Botan 2.19.5 Crypto and TLS for C&

ffi_pk_op.cpp
Go to the documentation of this file.
1/*
2* (C) 2015,2017 Jack Lloyd
3*
4* Botan is released under the Simplified BSD License (see license.txt)
5*/
6
7#include <botan/ffi.h>
8#include <botan/internal/ffi_util.h>
9#include <botan/internal/ffi_pkey.h>
10#include <botan/internal/ffi_rng.h>
11#include <botan/pubkey.h>
12
13 extern "C" {
14
15 using namespace Botan_FFI;
16
17 BOTAN_FFI_DECLARE_STRUCT(botan_pk_op_encrypt_struct, Botan::PK_Encryptor, 0x891F3FC3);
18 BOTAN_FFI_DECLARE_STRUCT(botan_pk_op_decrypt_struct, Botan::PK_Decryptor, 0x912F3C37);
19 BOTAN_FFI_DECLARE_STRUCT(botan_pk_op_sign_struct, Botan::PK_Signer, 0x1AF0C39F);
20 BOTAN_FFI_DECLARE_STRUCT(botan_pk_op_verify_struct, Botan::PK_Verifier, 0x2B91F936);
21 BOTAN_FFI_DECLARE_STRUCT(botan_pk_op_ka_struct, Botan::PK_Key_Agreement, 0x2939CAB1);
22
23 int botan_pk_op_encrypt_create(botan_pk_op_encrypt_t* op,
24 botan_pubkey_t key_obj,
25 const char* padding,
26 uint32_t flags)
27 {
28 if(op == nullptr)
29 return BOTAN_FFI_ERROR_NULL_POINTER;
30
31 if(flags != 0 && flags != BOTAN_PUBKEY_DER_FORMAT_SIGNATURE)
32 return BOTAN_FFI_ERROR_BAD_FLAG;
33
34 return ffi_guard_thunk(__func__, [=]() -> int {
35 *op = nullptr;
36
37 std::unique_ptr<Botan::PK_Encryptor> pk(new Botan::PK_Encryptor_EME(safe_get(key_obj), Botan::system_rng(), padding));
38 *op = new botan_pk_op_encrypt_struct(pk.release());
39 return BOTAN_FFI_SUCCESS;
40 });
41 }
42
43 int botan_pk_op_encrypt_destroy(botan_pk_op_encrypt_t op)
44 {
45 return BOTAN_FFI_CHECKED_DELETE(op);
46 }
47
48 int botan_pk_op_encrypt_output_length(botan_pk_op_encrypt_t op, size_t ptext_len, size_t* ctext_len)
49 {
50 if(ctext_len == nullptr)
51 return BOTAN_FFI_ERROR_NULL_POINTER;
52 return BOTAN_FFI_DO(Botan::PK_Encryptor, op, o, { *ctext_len = o.ciphertext_length(ptext_len); });
53 }
54
55 int botan_pk_op_encrypt(botan_pk_op_encrypt_t op,
56 botan_rng_t rng_obj,
57 uint8_t out[], size_t* out_len,
58 const uint8_t plaintext[], size_t plaintext_len)
59 {
60 return BOTAN_FFI_DO(Botan::PK_Encryptor, op, o, {
61 return write_vec_output(out, out_len, o.encrypt(plaintext, plaintext_len, safe_get(rng_obj)));
62 });
63 }
64
65/*
66* Public Key Decryption
67*/
68 int botan_pk_op_decrypt_create(botan_pk_op_decrypt_t* op,
69 botan_privkey_t key_obj,
70 const char* padding,
71 uint32_t flags)
72 {
73 if(op == nullptr)
74 return BOTAN_FFI_ERROR_NULL_POINTER;
75
76 if(flags != 0)
77 return BOTAN_FFI_ERROR_BAD_FLAG;
78
79 return ffi_guard_thunk(__func__, [=]() -> int {
80 *op = nullptr;
81
82 std::unique_ptr<Botan::PK_Decryptor> pk(new Botan::PK_Decryptor_EME(safe_get(key_obj), Botan::system_rng(), padding));
83 *op = new botan_pk_op_decrypt_struct(pk.release());
84 return BOTAN_FFI_SUCCESS;
85 });
86 }
87
88 int botan_pk_op_decrypt_destroy(botan_pk_op_decrypt_t op)
89 {
90 return BOTAN_FFI_CHECKED_DELETE(op);
91 }
92
93 int botan_pk_op_decrypt_output_length(botan_pk_op_decrypt_t op, size_t ctext_len, size_t* ptext_len)
