dsaparam.c revision 55714
1/* apps/dsaparam.c */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved.
4 *
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
8 *
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to.  The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 *
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
22 *
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
25 * are met:
26 * 1. Redistributions of source code must retain the copyright
27 *    notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 *    notice, this list of conditions and the following disclaimer in the
30 *    documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 *    must display the following acknowledgement:
33 *    "This product includes cryptographic software written by
34 *     Eric Young (eay@cryptsoft.com)"
35 *    The word 'cryptographic' can be left out if the rouines from the library
36 *    being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 *    the apps directory (application code) you must include an acknowledgement:
39 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 *
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51 * SUCH DAMAGE.
52 *
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed.  i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
57 */
58
59#ifndef NO_DSA
60#include <stdio.h>
61#include <stdlib.h>
62#include <time.h>
63#include <string.h>
64#include "apps.h"
65#include <openssl/bio.h>
66#include <openssl/err.h>
67#include <openssl/bn.h>
68#include <openssl/rand.h>
69#include <openssl/dsa.h>
70#include <openssl/x509.h>
71#include <openssl/pem.h>
72
73#undef PROG
74#define PROG	dsaparam_main
75
76/* -inform arg	- input format - default PEM (one of DER, TXT or PEM)
77 * -outform arg - output format - default PEM
78 * -in arg	- input file - default stdin
79 * -out arg	- output file - default stdout
80 * -noout
81 * -text
82 * -C
83 * -noout
84 * -genkey
85 */
86
87static void MS_CALLBACK dsa_cb(int p, int n, char *arg);
88int MAIN(int argc, char **argv)
89	{
90	DSA *dsa=NULL;
91	int i,badops=0,text=0;
92	BIO *in=NULL,*out=NULL;
93	int informat,outformat,noout=0,C=0,ret=1;
94	char *infile,*outfile,*prog,*inrand=NULL;
95	int numbits= -1,num,genkey=0;
96	char buffer[200],*randfile=NULL;
97
98	apps_startup();
99
100	if (bio_err == NULL)
101		if ((bio_err=BIO_new(BIO_s_file())) != NULL)
102			BIO_set_fp(bio_err,stderr,BIO_NOCLOSE|BIO_FP_TEXT);
103
104	infile=NULL;
105	outfile=NULL;
106	informat=FORMAT_PEM;
107	outformat=FORMAT_PEM;
108
109	prog=argv[0];
110	argc--;
111	argv++;
112	while (argc >= 1)
113		{
114		if 	(strcmp(*argv,"-inform") == 0)
115			{
116			if (--argc < 1) goto bad;
117			informat=str2fmt(*(++argv));
118			}
119		else if (strcmp(*argv,"-outform") == 0)
120			{
121			if (--argc < 1) goto bad;
122			outformat=str2fmt(*(++argv));
123			}
124		else if (strcmp(*argv,"-in") == 0)
125			{
126			if (--argc < 1) goto bad;
127			infile= *(++argv);
128			}
129		else if (strcmp(*argv,"-out") == 0)
130			{
131			if (--argc < 1) goto bad;
132			outfile= *(++argv);
133			}
134		else if (strcmp(*argv,"-text") == 0)
135			text=1;
136		else if (strcmp(*argv,"-C") == 0)
137			C=1;
138		else if (strcmp(*argv,"-genkey") == 0)
139			genkey=1;
140		else if (strcmp(*argv,"-rand") == 0)
141			{
142			if (--argc < 1) goto bad;
143			inrand= *(++argv);
144			}
145		else if (strcmp(*argv,"-noout") == 0)
146			noout=1;
147		else if (sscanf(*argv,"%d",&num) == 1)
148			{
149			/* generate a key */
150			numbits=num;
151			}
152		else
153			{
154			BIO_printf(bio_err,"unknown option %s\n",*argv);
155			badops=1;
156			break;
157			}
158		argc--;
159		argv++;
160		}
161
162	if (badops)
163		{
164bad:
165		BIO_printf(bio_err,"%s [options] [bits] <infile >outfile\n",prog);
166		BIO_printf(bio_err,"where options are\n");
167		BIO_printf(bio_err," -inform arg   input format - one of DER TXT PEM\n");
168		BIO_printf(bio_err," -outform arg  output format - one of DER TXT PEM\n");
169		BIO_printf(bio_err," -in arg       input file\n");
170		BIO_printf(bio_err," -out arg      output file\n");
171		BIO_printf(bio_err," -text         check the DSA parameters\n");
172		BIO_printf(bio_err," -C            Output C code\n");
173		BIO_printf(bio_err," -noout        no output\n");
174		BIO_printf(bio_err," -rand         files to use for random number input\n");
175		BIO_printf(bio_err," number        number of bits to use for generating private key\n");
