1 /*
2 * Copyright 1995-2019 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the OpenSSL license (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10 #include <stdio.h>
11 #include "internal/cryptlib.h"
12 #include <openssl/evp.h>
13 #include <openssl/objects.h>
14 #include "crypto/evp.h"
15 #include "evp_local.h"
16
EVP_CIPHER_param_to_asn1(EVP_CIPHER_CTX * c,ASN1_TYPE * type)17 int EVP_CIPHER_param_to_asn1(EVP_CIPHER_CTX *c, ASN1_TYPE *type)
18 {
19 int ret;
20
21 if (c->cipher->set_asn1_parameters != NULL)
22 ret = c->cipher->set_asn1_parameters(c, type);
23 else if (c->cipher->flags & EVP_CIPH_FLAG_DEFAULT_ASN1) {
24 switch (EVP_CIPHER_CTX_mode(c)) {
25 case EVP_CIPH_WRAP_MODE:
26 if (EVP_CIPHER_CTX_nid(c) == NID_id_smime_alg_CMS3DESwrap)
27 ASN1_TYPE_set(type, V_ASN1_NULL, NULL);
28 ret = 1;
29 break;
30
31 case EVP_CIPH_GCM_MODE:
32 case EVP_CIPH_CCM_MODE:
33 case EVP_CIPH_XTS_MODE:
34 case EVP_CIPH_OCB_MODE:
35 ret = -2;
36 break;
37
38 default:
39 ret = EVP_CIPHER_set_asn1_iv(c, type);
40 }
41 } else
42 ret = -1;
43 if (ret <= 0)
44 EVPerr(EVP_F_EVP_CIPHER_PARAM_TO_ASN1, ret == -2 ?
45 ASN1_R_UNSUPPORTED_CIPHER :
46 EVP_R_CIPHER_PARAMETER_ERROR);
47 if (ret < -1)
48 ret = -1;
49 return ret;
50 }
51
EVP_CIPHER_asn1_to_param(EVP_CIPHER_CTX * c,ASN1_TYPE * type)52 int EVP_CIPHER_asn1_to_param(EVP_CIPHER_CTX *c, ASN1_TYPE *type)
53 {
54 int ret;
55
56 if (c->cipher->get_asn1_parameters != NULL)
57 ret = c->cipher->get_asn1_parameters(c, type);
58 else if (c->cipher->flags & EVP_CIPH_FLAG_DEFAULT_ASN1) {
59 switch (EVP_CIPHER_CTX_mode(c)) {
60
61 case EVP_CIPH_WRAP_MODE:
62 ret = 1;
63 break;
64
65 case EVP_CIPH_GCM_MODE:
66 case EVP_CIPH_CCM_MODE:
67 case EVP_CIPH_XTS_MODE:
68 case EVP_CIPH_OCB_MODE:
69 ret = -2;
70 break;
71
72 default:
73 ret = EVP_CIPHER_get_asn1_iv(c, type);
74 break;
75 }
76 } else
77 ret = -1;
78 if (ret <= 0)