94 {
95 if(ptext_len == nullptr)
96 return BOTAN_FFI_ERROR_NULL_POINTER;
97 return BOTAN_FFI_DO(Botan::PK_Decryptor, op, o, { *ptext_len = o.plaintext_length(ctext_len); });
98 }
99
100 int botan_pk_op_decrypt(botan_pk_op_decrypt_t op,
101 uint8_t out[], size_t* out_len,
102 const uint8_t ciphertext[], size_t ciphertext_len)
103 {
104 return BOTAN_FFI_DO(Botan::PK_Decryptor, op, o, {
105 return write_vec_output(out, out_len, o.decrypt(ciphertext, ciphertext_len));
106 });
107 }
108
109/*
110* Signature Generation
111*/
112 int botan_pk_op_sign_create(botan_pk_op_sign_t* op,
113 botan_privkey_t key_obj,
114 const char* hash,
115 uint32_t flags)
116 {
117 if(op == nullptr)
118 return BOTAN_FFI_ERROR_NULL_POINTER;
119
120 if(flags != 0 && flags != BOTAN_PUBKEY_DER_FORMAT_SIGNATURE)
121 return BOTAN_FFI_ERROR_BAD_FLAG;
122
123 return ffi_guard_thunk(__func__, [=]() -> int {
124 *op = nullptr;
125
126 auto format = (flags & BOTAN_PUBKEY_DER_FORMAT_SIGNATURE) ? Botan::DER_SEQUENCE : Botan::IEEE_1363;
127
128 std::unique_ptr<Botan::PK_Signer> pk(new Botan::PK_Signer(safe_get(key_obj), Botan::system_rng(), hash, format));
129 *op = new botan_pk_op_sign_struct(pk.release());
130 return BOTAN_FFI_SUCCESS;
131 });
132 }
133
134 int botan_pk_op_sign_destroy(botan_pk_op_sign_t op)
135 {
136 return BOTAN_FFI_CHECKED_DELETE(op);
137 }
138
139 int botan_pk_op_sign_output_length(botan_pk_op_sign_t op, size_t* sig_len)
140 {
141 if(sig_len == nullptr)
142 return BOTAN_FFI_ERROR_NULL_POINTER;
143
144 return BOTAN_FFI_DO(Botan::PK_Signer, op, o, { *sig_len = o.signature_length(); });
145 }
146
147 int botan_pk_op_sign_update(botan_pk_op_sign_t op, const uint8_t in[], size_t in_len)
148 {
149 return BOTAN_FFI_DO(Botan::PK_Signer, op, o, { o.update(in, in_len); });
150 }
151
152 int botan_pk_op_sign_finish(botan_pk_op_sign_t op, botan_rng_t rng_obj, uint8_t out[], size_t* out_len)
153 {
154 return BOTAN_FFI_DO(Botan::PK_Signer, op, o, {
155 return write_vec_output(out, out_len, o.signature(safe_get(rng_obj)));
156 });
157 }
158
159 int botan_pk_op_verify_create(botan_pk_op_verify_t* op,
160 botan_pubkey_t key_obj,
161 const char* hash,
162 uint32_t flags)
163 {
164 if(op == nullptr)
165 return BOTAN_FFI_ERROR_NULL_POINTER;
166
167 if(flags != 0 && flags != BOTAN_PUBKEY_DER_FORMAT_SIGNATURE)
168 return BOTAN_FFI_ERROR_BAD_FLAG;
169
170 return ffi_guard_thunk(__func__, [=]() -> int {
171 *op = nullptr;
172 auto format = (flags & BOTAN_PUBKEY_DER_FORMAT_SIGNATURE) ? Botan::DER_SEQUENCE : Botan::IEEE_1363;
173 std::unique_ptr<Botan::PK_Verifier> pk(new Botan::PK_Verifier(safe_get(key_obj), hash, format));
174 *op = new botan_pk_op_verify_struct(pk.release());
175 return BOTAN_FFI_SUCCESS;
176 });
177 }
178
179 int botan_pk_op_verify_destroy(botan_pk_op_verify_t op)
180 {
181 return BOTAN_FFI_CHECKED_DELETE(op);
182 }
183
184 int botan_pk_op_verify_update(botan_pk_op_verify_t op, const uint8_t in[], size_t in_len)
185 {
