crypto/fipsmodule/rsa/internal.h - boringssl - Git at Google

 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
  * This package is an SSL implementation written
  * by Eric Young (eay@cryptsoft.com).
  * The implementation was written so as to conform with Netscapes SSL.
  *
  * This library is free for commercial and non-commercial use as long as
  * the following conditions are aheared to.  The following conditions
  * apply to all code found in this distribution, be it the RC4, RSA,
  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
  * included with this distribution is covered by the same copyright terms
  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  *
  * Copyright remains Eric Young's, and as such any Copyright notices in
  * the code are not to be removed.
  * If this package is used in a product, Eric Young should be given attribution
  * as the author of the parts of the library used.
  * This can be in the form of a textual message at program startup or
  * in documentation (online or textual) provided with the package.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
  *    documentation and/or other materials provided with the distribution.
  * 3. All advertising materials mentioning features or use of this software
  *    must display the following acknowledgement:
  *    "This product includes cryptographic software written by
  *     Eric Young (eay@cryptsoft.com)"
  *    The word 'cryptographic' can be left out if the rouines from the library
  *    being used are not cryptographic related :-).
  * 4. If you include any Windows specific code (or a derivative thereof) from
  *    the apps directory (application code) you must include an acknowledgement:
  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  *
  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  * SUCH DAMAGE.
  *
  * The licence and distribution terms for any publically available version or
  * derivative of this code cannot be changed.  i.e. this code cannot simply be
  * copied and put under another distribution licence
  * [including the GNU Public Licence.] */

 #ifndef OPENSSL_HEADER_RSA_INTERNAL_H
 #define OPENSSL_HEADER_RSA_INTERNAL_H

 #include <openssl/base.h>

 #include <openssl/bn.h>


 #if defined(__cplusplus)
 extern "C" {
 #endif


 #define RSA_PKCS1_PADDING_SIZE 11

 // Default implementations of RSA operations.

 const RSA_METHOD *RSA_default_method(void);

 size_t rsa_default_size(const RSA *rsa);
 int rsa_default_sign_raw(RSA *rsa, size_t *out_len, uint8_t *out,
                          size_t max_out, const uint8_t *in, size_t in_len,
                          int padding);
 int rsa_default_private_transform(RSA *rsa, uint8_t *out, const uint8_t *in,
                                   size_t len);


 BN_BLINDING *BN_BLINDING_new(void);
 void BN_BLINDING_free(BN_BLINDING *b);
 void BN_BLINDING_invalidate(BN_BLINDING *b);
 int BN_BLINDING_convert(BIGNUM *n, BN_BLINDING *b, const BIGNUM *e,
                         const BN_MONT_CTX *mont_ctx, BN_CTX *ctx);
 int BN_BLINDING_invert(BIGNUM *n, const BN_BLINDING *b, BN_MONT_CTX *mont_ctx,
                        BN_CTX *ctx);


 int PKCS1_MGF1(uint8_t *out, size_t len, const uint8_t *seed, size_t seed_len,
                const EVP_MD *md);
 int RSA_padding_add_PKCS1_type_1(uint8_t *to, size_t to_len,
                                  const uint8_t *from, size_t from_len);
 int RSA_padding_check_PKCS1_type_1(uint8_t *out, size_t *out_len,
                                    size_t max_out, const uint8_t *from,
                                    size_t from_len);
 int RSA_padding_add_none(uint8_t *to, size_t to_len, const uint8_t *from,
                          size_t from_len);

 // rsa_check_public_key checks that |rsa|'s public modulus and exponent are
 // within DoS bounds.
 int rsa_check_public_key(const RSA *rsa);

 // rsa_private_transform_no_self_test calls either the method-specific
 // |private_transform| function (if given) or the generic one. See the comment
 // for |private_transform| in |rsa_meth_st|.
 int rsa_private_transform_no_self_test(RSA *rsa, uint8_t *out,
                                        const uint8_t *in, size_t len);

 // rsa_private_transform acts the same as |rsa_private_transform_no_self_test|
 // but, in FIPS mode, performs an RSA self test before calling the default RSA
 // implementation.
 int rsa_private_transform(RSA *rsa, uint8_t *out, const uint8_t *in,
                           size_t len);


 // This constant is exported for test purposes.
 extern const BN_ULONG kBoringSSLRSASqrtTwo[];
 extern const size_t kBoringSSLRSASqrtTwoLen;


 // Functions that avoid self-tests.
 //
 // Self-tests need to call functions that don't try and ensure that the
 // self-tests have passed. These functions, in turn, need to limit themselves
 // to such functions too.
 //
 // These functions are the same as their public versions, but skip the self-test
 // check.

 int rsa_verify_no_self_test(int hash_nid, const uint8_t *digest,
                             size_t digest_len, const uint8_t *sig,
                             size_t sig_len, RSA *rsa);

 int rsa_verify_raw_no_self_test(RSA *rsa, size_t *out_len, uint8_t *out,
                                 size_t max_out, const uint8_t *in,
                                 size_t in_len, int padding);

 int rsa_sign_no_self_test(int hash_nid, const uint8_t *digest,
                           size_t digest_len, uint8_t *out, unsigned *out_len,
                           RSA *rsa);


