Lines Matching refs:rsa
16 unsigned char *to, RSA *rsa, int padding);
18 unsigned char *to, RSA *rsa, int padding);
20 unsigned char *to, RSA *rsa, int padding);
22 unsigned char *to, RSA *rsa, int padding);
23 static int rsa_ossl_mod_exp(BIGNUM *r0, const BIGNUM *i, RSA *rsa,
25 static int rsa_ossl_init(RSA *rsa);
26 static int rsa_ossl_finish(RSA *rsa);
69 unsigned char *to, RSA *rsa, int padding) in rsa_ossl_public_encrypt() argument
76 if (BN_num_bits(rsa->n) > OPENSSL_RSA_MAX_MODULUS_BITS) { in rsa_ossl_public_encrypt()
81 if (BN_ucmp(rsa->n, rsa->e) <= 0) { in rsa_ossl_public_encrypt()
87 if (BN_num_bits(rsa->n) > OPENSSL_RSA_SMALL_MODULUS_BITS) { in rsa_ossl_public_encrypt()
88 if (BN_num_bits(rsa->e) > OPENSSL_RSA_MAX_PUBEXP_BITS) { in rsa_ossl_public_encrypt()
99 num = BN_num_bytes(rsa->n); in rsa_ossl_public_encrypt()
129 if (BN_ucmp(f, rsa->n) >= 0) { in rsa_ossl_public_encrypt()
136 if (rsa->flags & RSA_FLAG_CACHE_PUBLIC) in rsa_ossl_public_encrypt()
137 if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock, in rsa_ossl_public_encrypt()
138 rsa->n, ctx)) in rsa_ossl_public_encrypt()
141 if (!rsa->meth->bn_mod_exp(ret, f, rsa->e, rsa->n, ctx, in rsa_ossl_public_encrypt()
142 rsa->_method_mod_n)) in rsa_ossl_public_encrypt()
157 static BN_BLINDING *rsa_get_blinding(RSA *rsa, int *local, BN_CTX *ctx) in rsa_get_blinding() argument
161 CRYPTO_THREAD_write_lock(rsa->lock); in rsa_get_blinding()
163 if (rsa->blinding == NULL) { in rsa_get_blinding()
164 rsa->blinding = RSA_setup_blinding(rsa, ctx); in rsa_get_blinding()
167 ret = rsa->blinding; in rsa_get_blinding()
185 if (rsa->mt_blinding == NULL) { in rsa_get_blinding()
186 rsa->mt_blinding = RSA_setup_blinding(rsa, ctx); in rsa_get_blinding()
188 ret = rsa->mt_blinding; in rsa_get_blinding()
192 CRYPTO_THREAD_unlock(rsa->lock); in rsa_get_blinding()
234 unsigned char *to, RSA *rsa, int padding) in rsa_ossl_private_encrypt() argument
254 num = BN_num_bytes(rsa->n); in rsa_ossl_private_encrypt()
282 if (BN_ucmp(f, rsa->n) >= 0) { in rsa_ossl_private_encrypt()
289 if (rsa->flags & RSA_FLAG_CACHE_PUBLIC) in rsa_ossl_private_encrypt()
290 if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock, in rsa_ossl_private_encrypt()
291 rsa->n, ctx)) in rsa_ossl_private_encrypt()
294 if (!(rsa->flags & RSA_FLAG_NO_BLINDING)) { in rsa_ossl_private_encrypt()
295 blinding = rsa_get_blinding(rsa, &local_blinding, ctx); in rsa_ossl_private_encrypt()
311 if ((rsa->flags & RSA_FLAG_EXT_PKEY) || in rsa_ossl_private_encrypt()
