Mercurial > dropbear
comparison libtomcrypt/src/headers/tomcrypt_pk.h @ 297:79bf1023cf11 agent-client
propagate from branch 'au.asn.ucc.matt.dropbear' (head 0501e6f661b5415eb76f3b312d183c3adfbfb712)
to branch 'au.asn.ucc.matt.dropbear.cli-agent' (head 01038174ec27245b51bd43a66c01ad930880f67b)
author | Matt Johnston <matt@ucc.asn.au> |
---|---|
date | Tue, 21 Mar 2006 16:20:59 +0000 |
parents | 1b9e69c058d2 |
children | 0cbe8f6dbf9e |
comparison
equal
deleted
inserted
replaced
225:ca7e76d981d9 | 297:79bf1023cf11 |
---|---|
1 /* ---- NUMBER THEORY ---- */ | |
2 #ifdef MPI | |
3 | |
4 #include "ltc_tommath.h" | |
5 | |
6 /* in/out macros */ | |
7 #define OUTPUT_BIGNUM(num, out, y, z) \ | |
8 { \ | |
9 if ((y + 4) > *outlen) { return CRYPT_BUFFER_OVERFLOW; } \ | |
10 z = (unsigned long)mp_unsigned_bin_size(num); \ | |
11 STORE32L(z, out+y); \ | |
12 y += 4; \ | |
13 if ((y + z) > *outlen) { return CRYPT_BUFFER_OVERFLOW; } \ | |
14 if ((err = mp_to_unsigned_bin(num, out+y)) != MP_OKAY) { return mpi_to_ltc_error(err); } \ | |
15 y += z; \ | |
16 } | |
17 | |
18 | |
19 #define INPUT_BIGNUM(num, in, x, y, inlen) \ | |
20 { \ | |
21 /* load value */ \ | |
22 if ((y + 4) > inlen) { \ | |
23 err = CRYPT_INVALID_PACKET; \ | |
24 goto error; \ | |
25 } \ | |
26 LOAD32L(x, in+y); \ | |
27 y += 4; \ | |
28 \ | |
29 /* sanity check... */ \ | |
30 if ((x+y) > inlen) { \ | |
31 err = CRYPT_INVALID_PACKET; \ | |
32 goto error; \ | |
33 } \ | |
34 \ | |
35 /* load it */ \ | |
36 if ((err = mp_read_unsigned_bin(num, (unsigned char *)in+y, (int)x)) != MP_OKAY) {\ | |
37 err = mpi_to_ltc_error(err); \ | |
38 goto error; \ | |
39 } \ | |
40 y += x; \ | |
41 if ((err = mp_shrink(num)) != MP_OKAY) { \ | |
42 err = mpi_to_ltc_error(err); \ | |
43 goto error; \ | |
44 } \ | |
45 } | |
46 | |
47 int is_prime(mp_int *, int *); | |
48 int rand_prime(mp_int *N, long len, prng_state *prng, int wprng); | |
49 | |
50 #else | |
51 #ifdef MRSA | |
52 #error RSA requires the big int library | |
53 #endif | |
54 #ifdef MECC | |
55 #error ECC requires the big int library | |
56 #endif | |
57 #ifdef MDH | |
58 #error DH requires the big int library | |
59 #endif | |
60 #ifdef MDSA | |
61 #error DSA requires the big int library | |
62 #endif | |
63 #endif /* MPI */ | |
64 | |
65 | |
66 /* ---- PUBLIC KEY CRYPTO ---- */ | |
67 | |
68 #define PK_PRIVATE 0 /* PK private keys */ | |
69 #define PK_PUBLIC 1 /* PK public keys */ | |
70 | |
71 /* ---- PACKET ---- */ | |
72 #ifdef PACKET | |
73 | |
74 void packet_store_header(unsigned char *dst, int section, int subsection); | |
75 int packet_valid_header(unsigned char *src, int section, int subsection); | |
76 | |
77 #endif | |
78 | |
79 | |
80 /* ---- RSA ---- */ | |
81 #ifdef MRSA | |
82 | |
83 /* Min and Max RSA key sizes (in bits) */ | |
84 #define MIN_RSA_SIZE 1024 | |
85 #define MAX_RSA_SIZE 4096 | |
86 | |
87 typedef struct Rsa_key { | |
88 int type; | |
89 mp_int e, d, N, p, q, qP, dP, dQ; | |
90 } rsa_key; | |
91 | |
92 int rsa_make_key(prng_state *prng, int wprng, int size, long e, rsa_key *key); | |
93 | |
94 int rsa_exptmod(const unsigned char *in, unsigned long inlen, | |
95 unsigned char *out, unsigned long *outlen, int which, | |
96 rsa_key *key); | |
97 | |
98 void rsa_free(rsa_key *key); | |
99 | |
100 /* These use PKCS #1 v2.0 padding */ | |
101 int rsa_encrypt_key(const unsigned char *in, unsigned long inlen, | |
102 unsigned char *out, unsigned long *outlen, | |
103 const unsigned char *lparam, unsigned long lparamlen, | |
104 prng_state *prng, int prng_idx, int hash_idx, rsa_key *key); | |
105 | |