79 EVPerr(EVP_F_EVP_CIPHER_ASN1_TO_PARAM, ret == -2 ?
80 EVP_R_UNSUPPORTED_CIPHER :
81 EVP_R_CIPHER_PARAMETER_ERROR);
82 if (ret < -1)
83 ret = -1;
84 return ret;
85 }
86
EVP_CIPHER_get_asn1_iv(EVP_CIPHER_CTX * c,ASN1_TYPE * type)87 int EVP_CIPHER_get_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type)
88 {
89 int i = 0;
90 unsigned int l;
91
92 if (type != NULL) {
93 l = EVP_CIPHER_CTX_iv_length(c);
94 OPENSSL_assert(l <= sizeof(c->iv));
95 i = ASN1_TYPE_get_octetstring(type, c->oiv, l);
96 if (i != (int)l)
97 return -1;
98 else if (i > 0)
99 memcpy(c->iv, c->oiv, l);
100 }
101 return i;
102 }
103
EVP_CIPHER_set_asn1_iv(EVP_CIPHER_CTX * c,ASN1_TYPE * type)104 int EVP_CIPHER_set_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type)
105 {
106 int i = 0;
107 unsigned int j;
108
109 if (type != NULL) {
110 j = EVP_CIPHER_CTX_iv_length(c);
111 OPENSSL_assert(j <= sizeof(c->iv));
112 i = ASN1_TYPE_set_octetstring(type, c->oiv, j);
113 }
114 return i;
115 }
116
117 /* Convert the various cipher NIDs and dummies to a proper OID NID */
EVP_CIPHER_type(const EVP_CIPHER * ctx)118 int EVP_CIPHER_type(const EVP_CIPHER *ctx)
119 {
120 int nid;
121 ASN1_OBJECT *otmp;
122 nid = EVP_CIPHER_nid(ctx);
123
124 switch (nid) {
125
126 case NID_rc2_cbc:
127 case NID_rc2_64_cbc:
128 case NID_rc2_40_cbc:
129
130 return NID_rc2_cbc;
131
132 case NID_rc4:
133 case NID_rc4_40:
134
135 return NID_rc4;
136
137 case NID_aes_128_cfb128:
138 case NID_aes_128_cfb8:
139 case NID_aes_128_cfb1:
140
141 return NID_aes_128_cfb128;
142
143 case NID_aes_192_cfb128:
144 case NID_aes_192_cfb8:
145 case NID_aes_192_cfb1:
146
147 return NID_aes_192_cfb128;
148
149 case NID_aes_256_cfb128:
150 case NID_aes_256_cfb8:
151 case NID_aes_256_cfb1:
152
153 return NID_aes_256_cfb128;
154
155 case NID_des_cfb64:
156 case NID_des_cfb8:
157 case NID_des_cfb1:
158
159 return NID_des_cfb64;
160
161 case NID_des_ede3_cfb64:
162 case NID_des_ede3_cfb8:
163 case NID_des_ede3_cfb1:
164
165 return NID_des_cfb64;
166
167 default:
168 /* Check it has an OID and it is valid */
169 otmp = OBJ_nid2obj(nid);
170 if (OBJ_get0_data(otmp) == NULL)
171 nid = NID_undef;
172 ASN1_OBJECT_free(otmp);
173 return nid;
174 }
175 }
176
EVP_CIPHER_block_size(const EVP_CIPHER * e)177 int EVP_CIPHER_block_size(const EVP_CIPHER *e)
178 {
179 return e->block_size;
180 }
181
EVP_CIPHER_CTX_block_size(const EVP_CIPHER_CTX * ctx)182 int EVP_CIPHER_CTX_block_size(const EVP_CIPHER_CTX *ctx)
183 {
184 return ctx->cipher->block_size;
185 }
186
EVP_CIPHER_impl_ctx_size(const EVP_CIPHER * e)187 int EVP_CIPHER_impl_ctx_size(const EVP_CIPHER *e)
188 {
189 return e->ctx_size;
190 }
191
EVP_Cipher(EVP_CIPHER_CTX * ctx,unsigned char * out,const unsigned char * in,unsigned int inl)192 int EVP_Cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
193 const unsigned char *in, unsigned int inl)
194 {
195 return ctx->cipher->do_cipher(ctx, out, in, inl);
