Commit | Line | Data |
---|---|---|
56276539 SS |
1 | /* apps/ec.c */ |
2 | /* | |
3 | * Written by Nils Larsch for the OpenSSL project. | |
4 | */ | |
5 | /* ==================================================================== | |
6 | * Copyright (c) 1998-2005 The OpenSSL Project. All rights reserved. | |
7 | * | |
8 | * Redistribution and use in source and binary forms, with or without | |
9 | * modification, are permitted provided that the following conditions | |
10 | * are met: | |
11 | * | |
12 | * 1. Redistributions of source code must retain the above copyright | |
13 | * notice, this list of conditions and the following disclaimer. | |
14 | * | |
15 | * 2. Redistributions in binary form must reproduce the above copyright | |
16 | * notice, this list of conditions and the following disclaimer in | |
17 | * the documentation and/or other materials provided with the | |
18 | * distribution. | |
19 | * | |
20 | * 3. All advertising materials mentioning features or use of this | |
21 | * software must display the following acknowledgment: | |
22 | * "This product includes software developed by the OpenSSL Project | |
23 | * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" | |
24 | * | |
25 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | |
26 | * endorse or promote products derived from this software without | |
27 | * prior written permission. For written permission, please contact | |
28 | * openssl-core@openssl.org. | |
29 | * | |
30 | * 5. Products derived from this software may not be called "OpenSSL" | |
31 | * nor may "OpenSSL" appear in their names without prior written | |
32 | * permission of the OpenSSL Project. | |
33 | * | |
34 | * 6. Redistributions of any form whatsoever must retain the following | |
35 | * acknowledgment: | |
36 | * "This product includes software developed by the OpenSSL Project | |
37 | * for use in the OpenSSL Toolkit (http://www.openssl.org/)" | |
38 | * | |
39 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | |
40 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
41 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | |
42 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | |
43 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | |
44 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | |
45 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | |
46 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | |
47 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | |
48 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | |
49 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | |
50 | * OF THE POSSIBILITY OF SUCH DAMAGE. | |
51 | * ==================================================================== | |
52 | * | |
53 | * This product includes cryptographic software written by Eric Young | |
54 | * (eay@cryptsoft.com). This product includes software written by Tim | |
55 | * Hudson (tjh@cryptsoft.com). | |
56 | * | |
57 | */ | |
58 | ||
59 | #include <openssl/opensslconf.h> | |
60 | #ifndef OPENSSL_NO_EC | |
61 | #include <stdio.h> | |
62 | #include <stdlib.h> | |
63 | #include <string.h> | |
64 | #include "apps.h" | |
65 | #include <openssl/bio.h> | |
66 | #include <openssl/err.h> | |
67 | #include <openssl/evp.h> | |
68 | #include <openssl/pem.h> | |
69 | ||
70 | #undef PROG | |
71 | #define PROG ec_main | |
72 | ||
73 | /* -inform arg - input format - default PEM (one of DER, NET or PEM) | |
