mirror of
https://github.com/PowerShell/Win32-OpenSSH.git
synced 2025-04-08 19:35:37 +02:00
Implementation of a generic wrap interface for bignum and diffie-hellman based upon Damien's wrap code in openssh-openbsd. This commit adds the generic interface along with the backing code for openssl, cng, and cng with an openssl fallback. Currently, openssl is the only provider for bignum and the diffie-hellman generic interface is only for static and negotiated oakley groups..
215 lines
3.8 KiB
C
215 lines
3.8 KiB
C
/*
|
|
* Copyright (c) 2015 Damien Miller <djm@mindrot.org>
|
|
*
|
|
* Permission to use, copy, modify, and distribute this software for any
|
|
* purpose with or without fee is hereby granted, provided that the above
|
|
* copyright notice and this permission notice appear in all copies.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
|
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
|
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
|
|
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
|
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
|
|
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
|
|
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
|
*/
|
|
|
|
#include <includes.h>
|
|
|
|
|
|
#include <sys/types.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <limits.h>
|
|
|
|
|
|
#include <openssl/bn.h>
|
|
|
|
|
|
#include "sshbuf.h"
|
|
#include "packet.h"
|
|
#include "ssherr.h"
|
|
#include "crypto-wrap.h"
|
|
|
|
struct sshbn {
|
|
BIGNUM *bn;
|
|
};
|
|
|
|
|
|
static struct sshbn *
|
|
bnwrap(BIGNUM *bn)
|
|
{
|
|
struct sshbn *ret;
|
|
|
|
if (bn == NULL)
|
|
return NULL;
|
|
|
|
if ((ret = calloc(1, sizeof(*ret))) == NULL)
|
|
return NULL;
|
|
if ((ret->bn = BN_dup(bn)) == NULL) {
|
|
free(ret);
|
|
return NULL;
|
|
}
|
|
return ret;
|
|
}
|
|
|
|
struct sshbn *
|
|
sshbn_new(void)
|
|
{
|
|
return bnwrap(BN_new());
|
|
}
|
|
|
|
void
|
|
sshbn_free(struct sshbn *bn)
|
|
{
|
|
if (bn != NULL) {
|
|
if (bn->bn != NULL)
|
|
BN_clear_free(bn->bn);
|
|
explicit_bzero(bn, sizeof(*bn));
|
|
free(bn);
|
|
}
|
|
}
|
|
|
|
int
|
|
sshbn_from(const void *d, size_t l, struct sshbn **retp)
|
|
{
|
|
struct sshbn *ret;
|
|
const u_char *dd = (const u_char *)d;
|
|
|
|
*retp = NULL;
|
|
if (l > INT_MAX)
|
|
return SSH_ERR_INVALID_ARGUMENT;
|
|
if ((ret = sshbn_new()) == NULL)
|
|
return SSH_ERR_ALLOC_FAIL;
|
|
if (BN_bin2bn(dd, (int)l, ret->bn) == NULL) {
|
|
sshbn_free(ret);
|
|
return SSH_ERR_LIBCRYPTO_ERROR;
|
|
}
|
|
*retp = ret;
|
|
return 0;
|
|
}
|
|
|
|
int
|
|
sshbn_from_hex(const char *hex, struct sshbn **retp)
|
|
{
|
|
struct sshbn *ret;
|
|
|
|
*retp = NULL;
|
|
if ((ret = sshbn_new()) == NULL)
|
|
return SSH_ERR_ALLOC_FAIL;
|
|
|
|
if (BN_hex2bn(&ret->bn, hex) <= 0) {
|
|
sshbn_free(ret);
|
|
return SSH_ERR_LIBCRYPTO_ERROR;
|
|
}
|
|
*retp = ret;
|
|
return 0;
|
|
}
|
|
|
|
int sshbn_to(const struct sshbn *a, unsigned char *to)
|
|
{
|
|
|
|
return BN_bn2bin(sshbn_bignum(a), to);
|
|
}
|
|
|
|
size_t
|
|
sshbn_bytes(const struct sshbn *bn)
|
|
{
|
|
int bytes = BN_num_bytes(bn->bn);
|
|
|
|
return bytes < 0 ? 0 : (size_t)bytes;
|
|
}
|
|
|
|
size_t
|
|
sshbn_bits(const struct sshbn *bn)
|
|
{
|
|
int bits = BN_num_bits(bn->bn);
|
|
|
|
return bits < 0 ? 0 : (size_t)bits;
|
|
}
|
|
|
|
const struct sshbn *
|
|
sshbn_value_0(void)
|
|
{
|
|
static struct sshbn *ret;
|
|
|
|
if (ret == NULL)
|
|
sshbn_from_hex("0", &ret);
|
|
return ret;
|
|
}
|
|
|
|
const struct sshbn *
|
|
sshbn_value_1(void)
|
|
{
|
|
static struct sshbn *ret;
|
|
|
|
if (ret == NULL)
|
|
sshbn_from_hex("1", &ret);
|
|
return ret;
|
|
}
|
|
|
|
|
|
|
|
int
|
|
sshbn_cmp(const struct sshbn *a, const struct sshbn *b)
|
|
{
|
|
return BN_cmp(a->bn, b->bn);
|
|
}
|
|
|
|
int
|
|
sshbn_sub(struct sshbn *r, const struct sshbn *a, const struct sshbn *b)
|
|
{
|
|
if (BN_sub(r->bn, a->bn, b->bn) != 1)
|
|
return SSH_ERR_LIBCRYPTO_ERROR;
|
|
return 0;
|
|
}
|
|
|
|
int
|
|
sshbn_is_bit_set(const struct sshbn *bn, size_t i)
|
|
{
|
|
if (i > INT_MAX)
|
|
return 0;
|
|
return BN_is_bit_set(bn->bn, (int)i);
|
|
}
|
|
|
|
/* XXX move to sshbuf.h */
|
|
int
|
|
sshbuf_get_bignum2_wrap(struct sshbuf *buf, struct sshbn *bn)
|
|
{
|
|
return sshbuf_get_bignum2(buf, bn->bn);
|
|
}
|
|
|
|
int
|
|
sshbuf_put_bignum2_wrap(struct sshbuf *buf, const struct sshbn *bn)
|
|
{
|
|
return sshbuf_put_bignum2(buf, bn->bn);
|
|
}
|
|
|
|
int
|
|
sshpkt_get_bignum2_wrap(struct ssh *ssh, struct sshbn *bn)
|
|
{
|
|
return sshpkt_get_bignum2(ssh, bn->bn);
|
|
}
|
|
|
|
int
|
|
sshpkt_put_bignum2_wrap(struct ssh *ssh, const struct sshbn *bn)
|
|
{
|
|
return sshpkt_put_bignum2(ssh, bn->bn);
|
|
}
|
|
|
|
/* bridge to unwrapped OpenSSL APIs; XXX remove later */
|
|
BIGNUM *
|
|
sshbn_bignum(struct sshbn *bn)
|
|
{
|
|
return bn->bn;
|
|
}
|
|
|
|
|
|
struct sshbn *
|
|
sshbn_from_bignum(BIGNUM *bn)
|
|
{
|
|
return bnwrap(bn);
|
|
}
|
|
|