Home | History | Annotate | Line # | Download | only in asn1 
      1 /*
      2  * Copyright 1999-2020 The OpenSSL Project Authors. All Rights Reserved.
      3  *
      4  * Licensed under the Apache License 2.0 (the "License").  You may not use
      5  * this file except in compliance with the License.  You can obtain a copy
      6  * in the file LICENSE in the source distribution or at
      7  * https://www.openssl.org/source/license.html
      8  */
      9 
     10 #include <stdio.h>
     11 #include "internal/cryptlib.h"
     12 #include <openssl/asn1t.h>
     13 #include <openssl/x509.h>
     14 #include "crypto/x509.h"
     15 
     16 /* Minor tweak to operation: zero private key data */
     17 static int pkey_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it,
     18                    void *exarg)
     19 {
     20     /* Since the structure must still be valid use ASN1_OP_FREE_PRE */
     21     if (operation == ASN1_OP_FREE_PRE) {
     22         PKCS8_PRIV_KEY_INFO *key = (PKCS8_PRIV_KEY_INFO *)*pval;
     23         if (key->pkey)
     24             OPENSSL_cleanse(key->pkey->data, key->pkey->length);
     25     }
     26     return 1;
     27 }
     28 
     29 ASN1_SEQUENCE_cb(PKCS8_PRIV_KEY_INFO, pkey_cb) = {
     30         ASN1_SIMPLE(PKCS8_PRIV_KEY_INFO, version, ASN1_INTEGER),
     31         ASN1_SIMPLE(PKCS8_PRIV_KEY_INFO, pkeyalg, X509_ALGOR),
     32         ASN1_SIMPLE(PKCS8_PRIV_KEY_INFO, pkey, ASN1_OCTET_STRING),
     33         ASN1_IMP_SET_OF_OPT(PKCS8_PRIV_KEY_INFO, attributes, X509_ATTRIBUTE, 0)
     34 } ASN1_SEQUENCE_END_cb(PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO)
     35 
     36 IMPLEMENT_ASN1_FUNCTIONS(PKCS8_PRIV_KEY_INFO)
     37 
     38 int PKCS8_pkey_set0(PKCS8_PRIV_KEY_INFO *priv, ASN1_OBJECT *aobj,
     39                     int version,
     40                     int ptype, void *pval, unsigned char *penc, int penclen)
     41 {
     42     if (version >= 0) {
     43         if (!ASN1_INTEGER_set(priv->version, version))
     44             return 0;
     45     }
     46     if (!X509_ALGOR_set0(priv->pkeyalg, aobj, ptype, pval))
     47         return 0;
     48     if (penc)
     49         ASN1_STRING_set0(priv->pkey, penc, penclen);
     50     return 1;
     51 }
     52 
     53 int PKCS8_pkey_get0(const ASN1_OBJECT **ppkalg,
     54                     const unsigned char **pk, int *ppklen,
     55                     const X509_ALGOR **pa, const PKCS8_PRIV_KEY_INFO *p8)
     56 {
     57     if (ppkalg)
     58         *ppkalg = p8->pkeyalg->algorithm;
     59     if (pk) {
     60         *pk = ASN1_STRING_get0_data(p8->pkey);
     61         *ppklen = ASN1_STRING_length(p8->pkey);
     62     }
     63     if (pa)
     64         *pa = p8->pkeyalg;
     65     return 1;
     66 }
     67 
     68 const STACK_OF(X509_ATTRIBUTE) *
     69 PKCS8_pkey_get0_attrs(const PKCS8_PRIV_KEY_INFO *p8)
     70 {
     71     return p8->attributes;
     72 }
     73 
     74 int PKCS8_pkey_add1_attr_by_NID(PKCS8_PRIV_KEY_INFO *p8, int nid, int type,
     75                                 const unsigned char *bytes, int len)
     76 {
     77     if (X509at_add1_attr_by_NID(&p8->attributes, nid, type, bytes, len) != NULL)
     78         return 1;
     79     return 0;
     80 }
     81 
     82 int PKCS8_pkey_add1_attr_by_OBJ(PKCS8_PRIV_KEY_INFO *p8, const ASN1_OBJECT *obj, int type,
     83                                 const unsigned char *bytes, int len)
     84 {
     85     return (X509at_add1_attr_by_OBJ(&p8->attributes, obj, type, bytes, len) != NULL);
     86 }
     87 
     88 int PKCS8_pkey_add1_attr(PKCS8_PRIV_KEY_INFO *p8, X509_ATTRIBUTE *attr)
     89 {
     90     return (X509at_add1_attr(&p8->attributes, attr) != NULL);
     91 }
     92