add support for ecdsa-with-sha256 etc.

[openssl.git] / crypto / ec / ec_ameth.c

diff --git a/crypto/ec/ec_ameth.c b/crypto/ec/ec_ameth.c
index 98003b1b0ed82c2dd3e22f1f75a98c719cb18e2c..6c46afb5032f376e6a72f419039c785b769e664d 100644 (file)
--- a/crypto/ec/ec_ameth.c
+++ b/crypto/ec/ec_ameth.c
@@ -59,6 +59,7 @@
 #include "cryptlib.h"
 #include <openssl/x509.h>
 #include <openssl/ec.h>
+#include "asn1_locl.h"
 
 static int eckey_param2type(int *pptype, void **ppval, EC_KEY *ec_key)
        {
@@ -118,7 +119,7 @@ static int eckey_pub_encode(X509_PUBKEY *pk, const EVP_PKEY *pkey)
        penclen = i2o_ECPublicKey(ec_key, &p);
        if (penclen <= 0)
                goto err;
-       if (X509_PUBKEY_set0_param(pk, OBJ_nid2obj(EVP_PKEY_DSA),
+       if (X509_PUBKEY_set0_param(pk, OBJ_nid2obj(EVP_PKEY_EC),
                                ptype, pval, penc, penclen))
                return 1;
        err:
@@ -393,7 +394,7 @@ static int ec_missing_parameters(const EVP_PKEY *pkey)
        return 0;
        }
 
-int ec_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from)
+static int ec_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from)
        {
        EC_GROUP *group = EC_GROUP_dup(EC_KEY_get0_group(from->pkey.ec));
        if (group == NULL)
@@ -404,7 +405,7 @@ int ec_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from)
        return 1;
        }
 
-int ec_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b)
+static int ec_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b)
        {
        const EC_GROUP *group_a = EC_KEY_get0_group(a->pkey.ec),
                       *group_b = EC_KEY_get0_group(b->pkey.ec);
@@ -444,7 +445,6 @@ static int do_EC_KEY_print(BIO *bp, const EC_KEY *x, int off, int ktype)
                goto err;
                }
 
-
        if (ktype > 0)
                {
                public_key = EC_KEY_get0_public_key(x);
@@ -454,15 +454,15 @@ static int do_EC_KEY_print(BIO *bp, const EC_KEY *x, int off, int ktype)
                        reason = ERR_R_EC_LIB;
                        goto err;
                        }
-               buf_len = (size_t)BN_num_bytes(pub_key);
+               if (pub_key)
+                       buf_len = (size_t)BN_num_bytes(pub_key);
                }
-       else
 
        if (ktype == 2)
                {
-               if ((i = (size_t)BN_num_bytes(priv_key)) > buf_len)
-                       buf_len = i;
                priv_key = EC_KEY_get0_private_key(x);
+               if (priv_key && (i = (size_t)BN_num_bytes(priv_key)) > buf_len)
+                       buf_len = i;
                }
        else
                priv_key = NULL;
@@ -503,7 +503,7 @@ static int do_EC_KEY_print(BIO *bp, const EC_KEY *x, int off, int ktype)
        ret=1;
 err:
        if (!ret)
-               ECerr(EC_F_EC_KEY_PRINT, reason);
+               ECerr(EC_F_DO_EC_KEY_PRINT, reason);
        if (pub_key) 
                BN_free(pub_key);
        if (order)
@@ -515,6 +515,24 @@ err:
        return(ret);
        }
 
+static int eckey_param_decode(EVP_PKEY *pkey,
+                                       const unsigned char **pder, int derlen)
+       {
+       EC_KEY *eckey;
+       if (!(eckey = d2i_ECParameters(NULL, pder, derlen)))
+               {
+               ECerr(EC_F_ECKEY_PARAM_DECODE, ERR_R_EC_LIB);
+               return 0;
+               }
+       EVP_PKEY_assign_EC_KEY(pkey, eckey);
+       return 1;
+       }
+
+static int eckey_param_encode(const EVP_PKEY *pkey, unsigned char **pder)
+       {
+       return i2d_ECParameters(pkey->pkey.ec, pder);
+       }
+
 static int eckey_param_print(BIO *bp, const EVP_PKEY *pkey, int indent,
                                                        ASN1_PCTX *ctx)
        {
@@ -534,11 +552,63 @@ static int eckey_priv_print(BIO *bp, const EVP_PKEY *pkey, int indent,
        return do_EC_KEY_print(bp, pkey->pkey.ec, indent, 2);
        }
 
+static int old_ec_priv_decode(EVP_PKEY *pkey,
+                                       const unsigned char **pder, int derlen)
+       {
+       EC_KEY *ec;
+       if (!(ec = d2i_ECPrivateKey (NULL, pder, derlen)))
+               {
+               ECerr(EC_F_OLD_EC_PRIV_DECODE, EC_R_DECODE_ERROR);
+               return 0;
+               }
+       EVP_PKEY_assign_EC_KEY(pkey, ec);
+       return 1;
+       }
+
+static int old_ec_priv_encode(const EVP_PKEY *pkey, unsigned char **pder)
+       {
+       return i2d_ECPrivateKey(pkey->pkey.ec, pder);
+       }
+
+static int ec_pkey_ctrl(EVP_PKEY *pkey, int op, long arg1, void *arg2)
+       {
+       switch (op)
+               {
+               case ASN1_PKEY_CTRL_PKCS7_SIGN:
+               if (arg1 == 0)
+                       {
+                       int snid, hnid;
+                       X509_ALGOR *alg1, *alg2;
+                       PKCS7_SIGNER_INFO_get0_algs(arg2, NULL, &alg1, &alg2);
+                       if (alg1 == NULL || alg1->algorithm == NULL)
+                               return -1;
+                       hnid = OBJ_obj2nid(alg1->algorithm);
+                       if (hnid == NID_undef)
+                               return -1;
+                       if (!OBJ_find_sigid_by_algs(&snid, hnid, EVP_PKEY_id(pkey)))
+                               return -1; 
+                       X509_ALGOR_set0(alg2, OBJ_nid2obj(snid), V_ASN1_UNDEF, 0);
+                       }
+               return 1;
+
+               case ASN1_PKEY_CTRL_DEFAULT_MD_NID:
+               *(int *)arg2 = NID_sha1;
+               return 2;
+
+               default:
+               return -2;
+
+               }
+
+       }
+
 EVP_PKEY_ASN1_METHOD eckey_asn1_meth = 
        {
        EVP_PKEY_EC,
+       EVP_PKEY_EC,
        0,
-       0,
+       "EC",
+       "OpenSSL EC algorithm",
 
        eckey_pub_decode,
        eckey_pub_encode,
@@ -552,12 +622,15 @@ EVP_PKEY_ASN1_METHOD eckey_asn1_meth =
        int_ec_size,
        ec_bits,
 
-       0,0,    
+       eckey_param_decode,
+       eckey_param_encode,
        ec_missing_parameters,
        ec_copy_parameters,
        ec_cmp_parameters,
        eckey_param_print,
 
        int_ec_free,
-       0
+       ec_pkey_ctrl,
+       old_ec_priv_decode,
+       old_ec_priv_encode
        };