mirror of
https://github.com/warmcat/libwebsockets.git
synced 2025-03-16 00:00:07 +01:00
c9731c5f17
This is a huge patch that should be a global NOP. For unix type platforms it enables -Wconversion to issue warnings (-> error) for all automatic casts that seem less than ideal but are normally concealed by the toolchain. This is things like passing an int to a size_t argument. Once enabled, I went through all args on my default build (which build most things) and tried to make the removed default cast explicit. With that approach it neither change nor bloat the code, since it compiles to whatever it was doing before, just with the casts made explicit... in a few cases I changed some length args from int to size_t but largely left the causes alone. From now on, new code that is relying on less than ideal casting will complain and nudge me to improve it by warnings.
499 lines
11 KiB
C
499 lines
11 KiB
C
/*
|
|
* libwebsockets - small server side websockets and web server implementation
|
|
*
|
|
* Copyright (C) 2010 - 2019 Andy Green <andy@warmcat.com>
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
* of this software and associated documentation files (the "Software"), to
|
|
* deal in the Software without restriction, including without limitation the
|
|
* rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
|
|
* sell copies of the Software, and to permit persons to whom the Software is
|
|
* furnished to do so, subject to the following conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be included in
|
|
* all copies or substantial portions of the Software.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
|
|
* FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
|
|
* IN THE SOFTWARE.
|
|
*
|
|
* lws_genrsa provides an RSA abstraction api in lws that works the
|
|
* same whether you are using openssl or mbedtls crypto functions underneath.
|
|
*/
|
|
#include "private-lib-core.h"
|
|
#include "private-lib-tls-mbedtls.h"
|
|
#include <mbedtls/rsa.h>
|
|
|
|
void
|
|
lws_genrsa_destroy_elements(struct lws_gencrypto_keyelem *el)
|
|
{
|
|
int n;
|
|
|
|
for (n = 0; n < LWS_GENCRYPTO_RSA_KEYEL_COUNT; n++)
|
|
if (el[n].buf)
|
|
lws_free_set_NULL(el[n].buf);
|
|
}
|
|
|
|
static int mode_map[] = { MBEDTLS_RSA_PKCS_V15, MBEDTLS_RSA_PKCS_V21 };
|
|
|
|
int
|
|
lws_genrsa_create(struct lws_genrsa_ctx *ctx, struct lws_gencrypto_keyelem *el,
|
|
struct lws_context *context, enum enum_genrsa_mode mode,
|
|
enum lws_genhash_types oaep_hashid)
|
|
{
|
|
memset(ctx, 0, sizeof(*ctx));
|
|
