Create a FIPS provider and put SHA256 in it
[openssl.git] / providers / fips / fipsprov.c
1 /*
2  * Copyright 2019 The OpenSSL Project Authors. All Rights Reserved.
3  *
4  * Licensed under the Apache License 2.0 (the "License").  You may not use
5  * this file except in compliance with the License.  You can obtain a copy
6  * in the file LICENSE in the source distribution or at
7  * https://www.openssl.org/source/license.html
8  */
9
10 #include <string.h>
11 #include <stdio.h>
12 #include <openssl/core.h>
13 #include <openssl/core_numbers.h>
14 #include <openssl/core_names.h>
15 #include <openssl/params.h>
16
17 /* Functions provided by the core */
18 static OSSL_core_get_param_types_fn *c_get_param_types = NULL;
19 static OSSL_core_get_params_fn *c_get_params = NULL;
20
21 /* Parameters we provide to the core */
22 static const OSSL_ITEM fips_param_types[] = {
23     { OSSL_PARAM_UTF8_PTR, OSSL_PROV_PARAM_NAME },
24     { OSSL_PARAM_UTF8_PTR, OSSL_PROV_PARAM_VERSION },
25     { OSSL_PARAM_UTF8_PTR, OSSL_PROV_PARAM_BUILDINFO },
26     { 0, NULL }
27 };
28
29 static const OSSL_ITEM *fips_get_param_types(const OSSL_PROVIDER *prov)
30 {
31     return fips_param_types;
32 }
33
34 static int fips_get_params(const OSSL_PROVIDER *prov,
35                             const OSSL_PARAM params[])
36 {
37     const OSSL_PARAM *p;
38
39     p = OSSL_PARAM_locate(params, OSSL_PROV_PARAM_NAME);
40     if (p != NULL && !OSSL_PARAM_set_utf8_ptr(p, "OpenSSL FIPS Provider"))
41         return 0;
42     p = OSSL_PARAM_locate(params, OSSL_PROV_PARAM_VERSION);
43     if (p != NULL && !OSSL_PARAM_set_utf8_ptr(p, OPENSSL_VERSION_STR))
44         return 0;
45     p = OSSL_PARAM_locate(params, OSSL_PROV_PARAM_BUILDINFO);
46     if (p != NULL && !OSSL_PARAM_set_utf8_ptr(p, OPENSSL_FULL_VERSION_STR))
47         return 0;
48
49     return 1;
50 }
51
52 extern const OSSL_DISPATCH sha256_functions[];
53
54 static const OSSL_ALGORITHM fips_digests[] = {
55     { "SHA256", "fips=yes", sha256_functions },
56     { NULL, NULL, NULL }
57 };
58
59 static const OSSL_ALGORITHM *fips_query(OSSL_PROVIDER *prov,
60                                          int operation_id,
61                                          int *no_cache)
62 {
63     *no_cache = 0;
64     switch (operation_id) {
65     case OSSL_OP_DIGEST:
66         return fips_digests;
67     }
68     return NULL;
69 }
70
71 /* Functions we provide to the core */
72 static const OSSL_DISPATCH fips_dispatch_table[] = {
73     { OSSL_FUNC_PROVIDER_GET_PARAM_TYPES, (void (*)(void))fips_get_param_types },
74     { OSSL_FUNC_PROVIDER_GET_PARAMS, (void (*)(void))fips_get_params },
75     { OSSL_FUNC_PROVIDER_QUERY_OPERATION, (void (*)(void))fips_query },
76     { 0, NULL }
77 };
78
79 int OSSL_provider_init(const OSSL_PROVIDER *provider,
80                        const OSSL_DISPATCH *in,
81                        const OSSL_DISPATCH **out)
82 {
83     for (; in->function_id != 0; in++) {
84         switch (in->function_id) {
85         case OSSL_FUNC_CORE_GET_PARAM_TYPES:
86             c_get_param_types = OSSL_get_core_get_param_types(in);
87             break;
88         case OSSL_FUNC_CORE_GET_PARAMS:
89             c_get_params = OSSL_get_core_get_params(in);
90             break;
91         /* Just ignore anything we don't understand */
92         default:
93             break;
94         }
95     }
96
97     *out = fips_dispatch_table;
98     return 1;
99 }