2 * Copyright 2019-2023 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
10 #include <string.h> /* memset */
11 #include <openssl/core_names.h>
12 #include "internal/ffc.h"
13 #include "internal/param_build_set.h"
14 #include "internal/nelem.h"
17 # include <openssl/asn1.h> /* ossl_ffc_params_print */
20 void ossl_ffc_params_init(FFC_PARAMS *params)
22 memset(params, 0, sizeof(*params));
23 params->pcounter = -1;
24 params->gindex = FFC_UNVERIFIABLE_GINDEX;
25 params->flags = FFC_PARAM_FLAG_VALIDATE_PQG;
28 void ossl_ffc_params_cleanup(FFC_PARAMS *params)
34 OPENSSL_free(params->seed);
35 ossl_ffc_params_init(params);
38 void ossl_ffc_params_set0_pqg(FFC_PARAMS *d, BIGNUM *p, BIGNUM *q, BIGNUM *g)
40 if (p != NULL && p != d->p) {
44 if (q != NULL && q != d->q) {
48 if (g != NULL && g != d->g) {
54 void ossl_ffc_params_get0_pqg(const FFC_PARAMS *d, const BIGNUM **p,
55 const BIGNUM **q, const BIGNUM **g)
66 /* j is the 'cofactor' that is optionally output for ASN1. */
67 void ossl_ffc_params_set0_j(FFC_PARAMS *d, BIGNUM *j)
75 int ossl_ffc_params_set_seed(FFC_PARAMS *params,
76 const unsigned char *seed, size_t seedlen)
78 if (params->seed != NULL) {
79 if (params->seed == seed)
81 OPENSSL_free(params->seed);
84 if (seed != NULL && seedlen > 0) {
85 params->seed = OPENSSL_memdup(seed, seedlen);
86 if (params->seed == NULL)
88 params->seedlen = seedlen;
96 void ossl_ffc_params_set_gindex(FFC_PARAMS *params, int index)
98 params->gindex = index;
101 void ossl_ffc_params_set_pcounter(FFC_PARAMS *params, int index)
103 params->pcounter = index;
106 void ossl_ffc_params_set_h(FFC_PARAMS *params, int index)
111 void ossl_ffc_params_set_flags(FFC_PARAMS *params, unsigned int flags)
113 params->flags = flags;
116 void ossl_ffc_params_enable_flags(FFC_PARAMS *params, unsigned int flags,
120 params->flags |= flags;
122 params->flags &= ~flags;
125 void ossl_ffc_set_digest(FFC_PARAMS *params, const char *alg, const char *props)
127 params->mdname = alg;
128 params->mdprops = props;
131 int ossl_ffc_params_set_validate_params(FFC_PARAMS *params,
132 const unsigned char *seed,
133 size_t seedlen, int counter)
135 if (!ossl_ffc_params_set_seed(params, seed, seedlen))
137 params->pcounter = counter;
141 void ossl_ffc_params_get_validate_params(const FFC_PARAMS *params,
142 unsigned char **seed, size_t *seedlen,
146 *seed = params->seed;
148 *seedlen = params->seedlen;
149 if (pcounter != NULL)
150 *pcounter = params->pcounter;
153 static int ffc_bn_cpy(BIGNUM **dst, const BIGNUM *src)
158 * If source is read only just copy the pointer, so
159 * we don't have to reallocate it.
