key.c revision 113911
1/* 2 * read_bignum(): 3 * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland 4 * 5 * As far as I am concerned, the code I have written for this software 6 * can be used freely for any purpose. Any derived versions of this 7 * software must be clearly marked as such, and if the derived work is 8 * incompatible with the protocol description in the RFC file, it must be 9 * called by a name other than "ssh" or "Secure Shell". 10 * 11 * 12 * Copyright (c) 2000, 2001 Markus Friedl. All rights reserved. 13 * 14 * Redistribution and use in source and binary forms, with or without 15 * modification, are permitted provided that the following conditions 16 * are met: 17 * 1. Redistributions of source code must retain the above copyright 18 * notice, this list of conditions and the following disclaimer. 19 * 2. Redistributions in binary form must reproduce the above copyright 20 * notice, this list of conditions and the following disclaimer in the 21 * documentation and/or other materials provided with the distribution. 22 * 23 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 24 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 25 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 26 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 27 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 28 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 29 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 30 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 31 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 32 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 33 */ 34#include "includes.h" 35RCSID("$OpenBSD: key.c,v 1.51 2003/02/12 09:33:04 markus Exp $"); 36RCSID("$FreeBSD: head/crypto/openssh/key.c 113911 2003-04-23 17:13:13Z des $"); 37 38#include <openssl/evp.h> 39 40#include "xmalloc.h" 41#include "key.h" 42#include "rsa.h" 43#include "uuencode.h" 44#include "buffer.h" 45#include "bufaux.h" 46#include "log.h" 47 48Key * 49key_new(int type) 50{ 51 Key *k; 52 RSA *rsa; 53 DSA *dsa; 54 k = xmalloc(sizeof(*k)); 55 k->type = type; 56 k->flags = 0; 57 k->dsa = NULL; 58 k->rsa = NULL; 59 switch (k->type) { 60 case KEY_RSA1: 61 case KEY_RSA: 62 if ((rsa = RSA_new()) == NULL) 63 fatal("key_new: RSA_new failed"); 64 if ((rsa->n = BN_new()) == NULL) 65 fatal("key_new: BN_new failed"); 66 if ((rsa->e = BN_new()) == NULL) 67 fatal("key_new: BN_new failed"); 68 k->rsa = rsa; 69 break; 70 case KEY_DSA: 71 if ((dsa = DSA_new()) == NULL) 72 fatal("key_new: DSA_new failed"); 73 if ((dsa->p = BN_new()) == NULL) 74 fatal("key_new: BN_new failed"); 75 if ((dsa->q = BN_new()) == NULL) 76 fatal("key_new: BN_new failed"); 77 if ((dsa->g = BN_new()) == NULL) 78 fatal("key_new: BN_new failed"); 79 if ((dsa->pub_key = BN_new()) == NULL) 80 fatal("key_new: BN_new failed"); 81 k->dsa = dsa; 82 break; 83 case KEY_UNSPEC: 84 break; 85 default: 86 fatal("key_new: bad key type %d", k->type); 87 break; 88 } 89 return k; 90} 91 92Key * 93key_new_private(int