Bugzilla #1097: PDKIM: Update embedded PolarSSL code to 0.14.2, thanks to Andreas...

diff --git a/src/src/pdkim/base64.c b/src/src/pdkim/base64.c
index 420b638bdc0262ab46c7375d272472bbd9ce6e0d..59d59774d0d2fab8e455d5ec630cebb06dfd0161 100644 (file)
--- a/src/src/pdkim/base64.c
+++ b/src/src/pdkim/base64.c
@@ -1,10 +1,12 @@
 /*
  *  RFC 1521 base64 encoding/decoding
  *
 /*
  *  RFC 1521 base64 encoding/decoding
  *

- *  Copyright (C) 2006-2009, Paul Bakker <polarssl_maintainer at polarssl.org>
- *  All rights reserved.
+ *  Copyright (C) 2006-2010, Brainspark B.V.
+ *
+ *  This file is part of PolarSSL (http://www.polarssl.org)
+ *  Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>

  *
  *

- *  Joined copyright on original XySSL code with: Christophe Devine
+ *  All rights reserved.

  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by


@@ -23,6 +25,7 @@
 
 /* $Cambridge: exim/src/src/pdkim/base64.c,v 1.3 2009/12/07 13:05:07 tom Exp $ */
 
 
 /* $Cambridge: exim/src/src/pdkim/base64.c,v 1.3 2009/12/07 13:05:07 tom Exp $ */
 

+

 #include "base64.h"
 
 static const unsigned char base64_enc_map[64] =
 #include "base64.h"
 
 static const unsigned char base64_enc_map[64] =


@@ -57,7 +60,7 @@ static const unsigned char base64_dec_map[128] =
  * Encode a buffer into base64 format
  */
 int base64_encode( unsigned char *dst, int *dlen,
  * Encode a buffer into base64 format
  */
 int base64_encode( unsigned char *dst, int *dlen,

-                   unsigned char *src, int  slen )
+                   const unsigned char *src, int  slen )

 {
     int i, n;
     int C1, C2, C3;
 {
     int i, n;
     int C1, C2, C3;


@@ -120,7 +123,7 @@ int base64_encode( unsigned char *dst, int *dlen,
  * Decode a base64-formatted buffer
  */
 int base64_decode( unsigned char *dst, int *dlen,
  * Decode a base64-formatted buffer
  */
 int base64_decode( unsigned char *dst, int *dlen,

-                   unsigned char *src, int  slen )
+                   const unsigned char *src, int  slen )

 {
     int i, j, n;
     unsigned long x;
 {
     int i, j, n;
     unsigned long x;

diff --git a/src/src/pdkim/base64.h b/src/src/pdkim/base64.h
index f07172c70e869f3af85b20155041dd10550a29a5..ddcf5ab924baa7e96fdb22fefc3295485b23a7f1 100644 (file)
--- a/src/src/pdkim/base64.h
+++ b/src/src/pdkim/base64.h
@@ -1,10 +1,12 @@
 /**
  * \file base64.h
  *
 /**
  * \file base64.h
  *

- *  Copyright (C) 2006-2009, Paul Bakker <polarssl_maintainer at polarssl.org>
- *  All rights reserved.
+ *  Copyright (C) 2006-2010, Brainspark B.V.
+ *
+ *  This file is part of PolarSSL (http://www.polarssl.org)
+ *  Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>

  *
  *

- *  Joined copyright on original XySSL code with: Christophe Devine
+ *  All rights reserved.

  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by


@@ -49,7 +51,7 @@ extern "C" {
  *                 required buffer size in *dlen
  */
 int base64_encode( unsigned char *dst, int *dlen,
  *                 required buffer size in *dlen
  */
 int base64_encode( unsigned char *dst, int *dlen,

-                   unsigned char *src, int  slen );
+                   const unsigned char *src, int  slen );

 
 /**
  * \brief          Decode a base64-formatted buffer
 
 /**
  * \brief          Decode a base64-formatted buffer


@@ -68,7 +70,7 @@ int base64_encode( unsigned char *dst, int *dlen,
  *                 required buffer size in *dlen
  */
 int base64_decode( unsigned char *dst, int *dlen,
  *                 required buffer size in *dlen
  */
 int base64_decode( unsigned char *dst, int *dlen,

-                   unsigned char *src, int  slen );
+                   const unsigned char *src, int  slen );

 
 #ifdef __cplusplus
 }
 
 #ifdef __cplusplus
 }

diff --git a/src/src/pdkim/bignum.c b/src/src/pdkim/bignum.c
index d7b67a50999c420b3f5a7f8c7b6836ddcb00641e..fd3b66a447f31254e71f6408229a63ca79ef02ef 100644 (file)
--- a/src/src/pdkim/bignum.c
+++ b/src/src/pdkim/bignum.c
@@ -1,10 +1,12 @@
 /*
  *  Multi-precision integer library
  *
 /*
  *  Multi-precision integer library
  *

- *  Copyright (C) 2006-2009, Paul Bakker <polarssl_maintainer at polarssl.org>
- *  All rights reserved.
+ *  Copyright (C) 2006-2010, Brainspark B.V.
+ *
+ *  This file is part of PolarSSL (http://www.polarssl.org)
+ *  Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>

  *
  *

- *  Joined copyright on original XySSL code with: Christophe Devine
+ *  All rights reserved.

  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by


@@ -30,7 +32,6 @@
 
 /* $Cambridge: exim/src/src/pdkim/bignum.c,v 1.3 2009/12/07 13:05:07 tom Exp $ */
 
 
 /* $Cambridge: exim/src/src/pdkim/bignum.c,v 1.3 2009/12/07 13:05:07 tom Exp $ */
 

-

 #include "bignum.h"
 #include "bn_mul.h"
 
 #include "bignum.h"
 #include "bn_mul.h"
 


@@ -127,7 +128,7 @@ int mpi_grow( mpi *X, int nblimbs )
 /*
  * Copy the contents of Y into X
  */
 /*
  * Copy the contents of Y into X
  */

-int mpi_copy( mpi *X, mpi *Y )
+int mpi_copy( mpi *X, const mpi *Y )

 {
     int ret, i;
 
 {
     int ret, i;
 


@@ -184,7 +185,7 @@ cleanup:
 /*
  * Return the number of least significant bits
  */
 /*
  * Return the number of least significant bits
  */

-int mpi_lsb( mpi *X )
+int mpi_lsb( const mpi *X )

 {
     int i, j, count = 0;
 
 {
     int i, j, count = 0;
 


@@ -199,7 +200,7 @@ int mpi_lsb( mpi *X )
 /*
  * Return the number of most significant bits
  */
 /*
  * Return the number of most significant bits
  */

-int mpi_msb( mpi *X )
+int mpi_msb( const mpi *X )

 {
     int i, j;
 
 {
     int i, j;
 


@@ -217,7 +218,7 @@ int mpi_msb( mpi *X )
 /*
  * Return the total size in bytes
  */
 /*
  * Return the total size in bytes
  */

-int mpi_size( mpi *X )
+int mpi_size( const mpi *X )

 {
     return( ( mpi_msb( X ) + 7 ) >> 3 );
 }
 {
     return( ( mpi_msb( X ) + 7 ) >> 3 );
 }


@@ -242,9 +243,9 @@ static int mpi_get_digit( t_int *d, int radix, char c )
 /*
  * Import from an ASCII string
  */
 /*
  * Import from an ASCII string
  */

-int mpi_read_string( mpi *X, int radix, char *s )
+int mpi_read_string( mpi *X, int radix, const char *s )

 {
 {

-    int ret, i, j, n;
+    int ret, i, j, n, slen;

     t_int d;
     mpi T;
 
     t_int d;
     mpi T;
 


@@ -253,14 +254,16 @@ int mpi_read_string( mpi *X, int radix, char *s )
 
     mpi_init( &T, NULL );
 
 
     mpi_init( &T, NULL );
 

+    slen = strlen( s );
+

     if( radix == 16 )
     {
     if( radix == 16 )
     {

-        n = BITS_TO_LIMBS( strlen( s ) << 2 );
+        n = BITS_TO_LIMBS( slen << 2 );

 
         MPI_CHK( mpi_grow( X, n ) );
         MPI_CHK( mpi_lset( X, 0 ) );
 
 
         MPI_CHK( mpi_grow( X, n ) );
         MPI_CHK( mpi_lset( X, 0 ) );
 

-        for( i = strlen( s ) - 1, j = 0; i >= 0; i--, j++ )
+        for( i = slen - 1, j = 0; i >= 0; i--, j++ )

         {
             if( i == 0 && s[i] == '-' )
             {
         {
             if( i == 0 && s[i] == '-' )
             {


@@ -276,7 +279,7 @@ int mpi_read_string( mpi *X, int radix, char *s )
     {
         MPI_CHK( mpi_lset( X, 0 ) );
 
     {
         MPI_CHK( mpi_lset( X, 0 ) );
 

-        for( i = 0; i < (int) strlen( s ); i++ )
+        for( i = 0; i < slen; i++ )

         {
             if( i == 0 && s[i] == '-' )
             {
         {
             if( i == 0 && s[i] == '-' )
             {


@@ -335,7 +338,7 @@ cleanup:
 /*
  * Export into an ASCII string
  */
 /*
  * Export into an ASCII string
  */

-int mpi_write_string( mpi *X, int radix, char *s, int *slen )
+int mpi_write_string( const mpi *X, int radix, char *s, int *slen )

 {
     int ret = 0, n;
     char *p;
 {
     int ret = 0, n;
     char *p;


@@ -428,12 +431,12 @@ int mpi_read_file( mpi *X, int radix, FILE *fin )
 /*
  * Write X into an opened file (or stdout if fout == NULL)
  */
 /*
  * Write X into an opened file (or stdout if fout == NULL)
  */

-int mpi_write_file( const char *p, mpi *X, int radix, FILE *fout )
+int mpi_write_file( const char *p, const mpi *X, int radix, FILE *fout )

 {
     int n, ret;
     size_t slen;
     size_t plen;
 {
     int n, ret;
     size_t slen;
     size_t plen;

-    char s[1024];
+    char s[2048];

 
     n = sizeof( s );
     memset( s, 0, n );
 
     n = sizeof( s );
     memset( s, 0, n );


@@ -465,7 +468,7 @@ cleanup:
 /*
  * Import X from unsigned binary data, big endian
  */
 /*
  * Import X from unsigned binary data, big endian
  */

-int mpi_read_binary( mpi *X, unsigned char *buf, int buflen )
+int mpi_read_binary( mpi *X, const unsigned char *buf, int buflen )

 {
     int ret, i, j, n;
 
 {
     int ret, i, j, n;
 


@@ -487,7 +490,7 @@ cleanup:
 /*
  * Export X into unsigned binary data, big endian
  */
 /*
  * Export X into unsigned binary data, big endian
  */

-int mpi_write_binary( mpi *X, unsigned char *buf, int buflen )
+int mpi_write_binary( const mpi *X, unsigned char *buf, int buflen )

 {
     int i, j, n;
 
 {
     int i, j, n;
 


@@ -596,7 +599,7 @@ int mpi_shift_r( mpi *X, int count )
 /*
  * Compare unsigned values
  */
 /*
  * Compare unsigned values
  */