196 }
197
EVP_CIPHER_CTX_cipher(const EVP_CIPHER_CTX * ctx)198 const EVP_CIPHER *EVP_CIPHER_CTX_cipher(const EVP_CIPHER_CTX *ctx)
199 {
200 return ctx->cipher;
201 }
202
EVP_CIPHER_CTX_encrypting(const EVP_CIPHER_CTX * ctx)203 int EVP_CIPHER_CTX_encrypting(const EVP_CIPHER_CTX *ctx)
204 {
205 return ctx->encrypt;
206 }
207
EVP_CIPHER_flags(const EVP_CIPHER * cipher)208 unsigned long EVP_CIPHER_flags(const EVP_CIPHER *cipher)
209 {
210 return cipher->flags;
211 }
212
EVP_CIPHER_CTX_get_app_data(const EVP_CIPHER_CTX * ctx)213 void *EVP_CIPHER_CTX_get_app_data(const EVP_CIPHER_CTX *ctx)
214 {
215 return ctx->app_data;
216 }
217
EVP_CIPHER_CTX_set_app_data(EVP_CIPHER_CTX * ctx,void * data)218 void EVP_CIPHER_CTX_set_app_data(EVP_CIPHER_CTX *ctx, void *data)
219 {
220 ctx->app_data = data;
221 }
222
EVP_CIPHER_CTX_get_cipher_data(const EVP_CIPHER_CTX * ctx)223 void *EVP_CIPHER_CTX_get_cipher_data(const EVP_CIPHER_CTX *ctx)
224 {
225 return ctx->cipher_data;
226 }
227
EVP_CIPHER_CTX_set_cipher_data(EVP_CIPHER_CTX * ctx,void * cipher_data)228 void *EVP_CIPHER_CTX_set_cipher_data(EVP_CIPHER_CTX *ctx, void *cipher_data)
229 {
230 void *old_cipher_data;
231
232 old_cipher_data = ctx->cipher_data;
233 ctx->cipher_data = cipher_data;
234
235 return old_cipher_data;
236 }
237
EVP_CIPHER_iv_length(const EVP_CIPHER * cipher)238 int EVP_CIPHER_iv_length(const EVP_CIPHER *cipher)
239 {
240 return cipher->iv_len;
241 }
242
EVP_CIPHER_CTX_iv_length(const EVP_CIPHER_CTX * ctx)243 int EVP_CIPHER_CTX_iv_length(const EVP_CIPHER_CTX *ctx)
244 {
245 int i, rv;
246
247 if ((EVP_CIPHER_flags(ctx->cipher) & EVP_CIPH_CUSTOM_IV_LENGTH) != 0) {
248 rv = EVP_CIPHER_CTX_ctrl((EVP_CIPHER_CTX *)ctx, EVP_CTRL_GET_IVLEN,
249 0, &i);
250 return (rv == 1) ? i : -1;
251 }
252 return ctx->cipher->iv_len;
253 }
254
EVP_CIPHER_CTX_original_iv(const EVP_CIPHER_CTX * ctx)255 const unsigned char *EVP_CIPHER_CTX_original_iv(const EVP_CIPHER_CTX *ctx)
256 {
257 return ctx->oiv;
258 }
259
EVP_CIPHER_CTX_iv(const EVP_CIPHER_CTX * ctx)260 const unsigned char *EVP_CIPHER_CTX_iv(const EVP_CIPHER_CTX *ctx)
261 {
262 return ctx->iv;
263 }
264
EVP_CIPHER_CTX_iv_noconst(EVP_CIPHER_CTX * ctx)265 unsigned char *EVP_CIPHER_CTX_iv_noconst(EVP_CIPHER_CTX *ctx)
266 {
267 return ctx->iv;
268 }
269
EVP_CIPHER_CTX_buf_noconst(EVP_CIPHER_CTX * ctx)270 unsigned char *EVP_CIPHER_CTX_buf_noconst(EVP_CIPHER_CTX *ctx)
271 {
272 return ctx->buf;
273 }
274
EVP_CIPHER_CTX_num(const EVP_CIPHER_CTX * ctx)275 int EVP_CIPHER_CTX_num(const EVP_CIPHER_CTX *ctx)
276 {
277 return ctx->num;
278 }
279
EVP_CIPHER_CTX_set_num(EVP_CIPHER_CTX * ctx,int num)280 void EVP_CIPHER_CTX_set_num(EVP_CIPHER_CTX *ctx, int num)
281 {
282 ctx->num = num;
283 }
284
EVP_CIPHER_key_length(const EVP_CIPHER * cipher)285 int EVP_CIPHER_key_length(const EVP_CIPHER *cipher)
286 {
287 return cipher->key_len;
288 }
289
