Skip to content
体验新版
项目
组织
正在加载...
登录
切换导航
打开侧边栏
btwise
openssl
提交
a6de7133
O
openssl
项目概览
btwise
/
openssl
通知
1
Star
0
Fork
0
代码
文件
提交
分支
Tags
贡献者
分支图
Diff
Issue
0
列表
看板
标记
里程碑
合并请求
0
DevOps
流水线
流水线任务
计划
Wiki
0
Wiki
分析
仓库
DevOps
项目成员
Pages
O
openssl
项目概览
项目概览
详情
发布
仓库
仓库
文件
提交
分支
标签
贡献者
分支图
比较
Issue
0
Issue
0
列表
看板
标记
里程碑
合并请求
0
合并请求
0
Pages
DevOps
DevOps
流水线
流水线任务
计划
分析
分析
仓库分析
DevOps
Wiki
0
Wiki
成员
成员
收起侧边栏
关闭侧边栏
动态
分支图
创建新Issue
流水线任务
提交
Issue看板
体验新版 GitCode,发现更多精彩内容 >>
提交
a6de7133
编写于
3月 09, 2011
作者:
D
Dr. Stephen Henson
浏览文件
操作
浏览文件
下载
电子邮件补丁
差异文件
Enter FIPS mode in fips_dhvs. Support file I/O in fips_ecdsavs.
上级
0fa714a4
变更
2
隐藏空白更改
内联
并排
Showing
2 changed file
with
116 addition
and
28 deletion
+116
-28
fips/dh/fips_dhvs.c
fips/dh/fips_dhvs.c
+2
-0
fips/ecdsa/fips_ecdsavs.c
fips/ecdsa/fips_ecdsavs.c
+114
-28
未找到文件。
fips/dh/fips_dhvs.c
浏览文件 @
a6de7133
...
...
@@ -161,6 +161,8 @@ int main(int argc,char **argv)
int
do_verify
=
-
1
,
exout
=
0
;
fips_set_error_print
();
if
(
!
FIPS_mode_set
(
1
))
exit
(
1
);
if
(
argn
&&
!
strcmp
(
*
args
,
"dhver"
))
{
...
...
fips/ecdsa/fips_ecdsavs.c
浏览文件 @
a6de7133
/* fips/ecdsa/fips_ecdsavs.c */
/* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
* project.
*/
/* ====================================================================
* Copyright (c) 2011 The OpenSSL Project. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. All advertising materials mentioning features or use of this
* software must display the following acknowledgment:
* "This product includes software developed by the OpenSSL Project
* for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
*
* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
* endorse or promote products derived from this software without
* prior written permission. For written permission, please contact
* licensing@OpenSSL.org.
*
* 5. Products derived from this software may not be called "OpenSSL"
* nor may "OpenSSL" appear in their names without prior written
* permission of the OpenSSL Project.
*
* 6. Redistributions of any form whatsoever must retain the following
* acknowledgment:
* "This product includes software developed by the OpenSSL Project
* for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
*
* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
* OF THE POSSIBILITY OF SUCH DAMAGE.
* ====================================================================
*/
#define OPENSSL_FIPSAPI
#include <openssl/opensslconf.h>
#include <stdio.h>
#ifndef OPENSSL_FIPS
#include <stdio.h>
int
main
(
int
argc
,
char
**
argv
)
{
...
...
@@ -124,7 +177,7 @@ static int ec_get_pubkey(EC_KEY *key, BIGNUM *x, BIGNUM *y)
}
static
int
KeyPair
(
void
)
static
int
KeyPair
(
FILE
*
in
,
FILE
*
out
)
{
char
buf
[
2048
],
lbuf
[
2048
];
char
*
keyword
,
*
value
;
...
...