-int mpi_cmp_abs( mpi *X, mpi *Y )
+int mpi_cmp_abs( const mpi *X, const mpi *Y )

 {
     int i, j;
 
 {
     int i, j;
 


@@ -626,7 +629,7 @@ int mpi_cmp_abs( mpi *X, mpi *Y )
 /*
  * Compare signed values
  */
 /*
  * Compare signed values
  */

-int mpi_cmp_mpi( mpi *X, mpi *Y )
+int mpi_cmp_mpi( const mpi *X, const mpi *Y )

 {
     int i, j;
 
 {
     int i, j;
 


@@ -659,7 +662,7 @@ int mpi_cmp_mpi( mpi *X, mpi *Y )
 /*
  * Compare signed values
  */
 /*
  * Compare signed values
  */

-int mpi_cmp_int( mpi *X, int z )
+int mpi_cmp_int( const mpi *X, int z )

 {
     mpi Y;
     t_int p[1];
 {
     mpi Y;
     t_int p[1];


@@ -675,14 +678,14 @@ int mpi_cmp_int( mpi *X, int z )
 /*
  * Unsigned addition: X = |A| + |B|  (HAC 14.7)
  */
 /*
  * Unsigned addition: X = |A| + |B|  (HAC 14.7)
  */

-int mpi_add_abs( mpi *X, mpi *A, mpi *B )
+int mpi_add_abs( mpi *X, const mpi *A, const mpi *B )

 {
     int ret, i, j;
     t_int *o, *p, c;
 
     if( X == B )
     {
 {
     int ret, i, j;
     t_int *o, *p, c;
 
     if( X == B )
     {

-        mpi *T = A; A = X; B = T;
+        const mpi *T = A; A = X; B = T;

     }
 
     if( X != A )
     }
 
     if( X != A )


@@ -747,7 +750,7 @@ static void mpi_sub_hlp( int n, t_int *s, t_int *d )
 /*
  * Unsigned substraction: X = |A| - |B|  (HAC 14.9)
  */
 /*
  * Unsigned substraction: X = |A| - |B|  (HAC 14.9)
  */

-int mpi_sub_abs( mpi *X, mpi *A, mpi *B )
+int mpi_sub_abs( mpi *X, const mpi *A, const mpi *B )

 {
     mpi TB;
     int ret, n;
 {
     mpi TB;
     int ret, n;


@@ -789,7 +792,7 @@ cleanup:
 /*
  * Signed addition: X = A + B
  */
 /*
  * Signed addition: X = A + B
  */

-int mpi_add_mpi( mpi *X, mpi *A, mpi *B )
+int mpi_add_mpi( mpi *X, const mpi *A, const mpi *B )

 {
     int ret, s = A->s;
 
 {
     int ret, s = A->s;
 


@@ -820,7 +823,7 @@ cleanup:
 /*
  * Signed substraction: X = A - B
  */
 /*
  * Signed substraction: X = A - B
  */

-int mpi_sub_mpi( mpi *X, mpi *A, mpi *B )
+int mpi_sub_mpi( mpi *X, const mpi *A, const mpi *B )

 {
     int ret, s = A->s;
 
 {
     int ret, s = A->s;
 


@@ -851,7 +854,7 @@ cleanup:
 /*
  * Signed addition: X = A + b
  */
 /*
  * Signed addition: X = A + b
  */

-int mpi_add_int( mpi *X, mpi *A, int b )
+int mpi_add_int( mpi *X, const mpi *A, int b )

 {
     mpi _B;
     t_int p[1];
 {
     mpi _B;
     t_int p[1];


@@ -867,7 +870,7 @@ int mpi_add_int( mpi *X, mpi *A, int b )
 /*
  * Signed substraction: X = A - b
  */
 /*
  * Signed substraction: X = A - b
  */

-int mpi_sub_int( mpi *X, mpi *A, int b )
+int mpi_sub_int( mpi *X, const mpi *A, int b )

 {
     mpi _B;
     t_int p[1];
 {
     mpi _B;
     t_int p[1];


@@ -947,7 +950,7 @@ static void mpi_mul_hlp( int i, t_int *s, t_int *d, t_int b )
 /*
  * Baseline multiplication: X = A * B  (HAC 14.12)
  */
 /*
  * Baseline multiplication: X = A * B  (HAC 14.12)
  */

-int mpi_mul_mpi( mpi *X, mpi *A, mpi *B )
+int mpi_mul_mpi( mpi *X, const mpi *A, const mpi *B )

 {
     int ret, i, j;
     mpi TA, TB;
 {
     int ret, i, j;
     mpi TA, TB;


@@ -983,7 +986,7 @@ cleanup:
 /*
  * Baseline multiplication: X = A * b
  */
 /*
  * Baseline multiplication: X = A * b
  */

-int mpi_mul_int( mpi *X, mpi *A, t_int b )
+int mpi_mul_int( mpi *X, const mpi *A, t_int b )

 {
     mpi _B;
     t_int p[1];
 {
     mpi _B;
     t_int p[1];


@@ -999,7 +1002,7 @@ int mpi_mul_int( mpi *X, mpi *A, t_int b )
 /*
  * Division by mpi: A = Q * B + R  (HAC 14.20)
  */
 /*
  * Division by mpi: A = Q * B + R  (HAC 14.20)
  */

-int mpi_div_mpi( mpi *Q, mpi *R, mpi *A, mpi *B )
+int mpi_div_mpi( mpi *Q, mpi *R, const mpi *A, const mpi *B )

 {
     int ret, i, n, t, k;
     mpi X, Y, Z, T1, T2;
 {
     int ret, i, n, t, k;
     mpi X, Y, Z, T1, T2;


@@ -1164,7 +1167,7 @@ cleanup:
  *         1 if memory allocation failed
  *         POLARSSL_ERR_MPI_DIVISION_BY_ZERO if b == 0
  */
  *         1 if memory allocation failed
  *         POLARSSL_ERR_MPI_DIVISION_BY_ZERO if b == 0
  */

-int mpi_div_int( mpi *Q, mpi *R, mpi *A, int b )
+int mpi_div_int( mpi *Q, mpi *R, const mpi *A, int b )

 {
     mpi _B;
     t_int p[1];
 {
     mpi _B;
     t_int p[1];


@@ -1180,7 +1183,7 @@ int mpi_div_int( mpi *Q, mpi *R, mpi *A, int b )
 /*
  * Modulo: R = A mod B
  */
 /*
  * Modulo: R = A mod B
  */

-int mpi_mod_mpi( mpi *R, mpi *A, mpi *B )
+int mpi_mod_mpi( mpi *R, const mpi *A, const mpi *B )

 {
     int ret;
 
 {
     int ret;
 


@@ -1203,7 +1206,7 @@ cleanup:
 /*
  * Modulo: r = A mod b
  */
 /*
  * Modulo: r = A mod b
  */

-int mpi_mod_int( t_int *r, mpi *A, int b )
+int mpi_mod_int( t_int *r, const mpi *A, int b )

 {
     int i;
     t_int x, y, z;
 {
     int i;
     t_int x, y, z;


@@ -1260,7 +1263,7 @@ int mpi_mod_int( t_int *r, mpi *A, int b )
 /*
  * Fast Montgomery initialization (thanks to Tom St Denis)
  */
 /*
  * Fast Montgomery initialization (thanks to Tom St Denis)
  */

-static void mpi_montg_init( t_int *mm, mpi *N )
+static void mpi_montg_init( t_int *mm, const mpi *N )

 {
     t_int x, m0 = N->p[0];
 
 {
     t_int x, m0 = N->p[0];
 


@@ -1278,7 +1281,7 @@ static void mpi_montg_init( t_int *mm, mpi *N )
 /*
  * Montgomery multiplication: A = A * B * R^-1 mod N  (HAC 14.36)
  */
 /*
  * Montgomery multiplication: A = A * B * R^-1 mod N  (HAC 14.36)
  */

-static void mpi_montmul( mpi *A, mpi *B, mpi *N, t_int mm, mpi *T )
+static void mpi_montmul( mpi *A, const mpi *B, const mpi *N, t_int mm, const mpi *T )

 {
     int i, n, m;
     t_int u0, u1, *d;
 {
     int i, n, m;
     t_int u0, u1, *d;


@@ -1315,7 +1318,7 @@ static void mpi_montmul( mpi *A, mpi *B, mpi *N, t_int mm, mpi *T )
 /*
  * Montgomery reduction: A = A * R^-1 mod N
  */
 /*
  * Montgomery reduction: A = A * R^-1 mod N
  */

-static void mpi_montred( mpi *A, mpi *N, t_int mm, mpi *T )
+static void mpi_montred( mpi *A, const mpi *N, t_int mm, const mpi *T )

 {
     t_int z = 1;
     mpi U;
 {
     t_int z = 1;
     mpi U;


@@ -1329,7 +1332,7 @@ static void mpi_montred( mpi *A, mpi *N, t_int mm, mpi *T )
 /*
  * Sliding-window exponentiation: X = A^E mod N  (HAC 14.85)
  */
 /*
  * Sliding-window exponentiation: X = A^E mod N  (HAC 14.85)
  */

-int mpi_exp_mod( mpi *X, mpi *A, mpi *E, mpi *N, mpi *_RR )
+int mpi_exp_mod( mpi *X, const mpi *A, const mpi *E, const mpi *N, mpi *_RR )

 {
     int ret, i, j, wsize, wbits;
     int bufsize, nblimbs, nbits;
 {
     int ret, i, j, wsize, wbits;
     int bufsize, nblimbs, nbits;


@@ -1506,7 +1509,7 @@ cleanup:
 /*
  * Greatest common divisor: G = gcd(A, B)  (HAC 14.54)
  */
 /*
  * Greatest common divisor: G = gcd(A, B)  (HAC 14.54)
  */

-int mpi_gcd( mpi *G, mpi *A, mpi *B )
+int mpi_gcd( mpi *G, const mpi *A, const mpi *B )

 {
     int ret, lz, lzt;
     mpi TG, TA, TB;
 {
     int ret, lz, lzt;
     mpi TG, TA, TB;


@@ -1559,7 +1562,7 @@ cleanup:
 /*
  * Modular inverse: X = A^-1 mod N  (HAC 14.61 / 14.64)
  */
 /*
  * Modular inverse: X = A^-1 mod N  (HAC 14.61 / 14.64)
  */

-int mpi_inv_mod( mpi *X, mpi *A, mpi *N )
+int mpi_inv_mod( mpi *X, const mpi *A, const mpi *N )

 {
     int ret;
     mpi G, TA, TU, U1, U2, TB, TV, V1, V2;
 {
     int ret;
     mpi G, TA, TU, U1, U2, TB, TV, V1, V2;


@@ -1717,8 +1720,8 @@ int mpi_is_prime( mpi *X, int (*f_rng)(void *), void *p_rng )
      * W = |X| - 1
      * R = W >> lsb( W )
      */
      * W = |X| - 1
      * R = W >> lsb( W )
      */

-    s = mpi_lsb( &W );

     MPI_CHK( mpi_sub_int( &W, X, 1 ) );
     MPI_CHK( mpi_sub_int( &W, X, 1 ) );

+    s = mpi_lsb( &W );

     MPI_CHK( mpi_copy( &R, &W ) );
     MPI_CHK( mpi_shift_r( &R, s ) );
 
     MPI_CHK( mpi_copy( &R, &W ) );
     MPI_CHK( mpi_shift_r( &R, s ) );
 

diff --git a/src/src/pdkim/bignum.h b/src/src/pdkim/bignum.h
index 5b355f2fcec42c4336e54e564a39c4e97f8278d2..55ff6ee8aafe9794ee21f456b804f1fd4075b165 100644 (file)
--- a/src/src/pdkim/bignum.h
+++ b/src/src/pdkim/bignum.h
@@ -1,10 +1,12 @@
 /**
  * \file bignum.h
  *
 /**
  * \file bignum.h
  *

- *  Copyright (C) 2006-2009, Paul Bakker <polarssl_maintainer at polarssl.org>
- *  All rights reserved.
+ *  Copyright (C) 2006-2010, Brainspark B.V.
+ *
+ *  This file is part of PolarSSL (http://www.polarssl.org)
+ *  Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>

  *
  *

- *  Joined copyright on original XySSL code with: Christophe Devine
+ *  All rights reserved.

