1 /*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21
22 /*
23 * Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
24 */
25
26 #ifndef _RSA_IMPL_H
27 #define _RSA_IMPL_H
28
29 #ifdef __cplusplus
30 extern "C" {
31 #endif
32
33 #include <sys/types.h>
34 #include <bignum.h>
35
36 #define MIN_RSA_KEYLENGTH_IN_BYTES 32
37 #define MAX_RSA_KEYLENGTH_IN_BYTES 512
38 #define RSA_MIN_KEY_LEN 256 /* RSA min key length in bits */
39 #define RSA_MAX_KEY_LEN 4096 /* RSA max key length in bits */
40
41 #ifdef _KERNEL
42
43 #include <sys/sunddi.h>
44 #include <sys/crypto/common.h>
45
46 #define CK_BYTE uchar_t
47 #define CK_ULONG ulong_t
48 #define CK_RV int
49
50 #define CKR_OK CRYPTO_SUCCESS
51 #define CKR_ARGUMENTS_BAD CRYPTO_ARGUMENTS_BAD
52 #define CKR_DATA_LEN_RANGE CRYPTO_DATA_LEN_RANGE
53 #define CKR_DEVICE_ERROR CRYPTO_DEVICE_ERROR
54 #define CKR_GENERAL_ERROR CRYPTO_GENERAL_ERROR
55 #define CKR_HOST_MEMORY CRYPTO_HOST_MEMORY
56 #define CKR_KEY_SIZE_RANGE CRYPTO_KEY_SIZE_RANGE
57
58 int random_get_bytes(uint8_t *ran_out, size_t ran_len);
59 int random_get_pseudo_bytes(uint8_t *ran_out, size_t ran_len);
60
61 #else
62
63 #include <security/cryptoki.h>
64 #include <security/pkcs11t.h>
65
66 #endif /* _KERNEL */
67
68 #define MD5_DER_PREFIX_Len 18
69 #define SHA1_DER_PREFIX_Len 15
70 #define SHA1_DER_PREFIX_OID_Len 13
71 #define SHA2_DER_PREFIX_Len 19
72 #define DEFAULT_PUB_EXPO_Len 3
73
74 extern const CK_BYTE MD5_DER_PREFIX[MD5_DER_PREFIX_Len];
75 extern const CK_BYTE SHA1_DER_PREFIX[SHA1_DER_PREFIX_Len];
76 extern const CK_BYTE SHA1_DER_PREFIX_OID[SHA1_DER_PREFIX_OID_Len];
77 extern const CK_BYTE SHA256_DER_PREFIX[SHA2_DER_PREFIX_Len];
78 extern const CK_BYTE SHA384_DER_PREFIX[SHA2_DER_PREFIX_Len];
79 extern const CK_BYTE SHA512_DER_PREFIX[SHA2_DER_PREFIX_Len];
80 extern const CK_BYTE DEFAULT_PUB_EXPO[DEFAULT_PUB_EXPO_Len];
81
82
83 /* RSA key using BIGNUM representations */
84 typedef struct {
85 int size; /* key size in bits */
86 BIGNUM p; /* p */
87 BIGNUM q; /* q */
88 BIGNUM n; /* n = p * q (the modulus) */
89 BIGNUM d; /* private exponent */
90 BIGNUM e; /* public exponent */
91 BIGNUM dmodpminus1; /* d mod (p - 1) (exponent 1) */
92 BIGNUM dmodqminus1; /* d mod (q - 1) (exponent 2) */
93 BIGNUM pinvmodq; /* p^(-1) mod q (the coefficient) */
94 BIGNUM p_rr; /* 2^(2*(32*p->len)) mod p */
95 BIGNUM q_rr; /* 2^(2*(32*q->len)) mod q */
96 BIGNUM n_rr; /* 2^(2*(32*n->len)) mod n */
97 } RSAkey;
98
99 /* RSA key using byte string representations, useful for parameter lists */
100 typedef struct {
101 uint32_t modulus_bits; /* size */
102 uchar_t *modulus; /* n */
103 uint32_t privexpo_bytes;
104 uchar_t *privexpo; /* d */
105 uint32_t pubexpo_bytes;
106 uchar_t *pubexpo; /* e */
107 uint32_t prime1_bytes;
108 uchar_t *prime1; /* p */
109 uint32_t prime2_bytes;
110 uchar_t *prime2; /* q */
111 uint32_t expo1_bytes;
112 uchar_t *expo1; /* = d mod (p - 1) */
113 uint32_t expo2_bytes;
114 uchar_t *expo2; /* = d mod (q - 1) */
115 uint32_t coeff_bytes; /* = q bytes, .... or = p bytes */
116 uchar_t *coeff; /* = p^(-1) mod q, or = q^(-1) mod p */
117 int (*rfunc)(void *, size_t); /* random function */
118 } RSAbytekey;
119
120
121 CK_RV rsa_genkey_pair(RSAbytekey *bkey);
122
123 CK_RV rsa_encrypt(RSAbytekey *bkey,
124 uchar_t *msg, uint32_t msglen, uchar_t *encrmsg);
125
126 CK_RV rsa_decrypt(RSAbytekey *bkey,
127 uchar_t *encrmsg, uint32_t encrmsglen, uchar_t *msg);
128
129 #define rsa_sign(key, msg, len, sig) rsa_decrypt((key), (msg), (len), (sig))
130 #define rsa_verify(key, msg, len, sig) rsa_encrypt((key), (msg), (len), (sig))
131
132 #ifdef __cplusplus
133 }
134 #endif
135
136 #endif /* _RSA_IMPL_H */