312 (rsa->version == RSA_ASN1_VERSION_MULTI) || in rsa_ossl_private_encrypt()
313 ((rsa->p != NULL) && in rsa_ossl_private_encrypt()
314 (rsa->q != NULL) && in rsa_ossl_private_encrypt()
315 (rsa->dmp1 != NULL) && (rsa->dmq1 != NULL) && (rsa->iqmp != NULL))) { in rsa_ossl_private_encrypt()
316 if (!rsa->meth->rsa_mod_exp(ret, f, rsa, ctx)) in rsa_ossl_private_encrypt()
324 if (rsa->d == NULL) { in rsa_ossl_private_encrypt()
329 BN_with_flags(d, rsa->d, BN_FLG_CONSTTIME); in rsa_ossl_private_encrypt()
331 if (!rsa->meth->bn_mod_exp(ret, f, d, rsa->n, ctx, in rsa_ossl_private_encrypt()
332 rsa->_method_mod_n)) { in rsa_ossl_private_encrypt()
345 if (!BN_sub(f, rsa->n, ret)) in rsa_ossl_private_encrypt()
368 unsigned char *to, RSA *rsa, int padding) in rsa_ossl_private_decrypt() argument
388 num = BN_num_bytes(rsa->n); in rsa_ossl_private_decrypt()
409 if (BN_ucmp(f, rsa->n) >= 0) { in rsa_ossl_private_decrypt()
415 if (!(rsa->flags & RSA_FLAG_NO_BLINDING)) { in rsa_ossl_private_decrypt()
416 blinding = rsa_get_blinding(rsa, &local_blinding, ctx); in rsa_ossl_private_decrypt()
433 if ((rsa->flags & RSA_FLAG_EXT_PKEY) || in rsa_ossl_private_decrypt()
434 (rsa->version == RSA_ASN1_VERSION_MULTI) || in rsa_ossl_private_decrypt()
435 ((rsa->p != NULL) && in rsa_ossl_private_decrypt()
436 (rsa->q != NULL) && in rsa_ossl_private_decrypt()
437 (rsa->dmp1 != NULL) && (rsa->dmq1 != NULL) && (rsa->iqmp != NULL))) { in rsa_ossl_private_decrypt()
438 if (!rsa->meth->rsa_mod_exp(ret, f, rsa, ctx)) in rsa_ossl_private_decrypt()
446 if (rsa->d == NULL) { in rsa_ossl_private_decrypt()
451 BN_with_flags(d, rsa->d, BN_FLG_CONSTTIME); in rsa_ossl_private_decrypt()
453 if (rsa->flags & RSA_FLAG_CACHE_PUBLIC) in rsa_ossl_private_decrypt()
454 if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock, in rsa_ossl_private_decrypt()
455 rsa->n, ctx)) { in rsa_ossl_private_decrypt()
459 if (!rsa->meth->bn_mod_exp(ret, f, d, rsa->n, ctx, in rsa_ossl_private_decrypt()
460 rsa->_method_mod_n)) { in rsa_ossl_private_decrypt()
473 j = ossl_bn_rsa_do_unblind(ret, blinding, unblind, rsa->n, ctx, in rsa_ossl_private_decrypt()
512 unsigned char *to, RSA *rsa, int padding) in rsa_ossl_public_decrypt() argument
519 if (BN_num_bits(rsa->n) > OPENSSL_RSA_MAX_MODULUS_BITS) { in rsa_ossl_public_decrypt()
524 if (BN_ucmp(rsa->n, rsa->e) <= 0) { in rsa_ossl_public_decrypt()
530 if (BN_num_bits(rsa->n) > OPENSSL_RSA_SMALL_MODULUS_BITS) { in rsa_ossl_public_decrypt()
531 if (BN_num_bits(rsa->e) > OPENSSL_RSA_MAX_PUBEXP_BITS) { in rsa_ossl_public_decrypt()