  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by


@@ -111,7 +113,7 @@ int mpi_grow( mpi *X, int nblimbs );
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */

-int mpi_copy( mpi *X, mpi *Y );
+int mpi_copy( mpi *X, const mpi *Y );

 
 /**
  * \brief          Swap the contents of X and Y
 
 /**
  * \brief          Swap the contents of X and Y


@@ -137,21 +139,21 @@ int mpi_lset( mpi *X, int z );
  *
  * \param X        MPI to use
  */
  *
  * \param X        MPI to use
  */

-int mpi_lsb( mpi *X );
+int mpi_lsb( const mpi *X );

 
 /**
  * \brief          Return the number of most significant bits
  *
  * \param X        MPI to use
  */
 
 /**
  * \brief          Return the number of most significant bits
  *
  * \param X        MPI to use
  */

-int mpi_msb( mpi *X );
+int mpi_msb( const mpi *X );

 
 /**
  * \brief          Return the total size in bytes
  *
  * \param X        MPI to use
  */
 
 /**
  * \brief          Return the total size in bytes
  *
  * \param X        MPI to use
  */

-int mpi_size( mpi *X );
+int mpi_size( const mpi *X );

 
 /**
  * \brief          Import from an ASCII string
 
 /**
  * \brief          Import from an ASCII string


@@ -162,7 +164,7 @@ int mpi_size( mpi *X );
  *
  * \return         0 if successful, or an POLARSSL_ERR_MPI_XXX error code
  */
  *
  * \return         0 if successful, or an POLARSSL_ERR_MPI_XXX error code
  */

-int mpi_read_string( mpi *X, int radix, char *s );
+int mpi_read_string( mpi *X, int radix, const char *s );

 
 /**
  * \brief          Export into an ASCII string
 
 /**
  * \brief          Export into an ASCII string


@@ -172,12 +174,14 @@ int mpi_read_string( mpi *X, int radix, char *s );
  * \param s        String buffer
  * \param slen     String buffer size
  *
  * \param s        String buffer
  * \param slen     String buffer size
  *

- * \return         0 if successful, or an POLARSSL_ERR_MPI_XXX error code
+ * \return         0 if successful, or an POLARSSL_ERR_MPI_XXX error code.
+ *                 *slen is always updated to reflect the amount
+ *                 of data that has (or would have) been written.

  *
  * \note           Call this function with *slen = 0 to obtain the
  *                 minimum required buffer size in *slen.
  */
  *
  * \note           Call this function with *slen = 0 to obtain the
  *                 minimum required buffer size in *slen.
  */

-int mpi_write_string( mpi *X, int radix, char *s, int *slen );
+int mpi_write_string( const mpi *X, int radix, char *s, int *slen );

 
 /**
  * \brief          Read X from an opened file
 
 /**
  * \brief          Read X from an opened file


@@ -202,7 +206,7 @@ int mpi_read_file( mpi *X, int radix, FILE *fin );
  *
  * \note           Set fout == NULL to print X on the console.
  */
  *
  * \note           Set fout == NULL to print X on the console.
  */

-int mpi_write_file( const char *p, mpi *X, int radix, FILE *fout );
+int mpi_write_file( const char *p, const mpi *X, int radix, FILE *fout );

 
 /**
  * \brief          Import X from unsigned binary data, big endian
 
 /**
  * \brief          Import X from unsigned binary data, big endian


@@ -214,7 +218,7 @@ int mpi_write_file( const char *p, mpi *X, int radix, FILE *fout );
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */

-int mpi_read_binary( mpi *X, unsigned char *buf, int buflen );
+int mpi_read_binary( mpi *X, const unsigned char *buf, int buflen );

 
 /**
  * \brief          Export X into unsigned binary data, big endian
 
 /**
  * \brief          Export X into unsigned binary data, big endian


@@ -226,7 +230,7 @@ int mpi_read_binary( mpi *X, unsigned char *buf, int buflen );
  * \return         0 if successful,
  *                 POLARSSL_ERR_MPI_BUFFER_TOO_SMALL if buf isn't large enough
  */
  * \return         0 if successful,
  *                 POLARSSL_ERR_MPI_BUFFER_TOO_SMALL if buf isn't large enough
  */

-int mpi_write_binary( mpi *X, unsigned char *buf, int buflen );
+int mpi_write_binary( const mpi *X, unsigned char *buf, int buflen );

 
 /**
  * \brief          Left-shift: X <<= count
 
 /**
  * \brief          Left-shift: X <<= count


@@ -260,7 +264,7 @@ int mpi_shift_r( mpi *X, int count );
  *                -1 if |X| is lesser  than |Y| or
  *                 0 if |X| is equal to |Y|
  */
  *                -1 if |X| is lesser  than |Y| or
  *                 0 if |X| is equal to |Y|
  */

-int mpi_cmp_abs( mpi *X, mpi *Y );
+int mpi_cmp_abs( const mpi *X, const mpi *Y );

 
 /**
  * \brief          Compare signed values
 
 /**
  * \brief          Compare signed values


@@ -272,7 +276,7 @@ int mpi_cmp_abs( mpi *X, mpi *Y );
  *                -1 if X is lesser  than Y or
  *                 0 if X is equal to Y
  */
  *                -1 if X is lesser  than Y or
  *                 0 if X is equal to Y
  */

-int mpi_cmp_mpi( mpi *X, mpi *Y );
+int mpi_cmp_mpi( const mpi *X, const mpi *Y );

 
 /**
  * \brief          Compare signed values
 
 /**
  * \brief          Compare signed values


@@ -284,7 +288,7 @@ int mpi_cmp_mpi( mpi *X, mpi *Y );
  *                -1 if X is lesser  than z or
  *                 0 if X is equal to z
  */
  *                -1 if X is lesser  than z or
  *                 0 if X is equal to z
  */

-int mpi_cmp_int( mpi *X, int z );
+int mpi_cmp_int( const mpi *X, int z );

 
 /**
  * \brief          Unsigned addition: X = |A| + |B|
 
 /**
  * \brief          Unsigned addition: X = |A| + |B|


@@ -296,7 +300,7 @@ int mpi_cmp_int( mpi *X, int z );
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */

-int mpi_add_abs( mpi *X, mpi *A, mpi *B );
+int mpi_add_abs( mpi *X, const mpi *A, const mpi *B );

 
 /**
  * \brief          Unsigned substraction: X = |A| - |B|
 
 /**
  * \brief          Unsigned substraction: X = |A| - |B|


@@ -308,7 +312,7 @@ int mpi_add_abs( mpi *X, mpi *A, mpi *B );
  * \return         0 if successful,
  *                 POLARSSL_ERR_MPI_NEGATIVE_VALUE if B is greater than A
  */
  * \return         0 if successful,
  *                 POLARSSL_ERR_MPI_NEGATIVE_VALUE if B is greater than A
  */

-int mpi_sub_abs( mpi *X, mpi *A, mpi *B );
+int mpi_sub_abs( mpi *X, const mpi *A, const mpi *B );

 
 /**
  * \brief          Signed addition: X = A + B
 
 /**
  * \brief          Signed addition: X = A + B


@@ -320,7 +324,7 @@ int mpi_sub_abs( mpi *X, mpi *A, mpi *B );
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */

-int mpi_add_mpi( mpi *X, mpi *A, mpi *B );
+int mpi_add_mpi( mpi *X, const mpi *A, const mpi *B );

 
 /**
  * \brief          Signed substraction: X = A - B
 
 /**
  * \brief          Signed substraction: X = A - B


@@ -332,7 +336,7 @@ int mpi_add_mpi( mpi *X, mpi *A, mpi *B );
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */

-int mpi_sub_mpi( mpi *X, mpi *A, mpi *B );
+int mpi_sub_mpi( mpi *X, const mpi *A, const mpi *B );

 
 /**
  * \brief          Signed addition: X = A + b
 
 /**
  * \brief          Signed addition: X = A + b


@@ -344,7 +348,7 @@ int mpi_sub_mpi( mpi *X, mpi *A, mpi *B );
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */

-int mpi_add_int( mpi *X, mpi *A, int b );
+int mpi_add_int( mpi *X, const mpi *A, int b );

 
 /**
  * \brief          Signed substraction: X = A - b
 
 /**
  * \brief          Signed substraction: X = A - b


@@ -356,7 +360,7 @@ int mpi_add_int( mpi *X, mpi *A, int b );
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */

-int mpi_sub_int( mpi *X, mpi *A, int b );
+int mpi_sub_int( mpi *X, const mpi *A, int b );

 
 /**
  * \brief          Baseline multiplication: X = A * B
 
 /**
  * \brief          Baseline multiplication: X = A * B


@@ -368,7 +372,7 @@ int mpi_sub_int( mpi *X, mpi *A, int b );
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */

-int mpi_mul_mpi( mpi *X, mpi *A, mpi *B );
+int mpi_mul_mpi( mpi *X, const mpi *A, const mpi *B );

 
 /**
  * \brief          Baseline multiplication: X = A * b
 
 /**
  * \brief          Baseline multiplication: X = A * b


@@ -382,7 +386,7 @@ int mpi_mul_mpi( mpi *X, mpi *A, mpi *B );
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */

-int mpi_mul_int( mpi *X, mpi *A, t_int b );
+int mpi_mul_int( mpi *X, const mpi *A, t_int b );

 
 /**
  * \brief          Division by mpi: A = Q * B + R
 
 /**
  * \brief          Division by mpi: A = Q * B + R


@@ -398,7 +402,7 @@ int mpi_mul_int( mpi *X, mpi *A, t_int b );
  *
  * \note           Either Q or R can be NULL.
  */
  *
  * \note           Either Q or R can be NULL.
  */

-int mpi_div_mpi( mpi *Q, mpi *R, mpi *A, mpi *B );
+int mpi_div_mpi( mpi *Q, mpi *R, const mpi *A, const mpi *B );

