提交 168b3b2e 编写于 作者: R Roberto Sassu 提交者: Zheng Zengkai

rsa: add parser of raw format

hulk inclusion
category: feature
feature: IMA Digest Lists extension
bugzilla: 46797

-------------------------------------------------

Parse the RSA key with RAW format if the ASN.1 parser returns an error.
Signed-off-by: NRoberto Sassu <roberto.sassu@huawei.com>
Signed-off-by: NTianxing Zhang <zhangtianxing3@huawei.com>
Reviewed-by: NJason Yan <yanaijie@huawei.com>
Signed-off-by: NZheng Zengkai <zhengzengkai@huawei.com>
上级 9f286132
...@@ -164,8 +164,11 @@ static int rsa_set_pub_key(struct crypto_akcipher *tfm, const void *key, ...@@ -164,8 +164,11 @@ static int rsa_set_pub_key(struct crypto_akcipher *tfm, const void *key,
rsa_free_mpi_key(mpi_key); rsa_free_mpi_key(mpi_key);
ret = rsa_parse_pub_key(&raw_key, key, keylen); ret = rsa_parse_pub_key(&raw_key, key, keylen);
if (ret) if (ret) {
return ret; ret = rsa_parse_pub_key_raw(&raw_key, key, keylen);
if (ret)
return ret;
}
mpi_key->e = mpi_read_raw_data(raw_key.e, raw_key.e_sz); mpi_key->e = mpi_read_raw_data(raw_key.e, raw_key.e_sz);
if (!mpi_key->e) if (!mpi_key->e)
...@@ -198,8 +201,11 @@ static int rsa_set_priv_key(struct crypto_akcipher *tfm, const void *key, ...@@ -198,8 +201,11 @@ static int rsa_set_priv_key(struct crypto_akcipher *tfm, const void *key,
rsa_free_mpi_key(mpi_key); rsa_free_mpi_key(mpi_key);
ret = rsa_parse_priv_key(&raw_key, key, keylen); ret = rsa_parse_priv_key(&raw_key, key, keylen);
if (ret) if (ret) {
return ret; ret = rsa_parse_priv_key_raw(&raw_key, key, keylen);
if (ret)
return ret;
}
mpi_key->d = mpi_read_raw_data(raw_key.d, raw_key.d_sz); mpi_key->d = mpi_read_raw_data(raw_key.d, raw_key.d_sz);
if (!mpi_key->d) if (!mpi_key->d)
......
...@@ -9,6 +9,7 @@ ...@@ -9,6 +9,7 @@
#include <linux/export.h> #include <linux/export.h>
#include <linux/err.h> #include <linux/err.h>
#include <linux/fips.h> #include <linux/fips.h>
#include <linux/mpi.h>
#include <crypto/internal/rsa.h> #include <crypto/internal/rsa.h>
#include "rsapubkey.asn1.h" #include "rsapubkey.asn1.h"
#include "rsaprivkey.asn1.h" #include "rsaprivkey.asn1.h"
...@@ -148,6 +149,32 @@ int rsa_get_qinv(void *context, size_t hdrlen, unsigned char tag, ...@@ -148,6 +149,32 @@ int rsa_get_qinv(void *context, size_t hdrlen, unsigned char tag,
return 0; return 0;
} }
typedef int (*rsa_get_func)(void *, size_t, unsigned char,
const void *, size_t);
static int rsa_parse_key_raw(struct rsa_key *rsa_key,
const void *key, unsigned int key_len,
rsa_get_func *func, int n_func)
{
unsigned int nbytes, len = key_len;
const void *key_ptr = key;
int ret, i;
for (i = 0; i < n_func; i++) {
ret = mpi_key_length(key_ptr, len, NULL, &nbytes);
if (ret < 0)
return ret;
ret = func[i](rsa_key, 0, 0, key_ptr + 2, nbytes);
if (ret < 0)
return ret;
key_ptr += nbytes + 2;
}
return (key_ptr == key + key_len) ? 0 : -EINVAL;
}
/** /**
* rsa_parse_pub_key() - decodes the BER encoded buffer and stores in the * rsa_parse_pub_key() - decodes the BER encoded buffer and stores in the