106 int rsa_decrypt_key(const unsigned char *in, unsigned long inlen, | |
107 unsigned char *out, unsigned long *outlen, | |
108 const unsigned char *lparam, unsigned long lparamlen, | |
109 int hash_idx, int *stat, | |
110 rsa_key *key); | |
111 | |
112 int rsa_sign_hash(const unsigned char *in, unsigned long inlen, | |
113 unsigned char *out, unsigned long *outlen, | |
114 prng_state *prng, int prng_idx, | |
115 int hash_idx, unsigned long saltlen, | |
116 rsa_key *key); | |
117 | |
118 int rsa_verify_hash(const unsigned char *sig, unsigned long siglen, | |
119 const unsigned char *hash, unsigned long hashlen, | |
120 int hash_idx, unsigned long saltlen, | |
121 int *stat, rsa_key *key); | |
122 | |
123 /* PKCS #1 import/export */ | |
124 int rsa_export(unsigned char *out, unsigned long *outlen, int type, rsa_key *key); | |
125 int rsa_import(const unsigned char *in, unsigned long inlen, rsa_key *key); | |
126 | |
127 #endif | |
128 | |
129 /* ---- DH Routines ---- */ | |
130 #ifdef MDH | |
131 | |
132 typedef struct Dh_key { | |
133 int idx, type; | |
134 mp_int x, y; | |
135 } dh_key; | |
136 | |
137 int dh_test(void); | |
138 void dh_sizes(int *low, int *high); | |
139 int dh_get_size(dh_key *key); | |
140 | |
141 int dh_make_key(prng_state *prng, int wprng, int keysize, dh_key *key); | |
142 void dh_free(dh_key *key); | |
143 | |
144 int dh_export(unsigned char *out, unsigned long *outlen, int type, dh_key *key); | |
145 int dh_import(const unsigned char *in, unsigned long inlen, dh_key *key); | |
146 | |
147 int dh_shared_secret(dh_key *private_key, dh_key *public_key, | |
148 unsigned char *out, unsigned long *outlen); | |
149 | |
150 int dh_encrypt_key(const unsigned char *in, unsigned long keylen, | |
151 unsigned char *out, unsigned long *outlen, | |
152 prng_state *prng, int wprng, int hash, | |
153 dh_key *key); | |
154 | |
155 int dh_decrypt_key(const unsigned char *in, unsigned long inlen, | |
156 unsigned char *out, unsigned long *outlen, | |
157 dh_key *key); | |
158 | |
159 int dh_sign_hash(const unsigned char *in, unsigned long inlen, | |
160 unsigned char *out, unsigned long *outlen, | |
161 prng_state *prng, int wprng, dh_key *key); | |
162 | |
163 int dh_verify_hash(const unsigned char *sig, unsigned long siglen, | |
164 const unsigned char *hash, unsigned long hashlen, | |
165 int *stat, dh_key *key); | |
166 | |
167 | |
168 #endif | |
169 | |
170 /* ---- ECC Routines ---- */ | |
171 #ifdef MECC | |
172 typedef struct { | |
173 mp_int x, y, z; | |
174 } ecc_point; | |
175 | |
176 typedef struct { | |
177 int type, idx; | |
178 ecc_point pubkey; | |
179 mp_int k; | |
180 } ecc_key; | |
181 | |
182 int ecc_test(void); | |
183 void ecc_sizes(int *low, int *high); | |
184 int ecc_get_size(ecc_key *key); | |
185 | |
186 int ecc_make_key(prng_state *prng, int wprng, int keysize, ecc_key *key); | |
187 void ecc_free(ecc_key *key); | |
188 | |
189 int ecc_export(unsigned char *out, unsigned long *outlen, int type, ecc_key *key); | |
190 int ecc_import(const unsigned char *in, unsigned long inlen, ecc_key *key); | |
191 | |
192 int ecc_shared_secret(ecc_key *private_key, ecc_key *public_key, | |
193 unsigned char *out, unsigned long *outlen); | |
194 | |
195 int ecc_encrypt_key(const unsigned char *in, unsigned long inlen, | |
196 unsigned char *out, unsigned long *outlen, | |
197 prng_state *prng, int wprng, int hash, | |
198 ecc_key *key); | |
199 | |
200 int ecc_decrypt_key(const unsigned char *in, unsigned long inlen, | |
201 unsigned char *out, unsigned long *outlen, | |
202 ecc_key *key); | |
203 | |