 #if defined(__cplusplus)
 }  // extern C
 #endif

 #endif  // OPENSSL_HEADER_RSA_INTERNAL_H
	/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
	* All rights reserved.
	*
	* This package is an SSL implementation written
	* by Eric Young (eay@cryptsoft.com).
	* The implementation was written so as to conform with Netscapes SSL.
	*
	* This library is free for commercial and non-commercial use as long as
	* the following conditions are aheared to. The following conditions
	* apply to all code found in this distribution, be it the RC4, RSA,
	* lhash, DES, etc., code; not just the SSL code. The SSL documentation
	* included with this distribution is covered by the same copyright terms
	* except that the holder is Tim Hudson (tjh@cryptsoft.com).
	*
	* Copyright remains Eric Young's, and as such any Copyright notices in
	* the code are not to be removed.
	* If this package is used in a product, Eric Young should be given attribution
	* as the author of the parts of the library used.
	* This can be in the form of a textual message at program startup or
	* in documentation (online or textual) provided with the package.
	*
	* Redistribution and use in source and binary forms, with or without
	* modification, are permitted provided that the following conditions
	* are met:
	* 1. Redistributions of source code must retain the copyright
	* notice, this list of conditions and the following disclaimer.
	* 2. Redistributions in binary form must reproduce the above copyright
	* notice, this list of conditions and the following disclaimer in the
	* documentation and/or other materials provided with the distribution.
	* 3. All advertising materials mentioning features or use of this software
	* must display the following acknowledgement:
	* "This product includes cryptographic software written by
	* Eric Young (eay@cryptsoft.com)"
	* The word 'cryptographic' can be left out if the rouines from the library
	* being used are not cryptographic related :-).
	* 4. If you include any Windows specific code (or a derivative thereof) from
	* the apps directory (application code) you must include an acknowledgement:
	* "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
	*
	* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
	* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
	* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
	* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
	* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
	* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
	* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
	* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
	* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	* SUCH DAMAGE.
	*
	* The licence and distribution terms for any publically available version or
	* derivative of this code cannot be changed. i.e. this code cannot simply be
	* copied and put under another distribution licence
	* [including the GNU Public Licence.] */

	#ifndef OPENSSL_HEADER_RSA_INTERNAL_H
	#define OPENSSL_HEADER_RSA_INTERNAL_H

	#include <openssl/base.h>

	#include <openssl/bn.h>


	#if defined(__cplusplus)
	extern "C" {
	#endif


	#define RSA_PKCS1_PADDING_SIZE 11

	// Default implementations of RSA operations.

	const RSA_METHOD *RSA_default_method(void);

	size_t rsa_default_size(const RSA *rsa);
	int rsa_default_sign_raw(RSA rsa, size_t out_len, uint8_t *out,
	size_t max_out, const uint8_t *in, size_t in_len,
	int padding);
	int rsa_default_private_transform(RSA rsa, uint8_t out, const uint8_t *in,
	size_t len);


	BN_BLINDING *BN_BLINDING_new(void);
	void BN_BLINDING_free(BN_BLINDING *b);
	void BN_BLINDING_invalidate(BN_BLINDING *b);
	int BN_BLINDING_convert(BIGNUM n, BN_BLINDING b, const BIGNUM *e,
	const BN_MONT_CTX mont_ctx, BN_CTX ctx);
	int BN_BLINDING_invert(BIGNUM n, const BN_BLINDING b, BN_MONT_CTX *mont_ctx,
	BN_CTX *ctx);


	int PKCS1_MGF1(uint8_t out, size_t len, const uint8_t seed, size_t seed_len,
	const EVP_MD *md);
	int RSA_padding_add_PKCS1_type_1(uint8_t *to, size_t to_len,
	const uint8_t *from, size_t from_len);
	int RSA_padding_check_PKCS1_type_1(uint8_t out, size_t out_len,
	size_t max_out, const uint8_t *from,
	size_t from_len);
	int RSA_padding_add_none(uint8_t to, size_t to_len, const uint8_t from,
	size_t from_len);

	// rsa_check_public_key checks that \|rsa\|'s public modulus and exponent are
	// within DoS bounds.
	int rsa_check_public_key(const RSA *rsa);

	// rsa_private_transform_no_self_test calls either the method-specific
	// \|private_transform\| function (if given) or the generic one. See the comment
	// for \|private_transform\| in \|rsa_meth_st\|.
	int rsa_private_transform_no_self_test(RSA rsa, uint8_t out,
	const uint8_t *in, size_t len);

	// rsa_private_transform acts the same as \|rsa_private_transform_no_self_test\|
	// but, in FIPS mode, performs an RSA self test before calling the default RSA
	// implementation.
	int rsa_private_transform(RSA rsa, uint8_t out, const uint8_t *in,
	size_t len);


	// This constant is exported for test purposes.
	extern const BN_ULONG kBoringSSLRSASqrtTwo[];
	extern const size_t kBoringSSLRSASqrtTwoLen;


	// Functions that avoid self-tests.
	//
	// Self-tests need to call functions that don't try and ensure that the
	// self-tests have passed. These functions, in turn, need to limit themselves
	// to such functions too.
	//
	// These functions are the same as their public versions, but skip the self-test
	// check.

	int rsa_verify_no_self_test(int hash_nid, const uint8_t *digest,
	size_t digest_len, const uint8_t *sig,
	size_t sig_len, RSA *rsa);

	int rsa_verify_raw_no_self_test(RSA rsa, size_t out_len, uint8_t *out,
	size_t max_out, const uint8_t *in,
	size_t in_len, int padding);

	int rsa_sign_no_self_test(int hash_nid, const uint8_t *digest,
	size_t digest_len, uint8_t out, unsigned out_len,
	RSA *rsa);


	#if defined(__cplusplus)
	} // extern C
	#endif

	#endif // OPENSSL_HEADER_RSA_INTERNAL_H