/********************************************************************** * gost_eng.c * * Main file of GOST engine * * * * Copyright (c) 2005-2006 Cryptocom LTD * * Copyright (c) 2020 Chikunov Vitaly * * * * This file is distributed under the same license as OpenSSL * * * **********************************************************************/ #include #include #include #include #include #include #include "e_gost_err.h" #include "gost_lcl.h" #include "gost_grasshopper_cipher.h" static const char* engine_gost_id = "gost"; static const char* engine_gost_name = "Reference implementation of GOST engine"; /* Symmetric cipher and digest function registrar */ static int gost_ciphers(ENGINE* e, const EVP_CIPHER** cipher, const int** nids, int nid); static int gost_digests(ENGINE* e, const EVP_MD** digest, const int** nids, int nid); static int gost_pkey_meths(ENGINE* e, EVP_PKEY_METHOD** pmeth, const int** nids, int nid); static int gost_pkey_asn1_meths(ENGINE* e, EVP_PKEY_ASN1_METHOD** ameth, const int** nids, int nid); static EVP_PKEY_METHOD* pmeth_GostR3410_2001 = NULL, * pmeth_GostR3410_2012_256 = NULL, * pmeth_GostR3410_2012_512 = NULL, * pmeth_Gost28147_MAC = NULL, * pmeth_Gost28147_MAC_12 = NULL, * pmeth_magma_mac = NULL, * pmeth_grasshopper_mac = NULL, * pmeth_magma_mac_acpkm = NULL, * pmeth_grasshopper_mac_acpkm = NULL; static EVP_PKEY_ASN1_METHOD* ameth_GostR3410_2001 = NULL, * ameth_GostR3410_2012_256 = NULL, * ameth_GostR3410_2012_512 = NULL, * ameth_Gost28147_MAC = NULL, * ameth_Gost28147_MAC_12 = NULL, * ameth_magma_mac = NULL, * ameth_grasshopper_mac = NULL, * ameth_magma_mac_acpkm = NULL, * ameth_grasshopper_mac_acpkm = NULL; static struct gost_digest_minfo { int nid; EVP_MD *(*digest)(void); void (*destroy)(void); const char *sn; const char *alias; } gost_digest_array[] = { { NID_id_GostR3411_94, digest_gost, digest_gost_destroy, }, { NID_id_Gost28147_89_MAC, imit_gost_cpa, imit_gost_cpa_destroy, }, { NID_id_GostR3411_2012_256, digest_gost2012_256, digest_gost2012_256_destroy, SN_id_GostR3411_2012_256, "streebog256", }, { NID_id_GostR3411_2012_512, digest_gost2012_512, digest_gost2012_512_destroy, SN_id_GostR3411_2012_512, "streebog512", }, { NID_gost_mac_12, imit_gost_cp_12, imit_gost_cp_12_destroy, }, { NID_magma_mac, magma_omac, magma_omac_destroy, }, { NID_grasshopper_mac, grasshopper_omac, grasshopper_omac_destroy, }, { NID_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac, grasshopper_omac_acpkm, grasshopper_omac_acpkm_destroy, }, { 0 }, }; static struct gost_cipher_minfo { int nid; const EVP_CIPHER *(*cipher)(void); } gost_cipher_array[] = { { NID_id_Gost28147_89, cipher_gost, }, { NID_gost89_cnt, cipher_gost_cpacnt, }, { NID_gost89_cnt_12, cipher_gost_cpcnt_12, }, { NID_gost89_cbc, cipher_gost_cbc, }, { NID_grasshopper_ecb, cipher_gost_grasshopper_ecb, }, { NID_grasshopper_cbc, cipher_gost_grasshopper_cbc, }, { NID_grasshopper_cfb, cipher_gost_grasshopper_cfb, }, { NID_grasshopper_ofb, cipher_gost_grasshopper_ofb, }, { NID_grasshopper_ctr, cipher_gost_grasshopper_ctr, }, { NID_magma_cbc, cipher_magma_cbc, }, { NID_magma_ctr, cipher_magma_ctr, }, { NID_magma_ctr_acpkm, cipher_magma_ctr_acpkm, }, { NID_magma_ctr_acpkm_omac, cipher_magma_ctr_acpkm_omac, }, { NID_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm, cipher_gost_grasshopper_ctracpkm, }, { NID_kuznyechik_ctr_acpkm_omac, cipher_gost_grasshopper_ctracpkm_omac, }, { NID_magma_kexp15, cipher_magma_wrap, }, { NID_kuznyechik_kexp15, cipher_kuznyechik_wrap, }, { 