ctx->ctx = lws_zalloc(sizeof(*ctx->ctx), "genrsa");
|
|
if (!ctx->ctx)
|
|
return 1;
|
|
|
|
ctx->context = context;
|
|
ctx->mode = mode;
|
|
|
|
if (mode >= LGRSAM_COUNT)
|
|
return -1;
|
|
|
|
mbedtls_rsa_init(ctx->ctx, mode_map[mode], 0);
|
|
|
|
ctx->ctx->padding = mode_map[mode];
|
|
ctx->ctx->hash_id = (int)lws_gencrypto_mbedtls_hash_to_MD_TYPE(oaep_hashid);
|
|
|
|
{
|
|
int n;
|
|
|
|
mbedtls_mpi *mpi[LWS_GENCRYPTO_RSA_KEYEL_COUNT] = {
|
|
&ctx->ctx->E, &ctx->ctx->N, &ctx->ctx->D, &ctx->ctx->P,
|
|
&ctx->ctx->Q, &ctx->ctx->DP, &ctx->ctx->DQ,
|
|
&ctx->ctx->QP,
|
|
};
|
|
|
|
for (n = 0; n < LWS_GENCRYPTO_RSA_KEYEL_COUNT; n++)
|
|
if (el[n].buf &&
|
|
mbedtls_mpi_read_binary(mpi[n], el[n].buf,
|
|
el[n].len)) {
|
|
lwsl_notice("mpi load failed\n");
|
|
lws_free_set_NULL(ctx->ctx);
|
|
|
|
return -1;
|
|
}
|
|
|
|
/* mbedtls... compute missing P & Q */
|
|
|
|
if ( el[LWS_GENCRYPTO_RSA_KEYEL_D].len &&
|
|
!el[LWS_GENCRYPTO_RSA_KEYEL_P].len &&
|
|
!el[LWS_GENCRYPTO_RSA_KEYEL_Q].len) {
|
|
#if defined(LWS_HAVE_mbedtls_rsa_complete)
|
|
if (mbedtls_rsa_complete(ctx->ctx)) {
|
|
lwsl_notice("mbedtls_rsa_complete failed\n");
|
|
#else
|
|
{
|
|
lwsl_notice("%s: you have to provide P and Q\n", __func__);
|
|
#endif
|
|
lws_free_set_NULL(ctx->ctx);
|
|
|
|
return -1;
|
|
}
|
|
|
|
}
|
|
}
|
|
|
|
ctx->ctx->len = el[LWS_GENCRYPTO_RSA_KEYEL_N].len;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int
|
|
_rngf(void *context, unsigned char *buf, size_t len)
|
|
{
|
|
if ((size_t)lws_get_random(context, buf, len) == len)
|
|
return 0;
|
|
|
|
return -1;
|
|
}
|
|
|
|
int
|
|
lws_genrsa_new_keypair(struct lws_context *context, struct lws_genrsa_ctx *ctx,
|
|
enum enum_genrsa_mode mode, struct lws_gencrypto_keyelem *el,
|
|
int bits)
|
|
{
|
|
int n;
|
|
|
|
memset(ctx, 0, sizeof(*ctx));
|
|
ctx->ctx = lws_zalloc(sizeof(*ctx->ctx), "genrsa");
|
|
if (!ctx->ctx)
|
|
return -1;
|
|
|
|
ctx->context = context;
|
|
ctx->mode = mode;
|
|
|
|
if (mode >= LGRSAM_COUNT)
|
|
return -1;
|
|
|
|
mbedtls_rsa_init(ctx->ctx, mode_map[mode], 0);
|
|
|
|
n = mbedtls_rsa_gen_key(ctx->ctx, _rngf, context, (unsigned int)bits, 65537);
|
|
if (n) {
|
|
lwsl_err("mbedtls_rsa_gen_key failed 0x%x\n", -n);
|
|
goto cleanup_1;
|
|
}
|
|
|
|
{
|
|
mbedtls_mpi *mpi[LWS_GENCRYPTO_RSA_KEYEL_COUNT] = {
|
|
&ctx->ctx->E, &ctx->ctx->N, &ctx->ctx->D, &ctx->ctx->P,
|
|
&ctx->ctx->Q, &ctx->ctx->DP, &ctx->ctx->DQ,
|
|
&ctx->ctx->QP,
|
|
};
|
|
|
|
for (n = 0; n < LWS_GENCRYPTO_RSA_KEYEL_COUNT; n++)
|
|
if (mbedtls_mpi_size(mpi[n])) {
|
|
el[n].buf = lws_malloc(
|
|