74 | * -outform arg - output format - default PEM | |
75 | * -in arg - input file - default stdin | |
76 | * -out arg - output file - default stdout | |
77 | * -des - encrypt output if PEM format with DES in cbc mode | |
78 | * -text - print a text version | |
79 | * -param_out - print the elliptic curve parameters | |
80 | * -conv_form arg - specifies the point encoding form | |
81 | * -param_enc arg - specifies the parameter encoding | |
82 | */ | |
83 | ||
84 | int MAIN(int, char **); | |
85 | ||
86 | int MAIN(int argc, char **argv) | |
87 | { | |
56276539 SS |
88 | int ret = 1; |
89 | EC_KEY *eckey = NULL; | |
90 | const EC_GROUP *group; | |
91 | int i, badops = 0; | |
92 | const EVP_CIPHER *enc = NULL; | |
93 | BIO *in = NULL, *out = NULL; | |
94 | int informat, outformat, text=0, noout=0; | |
95 | int pubin = 0, pubout = 0, param_out = 0; | |
96 | char *infile, *outfile, *prog, *engine; | |
97 | char *passargin = NULL, *passargout = NULL; | |
98 | char *passin = NULL, *passout = NULL; | |
99 | point_conversion_form_t form = POINT_CONVERSION_UNCOMPRESSED; | |
100 | int new_form = 0; | |
101 | int asn1_flag = OPENSSL_EC_NAMED_CURVE; | |
102 | int new_asn1_flag = 0; | |
103 | ||
104 | apps_startup(); | |
105 | ||
106 | if (bio_err == NULL) | |
107 | if ((bio_err=BIO_new(BIO_s_file())) != NULL) | |
108 | BIO_set_fp(bio_err, stderr, BIO_NOCLOSE|BIO_FP_TEXT); | |
109 | ||
110 | if (!load_config(bio_err, NULL)) | |
111 | goto end; | |
112 | ||
113 | engine = NULL; | |
114 | infile = NULL; | |
115 | outfile = NULL; | |
116 | informat = FORMAT_PEM; | |
117 | outformat = FORMAT_PEM; | |
118 | ||
119 | prog = argv[0]; | |
120 | argc--; | |
121 | argv++; | |
122 | while (argc >= 1) | |
123 | { | |
124 | if (strcmp(*argv,"-inform") == 0) | |
125 | { | |
126 | if (--argc < 1) goto bad; | |
127 | informat=str2fmt(*(++argv)); | |
128 | } | |
129 | else if (strcmp(*argv,"-outform") == 0) | |
130 | { | |
131 | if (--argc < 1) goto bad; | |
132 | outformat=str2fmt(*(++argv)); | |
133 | } | |
134 | else if (strcmp(*argv,"-in") == 0) | |
135 | { | |
136 | if (--argc < 1) goto bad; | |
137 | infile= *(++argv); | |
138 | } | |
139 | else if (strcmp(*argv,"-out") == 0) | |
140 | { | |
141 | if (--argc < 1) goto bad; | |
142 | outfile= *(++argv); | |
143 | } | |
144 | else if (strcmp(*argv,"-passin") == 0) | |
145 | { | |
146 | if (--argc < 1) goto bad; | |
147 | passargin= *(++argv); | |
148 | } | |
149 | else if (strcmp(*argv,"-passout") == 0) | |
150 | { | |
151 | if (--argc < 1) goto bad; | |
152 | passargout= *(++argv); | |
153 | } | |
154 | else if (strcmp(*argv, "-engine") == 0) | |
155 | { | |
156 | if (--argc < 1) goto bad; | |
157 | engine= *(++argv); | |
158 | } | |
159 | else if (strcmp(*argv, "-noout") == 0) | |
160 | noout = 1; | |
161 | else if (strcmp(*argv, "-text") == 0) | |
162 | text = 1; | |
163 | else if (strcmp(*argv, "-conv_form") == 0) | |
164 | { | |
165 | if (--argc < 1) | |
166 | goto bad; | |
167 | ++argv; | |
168 | new_form = 1; | |
169 | if (strcmp(*argv, "compressed") == 0) | |
170 | form = POINT_CONVERSION_COMPRESSED; | |
171 | else if (strcmp(*argv, "uncompressed") == 0) | |
172 | form = POINT_CONVERSION_UNCOMPRESSED; | |
173 | else if (strcmp(*argv, "hybrid") == 0) | |
174 | form = POINT_CONVERSION_HYBRID; | |
175 | else | |
176 | goto bad; | |
177 | } | |