542 num = BN_num_bytes(rsa->n); in rsa_ossl_public_decrypt()
561 if (BN_ucmp(f, rsa->n) >= 0) { in rsa_ossl_public_decrypt()
567 if (rsa->flags & RSA_FLAG_CACHE_PUBLIC) in rsa_ossl_public_decrypt()
568 if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock, in rsa_ossl_public_decrypt()
569 rsa->n, ctx)) in rsa_ossl_public_decrypt()
572 if (!rsa->meth->bn_mod_exp(ret, f, rsa->e, rsa->n, ctx, in rsa_ossl_public_decrypt()
573 rsa->_method_mod_n)) in rsa_ossl_public_decrypt()
577 if (!BN_sub(ret, rsa->n, ret)) in rsa_ossl_public_decrypt()
606 static int rsa_ossl_mod_exp(BIGNUM *r0, const BIGNUM *I, RSA *rsa, BN_CTX *ctx) in rsa_ossl_mod_exp() argument
621 if (rsa->version == RSA_ASN1_VERSION_MULTI in rsa_ossl_mod_exp()
622 && ((ex_primes = sk_RSA_PRIME_INFO_num(rsa->prime_infos)) <= 0 in rsa_ossl_mod_exp()
626 if (rsa->flags & RSA_FLAG_CACHE_PRIVATE) { in rsa_ossl_mod_exp()
636 if (!(BN_with_flags(factor, rsa->p, BN_FLG_CONSTTIME), in rsa_ossl_mod_exp()
637 BN_MONT_CTX_set_locked(&rsa->_method_mod_p, rsa->lock, in rsa_ossl_mod_exp()
639 || !(BN_with_flags(factor, rsa->q, BN_FLG_CONSTTIME), in rsa_ossl_mod_exp()
640 BN_MONT_CTX_set_locked(&rsa->_method_mod_q, rsa->lock, in rsa_ossl_mod_exp()
646 pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i); in rsa_ossl_mod_exp()
648 if (!BN_MONT_CTX_set_locked(&pinfo->m, rsa->lock, factor, ctx)) { in rsa_ossl_mod_exp()
659 && (rsa->meth->bn_mod_exp == BN_mod_exp_mont) in rsa_ossl_mod_exp()
660 && (BN_num_bits(rsa->q) == BN_num_bits(rsa->p)); in rsa_ossl_mod_exp()
663 if (rsa->flags & RSA_FLAG_CACHE_PUBLIC) in rsa_ossl_mod_exp()
664 if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock, in rsa_ossl_mod_exp()
665 rsa->n, ctx)) in rsa_ossl_mod_exp()
677 !bn_from_mont_fixed_top(m1, I, rsa->_method_mod_q, ctx) in rsa_ossl_mod_exp()
678 || !bn_to_mont_fixed_top(m1, m1, rsa->_method_mod_q, ctx) in rsa_ossl_mod_exp()
680 || !BN_mod_exp_mont_consttime(m1, m1, rsa->dmq1, rsa->q, ctx, in rsa_ossl_mod_exp()
681 rsa->_method_mod_q) in rsa_ossl_mod_exp()
683 || !bn_from_mont_fixed_top(r1, I, rsa->_method_mod_p, ctx) in rsa_ossl_mod_exp()
684 || !bn_to_mont_fixed_top(r1, r1, rsa->_method_mod_p, ctx) in rsa_ossl_mod_exp()
686 || !BN_mod_exp_mont_consttime(r1, r1, rsa->dmp1, rsa->p, ctx, in rsa_ossl_mod_exp()
687 rsa->_method_mod_p) in rsa_ossl_mod_exp()
695 || !bn_mod_sub_fixed_top(r1, r1, m1, rsa->p) in rsa_ossl_mod_exp()
698 || !bn_to_mont_fixed_top(r1, r1, rsa->_method_mod_p, ctx) in rsa_ossl_mod_exp()
699 || !bn_mul_mont_fixed_top(r1, r1, rsa->iqmp, rsa->_method_mod_p, in rsa_ossl_mod_exp()