@@ -135,18 +188,18 @@ static int KeyPair(void)
EC_KEY
*
key
=
NULL
;
Qx
=
BN_new
();
Qy
=
BN_new
();
while
(
fgets
(
buf
,
sizeof
buf
,
std
in
)
!=
NULL
)
while
(
fgets
(
buf
,
sizeof
buf
,
in
)
!=
NULL
)
{
if
(
*
buf
==
'['
&&
buf
[
2
]
==
'-'
)
{
if
(
buf
[
2
]
==
'-'
)
curve_nid
=
lookup_curve
(
buf
,
lbuf
,
NULL
);
fputs
(
buf
,
std
out
);
fputs
(
buf
,
out
);
continue
;
}
if
(
!
parse_line
(
&
keyword
,
&
value
,
lbuf
,
buf
))
{
fputs
(
buf
,
std
out
);
fputs
(
buf
,
out
);
continue
;
}
if
(
!
strcmp
(
keyword
,
"N"
))
...
...
@@ -171,10 +224,10 @@ static int KeyPair(void)
d
=
EC_KEY_get0_private_key
(
key
);
do_bn_print_name
(
std
out
,
"d"
,
d
);
do_bn_print_name
(
std
out
,
"Qx"
,
Qx
);
do_bn_print_name
(
std
out
,
"Qy"
,
Qy
);
fputs
(
"
\n
"
,
std
out
);
do_bn_print_name
(
out
,
"d"
,
d
);
do_bn_print_name
(
out
,
"Qx"
,
Qx
);
do_bn_print_name
(
out
,
"Qy"
,
Qy
);
fputs
(
"
\n
"
,
out
);
EC_KEY_free
(
key
);
}
...
...
@@ -187,7 +240,7 @@ static int KeyPair(void)
return
1
;
}
static
int
PKV
(
void
)
static
int
PKV
(
FILE
*
in
,
FILE
*
out
)
{
char
buf
[
2048
],
lbuf
[
2048
];
...
...
@@ -195,9 +248,9 @@ static int PKV(void)
int
curve_nid
=
NID_undef
;
BIGNUM
*
Qx
=
NULL
,
*
Qy
=
NULL
;
EC_KEY
*
key
=
NULL
;
while
(
fgets
(
buf
,
sizeof
buf
,
std
in
)
!=
NULL
)
while
(
fgets
(
buf
,
sizeof
buf
,
in
)
!=
NULL
)
{
fputs
(
buf
,
std
out
);
fputs
(
buf
,
out
);
if
(
*
buf
==
'['
&&
buf
[
2
]
==
'-'
)
{
curve_nid
=
lookup_curve
(
buf
,
lbuf
,
NULL
);
...
...
@@ -225,14 +278,14 @@ static int PKV(void)
}
key
=
EC_KEY_new_by_curve_name
(
curve_nid
);
rv
=
EC_KEY_set_public_key_affine_coordinates
(
key
,
Qx
,
Qy
);
printf
(
"Result = %s
\n
"
,
rv
?
"P"
:
"F"
);
fprintf
(
out
,
"Result = %s
\n
"
,
rv
?
"P"
:
"F"
);
}
}
return
1
;
}
static
int
SigGen
(
void
)
static
int
SigGen
(
FILE
*
in
,
FILE
*
out
)
{
char
buf
[
2048
],
lbuf
[
2048
];
char
*
keyword
,
*
value
;
...
...
@@ -247,9 +300,9 @@ static int SigGen(void)
EVP_MD_CTX_init
(
&
mctx
);
Qx
=
BN_new
();
Qy
=
BN_new
();
while
(
fgets
(
buf
,
sizeof
buf
,
std
in
)
!=
NULL
)
while
(
fgets
(
buf
,
sizeof
buf
,
in
)
!=
NULL
)
{
fputs
(
buf
,
std
out
);
fputs
(
buf
,
out
);
if
(
*
buf
==
'['
)
{
curve_nid
=
lookup_curve
(
buf
,
lbuf
,
&
digest
);
...
...
