140 lines
4.8 KiB
C
140 lines
4.8 KiB
C
/* dh.h
|
|
*
|
|
* Copyright (C) 2006-2020 wolfSSL Inc.
|
|
*
|
|
* This file is part of wolfSSL.
|
|
*
|
|
* wolfSSL is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* wolfSSL is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
|
|
*/
|
|
|
|
/*!
|
|
\file wolfssl/wolfcrypt/dh.h
|
|
*/
|
|
|
|
#ifndef WOLF_CRYPT_DH_H
|
|
#define WOLF_CRYPT_DH_H
|
|
|
|
#include <wolfssl/wolfcrypt/types.h>
|
|
|
|
#ifndef NO_DH
|
|
|
|
#if defined(HAVE_FIPS) && \
|
|
defined(HAVE_FIPS_VERSION) && (HAVE_FIPS_VERSION >= 2)
|
|
#include <wolfssl/wolfcrypt/fips.h>
|
|
#endif /* HAVE_FIPS_VERSION >= 2 */
|
|
|
|
#include <wolfssl/wolfcrypt/integer.h>
|
|
#include <wolfssl/wolfcrypt/random.h>
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
#ifdef WOLFSSL_ASYNC_CRYPT
|
|
#include <wolfssl/wolfcrypt/async.h>
|
|
#endif
|
|
typedef struct DhParams {
|
|
#ifdef HAVE_FFDHE_Q
|
|
const byte *q;
|
|
word32 q_len;
|
|
#endif /* HAVE_FFDHE_Q */
|
|
const byte *p;
|
|
word32 p_len;
|
|
const byte *g;
|
|
word32 g_len;
|
|
} DhParams;
|
|
|
|
/* Diffie-Hellman Key */
|
|
struct DhKey {
|
|
mp_int p, g, q; /* group parameters */
|
|
#if defined(WOLFSSL_QT) || defined(OPENSSL_ALL) || defined(WOLFSSL_OPENSSH)
|
|
mp_int pub;
|
|
mp_int priv;
|
|
#endif
|
|
void *heap;
|
|
#ifdef WOLFSSL_ASYNC_CRYPT
|
|
WC_ASYNC_DEV asyncDev;
|
|
#endif
|
|
};
|
|
|
|
#ifndef WC_DH_TYPE_DEFINED
|
|
typedef struct DhKey DhKey;
|
|
#define WC_DH_TYPE_DEFINED
|
|
#endif
|
|
|
|
#ifdef HAVE_FFDHE_2048
|
|
WOLFSSL_API const DhParams *wc_Dh_ffdhe2048_Get(void);
|
|
#endif
|
|
#ifdef HAVE_FFDHE_3072
|
|
WOLFSSL_API const DhParams *wc_Dh_ffdhe3072_Get(void);
|
|
#endif
|
|
#ifdef HAVE_FFDHE_4096
|
|
WOLFSSL_API const DhParams *wc_Dh_ffdhe4096_Get(void);
|
|
#endif
|
|
#ifdef HAVE_FFDHE_6144
|
|
WOLFSSL_API const DhParams *wc_Dh_ffdhe6144_Get(void);
|
|
#endif
|
|
#ifdef HAVE_FFDHE_8192
|
|
WOLFSSL_API const DhParams *wc_Dh_ffdhe8192_Get(void);
|
|
#endif
|
|
|
|
WOLFSSL_API int wc_InitDhKey(DhKey *key);
|
|
WOLFSSL_API int wc_InitDhKey_ex(DhKey *key, void *heap, int devId);
|
|
WOLFSSL_API int wc_FreeDhKey(DhKey *key);
|
|
|
|
WOLFSSL_API int wc_DhGenerateKeyPair(DhKey *key, WC_RNG *rng, byte *priv,
|
|
word32 *privSz, byte *pub, word32 *pubSz);
|
|
WOLFSSL_API int wc_DhAgree(DhKey *key, byte *agree, word32 *agreeSz,
|
|
const byte *priv, word32 privSz, const byte *otherPub,
|
|
word32 pubSz);
|
|
|
|
WOLFSSL_API int wc_DhKeyDecode(const byte *input, word32 *inOutIdx, DhKey *key,
|
|
word32);
|
|
WOLFSSL_API int wc_DhSetKey(DhKey *key, const byte *p, word32 pSz, const byte *g,
|
|
word32 gSz);
|
|
WOLFSSL_API int wc_DhSetKey_ex(DhKey *key, const byte *p, word32 pSz,
|
|
const byte *g, word32 gSz, const byte *q, word32 qSz);
|
|
#if defined(WOLFSSL_QT) || defined(OPENSSL_ALL)
|
|
WOLFSSL_LOCAL int wc_DhSetFullKeys(DhKey *key, const byte *priv_key, word32 privSz,
|
|
const byte *pub_key, word32 pubSz);
|
|
#endif
|
|
WOLFSSL_API int wc_DhSetCheckKey(DhKey *key, const byte *p, word32 pSz,
|
|
const byte *g, word32 gSz, const byte *q, word32 qSz,
|
|
int trusted, WC_RNG *rng);
|
|
WOLFSSL_API int wc_DhParamsLoad(const byte *input, word32 inSz, byte *p,
|
|
word32 *pInOutSz, byte *g, word32 *gInOutSz);
|
|
WOLFSSL_API int wc_DhCheckPubKey(DhKey *key, const byte *pub, word32 pubSz);
|
|
WOLFSSL_API int wc_DhCheckPubKey_ex(DhKey *key, const byte *pub, word32 pubSz,
|
|
const byte *prime, word32 primeSz);
|
|
WOLFSSL_API int wc_DhCheckPubValue(const byte *prime, word32 primeSz,
|
|
const byte *pub, word32 pubSz);
|
|
WOLFSSL_API int wc_DhCheckPrivKey(DhKey *key, const byte *priv, word32 pubSz);
|
|
WOLFSSL_API int wc_DhCheckPrivKey_ex(DhKey *key, const byte *priv, word32 pubSz,
|
|
const byte *prime, word32 primeSz);
|
|
WOLFSSL_API int wc_DhCheckKeyPair(DhKey *key, const byte *pub, word32 pubSz,
|
|
const byte *priv, word32 privSz);
|
|
WOLFSSL_API int wc_DhGenerateParams(WC_RNG *rng, int modSz, DhKey *dh);
|
|
WOLFSSL_API int wc_DhExportParamsRaw(DhKey *dh, byte *p, word32 *pSz,
|
|
byte *q, word32 *qSz, byte *g, word32 *gSz);
|
|
|
|
|
|
#ifdef __cplusplus
|
|
} /* extern "C" */
|
|
#endif
|
|
|
|
#endif /* NO_DH */
|
|
#endif /* WOLF_CRYPT_DH_H */
|
|
|