204 int ecc_sign_hash(const unsigned char *in, unsigned long inlen, | |
205 unsigned char *out, unsigned long *outlen, | |
206 prng_state *prng, int wprng, ecc_key *key); | |
207 | |
208 int ecc_verify_hash(const unsigned char *sig, unsigned long siglen, | |
209 const unsigned char *hash, unsigned long hashlen, | |
210 int *stat, ecc_key *key); | |
211 | |
212 #endif | |
213 | |
214 #ifdef MDSA | |
215 | |
216 typedef struct { | |
217 int type, qord; | |
218 mp_int g, q, p, x, y; | |
219 } dsa_key; | |
220 | |
221 int dsa_make_key(prng_state *prng, int wprng, int group_size, int modulus_size, dsa_key *key); | |
222 void dsa_free(dsa_key *key); | |
223 | |
224 | |
225 int dsa_sign_hash_raw(const unsigned char *in, unsigned long inlen, | |
226 mp_int *r, mp_int *s, | |
227 prng_state *prng, int wprng, dsa_key *key); | |
228 | |
229 int dsa_sign_hash(const unsigned char *in, unsigned long inlen, | |
230 unsigned char *out, unsigned long *outlen, | |
231 prng_state *prng, int wprng, dsa_key *key); | |
232 | |
233 int dsa_verify_hash_raw( mp_int *r, mp_int *s, | |
234 const unsigned char *hash, unsigned long hashlen, | |
235 int *stat, dsa_key *key); | |
236 | |
237 int dsa_verify_hash(const unsigned char *sig, unsigned long siglen, | |
238 const unsigned char *hash, unsigned long hashlen, | |
239 int *stat, dsa_key *key); | |
240 | |
241 int dsa_import(const unsigned char *in, unsigned long inlen, dsa_key *key); | |
242 | |
243 int dsa_export(unsigned char *out, unsigned long *outlen, int type, dsa_key *key); | |
244 | |
245 int dsa_verify_key(dsa_key *key, int *stat); | |
246 | |
247 #endif | |
248 | |
249 #ifdef LTC_DER | |
250 /* DER handling */ | |
251 | |
252 enum { | |
253 LTC_ASN1_EOL, | |
254 LTC_ASN1_INTEGER, | |
255 LTC_ASN1_SHORT_INTEGER, | |
256 LTC_ASN1_BIT_STRING, | |
257 LTC_ASN1_OCTET_STRING, | |
258 LTC_ASN1_NULL, | |
259 LTC_ASN1_OBJECT_IDENTIFIER, | |
260 LTC_ASN1_IA5_STRING, | |
261 LTC_ASN1_PRINTABLE_STRING, | |
262 LTC_ASN1_UTCTIME, | |
263 | |
264 LTC_ASN1_CHOICE, | |
265 LTC_ASN1_SEQUENCE | |
266 }; | |
267 | |
268 typedef struct { | |
269 int type; | |
270 void *data; | |
271 unsigned long size; | |
272 int used; | |
273 } ltc_asn1_list; | |
274 | |
275 #define LTC_SET_ASN1(list, index, Type, Data, Size) \ | |
276 do { \ | |
277 int LTC_MACRO_temp = (index); \ | |
278 ltc_asn1_list *LTC_MACRO_list = (list); \ | |
279 LTC_MACRO_list[LTC_MACRO_temp].type = (Type); \ | |
280 LTC_MACRO_list[LTC_MACRO_temp].data = (Data); \ | |
281 LTC_MACRO_list[LTC_MACRO_temp].size = (Size); \ | |
282 LTC_MACRO_list[LTC_MACRO_temp].used = 0; \ | |
283 } while (0); | |
284 | |
285 /* SEQUENCE */ | |
286 int der_encode_sequence(ltc_asn1_list *list, unsigned long inlen, | |
287 unsigned char *out, unsigned long *outlen); | |
288 | |
289 int der_decode_sequence(const unsigned char *in, unsigned long inlen, | |
290 ltc_asn1_list *list, unsigned long outlen); | |
291 | |
292 int der_length_sequence(ltc_asn1_list *list, unsigned long inlen, | |
293 unsigned long *outlen); | |
294 | |
295 /* VA list handy helpers */ | |
296 int der_encode_sequence_multi(unsigned char *out, unsigned long *outlen, ...); | |
297 int der_decode_sequence_multi(const unsigned char *in, unsigned long inlen, ...); | |
298 | |
299 /* INTEGER */ | |
300 int der_encode_integer(mp_int *num, unsigned char *out, unsigned long *outlen); | |
301 int der_decode_integer(const unsigned char *in, unsigned long inlen, mp_int *num); | |
302 int der_length_integer(mp_int *num, unsigned long *len); | |
303 | |
304 /* INTEGER -- handy for 0..2^32-1 values */ | |
