diff options
author | Shane Lontis <shane.lontis@oracle.com> | 2020-04-01 07:51:18 +0200 |
---|---|---|
committer | Shane Lontis <shane.lontis@oracle.com> | 2020-04-01 07:51:18 +0200 |
commit | 96ebe52e897dea29664683e138877fb5eb995e4d (patch) | |
tree | b32e8fa99b2b4eb53e214b7fa196c8ec8d465777 /crypto/rsa/rsa_ameth.c | |
parent | Windows makefile generator: Don't delete long lists of files in one go (diff) | |
download | openssl-96ebe52e897dea29664683e138877fb5eb995e4d.tar.xz openssl-96ebe52e897dea29664683e138877fb5eb995e4d.zip |
Add EVP_PKEY_gettable_params support for accessing EVP_PKEY key data fields
Currently only RSA, EC and ECX are supported (DH and DSA need to be added to the keygen
PR's seperately because the fields supported have changed significantly).
The API's require the keys to be provider based.
Made the keymanagement export and get_params functions share the same code by supplying
support functions that work for both a OSSL_PARAM_BLD as well as a OSSL_PARAM[].
This approach means that complex code is not required to build an
empty OSSL_PARAM[] with the correct sized fields before then doing a second
pass to populate the array.
The RSA factor arrays have been changed to use unique key names to simplify the interface
needed by the user.
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/11365)
Diffstat (limited to 'crypto/rsa/rsa_ameth.c')
-rw-r--r-- | crypto/rsa/rsa_ameth.c | 17 |
1 files changed, 7 insertions, 10 deletions
diff --git a/crypto/rsa/rsa_ameth.c b/crypto/rsa/rsa_ameth.c index ec8df4a718..fb378ae039 100644 --- a/crypto/rsa/rsa_ameth.c +++ b/crypto/rsa/rsa_ameth.c @@ -20,7 +20,7 @@ #include <openssl/bn.h> #include <openssl/cms.h> #include <openssl/core_names.h> -#include "openssl/param_build.h" +#include <openssl/param_build.h> #include "crypto/asn1.h" #include "crypto/evp.h" #include "crypto/rsa.h" @@ -1142,27 +1142,24 @@ static int rsa_pkey_export_to(const EVP_PKEY *from, void *to_keydata, goto err; selection |= OSSL_KEYMGMT_SELECT_PRIVATE_KEY; - for (i = 0; i < numprimes; i++) { + for (i = 0; i < numprimes && rsa_mp_factor_names[i] != NULL; i++) { const BIGNUM *num = sk_BIGNUM_const_value(primes, i); - if (!OSSL_PARAM_BLD_push_BN(tmpl, OSSL_PKEY_PARAM_RSA_FACTOR, - num)) + if (!OSSL_PARAM_BLD_push_BN(tmpl, rsa_mp_factor_names[i], num)) goto err; } - for (i = 0; i < numexps; i++) { + for (i = 0; i < numexps && rsa_mp_exp_names[i] != NULL; i++) { const BIGNUM *num = sk_BIGNUM_const_value(exps, i); - if (!OSSL_PARAM_BLD_push_BN(tmpl, OSSL_PKEY_PARAM_RSA_EXPONENT, - num)) + if (!OSSL_PARAM_BLD_push_BN(tmpl, rsa_mp_exp_names[i], num)) goto err; } - for (i = 0; i < numcoeffs; i++) { + for (i = 0; i < numcoeffs && rsa_mp_coeff_names[i] != NULL; i++) { const BIGNUM *num = sk_BIGNUM_const_value(coeffs, i); - if (!OSSL_PARAM_BLD_push_BN(tmpl, OSSL_PKEY_PARAM_RSA_COEFFICIENT, - num)) + if (!OSSL_PARAM_BLD_push_BN(tmpl, rsa_mp_coeff_names[i], num)) goto err; } } |