unbound/validator/val_secalgo.c

1115 nss_setup_key_digest(int algo, SECKEYPublicKey** pubkey, HASH_HashType* htype,
1144 			*pubkey = nss_buf2dsa(key, keylen);
1145 			if(!*pubkey) {
1163 			*pubkey = nss_buf2rsa(key, keylen);
1164 			if(!*pubkey) {
1200 			*pubkey = nss_buf2rsa(key, keylen);
1201 			if(!*pubkey) {
1212 			*pubkey = nss_buf2ecdsa(key, keylen,
1214 			if(!*pubkey) {
1222 			*pubkey = nss_buf2ecdsa(key, keylen,
1224 			if(!*pubkey) {
1264 	SECKEYPublicKey* pubkey = NULL;
1272 	if(!nss_setup_key_digest(algo, &pubkey, &htype, key, keylen,
1276 		SECKEY_DestroyPublicKey(pubkey);
1291 				SECKEY_DestroyPublicKey(pubkey);
1294 			if(SECITEM_CopyItem(pubkey->arena, &secsig, p)) {
1296 				SECKEY_DestroyPublicKey(pubkey);
1310 		SECKEY_DestroyPublicKey(pubkey);
1316 		SECKEY_DestroyPublicKey(pubkey);
1323 			SECKEY_DestroyPublicKey(pubkey);
1333 	res = PK11_Verify(pubkey, &secsig, &sechash, NULL /*wincx*/);
1334 	SECKEY_DestroyPublicKey(pubkey);
1563 	struct dsa_public_key pubkey;
1572 			return "invalid T value in DSA signature or pubkey";
1601 		return "invalid T value in DSA pubkey";
1606 		return "DSA pubkey too short";
1615 		return "invalid DSA pubkey length";
1618 	/* Extract DSA pubkey from the record */
1619 	nettle_dsa_public_key_init(&pubkey);
1621 	nettle_mpz_set_str_256_u(pubkey.q, 20, key+offset);
1623 	nettle_mpz_set_str_256_u(pubkey.p, (64 + key_t_value*8), key+offset);
1625 	nettle_mpz_set_str_256_u(pubkey.g, (64 + key_t_value*8), key+offset);
1627 	nettle_mpz_set_str_256_u(pubkey.y, (64 + key_t_value*8), key+offset);
1632 	res &= dsa_sha1_verify_digest(&pubkey, digest, &signature);
1636 	nettle_dsa_public_key_clear(&pubkey);
1650 	struct rsa_public_key pubkey;
1654 	/* RSA pubkey parsing as per RFC 3110 sec. 2 */
1677 	nettle_rsa_public_key_init(&pubkey);
1678 	pubkey.size = keylen - mod_offset;
1679 	nettle_mpz_set_str_256_u(pubkey.e, exp_len, &key[exp_offset]);
1680 	nettle_mpz_set_str_256_u(pubkey.n, pubkey.size, &key[mod_offset]);
1690 			res &= rsa_sha1_verify_digest(&pubkey, digest, signature);
1698 			res &= rsa_sha256_verify_digest(&pubkey, digest, signature);
1706 			res &= rsa_sha512_verify_digest(&pubkey, digest, signature);
1714 	nettle_rsa_public_key_clear(&pubkey);
1729 	struct ecc_point pubkey;
1744 			nettle_ecc_point_init(&pubkey, nettle_get_secp_256r1());
1751 			res &= nettle_ecc_point_set(&pubkey, x, y);
1752 			res &= nettle_ecdsa_verify (&pubkey, SHA256_DIGEST_SIZE, digest, &signature);
1755 			nettle_ecc_point_clear(&pubkey);
1762 			nettle_ecc_point_init(&pubkey, nettle_get_secp_384r1());
1769 			res &= nettle_ecc_point_set(&pubkey, x, y);
1770 			res &= nettle_ecdsa_verify (&pubkey, SHA384_DIGEST_SIZE, digest, &signature);
1773 			nettle_ecc_point_clear(&pubkey);