mbedtls_mpi_size(mpi[n]), "genrsakey");
|
|
if (!el[n].buf)
|
|
goto cleanup;
|
|
el[n].len = (uint32_t)mbedtls_mpi_size(mpi[n]);
|
|
if (mbedtls_mpi_write_binary(mpi[n], el[n].buf,
|
|
el[n].len))
|
|
goto cleanup;
|
|
}
|
|
}
|
|
|
|
return 0;
|
|
|
|
cleanup:
|
|
for (n = 0; n < LWS_GENCRYPTO_RSA_KEYEL_COUNT; n++)
|
|
if (el[n].buf)
|
|
lws_free_set_NULL(el[n].buf);
|
|
cleanup_1:
|
|
lws_free(ctx->ctx);
|
|
|
|
return -1;
|
|
}
|
|
|
|
int
|
|
lws_genrsa_public_decrypt(struct lws_genrsa_ctx *ctx, const uint8_t *in,
|
|
size_t in_len, uint8_t *out, size_t out_max)
|
|
{
|
|
size_t olen = 0;
|
|
int n;
|
|
|
|
ctx->ctx->len = in_len;
|
|
|
|
#if defined(LWS_HAVE_mbedtls_rsa_complete)
|
|
mbedtls_rsa_complete(ctx->ctx);
|
|
#endif
|
|
|
|
switch(ctx->mode) {
|
|
case LGRSAM_PKCS1_1_5:
|
|
n = mbedtls_rsa_rsaes_pkcs1_v15_decrypt(ctx->ctx, _rngf,
|
|
ctx->context,
|
|
MBEDTLS_RSA_PUBLIC,
|
|
&olen, in, out,
|
|
out_max);
|
|
break;
|
|
case LGRSAM_PKCS1_OAEP_PSS:
|
|
n = mbedtls_rsa_rsaes_oaep_decrypt(ctx->ctx, _rngf,
|
|
ctx->context,
|
|
MBEDTLS_RSA_PUBLIC,
|
|
NULL, 0,
|
|
&olen, in, out, out_max);
|
|
break;
|
|
default:
|
|
return -1;
|
|
}
|
|
if (n) {
|
|
lwsl_notice("%s: -0x%x\n", __func__, -n);
|
|
|
|
return -1;
|
|
}
|
|
|
|
return (int)olen;
|
|
}
|
|
|
|
int
|
|
lws_genrsa_private_decrypt(struct lws_genrsa_ctx *ctx, const uint8_t *in,
|
|
size_t in_len, uint8_t *out, size_t out_max)
|
|
{
|
|
size_t olen = 0;
|
|
int n;
|
|
|
|
ctx->ctx->len = in_len;
|
|
|
|
#if defined(LWS_HAVE_mbedtls_rsa_complete)
|
|
mbedtls_rsa_complete(ctx->ctx);
|
|
#endif
|
|
|
|
switch(ctx->mode) {
|
|
case LGRSAM_PKCS1_1_5:
|
|
n = mbedtls_rsa_rsaes_pkcs1_v15_decrypt(ctx->ctx, _rngf,
|
|
ctx->context,
|
|
MBEDTLS_RSA_PRIVATE,
|
|
&olen, in, out,
|
|
out_max);
|
|
break;
|
|
case LGRSAM_PKCS1_OAEP_PSS:
|
|
n = mbedtls_rsa_rsaes_oaep_decrypt(ctx->ctx, _rngf,
|
|
ctx->context,
|
|
MBEDTLS_RSA_PRIVATE,
|
|
NULL, 0,
|
|
&olen, in, out, out_max);
|
|
break;
|
|
default:
|
|
return -1;
|
|
}
|
|
if (n) {
|
|
lwsl_notice("%s: -0x%x\n", __func__, -n);
|
|
|
|
return -1;
|
|
}
|
|
|
|
return (int)olen;
|
|
}
|
|
|
|
int
|
|
lws_genrsa_public_encrypt(struct lws_genrsa_ctx *ctx, const uint8_t *in,
|
|
size_t in_len, uint8_t *out)
|
|
{
|
|
int n;
|
|
|
|
#if defined(LWS_HAVE_mbedtls_rsa_complete)
|
|
mbedtls_rsa_complete(ctx->ctx);
|
|
#endif
|
|
|
|
switch(ctx->mode) {
|
|
case LGRSAM_PKCS1_1_5:
|
|
n = mbedtls_rsa_rsaes_pkcs1_v15_encrypt(ctx->ctx, _rngf,
|
|
ctx->context,
|
|
MBEDTLS_RSA_PUBLIC,
|
|
in_len, in, out);
|
|
break;
|
|