type) 94{ 95 Key *k = key_new(type); 96 switch (k->type) { 97 case KEY_RSA1: 98 case KEY_RSA: 99 if ((k->rsa->d = BN_new()) == NULL) 100 fatal("key_new_private: BN_new failed"); 101 if ((k->rsa->iqmp = BN_new()) == NULL) 102 fatal("key_new_private: BN_new failed"); 103 if ((k->rsa->q = BN_new()) == NULL) 104 fatal("key_new_private: BN_new failed"); 105 if ((k->rsa->p = BN_new()) == NULL) 106 fatal("key_new_private: BN_new failed"); 107 if ((k->rsa->dmq1 = BN_new()) == NULL) 108 fatal("key_new_private: BN_new failed"); 109 if ((k->rsa->dmp1 = BN_new()) == NULL) 110 fatal("key_new_private: BN_new failed"); 111 break; 112 case KEY_DSA: 113 if ((k->dsa->priv_key = BN_new()) == NULL) 114 fatal("key_new_private: BN_new failed"); 115 break; 116 case KEY_UNSPEC: 117 break; 118 default: 119 break; 120 } 121 return k; 122} 123 124void 125key_free(Key *k) 126{ 127 switch (k->type) { 128 case KEY_RSA1: 129 case KEY_RSA: 130 if (k->rsa != NULL) 131 RSA_free(k->rsa); 132 k->rsa = NULL; 133 break; 134 case KEY_DSA: 135 if (k->dsa != NULL) 136 DSA_free(k->dsa); 137 k->dsa = NULL; 138 break; 139 case KEY_UNSPEC: 140 break; 141 default: 142 fatal("key_free: bad key type %d", k->type); 143 break; 144 } 145 xfree(k); 146} 147int 148key_equal(Key *a, Key *b) 149{ 150 if (a == NULL || b == NULL || a->type != b->type) 151 return 0; 152 switch (a->type) { 153 case KEY_RSA1: 154 case KEY_RSA: 155 return a->rsa != NULL && b->rsa != NULL && 156 BN_cmp(a->rsa->e, b->rsa->e) == 0 && 157 BN_cmp(a->rsa->n, b->rsa->n) == 0; 158 break; 159 case KEY_DSA: 160 return a->dsa != NULL && b->dsa != NULL && 161 BN_cmp(a->dsa->p, b->dsa->p) == 0 && 162 BN_cmp(a->dsa->q, b->dsa->q) == 0 && 163 BN_cmp(a->dsa->g, b->dsa->g) == 0 && 164 BN_cmp(a->dsa->pub_key, b->dsa->pub_key) == 0; 165 break; 166 default: 167 fatal("key_equal: bad key type %d", a->type); 168 break; 169 } 170 return 0; 171} 172 173static u_char * 174key_fingerprint_raw(Key *k, enum fp_type dgst_type, u_int *dgst_raw_length) 175{ 176 const EVP_MD *md = NULL; 177 EVP_MD_CTX ctx; 178 u_char *blob = NULL; 179 u_char *retval = NULL; 180 u_int len = 0; 181 int nlen, elen; 182 183 *dgst_raw_length = 0; 184 185 switch (dgst_type) { 186 case SSH_FP_MD5: 187 md = EVP_md5(); 188 break; 189 case SSH_FP_SHA1: 190 md = EVP_sha1(); 191 break; 192 default: 193 fatal("key_fingerprint_raw: bad digest type %d", 194 dgst_type); 195 } 196 switch (k->type) { 197 case KEY_RSA1: 198 nlen = BN_num_bytes(k->rsa->n); 199 elen = BN_num_bytes(k->rsa->e); 200 len = nlen + elen; 201 blob = xmalloc(len); 202 BN_bn2bin(k->rsa->n, blob); 203 BN_bn2bin(k->rsa->e, blob + nlen); 204 break; 205 case KEY_DSA: 206 case KEY_RSA: 207 key_to_blob(k, &blob, &len); 208 break; 209 case KEY_UNSPEC: 210 return retval; 211 break; 212 default: 213 fatal("key_fingerprint_raw: bad key type %d", k->type); 214 break; 215 } 216 if (blob != NULL) { 217 retval = xmalloc(EVP_MAX_MD_SIZE); 218 EVP_DigestInit(&ctx, md); 219 EVP_DigestUpdate(&ctx, blob, len); 220 