EVP_CIPHER_CTX_key_length(const EVP_CIPHER_CTX * ctx)290 int EVP_CIPHER_CTX_key_length(const EVP_CIPHER_CTX *ctx)
291 {
292 return ctx->key_len;
293 }
294
EVP_CIPHER_nid(const EVP_CIPHER * cipher)295 int EVP_CIPHER_nid(const EVP_CIPHER *cipher)
296 {
297 return cipher->nid;
298 }
299
EVP_CIPHER_CTX_nid(const EVP_CIPHER_CTX * ctx)300 int EVP_CIPHER_CTX_nid(const EVP_CIPHER_CTX *ctx)
301 {
302 return ctx->cipher->nid;
303 }
304
EVP_MD_block_size(const EVP_MD * md)305 int EVP_MD_block_size(const EVP_MD *md)
306 {
307 return md->block_size;
308 }
309
EVP_MD_type(const EVP_MD * md)310 int EVP_MD_type(const EVP_MD *md)
311 {
312 return md->type;
313 }
314
EVP_MD_pkey_type(const EVP_MD * md)315 int EVP_MD_pkey_type(const EVP_MD *md)
316 {
317 return md->pkey_type;
318 }
319
EVP_MD_size(const EVP_MD * md)320 int EVP_MD_size(const EVP_MD *md)
321 {
322 if (!md) {
323 EVPerr(EVP_F_EVP_MD_SIZE, EVP_R_MESSAGE_DIGEST_IS_NULL);
324 return -1;
325 }
326 return md->md_size;
327 }
328
EVP_MD_flags(const EVP_MD * md)329 unsigned long EVP_MD_flags(const EVP_MD *md)
330 {
331 return md->flags;
332 }
333
EVP_MD_meth_new(int md_type,int pkey_type)334 EVP_MD *EVP_MD_meth_new(int md_type, int pkey_type)
335 {
336 EVP_MD *md = OPENSSL_zalloc(sizeof(*md));
337
338 if (md != NULL) {
339 md->type = md_type;
340 md->pkey_type = pkey_type;
341 }
342 return md;
343 }
EVP_MD_meth_dup(const EVP_MD * md)344 EVP_MD *EVP_MD_meth_dup(const EVP_MD *md)
345 {
346 EVP_MD *to = EVP_MD_meth_new(md->type, md->pkey_type);
347
348 if (to != NULL)
349 memcpy(to, md, sizeof(*to));
350 return to;
351 }
EVP_MD_meth_free(EVP_MD * md)352 void EVP_MD_meth_free(EVP_MD *md)
353 {
354 OPENSSL_free(md);
355 }
EVP_MD_meth_set_input_blocksize(EVP_MD * md,int blocksize)356 int EVP_MD_meth_set_input_blocksize(EVP_MD *md, int blocksize)
357 {
358 md->block_size = blocksize;
359 return 1;
360 }
EVP_MD_meth_set_result_size(EVP_MD * md,int resultsize)361 int EVP_MD_meth_set_result_size(EVP_MD *md, int resultsize)
362 {
363 md->md_size = resultsize;
364 return 1;
365 }
EVP_MD_meth_set_app_datasize(EVP_MD * md,int datasize)366 int EVP_MD_meth_set_app_datasize(EVP_MD *md, int datasize)
367 {
368 md->ctx_size = datasize;
369 return 1;
370 }
EVP_MD_meth_set_flags(EVP_MD * md,unsigned long flags)371 int EVP_MD_meth_set_flags(EVP_MD *md, unsigned long flags)
372 {
373 md->flags = flags;
374 return 1;
375 }
EVP_MD_meth_set_init(EVP_MD * md,int (* init)(EVP_MD_CTX * ctx))376 int EVP_MD_meth_set_init(EVP_MD *md, int (*init)(EVP_MD_CTX *ctx))
377 {
378 md->init = init;
379 return 1;
380 }
EVP_MD_meth_set_update(EVP_MD * md,int (* update)(EVP_MD_CTX * ctx,const void * data,size_t count))381 int EVP_MD_meth_set_update(EVP_MD *md, int (*update)(EVP_MD_CTX *ctx,
382 const void *data,
383 size_t count))
384 {
385 md->update = update;
386 return 1;
387 }
EVP_MD_meth_set_final(EVP_MD * md,int (* final)(EVP_MD_CTX * ctx,unsigned char * md))388 int EVP_MD_meth_set_final(EVP_MD *md, int (*final)(EVP_MD_CTX *ctx,
