/* rsa.h * * Copyright (C) 2006-2023 wolfSSL Inc. * * This file is part of wolfSSL. * * wolfSSL is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * wolfSSL is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA */ /* rsa.h for openSSL */ #ifndef WOLFSSL_RSA_H_ #define WOLFSSL_RSA_H_ #include #include #include #ifdef __cplusplus extern "C" { #endif #if defined(OPENSSL_EXTRA) || defined(OPENSSL_EXTRA_X509_SMALL) /* Padding types */ #define RSA_PKCS1_PADDING 0 #define RSA_PKCS1_OAEP_PADDING 1 #define RSA_PKCS1_PSS_PADDING 2 #define RSA_NO_PADDING 3 /* Emulate OpenSSL flags */ #define RSA_METHOD_FLAG_NO_CHECK (1 << 1) #define RSA_FLAG_CACHE_PUBLIC (1 << 2) #define RSA_FLAG_CACHE_PRIVATE (1 << 3) #define RSA_FLAG_BLINDING (1 << 4) #define RSA_FLAG_THREAD_SAFE (1 << 5) #define RSA_FLAG_EXT_PKEY (1 << 6) #define RSA_FLAG_NO_BLINDING (1 << 7) #define RSA_FLAG_NO_CONSTTIME (1 << 8) /* Salt length same as digest length */ #define RSA_PSS_SALTLEN_DIGEST (-1) /* Old max salt length */ #define RSA_PSS_SALTLEN_MAX_SIGN (-2) /* Verification only value to indicate to discover salt length. */ #define RSA_PSS_SALTLEN_AUTO (-2) /* Max salt length */ #define RSA_PSS_SALTLEN_MAX (-3) #endif /* OPENSSL_EXTRA || OPENSSL_EXTRA_X509_SMALL */ typedef struct WOLFSSL_RSA_METHOD { /* Flags of RSA key implementation. */ int flags; /* Name of RSA key implementation. */ char *name; /* RSA method dynamically allocated. */ word16 dynamic:1; } WOLFSSL_RSA_METHOD; #ifndef WOLFSSL_RSA_TYPE_DEFINED /* guard on redeclaration */ #define WOLFSSL_RSA_TYPE_DEFINED /* RSA key compatible with OpenSSL. */ typedef struct WOLFSSL_RSA { WOLFSSL_BIGNUM* n; /* Modulus. */ WOLFSSL_BIGNUM* e; /* Public exponent. */ WOLFSSL_BIGNUM* d; /* Private exponent. */ WOLFSSL_BIGNUM* p; /* First prime. */ WOLFSSL_BIGNUM* q; /* Second prime. */ WOLFSSL_BIGNUM* dmp1; /* dP = d mod (p - 1) */ WOLFSSL_BIGNUM* dmq1; /* dQ = d mod (q - 1) */ WOLFSSL_BIGNUM* iqmp; /* u = (1 / q) mod p */ void* heap; /* Heap used for memory allocations. */ void* internal; /* wolfCrypt RSA key. */ #if defined(OPENSSL_EXTRA) const WOLFSSL_RSA_METHOD* meth; /* RSA method. */ #endif #ifdef HAVE_EX_DATA WOLFSSL_CRYPTO_EX_DATA ex_data; /* external data */ #endif wolfSSL_Ref ref; /* Reference count information. */ word16 pkcs8HeaderSz; /* Size of PKCS#8 header from decode. */ int flags; /* Flags of implementation. */ /* bits */ byte inSet:1; /* Internal set from external. */ byte exSet:1; /* External set from internal. */ byte ownRng:1; /* Rng needs to be free'd. */ } WOLFSSL_RSA; #endif #if defined(OPENSSL_EXTRA) || defined(OPENSSL_EXTRA_X509_SMALL) typedef WOLFSSL_RSA RSA; typedef WOLFSSL_RSA_METHOD RSA_METHOD; #endif /* OPENSSL_EXTRA || OPENSSL_EXTRA_X509_SMALL */ WOLFSSL_API WOLFSSL_RSA* wolfSSL_RSA_new_ex(void* heap, int devId); WOLFSSL_API WOLFSSL_RSA* wolfSSL_RSA_new(void); WOLFSSL_API void wolfSSL_RSA_free(WOLFSSL_RSA* rsa); WOLFSSL_API int wolfSSL_RSA_generate_key_ex(WOLFSSL_RSA* rsa, int