176		goto end;
177		}
178
179	ERR_load_crypto_strings();
180
181	in=BIO_new(BIO_s_file());
182	out=BIO_new(BIO_s_file());
183	if ((in == NULL) || (out == NULL))
184		{
185		ERR_print_errors(bio_err);
186		goto end;
187		}
188
189	if (infile == NULL)
190		BIO_set_fp(in,stdin,BIO_NOCLOSE);
191	else
192		{
193		if (BIO_read_filename(in,infile) <= 0)
194			{
195			perror(infile);
196			goto end;
197			}
198		}
199	if (outfile == NULL)
200		BIO_set_fp(out,stdout,BIO_NOCLOSE);
201	else
202		{
203		if (BIO_write_filename(out,outfile) <= 0)
204			{
205			perror(outfile);
206			goto end;
207			}
208		}
209
210	if (numbits > 0)
211		{
212		randfile=RAND_file_name(buffer,200);
213		RAND_load_file(randfile,1024L*1024L);
214
215		BIO_printf(bio_err,"Generating DSA parameters, %d bit long prime\n",num);
216	        BIO_printf(bio_err,"This could take some time\n");
217	        dsa=DSA_generate_parameters(num,NULL,0,NULL,NULL,
218			dsa_cb,(char *)bio_err);
219		}
220	else if	(informat == FORMAT_ASN1)
221		dsa=d2i_DSAparams_bio(in,NULL);
222	else if (informat == FORMAT_PEM)
223		dsa=PEM_read_bio_DSAparams(in,NULL,NULL,NULL);
224	else
225		{
226		BIO_printf(bio_err,"bad input format specified\n");
227		goto end;
228		}
229	if (dsa == NULL)
230		{
231		BIO_printf(bio_err,"unable to load DSA parameters\n");
232		ERR_print_errors(bio_err);
233		goto end;
234		}
235
236	if (text)
237		{
238		DSAparams_print(out,dsa);
239		}
240
241	if (C)
242		{
243		unsigned char *data;
244		int l,len,bits_p,bits_q,bits_g;
245
246		len=BN_num_bytes(dsa->p);
247		bits_p=BN_num_bits(dsa->p);
248		bits_q=BN_num_bits(dsa->q);
249		bits_g=BN_num_bits(dsa->g);
250		data=(unsigned char *)Malloc(len+20);
251		if (data == NULL)
252			{
253			perror("Malloc");
254			goto end;
255			}
256		l=BN_bn2bin(dsa->p,data);
257		printf("static unsigned char dsa%d_p[]={",bits_p);
258		for (i=0; i<l; i++)
259			{
260			if ((i%12) == 0) printf("\n\t");
261			printf("0x%02X,",data[i]);
262			}
263		printf("\n\t};\n");
264
265		l=BN_bn2bin(dsa->q,data);
266		printf("static unsigned char dsa%d_q[]={",bits_p);
267		for (i=0; i<l; i++)
268			{
269			if ((i%12) == 0) printf("\n\t");
270			printf("0x%02X,",data[i]);
271			}
272		printf("\n\t};\n");
273
274		l=BN_bn2bin(dsa->g,data);
275		printf("static unsigned char dsa%d_g[]={",bits_p);
276		for (i=0; i<l; i++)
277			{
278			if ((i%12) == 0) printf("\n\t");
279			printf("0x%02X,",data[i]);
280			}
281		printf("\n\t};\n\n");
282
283		printf("DSA *get_dsa%d()\n\t{\n",bits_p);
284		printf("\tDSA *dsa;\n\n");
285		printf("\tif ((dsa=DSA_new()) == NULL) return(NULL);\n");
286		printf("\tdsa->p=BN_bin2bn(dsa%d_p,sizeof(dsa%d_p),NULL);\n",
287			bits_p,bits_p);
288		printf("\tdsa->q=BN_bin2bn(dsa%d_q,sizeof(dsa%d_q),NULL);\n",
289			bits_p,bits_p);
290		printf("\tdsa->g=BN_bin2bn(dsa%d_g,sizeof(dsa%d_g),NULL);\n",
291			bits_p,bits_p);
292		printf("\tif ((dsa->p == NULL) || (dsa->q == NULL) || (dsa->g == NULL))\n");
293		printf("\t\treturn(NULL);\n");
294		printf("\treturn(dsa);\n\t}\n");
295		}
296
297
298	if (!noout)
299		{
300		if 	(outformat == FORMAT_ASN1)
301			i=i2d_DSAparams_bio(out,dsa);
302		else if (outformat == FORMAT_PEM)
303			i=PEM_write_bio_DSAparams(out,dsa);
304		else	{
305			BIO_printf(bio_err,"bad output format specified for outfile\n");
306			goto end;
307			}
308		if (!i)
309			{
310			BIO_printf(bio_err,"unable to write DSA paramaters\n");
311			ERR_print_errors(bio_err);
312			goto end;
313			}
314		}
315	if (genkey)
316		{
317		DSA *dsakey;
318
319		if ((dsakey=DSAparams_dup(dsa)) == NULL) goto end;
320		if (!DSA_generate_key(dsakey)) goto end;
321		if 	(outformat == FORMAT_ASN1)
322			i=i2d_DSAPrivateKey_bio(out,dsakey);
323		else if (outformat == FORMAT_PEM)
324			i=PEM_write_bio_DSAPrivateKey(out,dsakey,NULL,NULL,0,NULL,NULL);
325		else	{
326			BIO_printf(bio_err,"bad output format specified for outfile\n");
327			goto end;
328			}
329		DSA_free(dsakey);
330		}
331	ret=0;
332end:
333	if (in != NULL) BIO_free(in);
334	if (out != NULL) BIO_free(out);
335	if (dsa != NULL) DSA_free(dsa);
336	EXIT(ret);
337	}
338
339static void MS_CALLBACK dsa_cb(int p, int n, char *arg)
340	{
341	char c='*';
342
343	if (p == 0) c='.';
344	if (p == 1) c='+';
345	if (p == 2) c='*';
346	if (p == 3) c='\n';
347	BIO_write((BIO *)arg,&c,1);
348	(void)BIO_flush((BIO *)arg);
349#ifdef LINT
350	p=n;
351#endif
352	}
353#endif
354