[BACK]Return to rsa.c CVS log [TXT][DIR] Up to [local] / src / usr.bin / ssh

Annotation of src/usr.bin/ssh/rsa.c, Revision 1.11

1.1       provos      1: /*
1.10      deraadt     2:  *
                      3:  * rsa.c
                      4:  *
                      5:  * Author: Tatu Ylonen <ylo@cs.hut.fi>
                      6:  *
                      7:  * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
                      8:  *                    All rights reserved
                      9:  *
                     10:  * Created: Fri Mar  3 22:07:06 1995 ylo
                     11:  *
                     12:  * Description of the RSA algorithm can be found e.g. from the following sources:
                     13:  *
                     14:  *   Bruce Schneier: Applied Cryptography.  John Wiley & Sons, 1994.
                     15:  *
                     16:  *   Jennifer Seberry and Josed Pieprzyk: Cryptography: An Introduction to
                     17:  *   Computer Security.  Prentice-Hall, 1989.
                     18:  *
                     19:  *   Man Young Rhee: Cryptography and Secure Data Communications.  McGraw-Hill,
                     20:  *   1994.
                     21:  *
                     22:  *   R. Rivest, A. Shamir, and L. M. Adleman: Cryptographic Communications
                     23:  *   System and Method.  US Patent 4,405,829, 1983.
                     24:  *
                     25:  *   Hans Riesel: Prime Numbers and Computer Methods for Factorization.
                     26:  *   Birkhauser, 1994.
                     27:  *
                     28:  *   The RSA Frequently Asked Questions document by RSA Data Security, Inc., 1995.
                     29:  *
                     30:  *   RSA in 3 lines of perl by Adam Back <aba@atlax.ex.ac.uk>, 1995, as included
                     31:  *   below:
                     32:  *
                     33:  *     [gone - had to be deleted - what a pity]
                     34:  *
1.1       provos     35: */
                     36:
                     37: #include "includes.h"
1.11    ! markus     38: RCSID("$Id: rsa.c,v 1.10 1999/11/24 00:26:03 deraadt Exp $");
1.1       provos     39:
                     40: #include "rsa.h"
                     41: #include "ssh.h"
                     42: #include "xmalloc.h"
                     43:
                     44: int rsa_verbose = 1;
1.2       deraadt    45:
                     46: int
                     47: rsa_alive()
                     48: {
1.9       markus     49:        RSA *key;
1.2       deraadt    50:
1.9       markus     51:        key = RSA_generate_key(32, 3, NULL, NULL);
                     52:        if (key == NULL)
                     53:                return (0);
                     54:        RSA_free(key);
                     55:        return (1);
1.2       deraadt    56: }
1.1       provos     57:
1.11    ! markus     58: /*
        !            59:  * Generates RSA public and private keys.  This initializes the data
        !            60:  * structures; they should be freed with rsa_clear_private_key and
        !            61:  * rsa_clear_public_key.
        !            62:  */
1.1       provos     63:
                     64: void
                     65: rsa_generate_key(RSA *prv, RSA *pub, unsigned int bits)
                     66: {
1.9       markus     67:        RSA *key;
1.1       provos     68:
1.9       markus     69:        if (rsa_verbose) {
                     70:                printf("Generating RSA keys:  ");
                     71:                fflush(stdout);
                     72:        }
                     73:        key = RSA_generate_key(bits, 35, NULL, NULL);
                     74:        if (key == NULL)
                     75:                fatal("rsa_generate_key: key generation failed.");
                     76:
                     77:        /* Copy public key parameters */
                     78:        pub->n = BN_new();
                     79:        BN_copy(pub->n, key->n);
                     80:        pub->e = BN_new();
                     81:        BN_copy(pub->e, key->e);
                     82:
                     83:        /* Copy private key parameters */
                     84:        prv->n = BN_new();
                     85:        BN_copy(prv->n, key->n);
                     86:        prv->e = BN_new();
                     87:        BN_copy(prv->e, key->e);
                     88:        prv->d = BN_new();
                     89:        BN_copy(prv->d, key->d);
                     90:        prv->p = BN_new();
                     91:        BN_copy(prv->p, key->p);
                     92:        prv->q = BN_new();
                     93:        BN_copy(prv->q, key->q);
                     94:
                     95:        prv->dmp1 = BN_new();
                     96:        BN_copy(prv->dmp1, key->dmp1);
                     97:
                     98:        prv->dmq1 = BN_new();
                     99:        BN_copy(prv->dmq1, key->dmq1);
                    100:
                    101:        prv->iqmp = BN_new();
                    102:        BN_copy(prv->iqmp, key->iqmp);
                    103:
                    104:        RSA_free(key);
                    105:
                    106:        if (rsa_verbose)
                    107:                printf("Key generation complete.\n");
1.1       provos    108: }
                    109:
                    110: void
1.9       markus    111: rsa_public_encrypt(BIGNUM *out, BIGNUM *in, RSA *key)
1.1       provos    112: {
1.9       markus    113:        char *inbuf, *outbuf;
                    114:        int len, ilen, olen;
1.4       provos    115:
1.9       markus    116:        if (BN_num_bits(key->e) < 2 || !BN_is_odd(key->e))
                    117:                fatal("rsa_public_encrypt() exponent too small or not odd");
1.1       provos    118:
1.9       markus    119:        olen = BN_num_bytes(key->n);
                    120:        outbuf = xmalloc(olen);
1.1       provos    121:
1.9       markus    122:        ilen = BN_num_bytes(in);
                    123:        inbuf = xmalloc(ilen);
                    124:        BN_bn2bin(in, inbuf);
1.1       provos    125:
1.9       markus    126:        if ((len = RSA_public_encrypt(ilen, inbuf, outbuf, key,
                    127:                                      RSA_PKCS1_PADDING)) <= 0)
                    128:                fatal("rsa_public_encrypt() failed");
1.1       provos    129:
1.9       markus    130:        BN_bin2bn(outbuf, len, out);
1.1       provos    131:
1.9       markus    132:        memset(outbuf, 0, olen);
                    133:        memset(inbuf, 0, ilen);
                    134:        xfree(outbuf);
                    135:        xfree(inbuf);
1.1       provos    136: }
                    137:
                    138: void
                    139: rsa_private_decrypt(BIGNUM *out, BIGNUM *in, RSA *key)
                    140: {
1.9       markus    141:        char *inbuf, *outbuf;
                    142:        int len, ilen, olen;
1.1       provos    143:
1.9       markus    144:        olen = BN_num_bytes(key->n);
                    145:        outbuf = xmalloc(olen);
1.1       provos    146:
1.9       markus    147:        ilen = BN_num_bytes(in);
                    148:        inbuf = xmalloc(ilen);
                    149:        BN_bn2bin(in, inbuf);
                    150:
                    151:        if ((len = RSA_private_decrypt(ilen, inbuf, outbuf, key,
                    152:                                       RSA_SSLV23_PADDING)) <= 0)
                    153:                fatal("rsa_private_decrypt() failed");
                    154:
                    155:        BN_bin2bn(outbuf, len, out);
                    156:
                    157:        memset(outbuf, 0, olen);
                    158:        memset(inbuf, 0, ilen);
                    159:        xfree(outbuf);
                    160:        xfree(inbuf);
1.1       provos    161: }
                    162:
                    163: /* Set whether to output verbose messages during key generation. */
                    164:
                    165: void
                    166: rsa_set_verbose(int verbose)
                    167: {
1.9       markus    168:        rsa_verbose = verbose;
1.1       provos    169: }