case LGRSAM_PKCS1_OAEP_PSS:
|
|
n = mbedtls_rsa_rsaes_oaep_encrypt(ctx->ctx, _rngf,
|
|
ctx->context,
|
|
MBEDTLS_RSA_PUBLIC,
|
|
NULL, 0,
|
|
in_len, in, out);
|
|
break;
|
|
default:
|
|
return -1;
|
|
}
|
|
if (n < 0) {
|
|
lwsl_notice("%s: -0x%x: in_len: %d\n", __func__, -n,
|
|
(int)in_len);
|
|
|
|
return -1;
|
|
}
|
|
|
|
return (int)mbedtls_mpi_size(&ctx->ctx->N);
|
|
}
|
|
|
|
int
|
|
lws_genrsa_private_encrypt(struct lws_genrsa_ctx *ctx, const uint8_t *in,
|
|
size_t in_len, uint8_t *out)
|
|
{
|
|
int n;
|
|
|
|
#if defined(LWS_HAVE_mbedtls_rsa_complete)
|
|
mbedtls_rsa_complete(ctx->ctx);
|
|
#endif
|
|
|
|
switch(ctx->mode) {
|
|
case LGRSAM_PKCS1_1_5:
|
|
n = mbedtls_rsa_rsaes_pkcs1_v15_encrypt(ctx->ctx, _rngf,
|
|
ctx->context,
|
|
MBEDTLS_RSA_PRIVATE,
|
|
in_len, in, out);
|
|
break;
|
|
case LGRSAM_PKCS1_OAEP_PSS:
|
|
n = mbedtls_rsa_rsaes_oaep_encrypt(ctx->ctx, _rngf,
|
|
ctx->context,
|
|
MBEDTLS_RSA_PRIVATE,
|
|
NULL, 0,
|
|
in_len, in, out);
|
|
break;
|
|
default:
|
|
return -1;
|
|
}
|
|
if (n) {
|
|
lwsl_notice("%s: -0x%x: in_len: %d\n", __func__, -n,
|
|
(int)in_len);
|
|
|
|
return -1;
|
|
}
|
|
|
|
return (int)mbedtls_mpi_size(&ctx->ctx->N);
|
|
}
|
|
|
|
int
|
|
lws_genrsa_hash_sig_verify(struct lws_genrsa_ctx *ctx, const uint8_t *in,
|
|
enum lws_genhash_types hash_type, const uint8_t *sig,
|
|
size_t sig_len)
|
|
{
|
|
int n, h = (int)lws_gencrypto_mbedtls_hash_to_MD_TYPE(hash_type);
|
|
|
|
if (h < 0)
|
|
return -1;
|
|
|
|
#if defined(LWS_HAVE_mbedtls_rsa_complete)
|
|
mbedtls_rsa_complete(ctx->ctx);
|
|
#endif
|
|
|
|
switch(ctx->mode) {
|
|
case LGRSAM_PKCS1_1_5:
|
|
n = mbedtls_rsa_rsassa_pkcs1_v15_verify(ctx->ctx, NULL, NULL,
|
|
MBEDTLS_RSA_PUBLIC,
|
|
(mbedtls_md_type_t)h, 0, in, sig);
|
|
break;
|
|
case LGRSAM_PKCS1_OAEP_PSS:
|
|
n = mbedtls_rsa_rsassa_pss_verify(ctx->ctx, NULL, NULL,
|
|
MBEDTLS_RSA_PUBLIC,
|
|
(mbedtls_md_type_t)h, 0, in, sig);
|
|
break;
|
|
default:
|
|
return -1;
|
|
}
|
|
if (n < 0) {
|
|
lwsl_notice("%s: -0x%x\n", __func__, -n);
|
|
|
|
return -1;
|
|
}
|
|
|
|
return n;
|
|
}
|
|
|
|
int
|
|
lws_genrsa_hash_sign(struct lws_genrsa_ctx *ctx, const uint8_t *in,
|
|
enum lws_genhash_types hash_type, uint8_t *sig,
|
|
size_t sig_len)
|
|
{
|
|
int n, h = (int)lws_gencrypto_mbedtls_hash_to_MD_TYPE(hash_type);
|
|
|
|
if (h < 0)
|
|
return -1;
|
|
|
|
#if defined(LWS_HAVE_mbedtls_rsa_complete)
|
|
mbedtls_rsa_complete(ctx->ctx);
|
|
#endif
|
|
|
|
/*
|
|
* The "sig" buffer must be as large as the size of ctx->N
|
|
* (eg. 128 bytes if RSA-1024 is used).
