1 /*
2 * Copyright 1999-2023 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10 #include <stdio.h>
11 #include "internal/cryptlib.h"
12 #include <openssl/asn1t.h>
13 #include <openssl/x509.h>
14 #include <openssl/rand.h>
15 #include "crypto/evp.h"
16
17 /* PKCS#5 password based encryption structure */
18
19 ASN1_SEQUENCE(PBEPARAM) = {
20 ASN1_SIMPLE(PBEPARAM, salt, ASN1_OCTET_STRING),
21 ASN1_SIMPLE(PBEPARAM, iter, ASN1_INTEGER)
22 } ASN1_SEQUENCE_END(PBEPARAM)
23
24 IMPLEMENT_ASN1_FUNCTIONS(PBEPARAM)
25
26 /* Set an algorithm identifier for a PKCS#5 PBE algorithm */
27
28 int PKCS5_pbe_set0_algor_ex(X509_ALGOR *algor, int alg, int iter,
29 const unsigned char *salt, int saltlen,
30 OSSL_LIB_CTX *ctx)
31 {
32 PBEPARAM *pbe = NULL;
33 ASN1_STRING *pbe_str = NULL;
34 unsigned char *sstr = NULL;
35
36 pbe = PBEPARAM_new();
37 if (pbe == NULL) {
38 /* ERR_R_ASN1_LIB, because PBEPARAM_new() is defined in crypto/asn1 */
39 ERR_raise(ERR_LIB_ASN1, ERR_R_ASN1_LIB);
40 goto err;
41 }
42 if (iter <= 0)
43 iter = PKCS5_DEFAULT_ITER;
44 if (!ASN1_INTEGER_set(pbe->iter, iter)) {
45 ERR_raise(ERR_LIB_ASN1, ERR_R_ASN1_LIB);
46 goto err;
47 }
48 if (!saltlen)
49 saltlen = PKCS5_DEFAULT_PBE1_SALT_LEN;
50 if (saltlen < 0)
51 goto err;
52
53 sstr = OPENSSL_malloc(saltlen);
54 if (sstr == NULL)
55 goto err;
56 if (salt)
57 memcpy(sstr, salt, saltlen);
58 else if (RAND_bytes_ex(ctx, sstr, saltlen, 0) <= 0)
59 goto err;
60
61 ASN1_STRING_set0(pbe->salt, sstr, saltlen);
62 sstr = NULL;
63
64 if (!ASN1_item_pack(pbe, ASN1_ITEM_rptr(PBEPARAM), &pbe_str)) {
65 ERR_raise(ERR_LIB_ASN1, ERR_R_ASN1_LIB);
66 goto err;
67 }
68
69 PBEPARAM_free(pbe);
70 pbe = NULL;
71
72 if (X509_ALGOR_set0(algor, OBJ_nid2obj(alg), V_ASN1_SEQUENCE, pbe_str))
73 return 1;
74
75 err:
76 OPENSSL_free(sstr);
77 PBEPARAM_free(pbe);
78 ASN1_STRING_free(pbe_str);
79 return 0;
80 }
81
PKCS5_pbe_set0_algor(X509_ALGOR * algor,int alg,int iter,const unsigned char * salt,int saltlen)82 int PKCS5_pbe_set0_algor(X509_ALGOR *algor, int alg, int iter,
83 const unsigned char *salt, int saltlen)
84 {
85 return PKCS5_pbe_set0_algor_ex(algor, alg, iter, salt, saltlen, NULL);
86 }
87
88 /* Return an algorithm identifier for a PKCS#5 PBE algorithm */
89
PKCS5_pbe_set_ex(int alg,int iter,const unsigned char * salt,int saltlen,OSSL_LIB_CTX * ctx)90 X509_ALGOR *PKCS5_pbe_set_ex(int alg, int iter,
91 const unsigned char *salt, int saltlen,
92 OSSL_LIB_CTX *ctx)
93 {
94 X509_ALGOR *ret;
95 ret = X509_ALGOR_new();
96 if (ret == NULL) {
97 ERR_raise(ERR_LIB_ASN1, ERR_R_X509_LIB);
98 return NULL;
99 }
100
101 if (PKCS5_pbe_set0_algor_ex(ret, alg, iter, salt, saltlen, ctx))
102 return ret;
103
104 X509_ALGOR_free(ret);
105 return NULL;
106 }
107
PKCS5_pbe_set(int alg,int iter,const unsigned char * salt,int saltlen)108 X509_ALGOR *PKCS5_pbe_set(int alg, int iter,
109 const unsigned char *salt, int saltlen)
110 {
111 return PKCS5_pbe_set_ex(alg, iter, salt, saltlen, NULL);
112 }
113
114
