blob: c6ea97f09b062e6a8155b3701f8b78aa758da08a [file] [log] [blame]
Adam Langley95c29f32014-06-20 12:00:00 -07001/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
2 * All rights reserved.
3 *
4 * This package is an SSL implementation written
5 * by Eric Young (eay@cryptsoft.com).
6 * The implementation was written so as to conform with Netscapes SSL.
7 *
8 * This library is free for commercial and non-commercial use as long as
9 * the following conditions are aheared to. The following conditions
10 * apply to all code found in this distribution, be it the RC4, RSA,
11 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
12 * included with this distribution is covered by the same copyright terms
13 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
14 *
15 * Copyright remains Eric Young's, and as such any Copyright notices in
16 * the code are not to be removed.
17 * If this package is used in a product, Eric Young should be given attribution
18 * as the author of the parts of the library used.
19 * This can be in the form of a textual message at program startup or
20 * in documentation (online or textual) provided with the package.
21 *
22 * Redistribution and use in source and binary forms, with or without
23 * modification, are permitted provided that the following conditions
24 * are met:
25 * 1. Redistributions of source code must retain the copyright
26 * notice, this list of conditions and the following disclaimer.
27 * 2. Redistributions in binary form must reproduce the above copyright
28 * notice, this list of conditions and the following disclaimer in the
29 * documentation and/or other materials provided with the distribution.
30 * 3. All advertising materials mentioning features or use of this software
31 * must display the following acknowledgement:
32 * "This product includes cryptographic software written by
33 * Eric Young (eay@cryptsoft.com)"
34 * The word 'cryptographic' can be left out if the rouines from the library
35 * being used are not cryptographic related :-).
36 * 4. If you include any Windows specific code (or a derivative thereof) from
37 * the apps directory (application code) you must include an acknowledgement:
38 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
39 *
40 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
41 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
42 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
43 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
44 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
45 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
46 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
48 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
49 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
50 * SUCH DAMAGE.
51 *
52 * The licence and distribution terms for any publically available version or
53 * derivative of this code cannot be changed. i.e. this code cannot simply be
54 * copied and put under another distribution licence
55 * [including the GNU Public Licence.] */
56
57#ifndef OPENSSL_HEADER_RSA_INTERNAL_H
58#define OPENSSL_HEADER_RSA_INTERNAL_H
59
60#include <openssl/base.h>
61
Adam Langley95c29f32014-06-20 12:00:00 -070062
63#if defined(__cplusplus)
64extern "C" {
65#endif
66
67
David Benjamind93831d2015-10-29 13:19:12 -040068/* Default implementations of RSA operations. */
69
70extern const RSA_METHOD RSA_default_method;
71
David Benjamind93831d2015-10-29 13:19:12 -040072size_t rsa_default_size(const RSA *rsa);
73int rsa_default_encrypt(RSA *rsa, size_t *out_len, uint8_t *out, size_t max_out,
74 const uint8_t *in, size_t in_len, int padding);
75int rsa_default_sign_raw(RSA *rsa, size_t *out_len, uint8_t *out,