 
 /**
  * \brief          Division by int: A = Q * b + R
 
 /**
  * \brief          Division by int: A = Q * b + R


@@ -414,7 +418,7 @@ int mpi_div_mpi( mpi *Q, mpi *R, mpi *A, mpi *B );
  *
  * \note           Either Q or R can be NULL.
  */
  *
  * \note           Either Q or R can be NULL.
  */

-int mpi_div_int( mpi *Q, mpi *R, mpi *A, int b );
+int mpi_div_int( mpi *Q, mpi *R, const mpi *A, int b );

 
 /**
  * \brief          Modulo: R = A mod B
 
 /**
  * \brief          Modulo: R = A mod B


@@ -428,12 +432,12 @@ int mpi_div_int( mpi *Q, mpi *R, mpi *A, int b );
  *                 POLARSSL_ERR_MPI_DIVISION_BY_ZERO if B == 0,
  *                 POLARSSL_ERR_MPI_NEGATIVE_VALUE if B < 0
  */
  *                 POLARSSL_ERR_MPI_DIVISION_BY_ZERO if B == 0,
  *                 POLARSSL_ERR_MPI_NEGATIVE_VALUE if B < 0
  */

-int mpi_mod_mpi( mpi *R, mpi *A, mpi *B );
+int mpi_mod_mpi( mpi *R, const mpi *A, const mpi *B );

 
 /**
  * \brief          Modulo: r = A mod b
  *
 
 /**
  * \brief          Modulo: r = A mod b
  *

- * \param a        Destination t_int
+ * \param r        Destination t_int

  * \param A        Left-hand MPI
  * \param b        Integer to divide by
  *
  * \param A        Left-hand MPI
  * \param b        Integer to divide by
  *


@@ -442,7 +446,7 @@ int mpi_mod_mpi( mpi *R, mpi *A, mpi *B );
  *                 POLARSSL_ERR_MPI_DIVISION_BY_ZERO if b == 0,
  *                 POLARSSL_ERR_MPI_NEGATIVE_VALUE if b < 0
  */
  *                 POLARSSL_ERR_MPI_DIVISION_BY_ZERO if b == 0,
  *                 POLARSSL_ERR_MPI_NEGATIVE_VALUE if b < 0
  */

-int mpi_mod_int( t_int *r, mpi *A, int b );
+int mpi_mod_int( t_int *r, const mpi *A, int b );

 
 /**
  * \brief          Sliding-window exponentiation: X = A^E mod N
 
 /**
  * \brief          Sliding-window exponentiation: X = A^E mod N


@@ -461,7 +465,7 @@ int mpi_mod_int( t_int *r, mpi *A, int b );
  *                 multiple calls, which speeds up things a bit. It can
  *                 be set to NULL if the extra performance is unneeded.
  */
  *                 multiple calls, which speeds up things a bit. It can
  *                 be set to NULL if the extra performance is unneeded.
  */

-int mpi_exp_mod( mpi *X, mpi *A, mpi *E, mpi *N, mpi *_RR );
+int mpi_exp_mod( mpi *X, const mpi *A, const mpi *E, const mpi *N, mpi *_RR );

 
 /**
  * \brief          Greatest common divisor: G = gcd(A, B)
 
 /**
  * \brief          Greatest common divisor: G = gcd(A, B)


@@ -473,7 +477,7 @@ int mpi_exp_mod( mpi *X, mpi *A, mpi *E, mpi *N, mpi *_RR );
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */
  * \return         0 if successful,
  *                 1 if memory allocation failed
  */

-int mpi_gcd( mpi *G, mpi *A, mpi *B );
+int mpi_gcd( mpi *G, const mpi *A, const mpi *B );

 
 /**
  * \brief          Modular inverse: X = A^-1 mod N
 
 /**
  * \brief          Modular inverse: X = A^-1 mod N


@@ -487,7 +491,7 @@ int mpi_gcd( mpi *G, mpi *A, mpi *B );
  *                 POLARSSL_ERR_MPI_BAD_INPUT_DATA if N is negative or nil
                    POLARSSL_ERR_MPI_NOT_ACCEPTABLE if A has no inverse mod N
  */
  *                 POLARSSL_ERR_MPI_BAD_INPUT_DATA if N is negative or nil
                    POLARSSL_ERR_MPI_NOT_ACCEPTABLE if A has no inverse mod N
  */

-int mpi_inv_mod( mpi *X, mpi *A, mpi *N );
+int mpi_inv_mod( mpi *X, const mpi *A, const mpi *N );

 
 /**
  * \brief          Miller-Rabin primality test
 
 /**
  * \brief          Miller-Rabin primality test

diff --git a/src/src/pdkim/bn_mul.h b/src/src/pdkim/bn_mul.h
index fcf01cb9cf29d1aa2f1e0b7b24c42a7811e4c920..ce9d83a08dfc27532af92817d65c322e6a188642 100644 (file)
--- a/src/src/pdkim/bn_mul.h
+++ b/src/src/pdkim/bn_mul.h
@@ -1,10 +1,12 @@
 /**
  * \file bn_mul.h
  *
 /**
  * \file bn_mul.h
  *

- *  Copyright (C) 2006-2009, Paul Bakker <polarssl_maintainer at polarssl.org>
- *  All rights reserved.
+ *  Copyright (C) 2006-2010, Brainspark B.V.
+ *
+ *  This file is part of PolarSSL (http://www.polarssl.org)
+ *  Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>

  *
  *

- *  Joined copyright on original XySSL code with: Christophe Devine
+ *  All rights reserved.

  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by

diff --git a/src/src/pdkim/pdkim.c b/src/src/pdkim/pdkim.c
index b0430ea45f9a15ba84790aa75d4948b31e7266c5..59ac39569d091e823adbd881cff18de1edaf6487 100644 (file)
--- a/src/src/pdkim/pdkim.c
+++ b/src/src/pdkim/pdkim.c
@@ -1482,7 +1482,7 @@ DLLEXPORT int pdkim_feed_finish(pdkim_ctx *ctx, pdkim_signature **return_signatu
     if (ctx->mode == PDKIM_MODE_SIGN) {
       rsa_context rsa;
 
     if (ctx->mode == PDKIM_MODE_SIGN) {
       rsa_context rsa;
 

-      rsa_init(&rsa,RSA_PKCS_V15,0,NULL,NULL);
+      rsa_init(&rsa,RSA_PKCS_V15,0);

 
       /* Perform private key operation */
       if (rsa_parse_key(&rsa, (unsigned char *)sig->rsa_privkey,
 
       /* Perform private key operation */
       if (rsa_parse_key(&rsa, (unsigned char *)sig->rsa_privkey,


@@ -1521,7 +1521,7 @@ DLLEXPORT int pdkim_feed_finish(pdkim_ctx *ctx, pdkim_signature **return_signatu
       rsa_context rsa;
       char *dns_txt_name, *dns_txt_reply;
 
       rsa_context rsa;
       char *dns_txt_name, *dns_txt_reply;
 

-      rsa_init(&rsa,RSA_PKCS_V15,0,NULL,NULL);
+      rsa_init(&rsa,RSA_PKCS_V15,0);

 
       dns_txt_name  = malloc(PDKIM_DNS_TXT_MAX_NAMELEN);
       if (dns_txt_name == NULL) return PDKIM_ERR_OOM;
 
       dns_txt_name  = malloc(PDKIM_DNS_TXT_MAX_NAMELEN);
       if (dns_txt_name == NULL) return PDKIM_ERR_OOM;

diff --git a/src/src/pdkim/rsa.c b/src/src/pdkim/rsa.c
index 91524ac9e95da22a39aa909cd13eb43e65397246..ec65c40e84268c58b42b36879e54186c380d5c55 100644 (file)
--- a/src/src/pdkim/rsa.c
+++ b/src/src/pdkim/rsa.c
@@ -1,10 +1,12 @@
 /*
  *  The RSA public-key cryptosystem
  *
 /*
  *  The RSA public-key cryptosystem
  *

- *  Copyright (C) 2006-2009, Paul Bakker <polarssl_maintainer at polarssl.org>
- *  All rights reserved.
+ *  Copyright (C) 2006-2010, Brainspark B.V.
+ *
+ *  This file is part of PolarSSL (http://www.polarssl.org)
+ *  Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>

  *
  *

- *  Joined copyright on original XySSL code with: Christophe Devine
+ *  All rights reserved.

  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by


@@ -37,12 +39,13 @@
 #include <stdio.h>
 
 
 #include <stdio.h>
 
 

+

 /* *************** begin copy from x509parse.c ********************/
 /*
  * ASN.1 DER decoding routines
  */
 static int asn1_get_len( unsigned char **p,
 /* *************** begin copy from x509parse.c ********************/
 /*
  * ASN.1 DER decoding routines
  */
 static int asn1_get_len( unsigned char **p,

-                         unsigned char *end,
+                         const unsigned char *end,

                          int *len )
 {
     if( ( end - *p ) < 1 )
                          int *len )
 {
     if( ( end - *p ) < 1 )


@@ -83,7 +86,7 @@ static int asn1_get_len( unsigned char **p,
 }
 
 static int asn1_get_tag( unsigned char **p,
 }
 
 static int asn1_get_tag( unsigned char **p,

-                         unsigned char *end,
+                         const unsigned char *end,

                          int *len, int tag )
 {
     if( ( end - *p ) < 1 )
                          int *len, int tag )
 {
     if( ( end - *p ) < 1 )


@@ -98,7 +101,7 @@ static int asn1_get_tag( unsigned char **p,
 }
 
 static int asn1_get_int( unsigned char **p,
 }
 
 static int asn1_get_int( unsigned char **p,

-                         unsigned char *end,
+                         const unsigned char *end,

                          int *val )
 {
     int ret, len;
                          int *val )
 {
     int ret, len;


@@ -121,7 +124,7 @@ static int asn1_get_int( unsigned char **p,
 }
 
 static int asn1_get_mpi( unsigned char **p,
 }
 
 static int asn1_get_mpi( unsigned char **p,

-                         unsigned char *end,
+                         const unsigned char *end,

                          mpi *X )
 {
     int ret, len;
                          mpi *X )
 {
     int ret, len;


@@ -139,29 +142,101 @@ static int asn1_get_mpi( unsigned char **p,
 
 
 
 
 
 

+

 /*
  * Initialize an RSA context
  */
 void rsa_init( rsa_context *ctx,
                int padding,
 /*
  * Initialize an RSA context
  */
 void rsa_init( rsa_context *ctx,
                int padding,

-               int hash_id,
-               int (*f_rng)(void *),
-               void *p_rng )
+               int hash_id )

 {
     memset( ctx, 0, sizeof( rsa_context ) );
 
     ctx->padding = padding;
     ctx->hash_id = hash_id;
 {
     memset( ctx, 0, sizeof( rsa_context ) );
 
     ctx->padding = padding;
     ctx->hash_id = hash_id;

