dropbear: dh_sys.c annotate

annotate dh_sys.c @ 0:d7da3b1e1540 libtomcrypt

put back the 0.95 makefile which was inadvertently merged over

author	Matt Johnston <matt@ucc.asn.au>
date	Mon, 31 May 2004 18:21:40 +0000
parents
children	5d99163f7e32

rev	line source
0 d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1 /* LibTomCrypt, modular cryptographic library -- Tom St Denis
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	2 *
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	3 * LibTomCrypt is a library that provides various cryptographic
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	4 * algorithms in a highly modular and flexible manner.
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	5 *
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	6 * The library is free for all purposes without any express
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	7 * guarantee it works.
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	8 *
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	9 * Tom St Denis, [email protected], http://libtomcrypt.org
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	10 */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	11 int dh_encrypt_key(const unsigned char *inkey, unsigned long keylen,
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	12 unsigned char out, unsigned long len,
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	13 prng_state *prng, int wprng, int hash,
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	14 dh_key *key)
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	15 {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	16 unsigned char pub_expt[768], dh_shared[768], skey[MAXBLOCKSIZE];
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	17 dh_key pubkey;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	18 unsigned long x, y, z, hashsize, pubkeysize;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	19 int err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	20
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	21 _ARGCHK(inkey != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	22 _ARGCHK(out != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	23 _ARGCHK(len != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	24 _ARGCHK(key != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	25
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	26 /* check that wprng/hash are not invalid */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	27 if ((err = prng_is_valid(wprng)) != CRYPT_OK) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	28 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	29 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	30
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	31 if ((err = hash_is_valid(hash)) != CRYPT_OK) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	32 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	33 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	34
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	35 if (keylen > hash_descriptor[hash].hashsize) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	36 return CRYPT_INVALID_HASH;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	37 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	38
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	39 /* make a random key and export the public copy */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	40 if ((err = dh_make_key(prng, wprng, dh_get_size(key), &pubkey)) != CRYPT_OK) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	41 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	42 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	43
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	44 pubkeysize = sizeof(pub_expt);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	45 if ((err = dh_export(pub_expt, &pubkeysize, PK_PUBLIC, &pubkey)) != CRYPT_OK) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	46 dh_free(&pubkey);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	47 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	48 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	49
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	50 /* now check if the out buffer is big enough */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	51 if (*len < (1 + 4 + 4 + PACKET_SIZE + pubkeysize + keylen)) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	52 dh_free(&pubkey);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	53 return CRYPT_BUFFER_OVERFLOW;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	54 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	55
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	56 /* make random key */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	57 hashsize = hash_descriptor[hash].hashsize;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	58
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	59 x = (unsigned long)sizeof(dh_shared);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	60 if ((err = dh_shared_secret(&pubkey, key, dh_shared, &x)) != CRYPT_OK) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	61 dh_free(&pubkey);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	62 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	63 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	64 dh_free(&pubkey);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	65
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	66 z = sizeof(skey);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	67 if ((err = hash_memory(hash, dh_shared, x, skey, &z)) != CRYPT_OK) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	68 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	69 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	70
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	71 /* store header */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	72 packet_store_header(out, PACKET_SECT_DH, PACKET_SUB_ENC_KEY);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	73
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	74 /* output header */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	75 y = PACKET_SIZE;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	76
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	77 /* size of hash name and the name itself */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	78 out[y++] = hash_descriptor[hash].ID;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	79
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	80 /* length of DH pubkey and the key itself */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	81 STORE32L(pubkeysize, out+y);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	82 y += 4;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	83 for (x = 0; x < pubkeysize; x++, y++) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	84 out[y] = pub_expt[x];
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	85 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	86
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	87 /* Store the encrypted key */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	88 STORE32L(keylen, out+y);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	89 y += 4;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	90
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	91 for (x = 0; x < keylen; x++, y++) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	92 out[y] = skey[x] ^ inkey[x];
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	93 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	94 *len = y;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	95
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	96 #ifdef CLEAN_STACK
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	97 /* clean up */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	98 zeromem(pub_expt, sizeof(pub_expt));
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	99 zeromem(dh_shared, sizeof(dh_shared));
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	100 zeromem(skey, sizeof(skey));
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	101 #endif
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	102
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	103 return CRYPT_OK;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	104 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	105
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	106 int dh_decrypt_key(const unsigned char *in, unsigned long inlen,
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	107 unsigned char outkey, unsigned long keylen,