178 | else if (strcmp(*argv, "-param_enc") == 0) | |
179 | { | |
180 | if (--argc < 1) | |
181 | goto bad; | |
182 | ++argv; | |
183 | new_asn1_flag = 1; | |
184 | if (strcmp(*argv, "named_curve") == 0) | |
185 | asn1_flag = OPENSSL_EC_NAMED_CURVE; | |
186 | else if (strcmp(*argv, "explicit") == 0) | |
187 | asn1_flag = 0; | |
188 | else | |
189 | goto bad; | |
190 | } | |
191 | else if (strcmp(*argv, "-param_out") == 0) | |
192 | param_out = 1; | |
193 | else if (strcmp(*argv, "-pubin") == 0) | |
194 | pubin=1; | |
195 | else if (strcmp(*argv, "-pubout") == 0) | |
196 | pubout=1; | |
197 | else if ((enc=EVP_get_cipherbyname(&(argv[0][1]))) == NULL) | |
198 | { | |
199 | BIO_printf(bio_err, "unknown option %s\n", *argv); | |
200 | badops=1; | |
201 | break; | |
202 | } | |
203 | argc--; | |
204 | argv++; | |
205 | } | |
206 | ||
207 | if (badops) | |
208 | { | |
209 | bad: | |
210 | BIO_printf(bio_err, "%s [options] <infile >outfile\n", prog); | |
211 | BIO_printf(bio_err, "where options are\n"); | |
212 | BIO_printf(bio_err, " -inform arg input format - " | |
213 | "DER or PEM\n"); | |
214 | BIO_printf(bio_err, " -outform arg output format - " | |
215 | "DER or PEM\n"); | |
216 | BIO_printf(bio_err, " -in arg input file\n"); | |
217 | BIO_printf(bio_err, " -passin arg input file pass " | |
218 | "phrase source\n"); | |
219 | BIO_printf(bio_err, " -out arg output file\n"); | |
220 | BIO_printf(bio_err, " -passout arg output file pass " | |
221 | "phrase source\n"); | |
222 | BIO_printf(bio_err, " -engine e use engine e, " | |
223 | "possibly a hardware device.\n"); | |
224 | BIO_printf(bio_err, " -des encrypt PEM output, " | |
225 | "instead of 'des' every other \n" | |
226 | " cipher " | |
227 | "supported by OpenSSL can be used\n"); | |
228 | BIO_printf(bio_err, " -text print the key\n"); | |
229 | BIO_printf(bio_err, " -noout don't print key out\n"); | |
230 | BIO_printf(bio_err, " -param_out print the elliptic " | |
231 | "curve parameters\n"); | |
232 | BIO_printf(bio_err, " -conv_form arg specifies the " | |
233 | "point conversion form \n"); | |
234 | BIO_printf(bio_err, " possible values:" | |
235 | " compressed\n"); | |
236 | BIO_printf(bio_err, " " | |
237 | " uncompressed (default)\n"); | |
238 | BIO_printf(bio_err, " " | |
239 | " hybrid\n"); | |
240 | BIO_printf(bio_err, " -param_enc arg specifies the way" | |
241 | " the ec parameters are encoded\n"); | |
242 | BIO_printf(bio_err, " in the asn1 der " | |
243 | "encoding\n"); | |
2e6ca3d0 | 244 | BIO_printf(bio_err, " possible values:" |
56276539 SS |
245 | " named_curve (default)\n"); |
246 | BIO_printf(bio_err," " | |
247 | "explicit\n"); | |
248 | goto end; | |
249 | } | |
250 | ||
251 | ERR_load_crypto_strings(); | |
252 | ||
253 | #ifndef OPENSSL_NO_ENGINE | |
9f1859dd | 254 | setup_engine(bio_err, engine, 0); |
56276539 SS |
255 | #endif |
256 | ||
257 | if(!app_passwd(bio_err, passargin, passargout, &passin, &passout)) | |
258 | { | |
259 | BIO_printf(bio_err, "Error getting passwords\n"); | |
260 | goto end; | |
261 | } | |
262 | ||
263 | in = BIO_new(BIO_s_file()); | |
264 | out = BIO_new(BIO_s_file()); | |
265 | if ((in == NULL) || (out == NULL)) | |
266 | { | |
267 | ERR_print_errors(bio_err); | |
268 | goto end; | |
269 | } | |
270 | ||
271 | if (infile == NULL) | |
272 | BIO_set_fp(in, stdin, BIO_NOCLOSE); | |
273 | else | |
274 | { | |
275 | if (BIO_read_filename(in, infile) <= 0) | |