|
|
*/
|
|
if (sig_len < ctx->ctx->len)
|
|
return -1;
|
|
|
|
switch(ctx->mode) {
|
|
case LGRSAM_PKCS1_1_5:
|
|
n = mbedtls_rsa_rsassa_pkcs1_v15_sign(ctx->ctx, NULL, NULL,
|
|
MBEDTLS_RSA_PRIVATE,
|
|
(mbedtls_md_type_t)h, 0, in, sig);
|
|
break;
|
|
case LGRSAM_PKCS1_OAEP_PSS:
|
|
n = mbedtls_rsa_rsassa_pss_sign(ctx->ctx, NULL, NULL,
|
|
MBEDTLS_RSA_PRIVATE,
|
|
(mbedtls_md_type_t)h, 0, in, sig);
|
|
break;
|
|
default:
|
|
return -1;
|
|
}
|
|
|
|
if (n < 0) {
|
|
lwsl_notice("%s: -0x%x\n", __func__, -n);
|
|
|
|
return -1;
|
|
}
|
|
|
|
return (int)ctx->ctx->len;
|
|
}
|
|
|
|
int
|
|
lws_genrsa_render_pkey_asn1(struct lws_genrsa_ctx *ctx, int _private,
|
|
uint8_t *pkey_asn1, size_t pkey_asn1_len)
|
|
{
|
|
uint8_t *p = pkey_asn1, *totlen, *end = pkey_asn1 + pkey_asn1_len - 1;
|
|
mbedtls_mpi *mpi[LWS_GENCRYPTO_RSA_KEYEL_COUNT] = {
|
|
&ctx->ctx->N, &ctx->ctx->E, &ctx->ctx->D, &ctx->ctx->P,
|
|
&ctx->ctx->Q, &ctx->ctx->DP, &ctx->ctx->DQ,
|
|
&ctx->ctx->QP,
|
|
};
|
|
int n;
|
|
|
|
/* 30 82 - sequence
|
|
* 09 29 <-- length(0x0929) less 4 bytes
|
|
* 02 01 <- length (1)
|
|
* 00
|
|
* 02 82
|
|
* 02 01 <- length (513) N
|
|
* ...
|
|
*
|
|
* 02 03 <- length (3) E
|
|
* 01 00 01
|
|
*
|
|
* 02 82
|
|
* 02 00 <- length (512) D P Q EXP1 EXP2 COEFF
|
|
*
|
|
* */
|
|
|
|
*p++ = 0x30;
|
|
*p++ = 0x82;
|
|
totlen = p;
|
|
p += 2;
|
|
|
|
*p++ = 0x02;
|
|
*p++ = 0x01;
|
|
*p++ = 0x00;
|
|
|
|
for (n = 0; n < LWS_GENCRYPTO_RSA_KEYEL_COUNT; n++) {
|
|
int m = (int)mbedtls_mpi_size(mpi[n]);
|
|
uint8_t *elen;
|
|
|
|
*p++ = 0x02;
|
|
elen = p;
|
|
if (m < 0x7f)
|
|
*p++ = (uint8_t)m;
|
|
else {
|
|
*p++ = 0x82;
|
|
*p++ = (uint8_t)(m >> 8);
|
|
*p++ = (uint8_t)(m & 0xff);
|
|
}
|
|
|
|
if (p + m > end)
|
|
return -1;
|
|
|
|
if (mbedtls_mpi_write_binary(mpi[n], p, (unsigned int)m))
|
|
return -1;
|
|
if (p[0] & 0x80) {
|
|
p[0] = 0x00;
|
|
if (mbedtls_mpi_write_binary(mpi[n], &p[1], (unsigned int)m))
|
|
return -1;
|
|
m++;
|
|
}
|
|
if (m < 0x7f)
|
|
*elen = (uint8_t)m;
|
|
else {
|
|
*elen++ = 0x82;
|
|
*elen++ = (uint8_t)(m >> 8);
|
|
*elen = (uint8_t)(m & 0xff);
|
|
}
|
|
p += m;
|
|
}
|
|
|
|
n = lws_ptr_diff(p, pkey_asn1);
|
|
|
|
*totlen++ = (uint8_t)((n - 4) >> 8);
|
|
*totlen = (uint8_t)((n - 4) & 0xff);
|
|
|
|
return n;
|
|
}
|
|
|
|
void
|
|
lws_genrsa_destroy(struct lws_genrsa_ctx *ctx)
|
|
{
|
|
if (!ctx->ctx)
|
|
return;
|
|
mbedtls_rsa_free(ctx->ctx);
|
|
lws_free(ctx->ctx);
|
|
ctx->ctx = NULL;
|
|
}
|