389 unsigned char *md))
390 {
391 md->final = final;
392 return 1;
393 }
EVP_MD_meth_set_copy(EVP_MD * md,int (* copy)(EVP_MD_CTX * to,const EVP_MD_CTX * from))394 int EVP_MD_meth_set_copy(EVP_MD *md, int (*copy)(EVP_MD_CTX *to,
395 const EVP_MD_CTX *from))
396 {
397 md->copy = copy;
398 return 1;
399 }
EVP_MD_meth_set_cleanup(EVP_MD * md,int (* cleanup)(EVP_MD_CTX * ctx))400 int EVP_MD_meth_set_cleanup(EVP_MD *md, int (*cleanup)(EVP_MD_CTX *ctx))
401 {
402 md->cleanup = cleanup;
403 return 1;
404 }
EVP_MD_meth_set_ctrl(EVP_MD * md,int (* ctrl)(EVP_MD_CTX * ctx,int cmd,int p1,void * p2))405 int EVP_MD_meth_set_ctrl(EVP_MD *md, int (*ctrl)(EVP_MD_CTX *ctx, int cmd,
406 int p1, void *p2))
407 {
408 md->md_ctrl = ctrl;
409 return 1;
410 }
411
EVP_MD_meth_get_input_blocksize(const EVP_MD * md)412 int EVP_MD_meth_get_input_blocksize(const EVP_MD *md)
413 {
414 return md->block_size;
415 }
EVP_MD_meth_get_result_size(const EVP_MD * md)416 int EVP_MD_meth_get_result_size(const EVP_MD *md)
417 {
418 return md->md_size;
419 }
EVP_MD_meth_get_app_datasize(const EVP_MD * md)420 int EVP_MD_meth_get_app_datasize(const EVP_MD *md)
421 {
422 return md->ctx_size;
423 }
EVP_MD_meth_get_flags(const EVP_MD * md)424 unsigned long EVP_MD_meth_get_flags(const EVP_MD *md)
425 {
426 return md->flags;
427 }
EVP_MD_meth_get_init(const EVP_MD * md)428 int (*EVP_MD_meth_get_init(const EVP_MD *md))(EVP_MD_CTX *ctx)
429 {
430 return md->init;
431 }
EVP_MD_meth_get_update(const EVP_MD * md)432 int (*EVP_MD_meth_get_update(const EVP_MD *md))(EVP_MD_CTX *ctx,
433 const void *data,
434 size_t count)
435 {
436 return md->update;
437 }
EVP_MD_meth_get_final(const EVP_MD * md)438 int (*EVP_MD_meth_get_final(const EVP_MD *md))(EVP_MD_CTX *ctx,
439 unsigned char *md)
440 {
441 return md->final;
442 }
EVP_MD_meth_get_copy(const EVP_MD * md)443 int (*EVP_MD_meth_get_copy(const EVP_MD *md))(EVP_MD_CTX *to,
444 const EVP_MD_CTX *from)
445 {
446 return md->copy;
447 }
EVP_MD_meth_get_cleanup(const EVP_MD * md)448 int (*EVP_MD_meth_get_cleanup(const EVP_MD *md))(EVP_MD_CTX *ctx)
449 {
450 return md->cleanup;
451 }
EVP_MD_meth_get_ctrl(const EVP_MD * md)452 int (*EVP_MD_meth_get_ctrl(const EVP_MD *md))(EVP_MD_CTX *ctx, int cmd,
453 int p1, void *p2)
454 {
455 return md->md_ctrl;
456 }
457
EVP_MD_CTX_md(const EVP_MD_CTX * ctx)458 const EVP_MD *EVP_MD_CTX_md(const EVP_MD_CTX *ctx)
459 {
460 if (!ctx)
461 return NULL;
462 return ctx->digest;
463 }
464
EVP_MD_CTX_pkey_ctx(const EVP_MD_CTX * ctx)465 EVP_PKEY_CTX *EVP_MD_CTX_pkey_ctx(const EVP_MD_CTX *ctx)
466 {
467 return ctx->pctx;
468 }
469
EVP_MD_CTX_set_pkey_ctx(EVP_MD_CTX * ctx,EVP_PKEY_CTX * pctx)470 void EVP_MD_CTX_set_pkey_ctx(EVP_MD_CTX *ctx, EVP_PKEY_CTX *pctx)
471 {
472 /*
473 * it's reasonable to set NULL pctx (a.k.a clear the ctx->pctx), so
474 * we have to deal with the cleanup job here.