EVP_DigestFinal(&ctx, retval, dgst_raw_length); 221 memset(blob, 0, len); 222 xfree(blob); 223 } else { 224 fatal("key_fingerprint_raw: blob is null"); 225 } 226 return retval; 227} 228 229static char * 230key_fingerprint_hex(u_char *dgst_raw, u_int dgst_raw_len) 231{ 232 char *retval; 233 int i; 234 235 retval = xmalloc(dgst_raw_len * 3 + 1); 236 retval[0] = '\0'; 237 for (i = 0; i < dgst_raw_len; i++) { 238 char hex[4]; 239 snprintf(hex, sizeof(hex), "%02x:", dgst_raw[i]); 240 strlcat(retval, hex, dgst_raw_len * 3); 241 } 242 retval[(dgst_raw_len * 3) - 1] = '\0'; 243 return retval; 244} 245 246static char * 247key_fingerprint_bubblebabble(u_char *dgst_raw, u_int dgst_raw_len) 248{ 249 char vowels[] = { 'a', 'e', 'i', 'o', 'u', 'y' }; 250 char consonants[] = { 'b', 'c', 'd', 'f', 'g', 'h', 'k', 'l', 'm', 251 'n', 'p', 'r', 's', 't', 'v', 'z', 'x' }; 252 u_int i, j = 0, rounds, seed = 1; 253 char *retval; 254 255 rounds = (dgst_raw_len / 2) + 1; 256 retval = xmalloc(sizeof(char) * (rounds*6)); 257 retval[j++] = 'x'; 258 for (i = 0; i < rounds; i++) { 259 u_int idx0, idx1, idx2, idx3, idx4; 260 if ((i + 1 < rounds) || (dgst_raw_len % 2 != 0)) { 261 idx0 = (((((u_int)(dgst_raw[2 * i])) >> 6) & 3) + 262 seed) % 6; 263 idx1 = (((u_int)(dgst_raw[2 * i])) >> 2) & 15; 264 idx2 = ((((u_int)(dgst_raw[2 * i])) & 3) + 265 (seed / 6)) % 6; 266 retval[j++] = vowels[idx0]; 267 retval[j++] = consonants[idx1]; 268 retval[j++] = vowels[idx2]; 269 if ((i + 1) < rounds) { 270 idx3 = (((u_int)(dgst_raw[(2 * i) + 1])) >> 4) & 15; 271 idx4 = (((u_int)(dgst_raw[(2 * i) + 1]))) & 15; 272 retval[j++] = consonants[idx3]; 273 retval[j++] = '-'; 274 retval[j++] = consonants[idx4]; 275 seed = ((seed * 5) + 276 ((((u_int)(dgst_raw[2 * i])) * 7) + 277 ((u_int)(dgst_raw[(2 * i) + 1])))) % 36; 278 } 279 } else { 280 idx0 = seed % 6; 281 idx1 = 16; 282 idx2 = seed / 6; 283 retval[j++] = vowels[idx0]; 284 retval[j++] = consonants[idx1]; 285 retval[j++] = vowels[idx2]; 286 } 287 } 288 retval[j++] = 'x'; 289 retval[j++] = '\0'; 290 return retval; 291} 292 293char * 294key_fingerprint(Key *k, enum fp_type dgst_type, enum fp_rep dgst_rep) 295{ 296 char *retval = NULL; 297 u_char *dgst_raw; 298 u_int dgst_raw_len; 299 300 dgst_raw = key_fingerprint_raw(k, dgst_type, &dgst_raw_len); 301 if (!dgst_raw) 302 fatal("key_fingerprint: null from key_fingerprint_raw()"); 303 switch (dgst_rep) { 304 case SSH_FP_HEX: 305 retval = key_fingerprint_hex(dgst_raw, dgst_raw_len); 306 break; 307 case SSH_FP_BUBBLEBABBLE: 308 retval = key_fingerprint_bubblebabble(dgst_raw, dgst_raw_len); 309 break; 310 default: 311 fatal("key_fingerprint_ex: bad digest representation %d", 312 dgst_rep); 313 break; 314 } 315 memset(dgst_raw, 0, dgst_raw_len); 316 xfree(dgst_raw); 317 return retval; 318} 319 320/* 321 * Reads a multiple-precision integer in decimal from the buffer, and advances 322 * the pointer. The integer must already be initialized. This function is 323 * permitted to modify the buffer. This leaves *cpp to point just beyond the 324 * last processed (and maybe modified) character. Note that this may modify 325 * the buffer containing the number. 