305 int der_decode_short_integer(const unsigned char *in, unsigned long inlen, unsigned long *num); | |
306 int der_encode_short_integer(unsigned long num, unsigned char *out, unsigned long *outlen); | |
307 int der_length_short_integer(unsigned long num, unsigned long *outlen); | |
308 | |
309 /* BIT STRING */ | |
310 int der_encode_bit_string(const unsigned char *in, unsigned long inlen, | |
311 unsigned char *out, unsigned long *outlen); | |
312 int der_decode_bit_string(const unsigned char *in, unsigned long inlen, | |
313 unsigned char *out, unsigned long *outlen); | |
314 int der_length_bit_string(unsigned long nbits, unsigned long *outlen); | |
315 | |
316 /* OCTET STRING */ | |
317 int der_encode_octet_string(const unsigned char *in, unsigned long inlen, | |
318 unsigned char *out, unsigned long *outlen); | |
319 int der_decode_octet_string(const unsigned char *in, unsigned long inlen, | |
320 unsigned char *out, unsigned long *outlen); | |
321 int der_length_octet_string(unsigned long noctets, unsigned long *outlen); | |
322 | |
323 /* OBJECT IDENTIFIER */ | |
324 int der_encode_object_identifier(unsigned long *words, unsigned long nwords, | |
325 unsigned char *out, unsigned long *outlen); | |
326 int der_decode_object_identifier(const unsigned char *in, unsigned long inlen, | |
327 unsigned long *words, unsigned long *outlen); | |
328 int der_length_object_identifier(unsigned long *words, unsigned long nwords, unsigned long *outlen); | |
329 unsigned long der_object_identifier_bits(unsigned long x); | |
330 | |
331 /* IA5 STRING */ | |
332 int der_encode_ia5_string(const unsigned char *in, unsigned long inlen, | |
333 unsigned char *out, unsigned long *outlen); | |
334 int der_decode_ia5_string(const unsigned char *in, unsigned long inlen, | |
335 unsigned char *out, unsigned long *outlen); | |
336 int der_length_ia5_string(const unsigned char *octets, unsigned long noctets, unsigned long *outlen); | |
337 | |
338 int der_ia5_char_encode(int c); | |
339 int der_ia5_value_decode(int v); | |
340 | |
341 /* Printable STRING */ | |
342 int der_encode_printable_string(const unsigned char *in, unsigned long inlen, | |
343 unsigned char *out, unsigned long *outlen); | |
344 int der_decode_printable_string(const unsigned char *in, unsigned long inlen, | |
345 unsigned char *out, unsigned long *outlen); | |
346 int der_length_printable_string(const unsigned char *octets, unsigned long noctets, unsigned long *outlen); | |
347 | |
348 int der_printable_char_encode(int c); | |
349 int der_printable_value_decode(int v); | |
350 | |
351 /* CHOICE */ | |
352 int der_decode_choice(const unsigned char *in, unsigned long *inlen, | |
353 ltc_asn1_list *list, unsigned long outlen); | |
354 | |
355 /* UTCTime */ | |
356 typedef struct { | |
357 unsigned YY, /* year */ | |
358 MM, /* month */ | |
359 DD, /* day */ | |
360 hh, /* hour */ | |
361 mm, /* minute */ | |
362 ss, /* second */ | |
363 off_dir, /* timezone offset direction 0 == +, 1 == - */ | |
364 off_hh, /* timezone offset hours */ | |
365 off_mm; /* timezone offset minutes */ | |
366 } ltc_utctime; | |
367 | |
368 int der_encode_utctime(ltc_utctime *utctime, | |
369 unsigned char *out, unsigned long *outlen); | |
370 | |
371 int der_decode_utctime(const unsigned char *in, unsigned long *inlen, | |
372 ltc_utctime *out); | |
373 | |
374 int der_length_utctime(ltc_utctime *utctime, unsigned long *outlen); | |
375 | |
376 | |
377 #endif | |
378 | |
379 /* $Source: /cvs/libtom/libtomcrypt/src/headers/tomcrypt_pk.h,v $ */ | |
380 /* $Revision: 1.30 $ */ | |
381 /* $Date: 2005/06/19 11:23:03 $ */ |