186 return BOTAN_FFI_DO(Botan::PK_Verifier, op, o, { o.update(in, in_len); });
187 }
188
189 int botan_pk_op_verify_finish(botan_pk_op_verify_t op, const uint8_t sig[], size_t sig_len)
190 {
191 return BOTAN_FFI_RETURNING(Botan::PK_Verifier, op, o, {
192 const bool legit = o.check_signature(sig, sig_len);
193
194 if(legit)
195 return BOTAN_FFI_SUCCESS;
196 else
197 return BOTAN_FFI_INVALID_VERIFIER;
198 });
199 }
200
201 int botan_pk_op_key_agreement_create(botan_pk_op_ka_t* op,
202 botan_privkey_t key_obj,
203 const char* kdf,
204 uint32_t flags)
205 {
206 if(op == nullptr)
207 return BOTAN_FFI_ERROR_NULL_POINTER;
208
209 if(flags != 0)
210 return BOTAN_FFI_ERROR_BAD_FLAG;
211
212 return ffi_guard_thunk(__func__, [=]() -> int {
213 *op = nullptr;
214 std::unique_ptr<Botan::PK_Key_Agreement> pk(new Botan::PK_Key_Agreement(safe_get(key_obj), Botan::system_rng(), kdf));
215 *op = new botan_pk_op_ka_struct(pk.release());
216 return BOTAN_FFI_SUCCESS;
217 });
218 }
219
220 int botan_pk_op_key_agreement_destroy(botan_pk_op_ka_t op)
221 {
222 return BOTAN_FFI_CHECKED_DELETE(op);
223 }
224
225 int botan_pk_op_key_agreement_export_public(botan_privkey_t key,
226 uint8_t out[], size_t* out_len)
227 {
228 return BOTAN_FFI_DO(Botan::Private_Key, key, k, {
229 if(auto kak = dynamic_cast<const Botan::PK_Key_Agreement_Key*>(&k))
230 return write_vec_output(out, out_len, kak->public_value());
231 return BOTAN_FFI_ERROR_BAD_FLAG;
232 });
233 }
234
235 int botan_pk_op_key_agreement_size(botan_pk_op_ka_t op, size_t* out_len)
236 {
237 return BOTAN_FFI_DO(Botan::PK_Key_Agreement, op, o, {
238 if(out_len == nullptr)
239 return BOTAN_FFI_ERROR_NULL_POINTER;
240 *out_len = o.agreed_value_size();
241 });
242 }
243
244 int botan_pk_op_key_agreement(botan_pk_op_ka_t op,
245 uint8_t out[], size_t* out_len,
246 const uint8_t other_key[], size_t other_key_len,
247 const uint8_t salt[], size_t salt_len)
248 {
249 return BOTAN_FFI_DO(Botan::PK_Key_Agreement, op, o, {
250 auto k = o.derive_key(*out_len, other_key, other_key_len, salt, salt_len).bits_of();
251 return write_vec_output(out, out_len, k);
252 });
253 }
254
255}
Botan::PK_Decryptor_EME
Definition: pubkey.h:580
Botan::PK_Decryptor
Definition: pubkey.h:85
Botan::PK_Decryptor::plaintext_length
virtual size_t plaintext_length(size_t ctext_len) const =0
Botan::PK_Encryptor_EME
Definition: pubkey.h:530
Botan::PK_Encryptor
Definition: pubkey.h:30
Botan::PK_Encryptor::ciphertext_length
virtual size_t ciphertext_length(size_t ctext_len) const =0
Botan::PK_Key_Agreement_Key
Definition: pk_keys.h:294
Botan::PK_Key_Agreement
Definition: pubkey.h:414
Botan::PK_Key_Agreement::derive_key
SymmetricKey derive_key(size_t key_len, const uint8_t in[], size_t in_len, const uint8_t params[], size_t params_len) const
Definition: pubkey.cpp:218
Botan::PK_Signer
Definition: pubkey.h:167
Botan::PK_Signer::update
void update(uint8_t in)
Definition: pubkey.h:238
Botan::PK_Signer::signature_length
size_t signature_length() const