326 */ 327static int 328read_bignum(char **cpp, BIGNUM * value) 329{ 330 char *cp = *cpp; 331 int old; 332 333 /* Skip any leading whitespace. */ 334 for (; *cp == ' ' || *cp == '\t'; cp++) 335 ; 336 337 /* Check that it begins with a decimal digit. */ 338 if (*cp < '0' || *cp > '9') 339 return 0; 340 341 /* Save starting position. */ 342 *cpp = cp; 343 344 /* Move forward until all decimal digits skipped. */ 345 for (; *cp >= '0' && *cp <= '9'; cp++) 346 ; 347 348 /* Save the old terminating character, and replace it by \0. */ 349 old = *cp; 350 *cp = 0; 351 352 /* Parse the number. */ 353 if (BN_dec2bn(&value, *cpp) == 0) 354 return 0; 355 356 /* Restore old terminating character. */ 357 *cp = old; 358 359 /* Move beyond the number and return success. */ 360 *cpp = cp; 361 return 1; 362} 363 364static int 365write_bignum(FILE *f, BIGNUM *num) 366{ 367 char *buf = BN_bn2dec(num); 368 if (buf == NULL) { 369 error("write_bignum: BN_bn2dec() failed"); 370 return 0; 371 } 372 fprintf(f, " %s", buf); 373 OPENSSL_free(buf); 374 return 1; 375} 376 377/* returns 1 ok, -1 error */ 378int 379key_read(Key *ret, char **cpp) 380{ 381 Key *k; 382 int success = -1; 383 char *cp, *space; 384 int len, n, type; 385 u_int bits; 386 u_char *blob; 387 388 cp = *cpp; 389 390 switch (ret->type) { 391 case KEY_RSA1: 392 /* Get number of bits. */ 393 if (*cp < '0' || *cp > '9') 394 return -1; /* Bad bit count... */ 395 for (bits = 0; *cp >= '0' && *cp <= '9'; cp++) 396 bits = 10 * bits + *cp - '0'; 397 if (bits == 0) 398 return -1; 399 *cpp = cp; 400 /* Get public exponent, public modulus. */ 401 if (!read_bignum(cpp, ret->rsa->e)) 402 return -1; 403 if (!read_bignum(cpp, ret->rsa->n)) 404 return -1; 405 success = 1; 406 break; 407 case KEY_UNSPEC: 408 case KEY_RSA: 409 case KEY_DSA: 410 space = strchr(cp, ' '); 411 if (space == NULL) { 412 debug3("key_read: missing whitespace"); 413 return -1; 414 } 415 *space = '\0'; 416 type = key_type_from_name(cp); 417 *space = ' '; 418 if (type == KEY_UNSPEC) { 419 debug3("key_read: missing keytype"); 420 return -1; 421 } 422 cp = space+1; 423 if (*cp == '\0') { 424 debug3("key_read: short string"); 425 return -1; 426 } 427 if (ret->type == KEY_UNSPEC) { 428 ret->type = type; 429 } else if (ret->type != type) { 430 /* is a key, but different type */ 431 debug3("key_read: type mismatch"); 432 return -1; 433 } 434 len = 2*strlen(cp); 435 blob = xmalloc(len); 436 n = uudecode(cp, blob, len); 437 if (n < 0) { 438 error("key_read: uudecode %s failed", cp); 439 xfree(blob); 440 return -1; 441 } 442 k = key_from_blob(blob, n); 443 xfree(blob); 444 if (k == NULL) { 445 error("key_read: key_from_blob %s failed", cp); 446 return -1; 447 } 448 if (k->type != type) { 449 error("key_read: type mismatch: encoding error"); 450 key_free(k); 451 return -1; 452 } 453/*XXXX*/ 454 if (ret->type == KEY_RSA) { 455 if (ret->rsa != NULL) 456 RSA_free(ret->rsa); 