76 size_t max_out, const uint8_t *in, size_t in_len,
77 int padding);
78int rsa_default_decrypt(RSA *rsa, size_t *out_len, uint8_t *out, size_t max_out,
79 const uint8_t *in, size_t in_len, int padding);
David Benjamind93831d2015-10-29 13:19:12 -040080int rsa_default_private_transform(RSA *rsa, uint8_t *out, const uint8_t *in,
81 size_t len);
82int rsa_default_multi_prime_keygen(RSA *rsa, int bits, int num_primes,
83 BIGNUM *e_value, BN_GENCB *cb);
84int rsa_default_keygen(RSA *rsa, int bits, BIGNUM *e_value, BN_GENCB *cb);
85
86
Adam Langley95c29f32014-06-20 12:00:00 -070087#define RSA_PKCS1_PADDING_SIZE 11
88
89
Brian Smith86361a32016-03-26 19:42:31 -100090BN_BLINDING *BN_BLINDING_new(void);
Adam Langley95c29f32014-06-20 12:00:00 -070091void BN_BLINDING_free(BN_BLINDING *b);
Brian Smith86361a32016-03-26 19:42:31 -100092int BN_BLINDING_convert(BIGNUM *n, BN_BLINDING *b, const BIGNUM *e,
93 const BN_MONT_CTX *mont_ctx, BN_CTX *ctx);
Brian Smith3426d102016-03-17 16:10:04 -100094int BN_BLINDING_invert(BIGNUM *n, const BN_BLINDING *b, BN_MONT_CTX *mont_ctx,
95 BN_CTX *ctx);
Adam Langley95c29f32014-06-20 12:00:00 -070096
97
98int RSA_padding_add_PKCS1_type_1(uint8_t *to, unsigned to_len,
99 const uint8_t *from, unsigned from_len);
100int RSA_padding_check_PKCS1_type_1(uint8_t *to, unsigned to_len,
Adam Langley6887edb2014-06-20 12:00:00 -0700101 const uint8_t *from, unsigned from_len);
Adam Langley95c29f32014-06-20 12:00:00 -0700102int RSA_padding_add_PKCS1_type_2(uint8_t *to, unsigned to_len,
103 const uint8_t *from, unsigned from_len);
104int RSA_padding_check_PKCS1_type_2(uint8_t *to, unsigned to_len,
Adam Langley6887edb2014-06-20 12:00:00 -0700105 const uint8_t *from, unsigned from_len);
Adam Langley95c29f32014-06-20 12:00:00 -0700106int RSA_padding_add_PKCS1_OAEP_mgf1(uint8_t *to, unsigned to_len,
107 const uint8_t *from, unsigned from_len,
108 const uint8_t *param, unsigned plen,
109 const EVP_MD *md, const EVP_MD *mgf1md);
110int RSA_padding_check_PKCS1_OAEP_mgf1(uint8_t *to, unsigned to_len,
111 const uint8_t *from, unsigned from_len,
Adam Langley6887edb2014-06-20 12:00:00 -0700112 const uint8_t *param, unsigned plen,
113 const EVP_MD *md, const EVP_MD *mgf1md);
Adam Langley95c29f32014-06-20 12:00:00 -0700114int RSA_padding_add_none(uint8_t *to, unsigned to_len, const uint8_t *from,
115 unsigned from_len);
Adam Langley95c29f32014-06-20 12:00:00 -0700116
Adam Langley6bc658d2014-08-18 13:29:45 -0700117/* RSA_private_transform calls either the method-specific |private_transform|
118 * function (if given) or the generic one. See the comment for
119 * |private_transform| in |rsa_meth_st|. */
120int RSA_private_transform(RSA *rsa, uint8_t *out, const uint8_t *in,
121 size_t len);
122
Adam Langley95c29f32014-06-20 12:00:00 -0700123
Adam Langley839b8812015-05-26 11:36:46 -0700124/* RSA_additional_prime contains information about the third, forth etc prime
125 * in a multi-prime RSA key. */
126typedef struct RSA_additional_prime_st {
127 BIGNUM *prime;
128 /* exp is d^{prime-1} mod prime */
129 BIGNUM *exp;
130 /* coeff is such that r×coeff ≡ 1 mod prime. */
131 BIGNUM *coeff;
132
133 /* Values below here are not in the ASN.1 serialisation. */
134
135 /* r is the product of all primes (including p and q) prior to this one. */
136 BIGNUM *r;
David Benjamin8fb0f522015-11-03 18:24:07 -0500137 /* mont is a |BN_MONT_CTX| modulo |prime|. */
138 BN_MONT_CTX *mont;
Adam Langley839b8812015-05-26 11:36:46 -0700139} RSA_additional_prime;
140
141void RSA_additional_prime_free(RSA_additional_prime *ap);
142
143
Adam Langley95c29f32014-06-20 12:00:00 -0700144#if defined(__cplusplus)
145} /* extern C */
146#endif
147
148#endif /* OPENSSL_HEADER_RSA_INTERNAL_H */