0 }, }; static struct gost_meth_minfo { int nid; EVP_PKEY_METHOD **pmeth; EVP_PKEY_ASN1_METHOD **ameth; const char *pemstr; const char *info; } gost_meth_array[] = { { NID_id_GostR3410_2001, &pmeth_GostR3410_2001, &ameth_GostR3410_2001, "GOST2001", "GOST R 34.10-2001", }, { NID_id_Gost28147_89_MAC, &pmeth_Gost28147_MAC, &ameth_Gost28147_MAC, "GOST-MAC", "GOST 28147-89 MAC", }, { NID_id_GostR3410_2012_256, &pmeth_GostR3410_2012_256, &ameth_GostR3410_2012_256, "GOST2012_256", "GOST R 34.10-2012 with 256 bit key", }, { NID_id_GostR3410_2012_512, &pmeth_GostR3410_2012_512, &ameth_GostR3410_2012_512, "GOST2012_512", "GOST R 34.10-2012 with 512 bit key", }, { NID_gost_mac_12, &pmeth_Gost28147_MAC_12, &ameth_Gost28147_MAC_12, "GOST-MAC-12", "GOST 28147-89 MAC with 2012 params", }, { NID_magma_mac, &pmeth_magma_mac, &ameth_magma_mac, "MAGMA-MAC", "GOST R 34.13-2015 Magma MAC", }, { NID_grasshopper_mac, &pmeth_grasshopper_mac, &ameth_grasshopper_mac, "KUZNYECHIK-MAC", "GOST R 34.13-2015 Grasshopper MAC", }, { NID_id_tc26_cipher_gostr3412_2015_magma_ctracpkm_omac, &pmeth_magma_mac_acpkm, &ameth_magma_mac_acpkm, "ID-TC26-CIPHER-GOSTR3412-2015-MAGMA-CTRACPKM-OMAC", "GOST R 34.13-2015 Magma MAC ACPKM", }, { NID_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac, &pmeth_grasshopper_mac_acpkm, &ameth_grasshopper_mac_acpkm, "ID-TC26-CIPHER-GOSTR3412-2015-KUZNYECHIK-CTRACPKM-OMAC", "GOST R 34.13-2015 Grasshopper MAC ACPKM", }, { 0 }, }; #ifndef OSSL_NELEM # define OSSL_NELEM(x) (sizeof(x)/sizeof((x)[0])) #endif /* `- 1' because of terminating zero element */ static int known_digest_nids[OSSL_NELEM(gost_digest_array) - 1]; static int known_cipher_nids[OSSL_NELEM(gost_cipher_array) - 1]; static int known_meths_nids[OSSL_NELEM(gost_meth_array) - 1]; static int gost_engine_init(ENGINE* e) { return 1; } static int gost_engine_finish(ENGINE* e) { return 1; } static int gost_engine_destroy(ENGINE* e) { struct gost_digest_minfo *dinfo = gost_digest_array; for (; dinfo->nid; dinfo++) { if (dinfo->alias) EVP_delete_digest_alias(dinfo->alias); dinfo->destroy(); } cipher_gost_destroy(); cipher_gost_grasshopper_destroy(); wrap_ciphers_destroy(); gost_param_free(); struct gost_meth_minfo *minfo = gost_meth_array; for (; minfo->nid; minfo++) { *minfo->pmeth = NULL; *minfo->ameth = NULL; } ERR_unload_GOST_strings(); return 1; } static int bind_gost(ENGINE* e, const char* id) { int ret = 0; if (id != NULL && strcmp(id, engine_gost_id) != 0) return 0; if (ameth_GostR3410_2001) { printf("GOST engine already loaded\n"); goto end; } if (!ENGINE_set_id(e, engine_gost_id)) { printf("ENGINE_set_id failed\n"); goto end; } if (!ENGINE_set_name(e, engine_gost_name)) { printf("ENGINE_set_name failed\n"); goto end; } if (!ENGINE_set_digests(e, gost_digests)) { printf("ENGINE_set_digests failed\n"); goto end; } if (!ENGINE_set_ciphers(e, gost_ciphers)) { printf("ENGINE_set_ciphers failed\n"); goto end; } if (!ENGINE_set_pkey_meths(e, gost_pkey_meths)) { printf("ENGINE_set_pkey_meths failed\n"); goto end; } if (!ENGINE_set_pkey_asn1_meths(e, gost_pkey_asn1_meths)) { printf("ENGINE_set_pkey_asn1_meths failed\n"); goto end; } /* Control function and commands */ if (!ENGINE_set_cmd_defns(e, gost_cmds)) { fprintf(stderr, "ENGINE_set_cmd_defns failed\n"); goto end; } if (!ENGINE_set_ctrl_function(e, gost_control_func)) { fprintf(stderr, "ENGINE_set_ctrl_func failed\n"); goto end; } if (!ENGINE_set_destroy_function(e, gost_engine_destroy) || !ENGINE_set_init_function(e, gost_engine_init) || !ENGINE_set_finish_function(e, gost_engine_finish)) { goto end; } struct gost_meth_minfo *minfo = gost_meth_array; for (; minfo->nid; minfo++) { /* This skip looks temporary. */ if (minfo->nid == NID_id_tc26_cipher_gostr3412_2015_magma_ctracpkm_omac) continue; if (!register_ameth_gost(minfo->nid, minfo->ameth, minfo->pemstr, minfo->info)) goto end; if (!register_pmeth_gost(minfo->nid, minfo->pmeth, 0)) goto end; } if (!ENGINE_register_ciphers(e) || !ENGINE_register_digests(e) || !ENGINE_register_pkey_meths(e)) goto end; struct gost_cipher_minfo *cinfo = gost_cipher_array; for (; cinfo->nid; cinfo++) if (!EVP_add_cipher(cinfo->cipher())) goto end; struct gost_digest_minfo *dinfo = gost_digest_array; for (; dinfo->nid; dinfo++) { if (!EVP_add_digest(dinfo->digest())) goto end; if (dinfo->alias && !EVP_add_digest_alias(dinfo->sn, dinfo->alias)) goto end; } ENGINE_register_all_complete(); ERR_load_GOST_strings(); ret = 1; end: return ret; } #ifndef OPENSSL_NO_DYNAMIC_ENGINE IMPLEMENT_DYNAMIC_BIND_FN(bind_gost) IMPLEMENT_DYNAMIC_CHECK_FN() #endif /* ndef OPENSSL_NO_DYNAMIC_ENGINE */ /* ENGINE_DIGESTS_PTR callback installed by ENGINE_set_digests */ static int gost_digests(ENGINE *e, const EVP_MD **digest, const int **nids, int nid) { struct gost_digest_minfo *info = gost_digest_array; if (!digest) { int *n = known_digest_nids; *nids = n; for (; info->nid; info++) *n++ = info->nid; return OSSL_NELEM(known_digest_nids); } for (; info->nid; info++) if (nid == info->nid) { *digest = info->digest(); return 1; } *digest = NULL; return 0; } /* ENGINE_CIPHERS_PTR callback installed by ENGINE_set_ciphers */ static int gost_ciphers(ENGINE *e, const EVP_CIPHER **cipher, const int **nids, int nid) { struct gost_cipher_minfo *info = gost_cipher_array; if (!cipher) { int *n = known_cipher_nids; *nids = n; for (; info->nid; info++) *n++ = info->nid; return OSSL_NELEM(known_cipher_nids); } for (; info->nid; info++) if (nid == info->nid) { *cipher = info->cipher(); return 1; } *cipher = NULL; return 0; } static int gost_meth_nids(const int **nids) { struct gost_meth_minfo *info = gost_meth_array; int *n = known_meths_nids; *nids = n; for (; info->nid; info++) *n++ = info->nid; return OSSL_NELEM(known_meths_nids); } /* ENGINE_PKEY_METHS_PTR installed by ENGINE_set_pkey_meths */ static int gost_pkey_meths(ENGINE *e, EVP_PKEY_METHOD **pmeth, const int **nids, int nid) { struct gost_meth_minfo *info; if (!pmeth) return gost_meth_nids(nids); for (info = gost_meth_array; info->nid; info++) if (nid == info->nid) { *pmeth = *info->pmeth; return 1; } *pmeth = NULL; return 0; } /* ENGINE_PKEY_ASN1_METHS_PTR installed by ENGINE_set_pkey_asn1_meths */ static int gost_pkey_asn1_meths(ENGINE *e, EVP_PKEY_ASN1_METHOD **ameth, const int **nids, int nid) { struct gost_meth_minfo *info; if (!ameth) return gost_meth_nids(nids); for (info = gost_meth_array; info->nid; info++) if (nid == info->nid) { *ameth = *info->ameth; return 1; } *ameth = NULL; return 0; } #ifdef OPENSSL_NO_DYNAMIC_ENGINE static ENGINE* engine_gost(void) { ENGINE* ret = ENGINE_new(); if (!ret) return NULL; if (!bind_gost(ret, engine_gost_id)) { ENGINE_free(ret); return NULL; } return ret; } void ENGINE_load_gost(void) { ENGINE* toadd; if (pmeth_GostR3410_2001) return; toadd = engine_gost(); if (!toadd) return; ENGINE_add(toadd); ENGINE_free(toadd); ERR_clear_error(); } #endif