p_sign.c 5.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134
  1. /* crypto/evp/p_sign.c */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. #include <stdio.h>
  59. #include "cryptlib.h"
  60. #include <openssl/evp.h>
  61. #include <openssl/objects.h>
  62. #include <openssl/x509.h>
  63. #ifdef undef
  64. void EVP_SignInit(EVP_MD_CTX *ctx, EVP_MD *type)
  65. {
  66. EVP_DigestInit_ex(ctx, type);
  67. }
  68. void EVP_SignUpdate(EVP_MD_CTX *ctx, unsigned char *data, unsigned int count)
  69. {
  70. EVP_DigestUpdate(ctx, data, count);
  71. }
  72. #endif
  73. int EVP_SignFinal(EVP_MD_CTX *ctx, unsigned char *sigret,
  74. unsigned int *siglen, EVP_PKEY *pkey)
  75. {
  76. unsigned char m[EVP_MAX_MD_SIZE];
  77. unsigned int m_len;
  78. int i = 0, ok = 0, v;
  79. EVP_MD_CTX tmp_ctx;
  80. EVP_PKEY_CTX *pkctx = NULL;
  81. *siglen = 0;
  82. EVP_MD_CTX_init(&tmp_ctx);
  83. if (!EVP_MD_CTX_copy_ex(&tmp_ctx, ctx))
  84. goto err;
  85. if (!EVP_DigestFinal_ex(&tmp_ctx, &(m[0]), &m_len))
  86. goto err;
  87. EVP_MD_CTX_cleanup(&tmp_ctx);
  88. if (ctx->digest->flags & EVP_MD_FLAG_PKEY_METHOD_SIGNATURE) {
  89. size_t sltmp = (size_t)EVP_PKEY_size(pkey);
  90. i = 0;
  91. pkctx = EVP_PKEY_CTX_new(pkey, NULL);
  92. if (!pkctx)
  93. goto err;
  94. if (EVP_PKEY_sign_init(pkctx) <= 0)
  95. goto err;
  96. if (EVP_PKEY_CTX_set_signature_md(pkctx, ctx->digest) <= 0)
  97. goto err;
  98. if (EVP_PKEY_sign(pkctx, sigret, &sltmp, m, m_len) <= 0)
  99. goto err;
  100. *siglen = sltmp;
  101. i = 1;
  102. err:
  103. EVP_PKEY_CTX_free(pkctx);
  104. return i;
  105. }
  106. for (i = 0; i < 4; i++) {
  107. v = ctx->digest->required_pkey_type[i];
  108. if (v == 0)
  109. break;
  110. if (pkey->type == v) {
  111. ok = 1;
  112. break;
  113. }
  114. }
  115. if (!ok) {
  116. EVPerr(EVP_F_EVP_SIGNFINAL, EVP_R_WRONG_PUBLIC_KEY_TYPE);
  117. return (0);
  118. }
  119. if (ctx->digest->sign == NULL) {
  120. EVPerr(EVP_F_EVP_SIGNFINAL, EVP_R_NO_SIGN_FUNCTION_CONFIGURED);
  121. return (0);
  122. }
  123. return (ctx->digest->sign(ctx->digest->type, m, m_len, sigret, siglen,
  124. pkey->pkey.ptr));
  125. }