 206 }
 207
 208 int EVP_KEYMGMT_number(const EVP_KEYMGMT *keymgmt)
 209 {
 210     return keymgmt->name_id;
 211 }
 212
 213 int EVP_KEYMGMT_is_a(const EVP_KEYMGMT *keymgmt, const char *name)
 214 {
 215     return evp_is_a(keymgmt->prov, keymgmt->name_id, name);
 216 }
 217
 218 void EVP_KEYMGMT_do_all_provided(OPENSSL_CTX *libctx,
 219                                  void (*fn)(EVP_KEYMGMT *keymgmt, void *arg),
 220                                  void *arg)
 221 {
 222     evp_generic_do_all(libctx, OSSL_OP_KEYMGMT,
 223                        (void (*)(void *, void *))fn, arg,
 224                        keymgmt_from_dispatch,
 225                        (void (*)(void *))EVP_KEYMGMT_free);
 226 }
 227
 228 void EVP_KEYMGMT_names_do_all(const EVP_KEYMGMT *keymgmt,
 229                               void (*fn)(const char *name, void *data),
 230                               void *data)
 231 {
 232     if (keymgmt->prov != NULL)
 233         evp_names_do_all(keymgmt->prov, keymgmt->name_id, fn, data);
 234 }