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	108 dh_key *key)
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	109 {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	110 unsigned char shared_secret[768], skey[MAXBLOCKSIZE];
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	111 unsigned long x, y, z,hashsize, keysize;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	112 int hash, err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	113 dh_key pubkey;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	114
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	115 _ARGCHK(in != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	116 _ARGCHK(outkey != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	117 _ARGCHK(keylen != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	118 _ARGCHK(key != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	119
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	120 /* right key type? */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	121 if (key->type != PK_PRIVATE) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	122 return CRYPT_PK_NOT_PRIVATE;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	123 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	124
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	125 /* check if initial header should fit */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	126 if (inlen < PACKET_SIZE+1+4+4) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	127 return CRYPT_INVALID_PACKET;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	128 } else {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	129 inlen -= PACKET_SIZE+1+4+4;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	130 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	131
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	132 /* is header correct? */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	133 if ((err = packet_valid_header((unsigned char *)in, PACKET_SECT_DH, PACKET_SUB_ENC_KEY)) != CRYPT_OK) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	134 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	135 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	136
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	137 /* now lets get the hash name */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	138 y = PACKET_SIZE;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	139 hash = find_hash_id(in[y++]);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	140 if (hash == -1) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	141 return CRYPT_INVALID_HASH;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	142 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	143
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	144 /* common values */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	145 hashsize = hash_descriptor[hash].hashsize;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	146
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	147 /* get public key */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	148 LOAD32L(x, in+y);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	149
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	150 /* now check if the imported key will fit */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	151 if (inlen < x) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	152 return CRYPT_INVALID_PACKET;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	153 } else {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	154 inlen -= x;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	155 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	156
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	157 y += 4;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	158 if ((err = dh_import(in+y, x, &pubkey)) != CRYPT_OK) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	159 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	160 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	161 y += x;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	162
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	163 /* make shared key */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	164 x = (unsigned long)sizeof(shared_secret);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	165 if ((err = dh_shared_secret(key, &pubkey, shared_secret, &x)) != CRYPT_OK) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	166 dh_free(&pubkey);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	167 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	168 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	169 dh_free(&pubkey);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	170
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	171 z = sizeof(skey);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	172 if ((err = hash_memory(hash, shared_secret, x, skey, &z)) != CRYPT_OK) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	173 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	174 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	175
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	176 /* load in the encrypted key */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	177 LOAD32L(keysize, in+y);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	178
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	179 /* will the outkey fit as part of the input */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	180 if (inlen < keysize) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	181 return CRYPT_INVALID_PACKET;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	182 } else {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	183 inlen -= keysize;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	184 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	185
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	186 if (keysize > *keylen) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	187 err = CRYPT_BUFFER_OVERFLOW;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	188 goto done;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	189 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	190 y += 4;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	191
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	192 *keylen = keysize;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	193
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	194 for (x = 0; x < keysize; x++, y++) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	195 outkey[x] = skey[x] ^ in[y];
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	196 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	197
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	198 err = CRYPT_OK;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	199 done:
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	200 #ifdef CLEAN_STACK
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	201 zeromem(shared_secret, sizeof(shared_secret));
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	202 zeromem(skey, sizeof(skey));
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	203 #endif
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	204 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	205 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	206
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	207 /* perform an ElGamal Signature of a hash
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	208 *
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	209 * The math works as follows. x is the private key, M is the message to sign
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	210
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	211 1. pick a random k
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	212 2. compute a = g^k mod p
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	213 3. compute b = (M - xa)/k mod p
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	214 4. Send (a,b)
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	215
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	216 Now to verify with y=g^x mod p, a and b
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	217
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	218 1. compute y^a * a^b = g^(xa) * g^(k*(M-xa)/k)
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	219 = g^(xa + (M - xa))
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	220 = g^M [all mod p]
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	221
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	222 2. Compare against g^M mod p [based on input hash].