@@ -290,10 +343,10 @@ static int SigGen(void)
return
0
;
}
do_bn_print_name
(
std
out
,
"Qx"
,
Qx
);
do_bn_print_name
(
std
out
,
"Qy"
,
Qy
);
do_bn_print_name
(
std
out
,
"R"
,
sig
->
r
);
do_bn_print_name
(
std
out
,
"S"
,
sig
->
s
);
do_bn_print_name
(
out
,
"Qx"
,
Qx
);
do_bn_print_name
(
out
,
"Qy"
,
Qy
);
do_bn_print_name
(
out
,
"R"
,
sig
->
r
);
do_bn_print_name
(
out
,
"S"
,
sig
->
s
);
EC_KEY_free
(
key
);
...
...
@@ -308,7 +361,7 @@ static int SigGen(void)
return
1
;
}
static
int
SigVer
(
void
)
static
int
SigVer
(
FILE
*
in
,
FILE
*
out
)
{
char
buf
[
2048
],
lbuf
[
2048
];
char
*
keyword
,
*
value
;
...
...
@@ -323,9 +376,9 @@ static int SigVer(void)
EVP_MD_CTX_init
(
&
mctx
);
sig
->
r
=
NULL
;
sig
->
s
=
NULL
;
while
(
fgets
(
buf
,
sizeof
buf
,
std
in
)
!=
NULL
)
while
(
fgets
(
buf
,
sizeof
buf
,
in
)
!=
NULL
)
{
fputs
(
buf
,
std
out
);
fputs
(
buf
,
out
);
if
(
*
buf
==
'['
)
{
curve_nid
=
lookup_curve
(
buf
,
lbuf
,
&
digest
);
...
...
@@ -391,7 +444,7 @@ static int SigVer(void)
rv
=
FIPS_ecdsa_verify_ctx
(
key
,
&
mctx
,
sig
);
no_err
=
0
;
printf
(
"Result = %s
\n
"
,
rv
?
"P"
:
"F"
);
fprintf
(
out
,
"Result = %s
\n
"
,
rv
?
"P"
:
"F"
);
}
}
...
...
@@ -400,32 +453,65 @@ static int SigVer(void)
int
main
(
int
argc
,
char
**
argv
)
{
FILE
*
in
,
*
out
;
const
char
*
cmd
=
argv
[
1
];
int
rv
=
0
;
fips_set_error_print
();
if
(
!
FIPS_mode_set
(
1
))
exit
(
1
);
if
(
argc
==
4
)
{
in
=
fopen
(
argv
[
2
],
"r"
);
if
(
!
in
)
{
fprintf
(
stderr
,
"Error opening input file
\n
"
);
exit
(
1
);
}
out
=
fopen
(
argv
[
3
],
"w"
);
if
(
!
out
)
{
fprintf
(
stderr
,
"Error opening output file
\n
"
);
exit
(
1
);
}
}
else
if
(
argc
==
2
)
{
in
=
stdin
;
out
=
stdout
;
}
if
(
!
cmd
)
{
fprintf
(
stderr
,
"fips_ecdsavs [KeyPair|PKV|SigGen|SigVer]
\n
"
);
return
1
;
}
if
(
!
strcmp
(
cmd
,
"KeyPair"
))
rv
=
KeyPair
();
rv
=
KeyPair
(
in
,
out
);
else
if
(
!
strcmp
(
cmd
,
"PKV"
))
rv
=
PKV
();
rv
=
PKV
(
in
,
out
);
else
if
(
!
strcmp
(
cmd
,
"SigVer"
))
rv
=
SigVer
();
rv
=
SigVer
(
in
,
out
);
else
if
(
!
strcmp
(
cmd
,
"SigGen"
))
rv
=
SigGen
();
rv
=
SigGen
(
in
,
out
);
else
{
fprintf
(
stderr
,
"Unknown command %s
\n
"
,
cmd
);
return
1
;
}
if
(
argc
==
4
)
{
fclose
(
in
);
fclose
(
out
);
}
if
(
rv
<=
0
)
{
fprintf
(
stderr
,
"Error running %s
\n
"
,
cmd
);
return
1
;
}
return
0
;
}
...
...
编辑
预览
Markdown
is supported
0%
请重试
或
添加新附件
.
添加附件
取消
You are about to add
0
people
to the discussion. Proceed with caution.
先完成此消息的编辑!
取消
想要评论请
注册
或
登录