Definition: pubkey.cpp:277
Botan::PK_Verifier
Definition: pubkey.h:299
Botan::PK_Verifier::update
void update(uint8_t in)
Definition: pubkey.h:347
Botan::PK_Verifier::check_signature
bool check_signature(const uint8_t sig[], size_t length)
Definition: pubkey.cpp:343
Botan::Private_Key
Definition: pk_keys.h:181
botan_pubkey_t
struct botan_pubkey_struct * botan_pubkey_t
Definition: ffi.h:1113
BOTAN_PUBKEY_DER_FORMAT_SIGNATURE
#define BOTAN_PUBKEY_DER_FORMAT_SIGNATURE
Definition: ffi.h:1425
botan_pk_op_decrypt_t
struct botan_pk_op_decrypt_struct * botan_pk_op_decrypt_t
Definition: ffi.h:1401
botan_privkey_t
struct botan_privkey_struct * botan_privkey_t
Definition: ffi.h:966
botan_pk_op_encrypt_t
struct botan_pk_op_encrypt_struct * botan_pk_op_encrypt_t
Definition: ffi.h:1375
botan_pk_op_ka_t
struct botan_pk_op_ka_struct * botan_pk_op_ka_t
Definition: ffi.h:1470
botan_pk_op_sign_t
struct botan_pk_op_sign_struct * botan_pk_op_sign_t
Definition: ffi.h:1427
botan_rng_t
struct botan_rng_struct * botan_rng_t
Definition: ffi.h:190
BOTAN_FFI_INVALID_VERIFIER
@ BOTAN_FFI_INVALID_VERIFIER
Definition: ffi.h:64
BOTAN_FFI_ERROR_BAD_FLAG
@ BOTAN_FFI_ERROR_BAD_FLAG
Definition: ffi.h:76
BOTAN_FFI_ERROR_NULL_POINTER
@ BOTAN_FFI_ERROR_NULL_POINTER
Definition: ffi.h:77
BOTAN_FFI_SUCCESS
@ BOTAN_FFI_SUCCESS
Definition: ffi.h:63
botan_pk_op_verify_t
struct botan_pk_op_verify_struct * botan_pk_op_verify_t
Definition: ffi.h:1451
botan_pk_op_encrypt
int botan_pk_op_encrypt(botan_pk_op_encrypt_t op, botan_rng_t rng_obj, uint8_t out[], size_t *out_len, const uint8_t plaintext[], size_t plaintext_len)
Definition: ffi_pk_op.cpp:55
botan_pk_op_decrypt
int botan_pk_op_decrypt(botan_pk_op_decrypt_t op, uint8_t out[], size_t *out_len, const uint8_t ciphertext[], size_t ciphertext_len)
Definition: ffi_pk_op.cpp:100
botan_pk_op_sign_output_length
int botan_pk_op_sign_output_length(botan_pk_op_sign_t op, size_t *sig_len)
Definition: ffi_pk_op.cpp:139
BOTAN_FFI_DECLARE_STRUCT
BOTAN_FFI_DECLARE_STRUCT(botan_pk_op_encrypt_struct, Botan::PK_Encryptor, 0x891F3FC3)
botan_pk_op_key_agreement_export_public
int botan_pk_op_key_agreement_export_public(botan_privkey_t key, uint8_t out[], size_t *out_len)
Definition: ffi_pk_op.cpp:225
botan_pk_op_key_agreement_size
int botan_pk_op_key_agreement_size(botan_pk_op_ka_t op, size_t *out_len)
Definition: ffi_pk_op.cpp:235
botan_pk_op_sign_update
int botan_pk_op_sign_update(botan_pk_op_sign_t op, const uint8_t in[], size_t in_len)
Definition: ffi_pk_op.cpp:147
botan_pk_op_decrypt_destroy
int botan_pk_op_decrypt_destroy(botan_pk_op_decrypt_t op)
Definition: ffi_pk_op.cpp:88
botan_pk_op_verify_create
int botan_pk_op_verify_create(botan_pk_op_verify_t *op, botan_pubkey_t key_obj, const char *hash, uint32_t flags)
Definition: ffi_pk_op.cpp:159
botan_pk_op_key_agreement_destroy
int botan_pk_op_key_agreement_destroy(botan_pk_op_ka_t op)
Definition: ffi_pk_op.cpp:220
botan_pk_op_sign_finish
int botan_pk_op_sign_finish(botan_pk_op_sign_t op, botan_rng_t rng_obj, uint8_t out[], size_t *out_len)