475 */
476 if (!EVP_MD_CTX_test_flags(ctx, EVP_MD_CTX_FLAG_KEEP_PKEY_CTX))
477 EVP_PKEY_CTX_free(ctx->pctx);
478
479 ctx->pctx = pctx;
480
481 if (pctx != NULL) {
482 /* make sure pctx is not freed when destroying EVP_MD_CTX */
483 EVP_MD_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_KEEP_PKEY_CTX);
484 } else {
485 EVP_MD_CTX_clear_flags(ctx, EVP_MD_CTX_FLAG_KEEP_PKEY_CTX);
486 }
487 }
488
EVP_MD_CTX_md_data(const EVP_MD_CTX * ctx)489 void *EVP_MD_CTX_md_data(const EVP_MD_CTX *ctx)
490 {
491 return ctx->md_data;
492 }
493
EVP_MD_CTX_update_fn(EVP_MD_CTX * ctx)494 int (*EVP_MD_CTX_update_fn(EVP_MD_CTX *ctx))(EVP_MD_CTX *ctx,
495 const void *data, size_t count)
496 {
497 return ctx->update;
498 }
499
EVP_MD_CTX_set_update_fn(EVP_MD_CTX * ctx,int (* update)(EVP_MD_CTX * ctx,const void * data,size_t count))500 void EVP_MD_CTX_set_update_fn(EVP_MD_CTX *ctx,
501 int (*update) (EVP_MD_CTX *ctx,
502 const void *data, size_t count))
503 {
504 ctx->update = update;
505 }
506
EVP_MD_CTX_set_flags(EVP_MD_CTX * ctx,int flags)507 void EVP_MD_CTX_set_flags(EVP_MD_CTX *ctx, int flags)
508 {
509 ctx->flags |= flags;
510 }
511
EVP_MD_CTX_clear_flags(EVP_MD_CTX * ctx,int flags)512 void EVP_MD_CTX_clear_flags(EVP_MD_CTX *ctx, int flags)
513 {
514 ctx->flags &= ~flags;
515 }
516
EVP_MD_CTX_test_flags(const EVP_MD_CTX * ctx,int flags)517 int EVP_MD_CTX_test_flags(const EVP_MD_CTX *ctx, int flags)
518 {
519 return (ctx->flags & flags);
520 }
521
EVP_CIPHER_CTX_set_flags(EVP_CIPHER_CTX * ctx,int flags)522 void EVP_CIPHER_CTX_set_flags(EVP_CIPHER_CTX *ctx, int flags)
523 {
524 ctx->flags |= flags;
525 }
526
EVP_CIPHER_CTX_clear_flags(EVP_CIPHER_CTX * ctx,int flags)527 void EVP_CIPHER_CTX_clear_flags(EVP_CIPHER_CTX *ctx, int flags)
528 {
529 ctx->flags &= ~flags;
530 }
531
EVP_CIPHER_CTX_test_flags(const EVP_CIPHER_CTX * ctx,int flags)532 int EVP_CIPHER_CTX_test_flags(const EVP_CIPHER_CTX *ctx, int flags)
533 {
534 return (ctx->flags & flags);
535 }
536