163 else if (BN_get_flags(src, BN_FLG_STATIC_DATA)
164 && !BN_get_flags(src, BN_FLG_MALLOCED))
166 else if ((a = BN_dup(src)) == NULL)
173 int ossl_ffc_params_copy(FFC_PARAMS *dst, const FFC_PARAMS *src)
175 if (!ffc_bn_cpy(&dst->p, src->p)
176 || !ffc_bn_cpy(&dst->g, src->g)
177 || !ffc_bn_cpy(&dst->q, src->q)
178 || !ffc_bn_cpy(&dst->j, src->j))
181 dst->mdname = src->mdname;
182 dst->mdprops = src->mdprops;
183 OPENSSL_free(dst->seed);
184 dst->seedlen = src->seedlen;
185 if (src->seed != NULL) {
186 dst->seed = OPENSSL_memdup(src->seed, src->seedlen);
187 if (dst->seed == NULL)
193 dst->pcounter = src->pcounter;
195 dst->gindex = src->gindex;
196 dst->flags = src->flags;
197 dst->keylength = src->keylength;
201 int ossl_ffc_params_cmp(const FFC_PARAMS *a, const FFC_PARAMS *b, int ignore_q)
203 return BN_cmp(a->p, b->p) == 0
204 && BN_cmp(a->g, b->g) == 0
205 && (ignore_q || BN_cmp(a->q, b->q) == 0); /* Note: q may be NULL */
208 int ossl_ffc_params_todata(const FFC_PARAMS *ffc, OSSL_PARAM_BLD *bld,
214 && !ossl_param_build_set_bn(bld, params, OSSL_PKEY_PARAM_FFC_P, ffc->p))
217 && !ossl_param_build_set_bn(bld, params, OSSL_PKEY_PARAM_FFC_Q, ffc->q))
220 && !ossl_param_build_set_bn(bld, params, OSSL_PKEY_PARAM_FFC_G, ffc->g))
223 && !ossl_param_build_set_bn(bld, params, OSSL_PKEY_PARAM_FFC_COFACTOR,
226 if (!ossl_param_build_set_int(bld, params, OSSL_PKEY_PARAM_FFC_GINDEX,
229 if (!ossl_param_build_set_int(bld, params, OSSL_PKEY_PARAM_FFC_PCOUNTER,
232 if (!ossl_param_build_set_int(bld, params, OSSL_PKEY_PARAM_FFC_H, ffc->h))
234 if (ffc->seed != NULL
235 && !ossl_param_build_set_octet_string(bld, params,
236 OSSL_PKEY_PARAM_FFC_SEED,
237 ffc->seed, ffc->seedlen))
239 if (ffc->nid != NID_undef) {
240 const DH_NAMED_GROUP *group = ossl_ffc_uid_to_dh_named_group(ffc->nid);
241 const char *name = ossl_ffc_named_group_get_name(group);
244 || !ossl_param_build_set_utf8_string(bld, params,
245 OSSL_PKEY_PARAM_GROUP_NAME,
249 test_flags = ((ffc->flags & FFC_PARAM_FLAG_VALIDATE_PQ) != 0);
250 if (!ossl_param_build_set_int(bld, params,
251 OSSL_PKEY_PARAM_FFC_VALIDATE_PQ, test_flags))
253 test_flags = ((ffc->flags & FFC_PARAM_FLAG_VALIDATE_G) != 0);
254 if (!ossl_param_build_set_int(bld, params,
255 OSSL_PKEY_PARAM_FFC_VALIDATE_G, test_flags))
257 test_flags = ((ffc->flags & FFC_PARAM_FLAG_VALIDATE_LEGACY) != 0);
258 if (!ossl_param_build_set_int(bld, params,
259 OSSL_PKEY_PARAM_FFC_VALIDATE_LEGACY,
263 if (ffc->mdname != NULL
264 && !ossl_param_build_set_utf8_string(bld, params,
265 OSSL_PKEY_PARAM_FFC_DIGEST,
268 if (ffc->mdprops != NULL
269 && !ossl_param_build_set_utf8_string(bld, params,
270 OSSL_PKEY_PARAM_FFC_DIGEST_PROPS,
277 int ossl_ffc_params_print(BIO *bp, const FFC_PARAMS *ffc, int indent)
279 if (!ASN1_bn_print(bp, "prime P:", ffc->p, NULL, indent))
281 if (!ASN1_bn_print(bp, "generator G:", ffc->g, NULL, indent))
284 && !ASN1_bn_print(bp, "subgroup order Q:", ffc->q, NULL, indent))
287 && !ASN1_bn_print(bp, "subgroup factor:", ffc->j, NULL, indent))
289 if (ffc->seed != NULL) {
292 if (!BIO_indent(bp, indent, 128)
293 || BIO_puts(bp, "seed:") <= 0)
295 for (i = 0; i < ffc->seedlen; i++) {
297 if (BIO_puts(bp, "\n") <= 0
298 || !BIO_indent(bp, indent + 4, 128))
301 if (BIO_printf(bp, "%02x%s", ffc->seed[i],
302 ((i + 1) == ffc->seedlen) ? "" : ":") <= 0)
305 if (BIO_write(bp, "\n", 1) <= 0)
308 if (ffc->pcounter != -1) {
309 if (!BIO_indent(bp, indent, 128)
310 || BIO_printf(bp, "counter: %d\n", ffc->pcounter) <= 0)
317 #endif /* FIPS_MODULE */