* provided struct rsa_key, pointers to the raw key as is, * provided struct rsa_key, pointers to the raw key as is,
...@@ -166,6 +193,27 @@ int rsa_parse_pub_key(struct rsa_key *rsa_key, const void *key, ...@@ -166,6 +193,27 @@ int rsa_parse_pub_key(struct rsa_key *rsa_key, const void *key,
} }
EXPORT_SYMBOL_GPL(rsa_parse_pub_key); EXPORT_SYMBOL_GPL(rsa_parse_pub_key);
/**
* rsa_parse_pub_key_raw() - parse the RAW key and store in the provided struct
* rsa_key, pointers to the raw key as is, so that
* the caller can copy it or MPI parse it, etc.
*
* @rsa_key: struct rsa_key key representation
* @key: key in RAW format
* @key_len: length of key
*
* Return: 0 on success or error code in case of error
*/
int rsa_parse_pub_key_raw(struct rsa_key *rsa_key, const void *key,
unsigned int key_len)
{
rsa_get_func pub_func[] = {rsa_get_n, rsa_get_e};
return rsa_parse_key_raw(rsa_key, key, key_len,
pub_func, ARRAY_SIZE(pub_func));
}
EXPORT_SYMBOL_GPL(rsa_parse_pub_key_raw);
/** /**
* rsa_parse_priv_key() - decodes the BER encoded buffer and stores in the * rsa_parse_priv_key() - decodes the BER encoded buffer and stores in the
* provided struct rsa_key, pointers to the raw key * provided struct rsa_key, pointers to the raw key
...@@ -184,3 +232,24 @@ int rsa_parse_priv_key(struct rsa_key *rsa_key, const void *key, ...@@ -184,3 +232,24 @@ int rsa_parse_priv_key(struct rsa_key *rsa_key, const void *key,
return asn1_ber_decoder(&rsaprivkey_decoder, rsa_key, key, key_len); return asn1_ber_decoder(&rsaprivkey_decoder, rsa_key, key, key_len);
} }
EXPORT_SYMBOL_GPL(rsa_parse_priv_key); EXPORT_SYMBOL_GPL(rsa_parse_priv_key);
/**
* rsa_parse_priv_key_raw() - parse the RAW key and store in the provided struct
* rsa_key, pointers to the raw key as is, so that
* the caller can copy it or MPI parse it, etc.
*
* @rsa_key: struct rsa_key key representation
* @key: key in RAW format
* @key_len: length of key
*
* Return: 0 on success or error code in case of error
*/
int rsa_parse_priv_key_raw(struct rsa_key *rsa_key, const void *key,
unsigned int key_len)
{
rsa_get_func priv_func[] = {rsa_get_n, rsa_get_e, rsa_get_d};
return rsa_parse_key_raw(rsa_key, key, key_len,
priv_func, ARRAY_SIZE(priv_func));
}
EXPORT_SYMBOL_GPL(rsa_parse_priv_key_raw);
...@@ -50,8 +50,14 @@ struct rsa_key { ...@@ -50,8 +50,14 @@ struct rsa_key {
int rsa_parse_pub_key(struct rsa_key *rsa_key, const void *key, int rsa_parse_pub_key(struct rsa_key *rsa_key, const void *key,
unsigned int key_len); unsigned int key_len);
int rsa_parse_pub_key_raw(struct rsa_key *rsa_key, const void *key,
unsigned int key_len);
int rsa_parse_priv_key(struct rsa_key *rsa_key, const void *key, int rsa_parse_priv_key(struct rsa_key *rsa_key, const void *key,
unsigned int key_len); unsigned int key_len);
int rsa_parse_priv_key_raw(struct rsa_key *rsa_key, const void *key,
unsigned int key_len);
extern struct crypto_template rsa_pkcs1pad_tmpl; extern struct crypto_template rsa_pkcs1pad_tmpl;
#endif #endif
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册