bits, WOLFSSL_BIGNUM* bn, void* cb); WOLFSSL_API int wolfSSL_RSA_blinding_on(WOLFSSL_RSA* rsa, WOLFSSL_BN_CTX* bn); WOLFSSL_API int wolfSSL_RSA_check_key(const WOLFSSL_RSA* rsa); WOLFSSL_API int wolfSSL_RSA_public_encrypt(int len, const unsigned char* fr, unsigned char* to, WOLFSSL_RSA* rsa, int padding); WOLFSSL_API int wolfSSL_RSA_private_decrypt(int len, const unsigned char* fr, unsigned char* to, WOLFSSL_RSA* rsa, int padding); WOLFSSL_API int wolfSSL_RSA_private_encrypt(int len, const unsigned char* in, unsigned char* out, WOLFSSL_RSA* rsa, int padding); WOLFSSL_API int wolfSSL_RSA_size(const WOLFSSL_RSA* rsa); WOLFSSL_API int wolfSSL_RSA_bits(const WOLFSSL_RSA* rsa); WOLFSSL_API int wolfSSL_RSA_sign(int type, const unsigned char* m, unsigned int mLen, unsigned char* sigRet, unsigned int* sigLen, WOLFSSL_RSA* rsa); WOLFSSL_API int wolfSSL_RSA_sign_ex(int type, const unsigned char* m, unsigned int mLen, unsigned char* sigRet, unsigned int* sigLen, WOLFSSL_RSA* rsa, int flag); WOLFSSL_API int wolfSSL_RSA_sign_generic_padding(int type, const unsigned char* m, unsigned int mLen, unsigned char* sigRet, unsigned int* sigLen, WOLFSSL_RSA* rsa, int flag, int padding); WOLFSSL_API int wolfSSL_RSA_verify(int type, const unsigned char* m, unsigned int mLen, const unsigned char* sig, unsigned int sigLen, WOLFSSL_RSA* rsa); WOLFSSL_API int wolfSSL_RSA_verify_ex(int type, const unsigned char* m, unsigned int mLen, const unsigned char* sig, unsigned int sigLen, WOLFSSL_RSA* rsa, int padding); WOLFSSL_API int wolfSSL_RSA_public_decrypt(int flen, const unsigned char* from, unsigned char* to, WOLFSSL_RSA* rsa, int padding); WOLFSSL_API int wolfSSL_RSA_GenAdd(WOLFSSL_RSA* rsa); WOLFSSL_API int wolfSSL_RSA_LoadDer(WOLFSSL_RSA* rsa, const unsigned char* derBuf, int derSz); WOLFSSL_API int wolfSSL_RSA_LoadDer_ex(WOLFSSL_RSA* rsa, const unsigned char* derBuf, int derSz, int opt); WOLFSSL_API WOLFSSL_RSA_METHOD *wolfSSL_RSA_meth_new(const char *name, int flags); WOLFSSL_API void wolfSSL_RSA_meth_free(WOLFSSL_RSA_METHOD *meth); WOLFSSL_API int wolfSSL_RSA_meth_set(WOLFSSL_RSA_METHOD *rsa, void* p); WOLFSSL_API int wolfSSL_RSA_set_method(WOLFSSL_RSA *rsa, WOLFSSL_RSA_METHOD *meth); WOLFSSL_API const WOLFSSL_RSA_METHOD* wolfSSL_RSA_get_method(const WOLFSSL_RSA *rsa); WOLFSSL_API const WOLFSSL_RSA_METHOD* wolfSSL_RSA_get_default_method(void); WOLFSSL_API void wolfSSL_RSA_get0_crt_params(const WOLFSSL_RSA *r, const WOLFSSL_BIGNUM **dmp1, const WOLFSSL_BIGNUM **dmq1, const WOLFSSL_BIGNUM **iqmp); WOLFSSL_API int wolfSSL_RSA_set0_crt_params(WOLFSSL_RSA *r, WOLFSSL_BIGNUM *dmp1, WOLFSSL_BIGNUM *dmq1, WOLFSSL_BIGNUM *iqmp); WOLFSSL_API void wolfSSL_RSA_get0_factors(const WOLFSSL_RSA *r, const WOLFSSL_BIGNUM **p, const WOLFSSL_BIGNUM **q); WOLFSSL_API int wolfSSL_RSA_set0_factors(WOLFSSL_RSA *r, WOLFSSL_BIGNUM *p, WOLFSSL_BIGNUM *q); WOLFSSL_API void wolfSSL_RSA_get0_key(const WOLFSSL_RSA *r, const WOLFSSL_BIGNUM **n, const WOLFSSL_BIGNUM **e, const WOLFSSL_BIGNUM **d); WOLFSSL_API int wolfSSL_RSA_set0_key(WOLFSSL_RSA *r, WOLFSSL_BIGNUM *n, WOLFSSL_BIGNUM *e, WOLFSSL_BIGNUM *d); WOLFSSL_API int wolfSSL_RSA_flags(const WOLFSSL_RSA *r); WOLFSSL_API void wolfSSL_RSA_set_flags(WOLFSSL_RSA *r, int flags); WOLFSSL_API void wolfSSL_RSA_clear_flags(WOLFSSL_RSA *r, int flags); WOLFSSL_API int wolfSSL_RSA_test_flags(const WOLFSSL_RSA *r, int flags); WOLFSSL_API WOLFSSL_RSA* wolfSSL_RSAPublicKey_dup(WOLFSSL_RSA *rsa); WOLFSSL_API void* wolfSSL_RSA_get_ex_data(const WOLFSSL_RSA *rsa, int idx); WOLFSSL_API int wolfSSL_RSA_set_ex_data(WOLFSSL_RSA *rsa, int idx, void *data); #ifdef HAVE_EX_DATA_CLEANUP_HOOKS WOLFSSL_API int wolfSSL_RSA_set_ex_data_with_cleanup( WOLFSSL_RSA *rsa, int idx, void *data, wolfSSL_ex_data_cleanup_routine_t cleanup_routine); #endif #if defined(OPENSSL_EXTRA) || defined(OPENSSL_EXTRA_X509_SMALL) #define WOLFSSL_RSA_LOAD_PRIVATE 1 #define WOLFSSL_RSA_LOAD_PUBLIC 2 #define WOLFSSL_RSA_F4 0x10001L #define RSA_new wolfSSL_RSA_new #define RSA_free wolfSSL_RSA_free #define RSA_generate_key_ex wolfSSL_RSA_generate_key_ex #define RSA_blinding_on wolfSSL_RSA_blinding_on #define RSA_check_key wolfSSL_RSA_check_key #define RSA_public_encrypt wolfSSL_RSA_public_encrypt #define RSA_private_decrypt wolfSSL_RSA_private_decrypt #define RSA_private_encrypt wolfSSL_RSA_private_encrypt #define RSA_size wolfSSL_RSA_size #define RSA_sign wolfSSL_RSA_sign #define RSA_verify wolfSSL_RSA_verify #define RSA_public_decrypt wolfSSL_RSA_public_decrypt #define RSA_meth_new wolfSSL_RSA_meth_new #define RSA_meth_free wolfSSL_RSA_meth_free #define RSA_meth_set_pub_enc wolfSSL_RSA_meth_set #define RSA_meth_set_pub_dec wolfSSL_RSA_meth_set #define RSA_meth_set_priv_enc wolfSSL_RSA_meth_set #define RSA_meth_set_priv_dec wolfSSL_RSA_meth_set #define RSA_meth_set_init wolfSSL_RSA_meth_set #define RSA_meth_set_finish wolfSSL_RSA_meth_set #define RSA_meth_set0_app_data wolfSSL_RSA_meth_set #define RSA_get_default_method wolfSSL_RSA_get_default_method #define RSA_get_method wolfSSL_RSA_get_method #define RSA_set_method wolfSSL_RSA_set_method #define RSA_get0_crt_params wolfSSL_RSA_get0_crt_params #define RSA_set0_crt_params wolfSSL_RSA_set0_crt_params #define RSA_get0_factors wolfSSL_RSA_get0_factors #define RSA_set0_factors wolfSSL_RSA_set0_factors #define RSA_get0_key wolfSSL_RSA_get0_key #define RSA_set0_key wolfSSL_RSA_set0_key #define RSA_flags wolfSSL_RSA_flags #define RSA_set_flags wolfSSL_RSA_set_flags #define RSA_clear_flags wolfSSL_RSA_clear_flags #define RSA_test_flags wolfSSL_RSA_test_flags #define RSAPublicKey_dup wolfSSL_RSAPublicKey_dup #define RSA_get_ex_data wolfSSL_RSA_get_ex_data #define RSA_set_ex_data wolfSSL_RSA_set_ex_data #define RSA_get0_key wolfSSL_RSA_get0_key #define RSA_F4 WOLFSSL_RSA_F4 #endif /* OPENSSL_EXTRA || OPENSSL_EXTRA_X509_SMALL */ #ifdef __cplusplus } /* extern "C" */ #endif #endif /* header */