libunbound/validator/val_secalgo.c

1235 nss_setup_key_digest(int algo, SECKEYPublicKey** pubkey, HASH_HashType* htype,
1264 			*pubkey = nss_buf2dsa(key, keylen);
1265 			if(!*pubkey) {
1283 			*pubkey = nss_buf2rsa(key, keylen);
1284 			if(!*pubkey) {
1320 			*pubkey = nss_buf2rsa(key, keylen);
1321 			if(!*pubkey) {
1332 			*pubkey = nss_buf2ecdsa(key, keylen,
1334 			if(!*pubkey) {
1342 			*pubkey = nss_buf2ecdsa(key, keylen,
1344 			if(!*pubkey) {
1384 	SECKEYPublicKey* pubkey = NULL;
1392 	if(!nss_setup_key_digest(algo, &pubkey, &htype, key, keylen,
1396 		SECKEY_DestroyPublicKey(pubkey);
1411 				SECKEY_DestroyPublicKey(pubkey);
1414 			if(SECITEM_CopyItem(pubkey->arena, &secsig, p)) {
1416 				SECKEY_DestroyPublicKey(pubkey);
1430 		SECKEY_DestroyPublicKey(pubkey);
1436 		SECKEY_DestroyPublicKey(pubkey);
1443 			SECKEY_DestroyPublicKey(pubkey);
1453 	res = PK11_Verify(pubkey, &secsig, &sechash, NULL /*wincx*/);
1454 	SECKEY_DestroyPublicKey(pubkey);
1759 	struct dsa_public_key pubkey;
1768 			return "invalid T value in DSA signature or pubkey";
1797 		return "invalid T value in DSA pubkey";
1802 		return "DSA pubkey too short";
1811 		return "invalid DSA pubkey length";
1814 	/* Extract DSA pubkey from the record */
1815 	nettle_dsa_public_key_init(&pubkey);
1817 	nettle_mpz_set_str_256_u(pubkey.q, 20, key+offset);
1819 	nettle_mpz_set_str_256_u(pubkey.p, (64 + key_t_value*8), key+offset);
1821 	nettle_mpz_set_str_256_u(pubkey.g, (64 + key_t_value*8), key+offset);
1823 	nettle_mpz_set_str_256_u(pubkey.y, (64 + key_t_value*8), key+offset);
1828 	res &= dsa_sha1_verify_digest(&pubkey, digest, &signature);
1832 	nettle_dsa_public_key_clear(&pubkey);
1846 	struct rsa_public_key pubkey;
1850 	/* RSA pubkey parsing as per RFC 3110 sec. 2 */
1873 	nettle_rsa_public_key_init(&pubkey);
1874 	pubkey.size = keylen - mod_offset;
1875 	nettle_mpz_set_str_256_u(pubkey.e, exp_len, &key[exp_offset]);
1876 	nettle_mpz_set_str_256_u(pubkey.n, pubkey.size, &key[mod_offset]);
1886 			res &= rsa_sha1_verify_digest(&pubkey, digest, signature);
1894 			res &= rsa_sha256_verify_digest(&pubkey, digest, signature);
1902 			res &= rsa_sha512_verify_digest(&pubkey, digest, signature);
1910 	nettle_rsa_public_key_clear(&pubkey);
1925 	struct ecc_point pubkey;
1940 			nettle_ecc_point_init(&pubkey, nettle_get_secp_256r1());
1947 			res &= nettle_ecc_point_set(&pubkey, x, y);
1948 			res &= nettle_ecdsa_verify (&pubkey, SHA256_DIGEST_SIZE, digest, &signature);
1951 			nettle_ecc_point_clear(&pubkey);
1958 			nettle_ecc_point_init(&pubkey, nettle_get_secp_384r1());
1965 			res &= nettle_ecc_point_set(&pubkey, x, y);
1966 			res &= nettle_ecdsa_verify (&pubkey, SHA384_DIGEST_SIZE, digest, &signature);
1969 			nettle_ecc_point_clear(&pubkey);