702 || !bn_mul_fixed_top(r0, r1, rsa->q, ctx) in rsa_ossl_mod_exp()
703 || !bn_mod_add_fixed_top(r0, r0, m1, rsa->n)) in rsa_ossl_mod_exp()
716 if (!BN_mod(r1, c, rsa->q, ctx)) { in rsa_ossl_mod_exp()
727 BN_with_flags(dmq1, rsa->dmq1, BN_FLG_CONSTTIME); in rsa_ossl_mod_exp()
730 if (!rsa->meth->bn_mod_exp(m1, r1, dmq1, rsa->q, ctx, in rsa_ossl_mod_exp()
731 rsa->_method_mod_q)) { in rsa_ossl_mod_exp()
741 if (!BN_mod(r1, c, rsa->p, ctx)) { in rsa_ossl_mod_exp()
753 BN_with_flags(dmp1, rsa->dmp1, BN_FLG_CONSTTIME); in rsa_ossl_mod_exp()
756 if (!rsa->meth->bn_mod_exp(r0, r1, dmp1, rsa->p, ctx, in rsa_ossl_mod_exp()
757 rsa->_method_mod_p)) { in rsa_ossl_mod_exp()
792 pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i); in rsa_ossl_mod_exp()
804 if (!rsa->meth->bn_mod_exp(m[i], r1, di, pinfo->r, ctx, pinfo->m)) { in rsa_ossl_mod_exp()
822 if (!BN_add(r0, r0, rsa->p)) in rsa_ossl_mod_exp()
825 if (!BN_mul(r1, r0, rsa->iqmp, ctx)) in rsa_ossl_mod_exp()
834 if (!BN_mod(r0, pr1, rsa->p, ctx)) { in rsa_ossl_mod_exp()
850 if (!BN_add(r0, r0, rsa->p)) in rsa_ossl_mod_exp()
852 if (!BN_mul(r1, r0, rsa->q, ctx)) in rsa_ossl_mod_exp()
865 pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i); in rsa_ossl_mod_exp()
901 if (rsa->e && rsa->n) { in rsa_ossl_mod_exp()
902 if (rsa->meth->bn_mod_exp == BN_mod_exp_mont) { in rsa_ossl_mod_exp()
903 if (!BN_mod_exp_mont(vrfy, r0, rsa->e, rsa->n, ctx, in rsa_ossl_mod_exp()
904 rsa->_method_mod_n)) in rsa_ossl_mod_exp()
908 if (!rsa->meth->bn_mod_exp(vrfy, r0, rsa->e, rsa->n, ctx, in rsa_ossl_mod_exp()
909 rsa->_method_mod_n)) in rsa_ossl_mod_exp()
925 if (!BN_mod(vrfy, vrfy, rsa->n, ctx)) in rsa_ossl_mod_exp()
928 if (!BN_add(vrfy, vrfy, rsa->n)) in rsa_ossl_mod_exp()
940 BN_with_flags(d, rsa->d, BN_FLG_CONSTTIME); in rsa_ossl_mod_exp()
942 if (!rsa->meth->bn_mod_exp(r0, I, d, rsa->n, ctx, in rsa_ossl_mod_exp()
943 rsa->_method_mod_n)) { in rsa_ossl_mod_exp()
966 static int rsa_ossl_init(RSA *rsa) in rsa_ossl_init() argument
968 rsa->flags |= RSA_FLAG_CACHE_PUBLIC | RSA_FLAG_CACHE_PRIVATE; in rsa_ossl_init()
972 static int rsa_ossl_finish(RSA *rsa) in rsa_ossl_finish() argument
977 BN_MONT_CTX_free(rsa->_method_mod_n); in rsa_ossl_finish()
978 BN_MONT_CTX_free(rsa->_method_mod_p); in rsa_ossl_finish()
979 BN_MONT_CTX_free(rsa->_method_mod_q); in rsa_ossl_finish()
980 for (i = 0; i < sk_RSA_PRIME_INFO_num(rsa->prime_infos); i++) { in rsa_ossl_finish()
981 pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i); in rsa_ossl_finish()