1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
|
/*
* CDDL HEADER START
*
* The contents of this file are subject to the terms of the
* Common Development and Distribution License (the "License").
* You may not use this file except in compliance with the License.
*
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
* or http://www.opensolaris.org/os/licensing.
* See the License for the specific language governing permissions
* and limitations under the License.
*
* When distributing Covered Code, include this CDDL HEADER in each
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
* If applicable, add the following below this CDDL HEADER, with the
* fields enclosed by brackets "[]" replaced with your own identifying
* information: Portions Copyright [yyyy] [name of copyright owner]
*
* CDDL HEADER END
*/
/*
* Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
*/
#ifndef _DSA_IMPL_H
#define _DSA_IMPL_H
#ifdef __cplusplus
extern "C" {
#endif
#include <sys/types.h>
#include <bignum.h>
/* DSA Signature is always 40 bytes */
#define DSA_SIGNATURE_LENGTH 40
#define MIN_DSA_KEY_LEN (512 >> 3)
#define MAX_DSA_KEY_LEN (1024 >> 3)
#define DSA_SUBPRIME_BITS 160
#define DSA_SUBPRIME_BYTES (DSA_SUBPRIME_BITS >> 3)
#ifdef _KERNEL
#include <sys/sunddi.h>
#include <sys/crypto/common.h>
#define CK_RV int
#define CKR_OK CRYPTO_SUCCESS
#define CKR_ARGUMENTS_BAD CRYPTO_ARGUMENTS_BAD
#define CKR_ATTRIBUTE_VALUE_INVALID CRYPTO_ATTRIBUTE_VALUE_INVALID
#define CKR_DEVICE_ERROR CRYPTO_DEVICE_ERROR
#define CKR_GENERAL_ERROR CRYPTO_GENERAL_ERROR
#define CKR_HOST_MEMORY CRYPTO_HOST_MEMORY
#define CKR_KEY_SIZE_RANGE CRYPTO_KEY_SIZE_RANGE
#define CKR_SIGNATURE_INVALID CRYPTO_SIGNATURE_INVALID
int random_get_bytes(uint8_t *ran_out, size_t ran_len);
int random_get_pseudo_bytes(uint8_t *ran_out, size_t ran_len);
#else
#include <security/cryptoki.h>
#include <security/pkcs11t.h>
#endif /* _KERNEL */
/* DSA key using BIGNUM representations */
typedef struct {
int size; /* key size in bits */
BIGNUM p; /* p (<size-bit> prime) */
BIGNUM q; /* q (160-bit prime) */
BIGNUM g; /* g (the base) */
BIGNUM x; /* private key (< q) */
BIGNUM y; /* = g^x mod p */
BIGNUM k; /* k (random number < q) */
BIGNUM r; /* r (signature 1st part) */
BIGNUM s; /* s (signature 2st part) */
BIGNUM v; /* v (verification value - should be = r) */
BIGNUM p_rr; /* 2^(2*(32*p->len)) mod p */
BIGNUM q_rr; /* 2^(2*(32*q->len)) mod q */
} DSAkey;
/* DSA key using byte string representations, useful for parameter lists */
typedef struct {
uint32_t prime_bits; /* size */
uchar_t *prime; /* p */
uint32_t subprime_bits; /* = 160 */
uchar_t *subprime; /* q */
uint32_t base_bytes;
uchar_t *base; /* g */
uchar_t *private_x; /* x */
uint32_t private_x_bits;
uchar_t *public_y; /* y */
uint32_t public_y_bits;
uchar_t *signature; /* concat(r, s) */
int (*rfunc)(void *, size_t); /* random function */
} DSAbytekey;
CK_RV dsa_genkey_pair(DSAbytekey *bkey);
CK_RV dsa_sign(DSAbytekey *bkey, uchar_t *msg, uint32_t msglen, uchar_t *sig);
CK_RV dsa_verify(DSAbytekey *bkey, uchar_t *msg, uchar_t *sig);
/*
* The following definitions and declarations are only used by DSA FIPS POST
*/
#ifdef _DSA_FIPS_POST
/* DSA FIPS Declarations */
#define FIPS_DSA_PRIME_LENGTH 128 /* 1024-bits */
#define FIPS_DSA_SUBPRIME_LENGTH 20 /* 160-bits */
#define FIPS_DSA_BASE_LENGTH 128 /* 1024-bits */
#define FIPS_DSA_SEED_LENGTH 20 /* 160-bits */
#define FIPS_DSA_DIGEST_LENGTH 20 /* 160-bits */
#define FIPS_DSA_SIGNATURE_LENGTH 40 /* 320-bits */
/* DSA FIPS functions */
extern int fips_dsa_post(void);
extern int fips_dsa_genkey_pair(DSAbytekey *);
extern int fips_dsa_digest_sign(DSAbytekey *, uint8_t *, uint32_t, uint8_t *);
extern int fips_dsa_verify(DSAbytekey *, uint8_t *, uint8_t *);
#endif /* _DSA_FIPS_POST */
#ifdef __cplusplus
}
#endif
#endif /* _DSA_IMPL_H */
|
