Lines Matching defs:rsa
1 /* crypto/rsa/rsa_gen.c */
69 #include <openssl/rsa.h>
72 extern int FIPS_rsa_x931_generate_key_ex(RSA *rsa, int bits, BIGNUM *e,
76 static int rsa_builtin_keygen(RSA *rsa, int bits, BIGNUM *e_value,
86 int RSA_generate_key_ex(RSA *rsa, int bits, BIGNUM *e_value, BN_GENCB *cb)
89 if (FIPS_mode() && !(rsa->meth->flags & RSA_FLAG_FIPS_METHOD)
90 && !(rsa->flags & RSA_FLAG_NON_FIPS_ALLOW)) {
95 if (rsa->meth->rsa_keygen)
96 return rsa->meth->rsa_keygen(rsa, bits, e_value, cb);
99 return FIPS_rsa_x931_generate_key_ex(rsa, bits, e_value, cb);
101 return rsa_builtin_keygen(rsa, bits, e_value, cb);
104 static int rsa_builtin_keygen(RSA *rsa, int bits, BIGNUM *e_value,
128 if (!rsa->n && ((rsa->n = BN_new()) == NULL))
130 if (!rsa->d && ((rsa->d = BN_new()) == NULL))
132 if (!rsa->e && ((rsa->e = BN_new()) == NULL))
134 if (!rsa->p && ((rsa->p = BN_new()) == NULL))
136 if (!rsa->q && ((rsa->q = BN_new()) == NULL))
138 if (!rsa->dmp1 && ((rsa->dmp1 = BN_new()) == NULL))
140 if (!rsa->dmq1 && ((rsa->dmq1 = BN_new()) == NULL))
142 if (!rsa->iqmp && ((rsa->iqmp = BN_new()) == NULL))
145 BN_copy(rsa->e, e_value);
149 if (!BN_generate_prime_ex(rsa->p, bitsp, 0, NULL, NULL, cb))
151 if (!BN_sub(r2, rsa->p, BN_value_one()))
153 if (!BN_gcd(r1, r2, rsa->e, ctx))
170 if (!BN_generate_prime_ex(rsa->q, bitsq, 0, NULL, NULL, cb))
172 } while ((BN_cmp(rsa->p, rsa->q) == 0) && (++degenerate < 3));
178 if (!BN_sub(r2, rsa->q, BN_value_one()))
180 if (!BN_gcd(r1, r2, rsa->e, ctx))
189 if (BN_cmp(rsa->p, rsa->q) < 0) {
190 tmp = rsa->p;
191 rsa->p = rsa->q;
192 rsa->q = tmp;
196 if (!BN_mul(rsa->n, rsa->p, rsa->q, ctx))
200 if (!BN_sub(r1, rsa->p, BN_value_one()))
202 if (!BN_sub(r2, rsa->q, BN_value_one()))
206 if (!(rsa->flags & RSA_FLAG_NO_CONSTTIME)) {
211 if (!BN_mod_inverse(rsa->d, rsa->e, pr0, ctx))
215 if (!(rsa->flags & RSA_FLAG_NO_CONSTTIME)) {
217 BN_with_flags(d, rsa->d, BN_FLG_CONSTTIME);
219 d = rsa->d;
222 if (!BN_mod(rsa->dmp1, d, r1, ctx))
226 if (!BN_mod(rsa->dmq1, d, r2, ctx))
230 if (!(rsa->flags & RSA_FLAG_NO_CONSTTIME)) {
232 BN_with_flags(p, rsa->p, BN_FLG_CONSTTIME);
234 p = rsa->p;
235 if (!BN_mod_inverse(rsa->iqmp, rsa->q, p, ctx))