457 ret->rsa = k->rsa; 458 k->rsa = NULL; 459 success = 1; 460#ifdef DEBUG_PK 461 RSA_print_fp(stderr, ret->rsa, 8); 462#endif 463 } else { 464 if (ret->dsa != NULL) 465 DSA_free(ret->dsa); 466 ret->dsa = k->dsa; 467 k->dsa = NULL; 468 success = 1; 469#ifdef DEBUG_PK 470 DSA_print_fp(stderr, ret->dsa, 8); 471#endif 472 } 473/*XXXX*/ 474 key_free(k); 475 if (success != 1) 476 break; 477 /* advance cp: skip whitespace and data */ 478 while (*cp == ' ' || *cp == '\t') 479 cp++; 480 while (*cp != '\0' && *cp != ' ' && *cp != '\t') 481 cp++; 482 *cpp = cp; 483 break; 484 default: 485 fatal("key_read: bad key type: %d", ret->type); 486 break; 487 } 488 return success; 489} 490 491int 492key_write(Key *key, FILE *f) 493{ 494 int n, success = 0; 495 u_int len, bits = 0; 496 u_char *blob; 497 char *uu; 498 499 if (key->type == KEY_RSA1 && key->rsa != NULL) { 500 /* size of modulus 'n' */ 501 bits = BN_num_bits(key->rsa->n); 502 fprintf(f, "%u", bits); 503 if (write_bignum(f, key->rsa->e) && 504 write_bignum(f, key->rsa->n)) { 505 success = 1; 506 } else { 507 error("key_write: failed for RSA key"); 508 } 509 } else if ((key->type == KEY_DSA && key->dsa != NULL) || 510 (key->type == KEY_RSA && key->rsa != NULL)) { 511 key_to_blob(key, &blob, &len); 512 uu = xmalloc(2*len); 513 n = uuencode(blob, len, uu, 2*len); 514 if (n > 0) { 515 fprintf(f, "%s %s", key_ssh_name(key), uu); 516 success = 1; 517 } 518 xfree(blob); 519 xfree(uu); 520 } 521 return success; 522} 523 524char * 525key_type(Key *k) 526{ 527 switch (k->type) { 528 case KEY_RSA1: 529 return "RSA1"; 530 break; 531 case KEY_RSA: 532 return "RSA"; 533 break; 534 case KEY_DSA: 535 return "DSA"; 536 break; 537 } 538 return "unknown"; 539} 540 541char * 542key_ssh_name(Key *k) 543{ 544 switch (k->type) { 545 case KEY_RSA: 546 return "ssh-rsa"; 547 break; 548 case KEY_DSA: 549 return "ssh-dss"; 550 break; 551 } 552 return "ssh-unknown"; 553} 554 555u_int 556key_size(Key *k) 557{ 558 switch (k->type) { 559 case KEY_RSA1: 560 case KEY_RSA: 561 return BN_num_bits(k->rsa->n); 562 break; 563 case KEY_DSA: 564 return BN_num_bits(k->dsa->p); 565 break; 566 } 567 return 0; 568} 569 570static RSA * 571rsa_generate_private_key(u_int bits) 572{ 573 RSA *private; 574 private = RSA_generate_key(bits, 35, NULL, NULL); 575 if (private == NULL) 576 fatal("rsa_generate_private_key: key generation failed."); 577 return private; 578} 579 580static DSA* 581dsa_generate_private_key(u_int bits) 582{ 583 DSA *private = DSA_generate_parameters(bits, NULL, 0, NULL, NULL, NULL, NULL); 584 if (private == NULL) 585 fatal("dsa_generate_private_key: DSA_generate_parameters failed"); 586 if (!DSA_generate_key(private)) 587 fatal("dsa_generate_private_key: DSA_generate_key failed."); 588 if (private == NULL) 589 fatal("dsa_generate_private_key: NULL."); 590 return private; 591} 592 593Key * 594key_generate(int type, u_int bits) 595{ 596 Key *k = key_new(KEY_UNSPEC); 597 switch (type) { 598 case KEY_DSA: 599 k->dsa = dsa_generate_private_key(bits); 