+}
+
+#if defined(POLARSSL_GENPRIME)
+
+/*
+ * Generate an RSA keypair
+ */
+int rsa_gen_key( rsa_context *ctx,
+        int (*f_rng)(void *),
+        void *p_rng,
+        int nbits, int exponent )
+{
+    int ret;
+    mpi P1, Q1, H, G;
+
+    if( f_rng == NULL || nbits < 128 || exponent < 3 )
+        return( POLARSSL_ERR_RSA_BAD_INPUT_DATA );
+
+    mpi_init( &P1, &Q1, &H, &G, NULL );
+
+    /*
+     * find primes P and Q with Q < P so that:
+     * GCD( E, (P-1)*(Q-1) ) == 1
+     */
+    MPI_CHK( mpi_lset( &ctx->E, exponent ) );
+
+    do
+    {
+        MPI_CHK( mpi_gen_prime( &ctx->P, ( nbits + 1 ) >> 1, 0, 
+                                f_rng, p_rng ) );
+
+        MPI_CHK( mpi_gen_prime( &ctx->Q, ( nbits + 1 ) >> 1, 0,
+                                f_rng, p_rng ) );
+
+        if( mpi_cmp_mpi( &ctx->P, &ctx->Q ) < 0 )
+            mpi_swap( &ctx->P, &ctx->Q );
+
+        if( mpi_cmp_mpi( &ctx->P, &ctx->Q ) == 0 )
+            continue;

 
 

-    ctx->f_rng = f_rng;
-    ctx->p_rng = p_rng;
+        MPI_CHK( mpi_mul_mpi( &ctx->N, &ctx->P, &ctx->Q ) );
+        if( mpi_msb( &ctx->N ) != nbits )
+            continue;
+
+        MPI_CHK( mpi_sub_int( &P1, &ctx->P, 1 ) );
+        MPI_CHK( mpi_sub_int( &Q1, &ctx->Q, 1 ) );
+        MPI_CHK( mpi_mul_mpi( &H, &P1, &Q1 ) );
+        MPI_CHK( mpi_gcd( &G, &ctx->E, &H  ) );
+    }
+    while( mpi_cmp_int( &G, 1 ) != 0 );
+
+    /*
+     * D  = E^-1 mod ((P-1)*(Q-1))
+     * DP = D mod (P - 1)
+     * DQ = D mod (Q - 1)
+     * QP = Q^-1 mod P
+     */
+    MPI_CHK( mpi_inv_mod( &ctx->D , &ctx->E, &H  ) );
+    MPI_CHK( mpi_mod_mpi( &ctx->DP, &ctx->D, &P1 ) );
+    MPI_CHK( mpi_mod_mpi( &ctx->DQ, &ctx->D, &Q1 ) );
+    MPI_CHK( mpi_inv_mod( &ctx->QP, &ctx->Q, &ctx->P ) );
+
+    ctx->len = ( mpi_msb( &ctx->N ) + 7 ) >> 3;
+
+cleanup:
+
+    mpi_free( &G, &H, &Q1, &P1, NULL );
+
+    if( ret != 0 )
+    {
+        rsa_free( ctx );
+        return( POLARSSL_ERR_RSA_KEY_GEN_FAILED | ret );
+    }
+
+    return( 0 );   

 }
 
 }
 

+#endif

 
 /*
  * Check a public RSA key
  */
 
 /*
  * Check a public RSA key
  */

-int rsa_check_pubkey( rsa_context *ctx )
+int rsa_check_pubkey( const rsa_context *ctx )

 {
     if( !ctx->N.p || !ctx->E.p )
         return( POLARSSL_ERR_RSA_KEY_CHECK_FAILED );
 {
     if( !ctx->N.p || !ctx->E.p )
         return( POLARSSL_ERR_RSA_KEY_CHECK_FAILED );


@@ -184,10 +259,10 @@ int rsa_check_pubkey( rsa_context *ctx )
 /*
  * Check a private RSA key
  */
 /*
  * Check a private RSA key
  */

-int rsa_check_privkey( rsa_context *ctx )
+int rsa_check_privkey( const rsa_context *ctx )

 {
     int ret;
 {
     int ret;

-    mpi PQ, DE, P1, Q1, H, I, G;
+    mpi PQ, DE, P1, Q1, H, I, G, G2, L1, L2;

 
     if( ( ret = rsa_check_pubkey( ctx ) ) != 0 )
         return( ret );
 
     if( ( ret = rsa_check_pubkey( ctx ) ) != 0 )
         return( ret );


@@ -195,27 +270,35 @@ int rsa_check_privkey( rsa_context *ctx )
     if( !ctx->P.p || !ctx->Q.p || !ctx->D.p )
         return( POLARSSL_ERR_RSA_KEY_CHECK_FAILED );
 
     if( !ctx->P.p || !ctx->Q.p || !ctx->D.p )
         return( POLARSSL_ERR_RSA_KEY_CHECK_FAILED );
 

-    mpi_init( &PQ, &DE, &P1, &Q1, &H, &I, &G, NULL );
+    mpi_init( &PQ, &DE, &P1, &Q1, &H, &I, &G, &G2, &L1, &L2, NULL );

 
     MPI_CHK( mpi_mul_mpi( &PQ, &ctx->P, &ctx->Q ) );
     MPI_CHK( mpi_mul_mpi( &DE, &ctx->D, &ctx->E ) );
     MPI_CHK( mpi_sub_int( &P1, &ctx->P, 1 ) );
     MPI_CHK( mpi_sub_int( &Q1, &ctx->Q, 1 ) );
     MPI_CHK( mpi_mul_mpi( &H, &P1, &Q1 ) );
 
     MPI_CHK( mpi_mul_mpi( &PQ, &ctx->P, &ctx->Q ) );
     MPI_CHK( mpi_mul_mpi( &DE, &ctx->D, &ctx->E ) );
     MPI_CHK( mpi_sub_int( &P1, &ctx->P, 1 ) );
     MPI_CHK( mpi_sub_int( &Q1, &ctx->Q, 1 ) );
     MPI_CHK( mpi_mul_mpi( &H, &P1, &Q1 ) );

-    MPI_CHK( mpi_mod_mpi( &I, &DE, &H  ) );

     MPI_CHK( mpi_gcd( &G, &ctx->E, &H  ) );
 
     MPI_CHK( mpi_gcd( &G, &ctx->E, &H  ) );
 

+    MPI_CHK( mpi_gcd( &G2, &P1, &Q1 ) );
+    MPI_CHK( mpi_div_mpi( &L1, &L2, &H, &G2 ) );  
+    MPI_CHK( mpi_mod_mpi( &I, &DE, &L1  ) );
+
+    /*
+     * Check for a valid PKCS1v2 private key
+     */

     if( mpi_cmp_mpi( &PQ, &ctx->N ) == 0 &&
     if( mpi_cmp_mpi( &PQ, &ctx->N ) == 0 &&

+        mpi_cmp_int( &L2, 0 ) == 0 &&

         mpi_cmp_int( &I, 1 ) == 0 &&
         mpi_cmp_int( &G, 1 ) == 0 )
     {
         mpi_cmp_int( &I, 1 ) == 0 &&
         mpi_cmp_int( &G, 1 ) == 0 )
     {

-        mpi_free( &G, &I, &H, &Q1, &P1, &DE, &PQ, NULL );
+        mpi_free( &G, &I, &H, &Q1, &P1, &DE, &PQ, &G2, &L1, &L2, NULL );

         return( 0 );
     }
 
         return( 0 );
     }
 

+    

 cleanup:
 
 cleanup:
 

-    mpi_free( &G, &I, &H, &Q1, &P1, &DE, &PQ, NULL );
+    mpi_free( &G, &I, &H, &Q1, &P1, &DE, &PQ, &G2, &L1, &L2, NULL );

     return( POLARSSL_ERR_RSA_KEY_CHECK_FAILED | ret );
 }
 
     return( POLARSSL_ERR_RSA_KEY_CHECK_FAILED | ret );
 }
 


@@ -223,7 +306,7 @@ cleanup:
  * Do an RSA public key operation
  */
 int rsa_public( rsa_context *ctx,
  * Do an RSA public key operation
  */
 int rsa_public( rsa_context *ctx,

-                unsigned char *input,
+                const unsigned char *input,

                 unsigned char *output )
 {
     int ret, olen;
                 unsigned char *output )
 {
     int ret, olen;


@@ -257,7 +340,7 @@ cleanup:
  * Do an RSA private key operation
  */
 int rsa_private( rsa_context *ctx,
  * Do an RSA private key operation
  */
 int rsa_private( rsa_context *ctx,

-                 unsigned char *input,
+                 const unsigned char *input,

                  unsigned char *output )
 {
     int ret, olen;
                  unsigned char *output )
 {
     int ret, olen;


@@ -316,8 +399,10 @@ cleanup:
  * Add the message padding, then do an RSA operation
  */
 int rsa_pkcs1_encrypt( rsa_context *ctx,
  * Add the message padding, then do an RSA operation
  */
 int rsa_pkcs1_encrypt( rsa_context *ctx,

+                       int (*f_rng)(void *),
+                       void *p_rng,

                        int mode, int  ilen,
                        int mode, int  ilen,

-                       unsigned char *input,
+                       const unsigned char *input,

                        unsigned char *output )
 {
     int nb_pad, olen;
                        unsigned char *output )
 {
     int nb_pad, olen;


@@ -329,7 +414,7 @@ int rsa_pkcs1_encrypt( rsa_context *ctx,
     {
         case RSA_PKCS_V15:
 
     {
         case RSA_PKCS_V15:
 

-            if( ilen < 0 || olen < ilen + 11 )
+            if( ilen < 0 || olen < ilen + 11 || f_rng == NULL )

                 return( POLARSSL_ERR_RSA_BAD_INPUT_DATA );
 
             nb_pad = olen - 3 - ilen;
                 return( POLARSSL_ERR_RSA_BAD_INPUT_DATA );
 
             nb_pad = olen - 3 - ilen;


@@ -339,9 +424,17 @@ int rsa_pkcs1_encrypt( rsa_context *ctx,
 
             while( nb_pad-- > 0 )
             {
 
             while( nb_pad-- > 0 )
             {

+                int rng_dl = 100;
+

                 do {
                 do {

-                    *p = (unsigned char) rand();
-                } while( *p == 0 );
+                    *p = (unsigned char) f_rng( p_rng );
+                } while( *p == 0 && --rng_dl );
+
+                // Check if RNG failed to generate data
+                //
+                if( rng_dl == 0 )
+                    return POLARSSL_ERR_RSA_RNG_FAILED;
+

                 p++;
             }
             *p++ = 0;
                 p++;
             }
             *p++ = 0;


@@ -363,7 +456,7 @@ int rsa_pkcs1_encrypt( rsa_context *ctx,
  */
 int rsa_pkcs1_decrypt( rsa_context *ctx,
                        int mode, int *olen,
  */
 int rsa_pkcs1_decrypt( rsa_context *ctx,
                        int mode, int *olen,

-                       unsigned char *input,
+                       const unsigned char *input,

                        unsigned char *output,
                        int output_max_len)
 {
                        unsigned char *output,
                        int output_max_len)
 {


@@ -422,7 +515,7 @@ int rsa_pkcs1_sign( rsa_context *ctx,
                     int mode,
                     int hash_id,
                     int hashlen,
                     int mode,
                     int hash_id,
                     int hashlen,

-                    unsigned char *hash,
+                    const unsigned char *hash,

                     unsigned char *sig )
 {
     int nb_pad, olen;
                     unsigned char *sig )
 {
     int nb_pad, olen;


@@ -548,7 +641,7 @@ int rsa_pkcs1_verify( rsa_context *ctx,
                       int mode,
                       int hash_id,
                       int hashlen,
                       int mode,
                       int hash_id,
                       int hashlen,

-                      unsigned char *hash,
+                      const unsigned char *hash,

                       unsigned char *sig )
 {
     int ret, len, siglen;
                       unsigned char *sig )
 {
     int ret, len, siglen;


@@ -658,6 +751,8 @@ void rsa_free( rsa_context *ctx )
               &ctx->E,  &ctx->N,  NULL );
 }
 
               &ctx->E,  &ctx->N,  NULL );
 }
 

+
+/* PDKIM code (not copied from polarssl) */

 /*
  * Parse a public RSA key
 
 /*
  * Parse a public RSA key
 

diff --git a/src/src/pdkim/rsa.h b/src/src/pdkim/rsa.h
index 6c709fca35c29e2fe85be7c129a3da4509a70b3f..8db06cd70295032c39734de9e48babcddb6c0c9b 100644 (file)
--- a/src/src/pdkim/rsa.h
+++ b/src/src/pdkim/rsa.h
@@ -1,10 +1,12 @@
 /**
  * \file rsa.h
  *
 /**
  * \file rsa.h
  *

- *  Copyright (C) 2006-2009, Paul Bakker <polarssl_maintainer at polarssl.org>
- *  All rights reserved.
+ *  Copyright (C) 2006-2010, Brainspark B.V.
+ *
+ *  This file is part of PolarSSL (http://www.polarssl.org)
+ *  Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>

  *
  *

- *  Joined copyright on original XySSL code with: Christophe Devine
+ *  All rights reserved.