Definition: ffi_pk_op.cpp:152
botan_pk_op_verify_update
int botan_pk_op_verify_update(botan_pk_op_verify_t op, const uint8_t in[], size_t in_len)
Definition: ffi_pk_op.cpp:184
botan_pk_op_encrypt_create
int botan_pk_op_encrypt_create(botan_pk_op_encrypt_t *op, botan_pubkey_t key_obj, const char *padding, uint32_t flags)
Definition: ffi_pk_op.cpp:23
botan_pk_op_verify_destroy
int botan_pk_op_verify_destroy(botan_pk_op_verify_t op)
Definition: ffi_pk_op.cpp:179
botan_pk_op_verify_finish
int botan_pk_op_verify_finish(botan_pk_op_verify_t op, const uint8_t sig[], size_t sig_len)
Definition: ffi_pk_op.cpp:189
botan_pk_op_decrypt_output_length
int botan_pk_op_decrypt_output_length(botan_pk_op_decrypt_t op, size_t ctext_len, size_t *ptext_len)
Definition: ffi_pk_op.cpp:93
botan_pk_op_encrypt_output_length
int botan_pk_op_encrypt_output_length(botan_pk_op_encrypt_t op, size_t ptext_len, size_t *ctext_len)
Definition: ffi_pk_op.cpp:48
botan_pk_op_key_agreement
int botan_pk_op_key_agreement(botan_pk_op_ka_t op, uint8_t out[], size_t *out_len, const uint8_t other_key[], size_t other_key_len, const uint8_t salt[], size_t salt_len)
Definition: ffi_pk_op.cpp:244
botan_pk_op_decrypt_create
int botan_pk_op_decrypt_create(botan_pk_op_decrypt_t *op, botan_privkey_t key_obj, const char *padding, uint32_t flags)
Definition: ffi_pk_op.cpp:68
botan_pk_op_encrypt_destroy
int botan_pk_op_encrypt_destroy(botan_pk_op_encrypt_t op)
Definition: ffi_pk_op.cpp:43
botan_pk_op_sign_create
int botan_pk_op_sign_create(botan_pk_op_sign_t *op, botan_privkey_t key_obj, const char *hash, uint32_t flags)
Definition: ffi_pk_op.cpp:112
botan_pk_op_sign_destroy
int botan_pk_op_sign_destroy(botan_pk_op_sign_t op)
Definition: ffi_pk_op.cpp:134
botan_pk_op_key_agreement_create
int botan_pk_op_key_agreement_create(botan_pk_op_ka_t *op, botan_privkey_t key_obj, const char *kdf, uint32_t flags)
Definition: ffi_pk_op.cpp:201
BOTAN_FFI_DO
#define BOTAN_FFI_DO(T, obj, param, block)
Definition: ffi_util.h:92
BOTAN_FFI_CHECKED_DELETE
#define BOTAN_FFI_CHECKED_DELETE(o)
Definition: ffi_util.h:129
BOTAN_FFI_RETURNING
#define BOTAN_FFI_RETURNING(T, obj, param, block)
Definition: ffi_util.h:101
Botan::PKCS11::flags
Flags flags(Flag flags)
Definition: p11.h:860
Botan_FFI
Definition: ffi.cpp:17
Botan_FFI::ffi_guard_thunk
int ffi_guard_thunk(const char *func_name, std::function< int()> thunk)
Definition: ffi.cpp:89
Botan_FFI::safe_get
T & safe_get(botan_struct< T, M > *p)
Definition: ffi_util.h:61
Botan_FFI::write_vec_output
int write_vec_output(uint8_t out[], size_t *out_len, const std::vector< uint8_t, Alloc > &buf)
Definition: ffi_util.h:155
Botan::system_rng
RandomNumberGenerator & system_rng()
Definition: system_rng.cpp:283
Botan::DER_SEQUENCE
@ DER_SEQUENCE
Definition: pk_keys.h:23
Botan::IEEE_1363
@ IEEE_1363
Definition: pk_keys.h:23
hash
MechanismType hash
Definition: p11_mechanism.cpp:64
salt_len
size_t salt_len
Definition: x509_obj.cpp:25