600 break; 601 case KEY_RSA: 602 case KEY_RSA1: 603 k->rsa = rsa_generate_private_key(bits); 604 break; 605 default: 606 fatal("key_generate: unknown type %d", type); 607 } 608 k->type = type; 609 return k; 610} 611 612Key * 613key_from_private(Key *k) 614{ 615 Key *n = NULL; 616 switch (k->type) { 617 case KEY_DSA: 618 n = key_new(k->type); 619 BN_copy(n->dsa->p, k->dsa->p); 620 BN_copy(n->dsa->q, k->dsa->q); 621 BN_copy(n->dsa->g, k->dsa->g); 622 BN_copy(n->dsa->pub_key, k->dsa->pub_key); 623 break; 624 case KEY_RSA: 625 case KEY_RSA1: 626 n = key_new(k->type); 627 BN_copy(n->rsa->n, k->rsa->n); 628 BN_copy(n->rsa->e, k->rsa->e); 629 break; 630 default: 631 fatal("key_from_private: unknown type %d", k->type); 632 break; 633 } 634 return n; 635} 636 637int 638key_type_from_name(char *name) 639{ 640 if (strcmp(name, "rsa1") == 0) { 641 return KEY_RSA1; 642 } else if (strcmp(name, "rsa") == 0) { 643 return KEY_RSA; 644 } else if (strcmp(name, "dsa") == 0) { 645 return KEY_DSA; 646 } else if (strcmp(name, "ssh-rsa") == 0) { 647 return KEY_RSA; 648 } else if (strcmp(name, "ssh-dss") == 0) { 649 return KEY_DSA; 650 } 651 debug2("key_type_from_name: unknown key type '%s'", name); 652 return KEY_UNSPEC; 653} 654 655int 656key_names_valid2(const char *names) 657{ 658 char *s, *cp, *p; 659 660 if (names == NULL || strcmp(names, "") == 0) 661 return 0; 662 s = cp = xstrdup(names); 663 for ((p = strsep(&cp, ",")); p && *p != '\0'; 664 (p = strsep(&cp, ","))) { 665 switch (key_type_from_name(p)) { 666 case KEY_RSA1: 667 case KEY_UNSPEC: 668 xfree(s); 669 return 0; 670 } 671 } 672 debug3("key names ok: [%s]", names); 673 xfree(s); 674 return 1; 675} 676 677Key * 678key_from_blob(u_char *blob, int blen) 679{ 680 Buffer b; 681 char *ktype; 682 int rlen, type; 683 Key *key = NULL; 684 685#ifdef DEBUG_PK 686 dump_base64(stderr, blob, blen); 687#endif 688 buffer_init(&b); 689 buffer_append(&b, blob, blen); 690 ktype = buffer_get_string(&b, NULL); 691 type = key_type_from_name(ktype); 692 693 switch (type) { 694 case KEY_RSA: 695 key = key_new(type); 696 buffer_get_bignum2(&b, key->rsa->e); 697 buffer_get_bignum2(&b, key->rsa->n); 698#ifdef DEBUG_PK 699 RSA_print_fp(stderr, key->rsa, 8); 700#endif 701 break; 702 case KEY_DSA: 703 key = key_new(type); 704 buffer_get_bignum2(&b, key->dsa->p); 705 buffer_get_bignum2(&b, key->dsa->q); 706 buffer_get_bignum2(&b, key->dsa->g); 707 buffer_get_bignum2(&b, key->dsa->pub_key); 708#ifdef DEBUG_PK 709 DSA_print_fp(stderr, key->dsa, 8); 710#endif 711 break; 712 case KEY_UNSPEC: 713 key = key_new(type); 714 break; 715 default: 716 error("key_from_blob: cannot handle type %s", ktype); 717 break; 718 } 719 rlen = buffer_len(&b); 720 if (key != NULL && rlen != 0) 721 error("key_from_blob: remaining bytes in key blob %d", rlen); 722 xfree(ktype); 723 buffer_free(&b); 724 return key; 725} 726 727int 728key_to_blob(Key *key, u_char **blobp, u_int *lenp) 729{ 730 Buffer b; 731 int len; 732 733 if (key == NULL) { 734 error("key_to_blob: key == NULL"); 735 return 0; 736 } 737 buffer_init(&b); 738 switch (key->type) { 739 case KEY_DSA: 740 buffer_put_cstring(&b, key_ssh_name(key)); 741 buffer_put_bignum2(&b, key->dsa->p); 742 buffer_put_bignum2(&b, key->dsa->q); 743 buffer_put_bignum2(&b, key->dsa->g); 744 buffer_put_bignum2(&b, key->dsa->pub_key); 745 break; 746 case KEY_RSA: 747 buffer_put_cstring(&b, key_ssh_name(key)); 748 buffer_put_bignum2(&b, key->rsa->e); 749 buffer_put_bignum2(&b, key->rsa->n); 750 break; 751 default: 752 error("key_to_blob: unsupported key type %d", key->type); 753 buffer_free(&b); 754 return 0; 755 } 756 len = buffer_len(&b); 757 if (lenp != NULL) 758 *lenp = len; 759 if (blobp != NULL) { 760 *blobp = xmalloc(len); 761 memcpy(*blobp, buffer_ptr(&b), len); 762 } 763 memset(buffer_ptr(&b), 0, len); 764 buffer_free(&b); 765 return len; 766} 767 768int 769key_sign( 770 Key *key, 771 u_char **sigp, u_int *lenp, 772 u_char *data, u_int datalen) 773{ 774 switch (key->type) { 775 case KEY_DSA: 776 return ssh_dss_sign(key, sigp, lenp, data, datalen); 777 break; 778 case KEY_RSA: 779 return ssh_rsa_sign(key, sigp, lenp, data, datalen); 780 break; 781 default: 782 error("key_sign: illegal key type %d", key->type); 783 return -1; 784 break; 785 } 786} 787 788/* 789 * key_verify returns 1 for a correct signature, 0 for an incorrect signature 790 * and -1 on error. 791 */ 792int 793key_verify( 794 Key *key, 795 u_char *signature, u_int signaturelen, 796 u_char *data, u_int datalen) 797{ 798 if (signaturelen == 0) 799 return -1; 800 801 switch (key->type) { 802 case KEY_DSA: 803 return ssh_dss_verify(key, signature, signaturelen, data, datalen); 804 break; 805 case KEY_RSA: 806 return ssh_rsa_verify(key, signature, signaturelen, data, datalen); 807 break; 808 default: 809 error("key_verify: illegal key type %d", key->type); 810 return -1; 811 break; 812 } 813} 814 815/* Converts a private to a public key */ 816Key * 817key_demote(Key *k) 818{ 819 Key *pk; 820 821 pk = xmalloc(sizeof(*pk)); 822 pk->type = k->type; 823 pk->flags = k->flags; 824 pk->dsa = NULL; 825 pk->rsa = NULL; 826 827 switch (k->type) { 828 case KEY_RSA1: 829 case KEY_RSA: 830 if ((pk->rsa = RSA_new()) == NULL) 831 fatal("key_demote: RSA_new failed"); 832 if ((pk->rsa->e = BN_dup(k->rsa->e)) == NULL) 833 fatal("key_demote: BN_dup failed"); 834 if ((pk->rsa->n = BN_dup(k->rsa->n)) == NULL) 835 fatal("key_demote: BN_dup failed"); 836 break; 837 case KEY_DSA: 838 if ((pk->dsa = DSA_new()) == NULL) 839 fatal("key_demote: DSA_new failed"); 840 if ((pk->dsa->p = BN_dup(k->dsa->p)) == NULL) 841 fatal("key_demote: BN_dup failed"); 842 if ((pk->dsa->q = BN_dup(k->dsa->q)) == NULL) 843 fatal("key_demote: BN_dup failed"); 844 if ((pk->dsa->g = BN_dup(k->dsa->g)) == NULL) 845 fatal("key_demote: BN_dup failed"); 846 if ((pk->dsa->pub_key = BN_dup(k->dsa->pub_key)) == NULL) 847 fatal("key_demote: BN_dup failed"); 848 break; 849 default: 850 fatal("key_free: bad key type %d", k->type); 851 break; 852 } 853 854 return (pk); 855} 856