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	223 3. If result of #2 == result of #1 then signature valid
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	224 */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	225 int dh_sign_hash(const unsigned char *in, unsigned long inlen,
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	226 unsigned char out, unsigned long outlen,
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	227 prng_state prng, int wprng, dh_key key)
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	228 {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	229 mp_int a, b, k, m, g, p, p1, tmp;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	230 unsigned char buf[520];
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	231 unsigned long x, y;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	232 int err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	233
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	234 _ARGCHK(in != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	235 _ARGCHK(out != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	236 _ARGCHK(outlen != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	237 _ARGCHK(key != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	238
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	239 /* check parameters */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	240 if (key->type != PK_PRIVATE) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	241 return CRYPT_PK_NOT_PRIVATE;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	242 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	243
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	244 if ((err = prng_is_valid(wprng)) != CRYPT_OK) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	245 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	246 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	247
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	248 /* is the IDX valid ? */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	249 if (is_valid_idx(key->idx) != 1) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	250 return CRYPT_PK_INVALID_TYPE;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	251 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	252
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	253 /* make up a random value k,
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	254 * since the order of the group is prime
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	255 * we need not check if gcd(k, r) is 1
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	256 */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	257 if (prng_descriptor[wprng].read(buf, sets[key->idx].size, prng) !=
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	258 (unsigned long)(sets[key->idx].size)) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	259 return CRYPT_ERROR_READPRNG;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	260 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	261
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	262 /* init bignums */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	263 if ((err = mp_init_multi(&a, &b, &k, &m, &p, &g, &p1, &tmp, NULL)) != MP_OKAY) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	264 return mpi_to_ltc_error(err);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	265 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	266
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	267 /* load k and m */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	268 if ((err = mp_read_unsigned_bin(&m, (unsigned char *)in, inlen)) != MP_OKAY) { goto error; }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	269 #ifdef FAST_PK
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	270 if ((err = mp_read_unsigned_bin(&k, buf, MIN(32,sets[key->idx].size))) != MP_OKAY) { goto error; }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	271 #else
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	272 if ((err = mp_read_unsigned_bin(&k, buf, sets[key->idx].size)) != MP_OKAY) { goto error; }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	273 #endif
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	274
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	275 /* load g, p and p1 */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	276 if ((err = mp_read_radix(&g, sets[key->idx].base, 64)) != MP_OKAY) { goto error; }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	277 if ((err = mp_read_radix(&p, sets[key->idx].prime, 64)) != MP_OKAY) { goto error; }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	278 if ((err = mp_sub_d(&p, 1, &p1)) != MP_OKAY) { goto error; }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	279 if ((err = mp_div_2(&p1, &p1)) != MP_OKAY) { goto error; } /* p1 = (p-1)/2 */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	280
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	281 /* now get a = g^k mod p */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	282 if ((err = mp_exptmod(&g, &k, &p, &a)) != MP_OKAY) { goto error; }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	283
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	284 /* now find M = xa + kb mod p1 or just b = (M - xa)/k mod p1 */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	285 if ((err = mp_invmod(&k, &p1, &k)) != MP_OKAY) { goto error; } /* k = 1/k mod p1 */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	286 if ((err = mp_mulmod(&a, &key->x, &p1, &tmp)) != MP_OKAY) { goto error; } /* tmp = xa */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	287 if ((err = mp_submod(&m, &tmp, &p1, &tmp)) != MP_OKAY) { goto error; } /* tmp = M - xa */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	288 if ((err = mp_mulmod(&k, &tmp, &p1, &b)) != MP_OKAY) { goto error; } /* b = (M - xa)/k */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	289
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	290 /* check for overflow */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	291 if ((unsigned long)(PACKET_SIZE + 4 + 4 + mp_unsigned_bin_size(&a) + mp_unsigned_bin_size(&b)) > *outlen) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	292 err = CRYPT_BUFFER_OVERFLOW;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	293 goto done;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	294 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	295
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	296 /* store header */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	297 y = PACKET_SIZE;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	298
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	299 /* now store them both (a,b) */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	300 x = (unsigned long)mp_unsigned_bin_size(&a);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	301 STORE32L(x, out+y); y += 4;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	302 if ((err = mp_to_unsigned_bin(&a, out+y)) != MP_OKAY) { goto error; }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	303 y += x;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	304
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	305 x = (unsigned long)mp_unsigned_bin_size(&b);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	306 STORE32L(x, out+y); y += 4;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	307 if ((err = mp_to_unsigned_bin(&b, out+y)) != MP_OKAY) { goto error; }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	308 y += x;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	309