  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by


@@ -39,6 +41,7 @@
 #define POLARSSL_ERR_RSA_PRIVATE_FAILED                    -0x0450
 #define POLARSSL_ERR_RSA_VERIFY_FAILED                     -0x0460
 #define POLARSSL_ERR_RSA_OUTPUT_TOO_LARGE                  -0x0470
 #define POLARSSL_ERR_RSA_PRIVATE_FAILED                    -0x0450
 #define POLARSSL_ERR_RSA_VERIFY_FAILED                     -0x0460
 #define POLARSSL_ERR_RSA_OUTPUT_TOO_LARGE                  -0x0470

+#define POLARSSL_ERR_RSA_RNG_FAILED                        -0x0480

 
 /* *************** begin copy from x509.h  ************************/
 /*
 
 /* *************** begin copy from x509.h  ************************/
 /*


@@ -98,12 +101,12 @@
 #define ASN1_T61_STRING              0x14
 #define ASN1_IA5_STRING              0x16
 #define ASN1_UTC_TIME                0x17
 #define ASN1_T61_STRING              0x14
 #define ASN1_IA5_STRING              0x16
 #define ASN1_UTC_TIME                0x17

+#define ASN1_GENERALIZED_TIME        0x18

 #define ASN1_UNIVERSAL_STRING        0x1C
 #define ASN1_BMP_STRING              0x1E
 #define ASN1_PRIMITIVE               0x00
 #define ASN1_CONSTRUCTED             0x20
 #define ASN1_CONTEXT_SPECIFIC        0x80
 #define ASN1_UNIVERSAL_STRING        0x1C
 #define ASN1_BMP_STRING              0x1E
 #define ASN1_PRIMITIVE               0x00
 #define ASN1_CONSTRUCTED             0x20
 #define ASN1_CONTEXT_SPECIFIC        0x80

-

 /* ***************   end copy from x509.h  ************************/
 
 /*
 /* ***************   end copy from x509.h  ************************/
 
 /*


@@ -210,8 +213,6 @@ typedef struct
 
     int padding;                /*!<  1.5 or OAEP/PSS   */
     int hash_id;                /*!<  hash identifier   */
 
     int padding;                /*!<  1.5 or OAEP/PSS   */
     int hash_id;                /*!<  hash identifier   */

-    int (*f_rng)(void *);       /*!<  RNG function      */
-    void *p_rng;                /*!<  RNG parameter     */

 }
 rsa_context;
 
 }
 rsa_context;
 


@@ -225,34 +226,35 @@ extern "C" {
  * \param ctx      RSA context to be initialized
  * \param padding  RSA_PKCS_V15 or RSA_PKCS_V21
  * \param hash_id  RSA_PKCS_V21 hash identifier
  * \param ctx      RSA context to be initialized
  * \param padding  RSA_PKCS_V15 or RSA_PKCS_V21
  * \param hash_id  RSA_PKCS_V21 hash identifier

- * \param f_rng    RNG function
- * \param p_rng    RNG parameter

  *
  * \note           The hash_id parameter is actually ignored
  *                 when using RSA_PKCS_V15 padding.
  *
  *
  * \note           The hash_id parameter is actually ignored
  *                 when using RSA_PKCS_V15 padding.
  *

- * \note           Currently (xyssl-0.8), RSA_PKCS_V21 padding
+ * \note           Currently, RSA_PKCS_V21 padding

  *                 is not supported.
  */
 void rsa_init( rsa_context *ctx,
                int padding,
  *                 is not supported.
  */
 void rsa_init( rsa_context *ctx,
                int padding,

-               int hash_id,
-               int (*f_rng)(void *),
-               void *p_rng );
+               int hash_id);

 
 /**
  * \brief          Generate an RSA keypair
  *
  * \param ctx      RSA context that will hold the key
 
 /**
  * \brief          Generate an RSA keypair
  *
  * \param ctx      RSA context that will hold the key

+ * \param f_rng    RNG function
+ * \param p_rng    RNG parameter

  * \param nbits    size of the public key in bits
  * \param exponent public exponent (e.g., 65537)
  *
  * \note           rsa_init() must be called beforehand to setup
  * \param nbits    size of the public key in bits
  * \param exponent public exponent (e.g., 65537)
  *
  * \note           rsa_init() must be called beforehand to setup

- *                 the RSA context (especially f_rng and p_rng).
+ *                 the RSA context.

  *
  * \return         0 if successful, or an POLARSSL_ERR_RSA_XXX error code
  */
  *
  * \return         0 if successful, or an POLARSSL_ERR_RSA_XXX error code
  */

-int rsa_gen_key( rsa_context *ctx, int nbits, int exponent );
+int rsa_gen_key( rsa_context *ctx,
+                 int (*f_rng)(void *),
+                 void *p_rng,
+                 int nbits, int exponent );

 
 /**
  * \brief          Check a public RSA key
 
 /**
  * \brief          Check a public RSA key


@@ -261,7 +263,7 @@ int rsa_gen_key( rsa_context *ctx, int nbits, int exponent );
  *
  * \return         0 if successful, or an POLARSSL_ERR_RSA_XXX error code
  */
  *
  * \return         0 if successful, or an POLARSSL_ERR_RSA_XXX error code
  */

-int rsa_check_pubkey( rsa_context *ctx );
+int rsa_check_pubkey( const rsa_context *ctx );

 
 /**
  * \brief          Check a private RSA key
 
 /**
  * \brief          Check a private RSA key


@@ -270,7 +272,7 @@ int rsa_check_pubkey( rsa_context *ctx );
  *
  * \return         0 if successful, or an POLARSSL_ERR_RSA_XXX error code
  */
  *
  * \return         0 if successful, or an POLARSSL_ERR_RSA_XXX error code
  */

-int rsa_check_privkey( rsa_context *ctx );
+int rsa_check_privkey( const rsa_context *ctx );

 
 /**
  * \brief          Do an RSA public key operation
 
 /**
  * \brief          Do an RSA public key operation


@@ -289,7 +291,7 @@ int rsa_check_privkey( rsa_context *ctx );
  *                 enough (eg. 128 bytes if RSA-1024 is used).
  */
 int rsa_public( rsa_context *ctx,
  *                 enough (eg. 128 bytes if RSA-1024 is used).
  */
 int rsa_public( rsa_context *ctx,

-                unsigned char *input,
+                const unsigned char *input,

                 unsigned char *output );
 
 /**
                 unsigned char *output );
 
 /**


@@ -305,13 +307,15 @@ int rsa_public( rsa_context *ctx,
  *                 enough (eg. 128 bytes if RSA-1024 is used).
  */
 int rsa_private( rsa_context *ctx,
  *                 enough (eg. 128 bytes if RSA-1024 is used).
  */
 int rsa_private( rsa_context *ctx,

-                 unsigned char *input,
+                 const unsigned char *input,

                  unsigned char *output );
 
 /**
  * \brief          Add the message padding, then do an RSA operation
  *
  * \param ctx      RSA context
                  unsigned char *output );
 
 /**
  * \brief          Add the message padding, then do an RSA operation
  *
  * \param ctx      RSA context

+ * \param f_rng    RNG function
+ * \param p_rng    RNG parameter

  * \param mode     RSA_PUBLIC or RSA_PRIVATE
  * \param ilen     contains the plaintext length
  * \param input    buffer holding the data to be encrypted
  * \param mode     RSA_PUBLIC or RSA_PRIVATE
  * \param ilen     contains the plaintext length
  * \param input    buffer holding the data to be encrypted


@@ -323,8 +327,10 @@ int rsa_private( rsa_context *ctx,
  *                 of ctx->N (eg. 128 bytes if RSA-1024 is used).
  */
 int rsa_pkcs1_encrypt( rsa_context *ctx,
  *                 of ctx->N (eg. 128 bytes if RSA-1024 is used).
  */
 int rsa_pkcs1_encrypt( rsa_context *ctx,

+                       int (*f_rng)(void *),
+                       void *p_rng,

                        int mode, int  ilen,
                        int mode, int  ilen,

-                       unsigned char *input,
+                       const unsigned char *input,

                        unsigned char *output );
 
 /**
                        unsigned char *output );
 
 /**


@@ -345,7 +351,7 @@ int rsa_pkcs1_encrypt( rsa_context *ctx,
  */
 int rsa_pkcs1_decrypt( rsa_context *ctx,
                        int mode, int *olen,
  */
 int rsa_pkcs1_decrypt( rsa_context *ctx,
                        int mode, int *olen,

-                       unsigned char *input,
+                       const unsigned char *input,

                        unsigned char *output,
                        int output_max_len );
 
                        unsigned char *output,
                        int output_max_len );
 


@@ -369,7 +375,7 @@ int rsa_pkcs1_sign( rsa_context *ctx,
                     int mode,
                     int hash_id,
                     int hashlen,
                     int mode,
                     int hash_id,
                     int hashlen,

-                    unsigned char *hash,
+                    const unsigned char *hash,

                     unsigned char *sig );
 
 /**
                     unsigned char *sig );
 
 /**


@@ -377,7 +383,7 @@ int rsa_pkcs1_sign( rsa_context *ctx,
  *
  * \param ctx      points to an RSA public key
  * \param mode     RSA_PUBLIC or RSA_PRIVATE
  *
  * \param ctx      points to an RSA public key
  * \param mode     RSA_PUBLIC or RSA_PRIVATE

- * \param hash_id  SIG_RSA_RAW, RSA_MD{2,4,5} or RSA_SHA{1,256}
+ * \param hash_id  SIG_RSA_RAW, SIG_RSA_MD{2,4,5} or SIG_RSA_SHA{1,224,256,384,512}

