unbound/validator/val_secalgo.c

897 nss_setup_key_digest(int algo, SECKEYPublicKey** pubkey, HASH_HashType* htype,
923 			*pubkey = nss_buf2dsa(key, keylen);
924 			if(!*pubkey) {
939 			*pubkey = nss_buf2rsa(key, keylen);
940 			if(!*pubkey) {
967 			*pubkey = nss_buf2rsa(key, keylen);
968 			if(!*pubkey) {
979 			*pubkey = nss_buf2ecdsa(key, keylen,
981 			if(!*pubkey) {
989 			*pubkey = nss_buf2ecdsa(key, keylen,
991 			if(!*pubkey) {
1031 	SECKEYPublicKey* pubkey = NULL;
1039 	if(!nss_setup_key_digest(algo, &pubkey, &htype, key, keylen,
1043 		SECKEY_DestroyPublicKey(pubkey);
1057 				SECKEY_DestroyPublicKey(pubkey);
1060 			if(SECITEM_CopyItem(pubkey->arena, &secsig, p)) {
1062 				SECKEY_DestroyPublicKey(pubkey);
1075 		SECKEY_DestroyPublicKey(pubkey);
1081 		SECKEY_DestroyPublicKey(pubkey);
1088 			SECKEY_DestroyPublicKey(pubkey);
1098 	res = PK11_Verify(pubkey, &secsig, &sechash, NULL /*wincx*/);
1099 	SECKEY_DestroyPublicKey(pubkey);
1292 	struct dsa_public_key pubkey;
1301 			return "invalid T value in DSA signature or pubkey";
1330 		return "invalid T value in DSA pubkey";
1335 		return "DSA pubkey too short";
1344 		return "invalid DSA pubkey length";
1347 	/* Extract DSA pubkey from the record */
1348 	nettle_dsa_public_key_init(&pubkey);
1350 	nettle_mpz_set_str_256_u(pubkey.q, 20, key+offset);
1352 	nettle_mpz_set_str_256_u(pubkey.p, (64 + key_t*8), key+offset);
1354 	nettle_mpz_set_str_256_u(pubkey.g, (64 + key_t*8), key+offset);
1356 	nettle_mpz_set_str_256_u(pubkey.y, (64 + key_t*8), key+offset);
1361 	res &= dsa_sha1_verify_digest(&pubkey, digest, &signature);
1365 	nettle_dsa_public_key_clear(&pubkey);
1378 	struct rsa_public_key pubkey;
1382 	/* RSA pubkey parsing as per RFC 3110 sec. 2 */
1405 	nettle_rsa_public_key_init(&pubkey);
1406 	pubkey.size = keylen - mod_offset;
1407 	nettle_mpz_set_str_256_u(pubkey.e, exp_len, &key[exp_offset]);
1408 	nettle_mpz_set_str_256_u(pubkey.n, pubkey.size, &key[mod_offset]);
1418 			res &= rsa_sha1_verify_digest(&pubkey, digest, signature);
1426 			res &= rsa_sha256_verify_digest(&pubkey, digest, signature);
1434 			res &= rsa_sha512_verify_digest(&pubkey, digest, signature);
1442 	nettle_rsa_public_key_clear(&pubkey);
1457 	struct ecc_point pubkey;
1472 			nettle_ecc_point_init(&pubkey, &nettle_secp_256r1);
1479 			res &= nettle_ecc_point_set(&pubkey, x, y);
1480 			res &= nettle_ecdsa_verify (&pubkey, SHA256_DIGEST_SIZE, digest, &signature);
1489 			nettle_ecc_point_init(&pubkey, &nettle_secp_384r1);
1496 			res &= nettle_ecc_point_set(&pubkey, x, y);
1497 			res &= nettle_ecdsa_verify (&pubkey, SHA384_DIGEST_SIZE, digest, &signature);
1500 			nettle_ecc_point_clear(&pubkey);