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	310 /* check if size too big */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	311 if (*outlen < y) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	312 err = CRYPT_BUFFER_OVERFLOW;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	313 goto done;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	314 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	315
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	316 /* store header */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	317 packet_store_header(out, PACKET_SECT_DH, PACKET_SUB_SIGNED);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	318 *outlen = y;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	319
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	320 err = CRYPT_OK;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	321 goto done;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	322 error:
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	323 err = mpi_to_ltc_error(err);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	324 done:
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	325 mp_clear_multi(&tmp, &p1, &g, &p, &m, &k, &b, &a, NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	326 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	327 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	328
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	329
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	330 /* verify the signature in sig of the given hash */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	331 int dh_verify_hash(const unsigned char *sig, unsigned long siglen,
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	332 const unsigned char *hash, unsigned long hashlen,
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	333 int stat, dh_key key)
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	334 {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	335 mp_int a, b, p, g, m, tmp;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	336 unsigned long x, y;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	337 int err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	338
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	339 _ARGCHK(sig != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	340 _ARGCHK(hash != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	341 _ARGCHK(stat != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	342 _ARGCHK(key != NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	343
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	344 /* default to invalid */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	345 *stat = 0;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	346
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	347 /* check initial input length */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	348 if (siglen < PACKET_SIZE+4+4) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	349 return CRYPT_INVALID_PACKET;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	350 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	351
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	352 /* header ok? */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	353 if ((err = packet_valid_header((unsigned char *)sig, PACKET_SECT_DH, PACKET_SUB_SIGNED)) != CRYPT_OK) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	354 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	355 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	356
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	357 /* get hash out of packet */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	358 y = PACKET_SIZE;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	359
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	360 /* init all bignums */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	361 if ((err = mp_init_multi(&a, &p, &b, &g, &m, &tmp, NULL)) != MP_OKAY) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	362 return mpi_to_ltc_error(err);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	363 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	364
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	365 /* load a and b */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	366 INPUT_BIGNUM(&a, sig, x, y, siglen);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	367 INPUT_BIGNUM(&b, sig, x, y, siglen);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	368
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	369 /* load p and g */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	370 if ((err = mp_read_radix(&p, sets[key->idx].prime, 64)) != MP_OKAY) { goto error1; }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	371 if ((err = mp_read_radix(&g, sets[key->idx].base, 64)) != MP_OKAY) { goto error1; }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	372
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	373 /* load m */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	374 if ((err = mp_read_unsigned_bin(&m, (unsigned char *)hash, hashlen)) != MP_OKAY) { goto error1; }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	375
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	376 /* find g^m mod p */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	377 if ((err = mp_exptmod(&g, &m, &p, &m)) != MP_OKAY) { goto error1; } /* m = g^m mod p */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	378
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	379 /* find y^a * a^b */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	380 if ((err = mp_exptmod(&key->y, &a, &p, &tmp)) != MP_OKAY) { goto error1; } /* tmp = y^a mod p */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	381 if ((err = mp_exptmod(&a, &b, &p, &a)) != MP_OKAY) { goto error1; } /* a = a^b mod p */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	382 if ((err = mp_mulmod(&a, &tmp, &p, &a)) != MP_OKAY) { goto error1; } /* a = y^a * a^b mod p */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	383
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	384 /* y^a * a^b == g^m ??? */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	385 if (mp_cmp(&a, &m) == 0) {
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	386 *stat = 1;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	387 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	388
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	389 /* clean up */
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	390 err = CRYPT_OK;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	391 goto done;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	392 error1:
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	393 err = mpi_to_ltc_error(err);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	394 error:
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	395 done:
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	396 mp_clear_multi(&tmp, &m, &g, &p, &b, &a, NULL);
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	397 return err;
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	398 }
d7da3b1e1540 put back the 0.95 makefile which was inadvertently merged over Matt Johnston <matt@ucc.asn.au> parents: diff changeset	399

Mercurial > dropbear

annotate dh_sys.c @ 0:d7da3b1e1540 libtomcrypt