  * \param hashlen  message digest length (for SIG_RSA_RAW only)
  * \param hash     buffer holding the message digest
  * \param sig      buffer holding the ciphertext
  * \param hashlen  message digest length (for SIG_RSA_RAW only)
  * \param hash     buffer holding the message digest
  * \param sig      buffer holding the ciphertext


@@ -392,7 +398,7 @@ int rsa_pkcs1_verify( rsa_context *ctx,
                       int mode,
                       int hash_id,
                       int hashlen,
                       int mode,
                       int hash_id,
                       int hashlen,

-                      unsigned char *hash,
+                      const unsigned char *hash,

                       unsigned char *sig );
 
 /**
                       unsigned char *sig );
 
 /**


@@ -402,11 +408,12 @@ int rsa_pkcs1_verify( rsa_context *ctx,
  */
 void rsa_free( rsa_context *ctx );
 
  */
 void rsa_free( rsa_context *ctx );
 

+/* PDKIM declarations (not part of polarssl) */

 int rsa_parse_public_key( rsa_context *rsa, unsigned char *buf, int buflen );
 int rsa_parse_public_key( rsa_context *rsa, unsigned char *buf, int buflen );

-

 int rsa_parse_key( rsa_context *rsa, unsigned char *buf, int buflen,
                                      unsigned char *pwd, int pwdlen );
 
 int rsa_parse_key( rsa_context *rsa, unsigned char *buf, int buflen,
                                      unsigned char *pwd, int pwdlen );
 

+

 #ifdef __cplusplus
 }
 #endif
 #ifdef __cplusplus
 }
 #endif

diff --git a/src/src/pdkim/sha1.c b/src/src/pdkim/sha1.c
index 8cb9d00d75ba560905ec934969afb071833b286e..4a64dafb0be368136f5b8b572eb0fe9b2357e39c 100644 (file)
--- a/src/src/pdkim/sha1.c
+++ b/src/src/pdkim/sha1.c
@@ -1,10 +1,12 @@
 /*
  *  FIPS-180-1 compliant SHA-1 implementation
  *
 /*
  *  FIPS-180-1 compliant SHA-1 implementation
  *

- *  Copyright (C) 2006-2009, Paul Bakker <polarssl_maintainer at polarssl.org>
- *  All rights reserved.
+ *  Copyright (C) 2006-2010, Brainspark B.V.
+ *
+ *  This file is part of PolarSSL (http://www.polarssl.org)
+ *  Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>

  *
  *

- *  Joined copyright on original XySSL code with: Christophe Devine
+ *  All rights reserved.

  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by


@@ -71,7 +73,7 @@ void sha1_starts( sha1_context *ctx )
     ctx->state[4] = 0xC3D2E1F0;
 }
 
     ctx->state[4] = 0xC3D2E1F0;
 }
 

-static void sha1_process( sha1_context *ctx, unsigned char data[64] )
+static void sha1_process( sha1_context *ctx, const unsigned char data[64] )

 {
     unsigned long temp, W[16], A, B, C, D, E;
 
 {
     unsigned long temp, W[16], A, B, C, D, E;
 


@@ -230,7 +232,7 @@ static void sha1_process( sha1_context *ctx, unsigned char data[64] )
 /*
  * SHA-1 process buffer
  */
 /*
  * SHA-1 process buffer
  */

-void sha1_update( sha1_context *ctx, unsigned char *input, int ilen )
+void sha1_update( sha1_context *ctx, const unsigned char *input, int ilen )

 {
     int fill;
     unsigned long left;
 {
     int fill;
     unsigned long left;


@@ -311,7 +313,7 @@ void sha1_finish( sha1_context *ctx, unsigned char output[20] )
 /*
  * output = SHA-1( input buffer )
  */
 /*
  * output = SHA-1( input buffer )
  */

-void sha1( unsigned char *input, int ilen, unsigned char output[20] )
+void sha1( const unsigned char *input, int ilen, unsigned char output[20] )

 {
     sha1_context ctx;
 
 {
     sha1_context ctx;
 


@@ -325,7 +327,7 @@ void sha1( unsigned char *input, int ilen, unsigned char output[20] )
 /*
  * output = SHA-1( file contents )
  */
 /*
  * output = SHA-1( file contents )
  */

-int sha1_file( char *path, unsigned char output[20] )
+int sha1_file( const char *path, unsigned char output[20] )

 {
     FILE *f;
     size_t n;
 {
     FILE *f;
     size_t n;


@@ -357,7 +359,7 @@ int sha1_file( char *path, unsigned char output[20] )
 /*
  * SHA-1 HMAC context setup
  */
 /*
  * SHA-1 HMAC context setup
  */

-void sha1_hmac_starts( sha1_context *ctx, unsigned char *key, int keylen )
+void sha1_hmac_starts( sha1_context *ctx, const unsigned char *key, int keylen )

 {
     int i;
     unsigned char sum[20];
 {
     int i;
     unsigned char sum[20];


@@ -387,7 +389,7 @@ void sha1_hmac_starts( sha1_context *ctx, unsigned char *key, int keylen )
 /*
  * SHA-1 HMAC process buffer
  */
 /*
  * SHA-1 HMAC process buffer
  */

-void sha1_hmac_update( sha1_context *ctx, unsigned char *input, int ilen )
+void sha1_hmac_update( sha1_context *ctx, const unsigned char *input, int ilen )

 {
     sha1_update( ctx, input, ilen );
 }
 {
     sha1_update( ctx, input, ilen );
 }


@@ -408,11 +410,20 @@ void sha1_hmac_finish( sha1_context *ctx, unsigned char output[20] )
     memset( tmpbuf, 0, sizeof( tmpbuf ) );
 }
 
     memset( tmpbuf, 0, sizeof( tmpbuf ) );
 }
 

+/*
+ * SHA1 HMAC context reset
+ */
+void sha1_hmac_reset( sha1_context *ctx )
+{
+    sha1_starts( ctx );
+    sha1_update( ctx, ctx->ipad, 64 );
+}
+

 /*
  * output = HMAC-SHA-1( hmac key, input buffer )
  */
 /*
  * output = HMAC-SHA-1( hmac key, input buffer )
  */

-void sha1_hmac( unsigned char *key, int keylen,
-                unsigned char *input, int ilen,
+void sha1_hmac( const unsigned char *key, int keylen,
+                const unsigned char *input, int ilen,

                 unsigned char output[20] )
 {
     sha1_context ctx;
                 unsigned char output[20] )
 {
     sha1_context ctx;

diff --git a/src/src/pdkim/sha1.h b/src/src/pdkim/sha1.h
index 677e5418f37f3afbcce48732c283687c5cc0ec0b..b13afd3a19a187d09877c737b4fd41fe10f357d4 100644 (file)
--- a/src/src/pdkim/sha1.h
+++ b/src/src/pdkim/sha1.h
@@ -1,10 +1,12 @@
 /**
  * \file sha1.h
  *
 /**
  * \file sha1.h
  *

- *  Copyright (C) 2006-2009, Paul Bakker <polarssl_maintainer at polarssl.org>
- *  All rights reserved.
+ *  Copyright (C) 2006-2010, Brainspark B.V.
+ *
+ *  This file is part of PolarSSL (http://www.polarssl.org)
+ *  Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>

  *
  *

- *  Joined copyright on original XySSL code with: Christophe Devine
+ *  All rights reserved.

  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by


@@ -29,7 +31,6 @@
 /**
  * \brief          SHA-1 context structure
  */
 /**
  * \brief          SHA-1 context structure
  */

-

 #ifndef HAVE_SHA1_CONTEXT
 #define HAVE_SHA1_CONTEXT
 typedef struct sha1_context sha1_context;
 #ifndef HAVE_SHA1_CONTEXT
 #define HAVE_SHA1_CONTEXT
 typedef struct sha1_context sha1_context;


@@ -45,7 +46,6 @@ struct sha1_context
     unsigned char opad[64];     /*!< HMAC: outer padding        */
 };
 
     unsigned char opad[64];     /*!< HMAC: outer padding        */
 };
 

-

 #ifdef __cplusplus
 extern "C" {
 #endif
 #ifdef __cplusplus
 extern "C" {
 #endif


@@ -64,7 +64,7 @@ void sha1_starts( sha1_context *ctx );
  * \param input    buffer holding the  data
  * \param ilen     length of the input data
  */
  * \param input    buffer holding the  data
  * \param ilen     length of the input data
  */

-void sha1_update( sha1_context *ctx, unsigned char *input, int ilen );
+void sha1_update( sha1_context *ctx, const unsigned char *input, int ilen );

 
 /**
  * \brief          SHA-1 final digest
 
 /**
  * \brief          SHA-1 final digest


@@ -81,7 +81,7 @@ void sha1_finish( sha1_context *ctx, unsigned char output[20] );
  * \param ilen     length of the input data
  * \param output   SHA-1 checksum result
  */
  * \param ilen     length of the input data
  * \param output   SHA-1 checksum result
  */

-void sha1( unsigned char *input, int ilen, unsigned char output[20] );
+void sha1( const unsigned char *input, int ilen, unsigned char output[20] );

 
 /**
  * \brief          Output = SHA-1( file contents )
 
 /**
  * \brief          Output = SHA-1( file contents )


@@ -92,7 +92,7 @@ void sha1( unsigned char *input, int ilen, unsigned char output[20] );
  * \return         0 if successful, 1 if fopen failed,
  *                 or 2 if fread failed
  */
  * \return         0 if successful, 1 if fopen failed,
  *                 or 2 if fread failed
  */

-int sha1_file( char *path, unsigned char output[20] );
+int sha1_file( const char *path, unsigned char output[20] );

 
 /**
  * \brief          SHA-1 HMAC context setup
 
 /**
  * \brief          SHA-1 HMAC context setup


@@ -101,7 +101,7 @@ int sha1_file( char *path, unsigned char output[20] );
  * \param key      HMAC secret key
  * \param keylen   length of the HMAC key
  */
  * \param key      HMAC secret key
  * \param keylen   length of the HMAC key
  */

-void sha1_hmac_starts( sha1_context *ctx, unsigned char *key, int keylen );
+void sha1_hmac_starts( sha1_context *ctx, const unsigned char *key, int keylen );

 
 /**
  * \brief          SHA-1 HMAC process buffer
 
 /**
  * \brief          SHA-1 HMAC process buffer


@@ -110,7 +110,7 @@ void sha1_hmac_starts( sha1_context *ctx, unsigned char *key, int keylen );
  * \param input    buffer holding the  data
  * \param ilen     length of the input data
  */
  * \param input    buffer holding the  data
  * \param ilen     length of the input data
  */

-void sha1_hmac_update( sha1_context *ctx, unsigned char *input, int ilen );
+void sha1_hmac_update( sha1_context *ctx, const unsigned char *input, int ilen );

 
 /**
  * \brief          SHA-1 HMAC final digest
 
 /**
  * \brief          SHA-1 HMAC final digest


@@ -120,6 +120,13 @@ void sha1_hmac_update( sha1_context *ctx, unsigned char *input, int ilen );
  */
 void sha1_hmac_finish( sha1_context *ctx, unsigned char output[20] );
 
