1/*
2 * Copyright 1999-2016 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10#include <stdio.h>
11#include "internal/cryptlib.h"
12#include <openssl/asn1t.h>
13#include <openssl/x509.h>
14#include <openssl/rand.h>
15
16/* PKCS#5 password based encryption structure */
17
18ASN1_SEQUENCE(PBEPARAM) = {
19 ASN1_SIMPLE(PBEPARAM, salt, ASN1_OCTET_STRING),
20 ASN1_SIMPLE(PBEPARAM, iter, ASN1_INTEGER)
21} ASN1_SEQUENCE_END(PBEPARAM)
22
23IMPLEMENT_ASN1_FUNCTIONS(PBEPARAM)
24
25/* Set an algorithm identifier for a PKCS#5 PBE algorithm */
26
27int PKCS5_pbe_set0_algor(X509_ALGOR *algor, int alg, int iter,
28 const unsigned char *salt, int saltlen)
29{
30 PBEPARAM *pbe = NULL;
31 ASN1_STRING *pbe_str = NULL;
32 unsigned char *sstr = NULL;
33
34 pbe = PBEPARAM_new();
35 if (pbe == NULL) {
36 ASN1err(ASN1_F_PKCS5_PBE_SET0_ALGOR, ERR_R_MALLOC_FAILURE);
37 goto err;
38 }
39 if (iter <= 0)
40 iter = PKCS5_DEFAULT_ITER;
41 if (!ASN1_INTEGER_set(pbe->iter, iter)) {
42 ASN1err(ASN1_F_PKCS5_PBE_SET0_ALGOR, ERR_R_MALLOC_FAILURE);
43 goto err;
44 }
45 if (!saltlen)
46 saltlen = PKCS5_SALT_LEN;
47
48 sstr = OPENSSL_malloc(saltlen);
49 if (sstr == NULL) {
50 ASN1err(ASN1_F_PKCS5_PBE_SET0_ALGOR, ERR_R_MALLOC_FAILURE);
51 goto err;
52 }
53 if (salt)
54 memcpy(sstr, salt, saltlen);
55 else if (RAND_bytes(sstr, saltlen) <= 0)
56 goto err;
57
58 ASN1_STRING_set0(pbe->salt, sstr, saltlen);
59 sstr = NULL;
60
61 if (!ASN1_item_pack(pbe, ASN1_ITEM_rptr(PBEPARAM), &pbe_str)) {
62 ASN1err(ASN1_F_PKCS5_PBE_SET0_ALGOR, ERR_R_MALLOC_FAILURE);
63 goto err;
64 }
65
66 PBEPARAM_free(pbe);
67 pbe = NULL;
68
69 if (X509_ALGOR_set0(algor, OBJ_nid2obj(alg), V_ASN1_SEQUENCE, pbe_str))
70 return 1;
71
72 err:
73 OPENSSL_free(sstr);
74 PBEPARAM_free(pbe);
75 ASN1_STRING_free(pbe_str);
76 return 0;
77}
78
79/* Return an algorithm identifier for a PKCS#5 PBE algorithm */
80
81X509_ALGOR *PKCS5_pbe_set(int alg, int iter,
82 const unsigned char *salt, int saltlen)
83{
84 X509_ALGOR *ret;
85 ret = X509_ALGOR_new();
86 if (ret == NULL) {
87 ASN1err(ASN1_F_PKCS5_PBE_SET, ERR_R_MALLOC_FAILURE);
88 return NULL;
89 }
90
91 if (PKCS5_pbe_set0_algor(ret, alg, iter, salt, saltlen))
92 return ret;
93
94 X509_ALGOR_free(ret);
95 return NULL;
96}
97