276 | { | |
277 | perror(infile); | |
278 | goto end; | |
279 | } | |
280 | } | |
281 | ||
282 | BIO_printf(bio_err, "read EC key\n"); | |
283 | if (informat == FORMAT_ASN1) | |
284 | { | |
285 | if (pubin) | |
286 | eckey = d2i_EC_PUBKEY_bio(in, NULL); | |
287 | else | |
288 | eckey = d2i_ECPrivateKey_bio(in, NULL); | |
289 | } | |
290 | else if (informat == FORMAT_PEM) | |
291 | { | |
292 | if (pubin) | |
293 | eckey = PEM_read_bio_EC_PUBKEY(in, NULL, NULL, | |
294 | NULL); | |
295 | else | |
296 | eckey = PEM_read_bio_ECPrivateKey(in, NULL, NULL, | |
297 | passin); | |
298 | } | |
299 | else | |
300 | { | |
301 | BIO_printf(bio_err, "bad input format specified for key\n"); | |
302 | goto end; | |
303 | } | |
304 | if (eckey == NULL) | |
305 | { | |
306 | BIO_printf(bio_err,"unable to load Key\n"); | |
307 | ERR_print_errors(bio_err); | |
308 | goto end; | |
309 | } | |
310 | ||
311 | if (outfile == NULL) | |
312 | { | |
313 | BIO_set_fp(out, stdout, BIO_NOCLOSE); | |
314 | #ifdef OPENSSL_SYS_VMS | |
315 | { | |
316 | BIO *tmpbio = BIO_new(BIO_f_linebuffer()); | |
317 | out = BIO_push(tmpbio, out); | |
318 | } | |
319 | #endif | |
320 | } | |
321 | else | |
322 | { | |
323 | if (BIO_write_filename(out, outfile) <= 0) | |
324 | { | |
325 | perror(outfile); | |
326 | goto end; | |
327 | } | |
328 | } | |
329 | ||
330 | group = EC_KEY_get0_group(eckey); | |
331 | ||
332 | if (new_form) | |
333 | EC_KEY_set_conv_form(eckey, form); | |
334 | ||
335 | if (new_asn1_flag) | |
336 | EC_KEY_set_asn1_flag(eckey, asn1_flag); | |
337 | ||
338 | if (text) | |
339 | if (!EC_KEY_print(out, eckey, 0)) | |
340 | { | |
341 | perror(outfile); | |
342 | ERR_print_errors(bio_err); | |
343 | goto end; | |
344 | } | |
345 | ||
346 | if (noout) | |
e40c9513 PA |
347 | { |
348 | ret = 0; | |
56276539 | 349 | goto end; |
e40c9513 | 350 | } |
56276539 SS |
351 | |
352 | BIO_printf(bio_err, "writing EC key\n"); | |
353 | if (outformat == FORMAT_ASN1) | |
354 | { | |
355 | if (param_out) | |
356 | i = i2d_ECPKParameters_bio(out, group); | |
357 | else if (pubin || pubout) | |
358 | i = i2d_EC_PUBKEY_bio(out, eckey); | |
359 | else | |
360 | i = i2d_ECPrivateKey_bio(out, eckey); | |
361 | } | |
362 | else if (outformat == FORMAT_PEM) | |
363 | { | |
364 | if (param_out) | |
365 | i = PEM_write_bio_ECPKParameters(out, group); | |
366 | else if (pubin || pubout) | |
367 | i = PEM_write_bio_EC_PUBKEY(out, eckey); | |
368 | else | |
369 | i = PEM_write_bio_ECPrivateKey(out, eckey, enc, | |
370 | NULL, 0, NULL, passout); | |
371 | } | |
372 | else | |
373 | { | |
374 | BIO_printf(bio_err, "bad output format specified for " | |
375 | "outfile\n"); | |
376 | goto end; | |
377 | } | |
378 | ||
379 | if (!i) | |
380 | { | |
381 | BIO_printf(bio_err, "unable to write private key\n"); | |
382 | ERR_print_errors(bio_err); | |
383 | } | |
384 | else | |
385 | ret=0; | |
386 | end: | |
387 | if (in) | |
388 | BIO_free(in); | |
389 | if (out) | |
390 | BIO_free_all(out); | |
391 | if (eckey) | |
392 | EC_KEY_free(eckey); | |
393 | if (passin) | |
394 | OPENSSL_free(passin); | |
395 | if (passout) | |
396 | OPENSSL_free(passout); | |
397 | apps_shutdown(); | |
398 | OPENSSL_EXIT(ret); | |
399 | } | |
919b01cc PA |
400 | #else /* !OPENSSL_NO_EC */ |
401 | ||
402 | # if PEDANTIC | |
403 | static void *dummy=&dummy; | |
404 | # endif | |
405 | ||
56276539 | 406 | #endif |