  */
 void sha1_hmac_finish( sha1_context *ctx, unsigned char output[20] );
 

+/**
+ * \brief          SHA-1 HMAC context reset
+ *
+ * \param ctx      HMAC context to be reset
+ */
+void sha1_hmac_reset( sha1_context *ctx );
+

 /**
  * \brief          Output = HMAC-SHA-1( hmac key, input buffer )
  *
 /**
  * \brief          Output = HMAC-SHA-1( hmac key, input buffer )
  *


@@ -129,8 +136,8 @@ void sha1_hmac_finish( sha1_context *ctx, unsigned char output[20] );
  * \param ilen     length of the input data
  * \param output   HMAC-SHA-1 result
  */
  * \param ilen     length of the input data
  * \param output   HMAC-SHA-1 result
  */

-void sha1_hmac( unsigned char *key, int keylen,
-                unsigned char *input, int ilen,
+void sha1_hmac( const unsigned char *key, int keylen,
+                const unsigned char *input, int ilen,

                 unsigned char output[20] );
 
 #ifdef __cplusplus
                 unsigned char output[20] );
 
 #ifdef __cplusplus

diff --git a/src/src/pdkim/sha2.c b/src/src/pdkim/sha2.c
index 6f72c2195ace2e07065c0652083eb66ae0b800a5..ed18efabc9fe0c49b22753ea718c4a4d8a6b6fa1 100644 (file)
--- a/src/src/pdkim/sha2.c
+++ b/src/src/pdkim/sha2.c
@@ -1,10 +1,12 @@
 /*
  *  FIPS-180-2 compliant SHA-256 implementation
  *
 /*
  *  FIPS-180-2 compliant SHA-256 implementation
  *

- *  Copyright (C) 2006-2009, Paul Bakker <polarssl_maintainer at polarssl.org>
- *  All rights reserved.
+ *  Copyright (C) 2006-2010, Brainspark B.V.
+ *
+ *  This file is part of PolarSSL (http://www.polarssl.org)
+ *  Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>

  *
  *

- *  Joined copyright on original XySSL code with: Christophe Devine
+ *  All rights reserved.

  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by


@@ -92,7 +94,7 @@ void sha2_starts( sha2_context *ctx, int is224 )
     ctx->is224 = is224;
 }
 
     ctx->is224 = is224;
 }
 

-static void sha2_process( sha2_context *ctx, unsigned char data[64] )
+static void sha2_process( sha2_context *ctx, const unsigned char data[64] )

 {
     unsigned long temp1, temp2, W[64];
     unsigned long A, B, C, D, E, F, G, H;
 {
     unsigned long temp1, temp2, W[64];
     unsigned long A, B, C, D, E, F, G, H;


@@ -226,7 +228,7 @@ static void sha2_process( sha2_context *ctx, unsigned char data[64] )
 /*
  * SHA-256 process buffer
  */
 /*
  * SHA-256 process buffer
  */

-void sha2_update( sha2_context *ctx, unsigned char *input, int ilen )
+void sha2_update( sha2_context *ctx, const unsigned char *input, int ilen )

 {
     int fill;
     unsigned long left;
 {
     int fill;
     unsigned long left;


@@ -312,7 +314,7 @@ void sha2_finish( sha2_context *ctx, unsigned char output[32] )
 /*
  * output = SHA-256( input buffer )
  */
 /*
  * output = SHA-256( input buffer )
  */

-void sha2( unsigned char *input, int ilen,
+void sha2( const unsigned char *input, int ilen,

            unsigned char output[32], int is224 )
 {
     sha2_context ctx;
            unsigned char output[32], int is224 )
 {
     sha2_context ctx;


@@ -327,7 +329,7 @@ void sha2( unsigned char *input, int ilen,
 /*
  * output = SHA-256( file contents )
  */
 /*
  * output = SHA-256( file contents )
  */

-int sha2_file( char *path, unsigned char output[32], int is224 )
+int sha2_file( const char *path, unsigned char output[32], int is224 )

 {
     FILE *f;
     size_t n;
 {
     FILE *f;
     size_t n;


@@ -359,7 +361,7 @@ int sha2_file( char *path, unsigned char output[32], int is224 )
 /*
  * SHA-256 HMAC context setup
  */
 /*
  * SHA-256 HMAC context setup
  */

-void sha2_hmac_starts( sha2_context *ctx, unsigned char *key, int keylen,
+void sha2_hmac_starts( sha2_context *ctx, const unsigned char *key, int keylen,

                        int is224 )
 {
     int i;
                        int is224 )
 {
     int i;


@@ -390,7 +392,7 @@ void sha2_hmac_starts( sha2_context *ctx, unsigned char *key, int keylen,
 /*
  * SHA-256 HMAC process buffer
  */
 /*
  * SHA-256 HMAC process buffer
  */

-void sha2_hmac_update( sha2_context *ctx, unsigned char *input, int ilen )
+void sha2_hmac_update( sha2_context *ctx, const unsigned char *input, int ilen )

 {
     sha2_update( ctx, input, ilen );
 }
 {
     sha2_update( ctx, input, ilen );
 }


@@ -415,11 +417,20 @@ void sha2_hmac_finish( sha2_context *ctx, unsigned char output[32] )
     memset( tmpbuf, 0, sizeof( tmpbuf ) );
 }
 
     memset( tmpbuf, 0, sizeof( tmpbuf ) );
 }
 

+/*
+ * SHA-256 HMAC context reset
+ */
+void sha2_hmac_reset( sha2_context *ctx )
+{
+    sha2_starts( ctx, ctx->is224 );
+    sha2_update( ctx, ctx->ipad, 64 );
+}
+

 /*
  * output = HMAC-SHA-256( hmac key, input buffer )
  */
 /*
  * output = HMAC-SHA-256( hmac key, input buffer )
  */

-void sha2_hmac( unsigned char *key, int keylen,
-                unsigned char *input, int ilen,
+void sha2_hmac( const unsigned char *key, int keylen,
+                const unsigned char *input, int ilen,

                 unsigned char output[32], int is224 )
 {
     sha2_context ctx;
                 unsigned char output[32], int is224 )
 {
     sha2_context ctx;

diff --git a/src/src/pdkim/sha2.h b/src/src/pdkim/sha2.h
index 09405f10dfada4c729f44827d1397cb5b542231f..3848a2fd66d06e9174e1e100f212cd6ff0e64538 100644 (file)
--- a/src/src/pdkim/sha2.h
+++ b/src/src/pdkim/sha2.h
@@ -1,10 +1,12 @@
 /**
  * \file sha2.h
  *
 /**
  * \file sha2.h
  *

- *  Copyright (C) 2006-2009, Paul Bakker <polarssl_maintainer at polarssl.org>
- *  All rights reserved.
+ *  Copyright (C) 2006-2010, Brainspark B.V.
+ *
+ *  This file is part of PolarSSL (http://www.polarssl.org)
+ *  Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>

  *
  *

- *  Joined copyright on original XySSL code with: Christophe Devine
+ *  All rights reserved.

  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by


@@ -64,7 +66,7 @@ void sha2_starts( sha2_context *ctx, int is224 );
  * \param input    buffer holding the  data
  * \param ilen     length of the input data
  */
  * \param input    buffer holding the  data
  * \param ilen     length of the input data
  */

-void sha2_update( sha2_context *ctx, unsigned char *input, int ilen );
+void sha2_update( sha2_context *ctx, const unsigned char *input, int ilen );

 
 /**
  * \brief          SHA-256 final digest
 
 /**
  * \brief          SHA-256 final digest


@@ -82,7 +84,7 @@ void sha2_finish( sha2_context *ctx, unsigned char output[32] );
  * \param output   SHA-224/256 checksum result
  * \param is224    0 = use SHA256, 1 = use SHA224
  */
  * \param output   SHA-224/256 checksum result
  * \param is224    0 = use SHA256, 1 = use SHA224
  */

-void sha2( unsigned char *input, int ilen,
+void sha2( const unsigned char *input, int ilen,

            unsigned char output[32], int is224 );
 
 /**
            unsigned char output[32], int is224 );
 
 /**


@@ -95,7 +97,7 @@ void sha2( unsigned char *input, int ilen,
  * \return         0 if successful, 1 if fopen failed,
  *                 or 2 if fread failed
  */
  * \return         0 if successful, 1 if fopen failed,
  *                 or 2 if fread failed
  */

-int sha2_file( char *path, unsigned char output[32], int is224 );
+int sha2_file( const char *path, unsigned char output[32], int is224 );

 
 /**
  * \brief          SHA-256 HMAC context setup
 
 /**
  * \brief          SHA-256 HMAC context setup


@@ -105,7 +107,7 @@ int sha2_file( char *path, unsigned char output[32], int is224 );
  * \param keylen   length of the HMAC key
  * \param is224    0 = use SHA256, 1 = use SHA224
  */
  * \param keylen   length of the HMAC key
  * \param is224    0 = use SHA256, 1 = use SHA224
  */

-void sha2_hmac_starts( sha2_context *ctx, unsigned char *key, int keylen,
+void sha2_hmac_starts( sha2_context *ctx, const unsigned char *key, int keylen,

                        int is224 );
 
 /**
                        int is224 );
 
 /**


@@ -115,7 +117,7 @@ void sha2_hmac_starts( sha2_context *ctx, unsigned char *key, int keylen,
  * \param input    buffer holding the  data
  * \param ilen     length of the input data
  */
  * \param input    buffer holding the  data
  * \param ilen     length of the input data
  */

-void sha2_hmac_update( sha2_context *ctx, unsigned char *input, int ilen );
+void sha2_hmac_update( sha2_context *ctx, const unsigned char *input, int ilen );

 
 /**
  * \brief          SHA-256 HMAC final digest
 
 /**
  * \brief          SHA-256 HMAC final digest


@@ -125,6 +127,13 @@ void sha2_hmac_update( sha2_context *ctx, unsigned char *input, int ilen );
  */
 void sha2_hmac_finish( sha2_context *ctx, unsigned char output[32] );
 
  */
 void sha2_hmac_finish( sha2_context *ctx, unsigned char output[32] );
 

+/**
+ * \brief          SHA-256 HMAC context reset
+ *
+ * \param ctx      HMAC context to be reset
+ */
+void sha2_hmac_reset( sha2_context *ctx );
+

 /**
  * \brief          Output = HMAC-SHA-256( hmac key, input buffer )
  *
 /**
  * \brief          Output = HMAC-SHA-256( hmac key, input buffer )
  *


@@ -135,8 +144,8 @@ void sha2_hmac_finish( sha2_context *ctx, unsigned char output[32] );
  * \param output   HMAC-SHA-224/256 result
  * \param is224    0 = use SHA256, 1 = use SHA224
  */
  * \param output   HMAC-SHA-224/256 result
  * \param is224    0 = use SHA256, 1 = use SHA224
  */

-void sha2_hmac( unsigned char *key, int keylen,
-                unsigned char *input, int ilen,
+void sha2_hmac( const unsigned char *key, int keylen,
+                const unsigned char *input, int ilen,

                 unsigned char output[32], int is224 );
 
 #ifdef __cplusplus
                 unsigned char output[32], int is224 );
 
 #ifdef __cplusplus