| yuezonghe | 824eb0c | 2024-06-27 02:32:26 -0700 | [diff] [blame^] | 1 | /* |
| 2 | * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved. |
| 3 | * |
| 4 | * Licensed under the OpenSSL license (the "License"). You may not use |
| 5 | * this file except in compliance with the License. You can obtain a copy |
| 6 | * in the file LICENSE in the source distribution or at |
| 7 | * https://www.openssl.org/source/license.html |
| 8 | */ |
| 9 | |
| 10 | #include <stdio.h> |
| 11 | #include "internal/cryptlib.h" |
| 12 | #include "dh_local.h" |
| 13 | #include <openssl/bn.h> |
| 14 | #include <openssl/objects.h> |
| 15 | #include "crypto/bn_dh.h" |
| 16 | |
| 17 | static DH *dh_param_init(const BIGNUM *p, int32_t nbits) |
| 18 | { |
| 19 | DH *dh = DH_new(); |
| 20 | if (dh == NULL) |
| 21 | return NULL; |
| 22 | dh->p = (BIGNUM *)p; |
| 23 | dh->g = (BIGNUM *)&_bignum_const_2; |
| 24 | dh->length = nbits; |
| 25 | return dh; |
| 26 | } |
| 27 | |
| 28 | DH *DH_new_by_nid(int nid) |
| 29 | { |
| 30 | switch (nid) { |
| 31 | case NID_ffdhe2048: |
| 32 | return dh_param_init(&_bignum_ffdhe2048_p, 225); |
| 33 | case NID_ffdhe3072: |
| 34 | return dh_param_init(&_bignum_ffdhe3072_p, 275); |
| 35 | case NID_ffdhe4096: |
| 36 | return dh_param_init(&_bignum_ffdhe4096_p, 325); |
| 37 | case NID_ffdhe6144: |
| 38 | return dh_param_init(&_bignum_ffdhe6144_p, 375); |
| 39 | case NID_ffdhe8192: |
| 40 | return dh_param_init(&_bignum_ffdhe8192_p, 400); |
| 41 | default: |
| 42 | DHerr(DH_F_DH_NEW_BY_NID, DH_R_INVALID_PARAMETER_NID); |
| 43 | return NULL; |
| 44 | } |
| 45 | } |
| 46 | |
| 47 | int DH_get_nid(const DH *dh) |
| 48 | { |
| 49 | int nid; |
| 50 | |
| 51 | if (BN_get_word(dh->g) != 2) |
| 52 | return NID_undef; |
| 53 | if (!BN_cmp(dh->p, &_bignum_ffdhe2048_p)) |
| 54 | nid = NID_ffdhe2048; |
| 55 | else if (!BN_cmp(dh->p, &_bignum_ffdhe3072_p)) |
| 56 | nid = NID_ffdhe3072; |
| 57 | else if (!BN_cmp(dh->p, &_bignum_ffdhe4096_p)) |
| 58 | nid = NID_ffdhe4096; |
| 59 | else if (!BN_cmp(dh->p, &_bignum_ffdhe6144_p)) |
| 60 | nid = NID_ffdhe6144; |
| 61 | else if (!BN_cmp(dh->p, &_bignum_ffdhe8192_p)) |
| 62 | nid = NID_ffdhe8192; |
| 63 | else |
| 64 | return NID_undef; |
| 65 | if (dh->q != NULL) { |
| 66 | BIGNUM *q = BN_dup(dh->p); |
| 67 | |
| 68 | /* Check q = p * 2 + 1 we already know q is odd, so just shift right */ |
| 69 | if (q == NULL || !BN_rshift1(q, q) || !BN_cmp(dh->q, q)) |
| 70 | nid = NID_undef; |
| 71 | BN_free(q); |
| 72 | } |
| 73 | return nid; |
| 74 | } |