LibsslDHKeyExchange.cc 5.41 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49
/* <!-- copyright */
/*
 * aria2 - The high speed download utility
 *
 * Copyright (C) 2010 Tatsuhiro Tsujikawa
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
 *
 * In addition, as a special exception, the copyright holders give
 * permission to link the code of portions of this program with the
 * OpenSSL library under certain conditions as described in each
 * individual source file, and distribute linked combinations
 * including the two.
 * You must obey the GNU General Public License in all respects
 * for all of the code used other than OpenSSL.  If you modify
 * file(s) with this exception, you may extend this exception to your
 * version of the file(s), but you are not obligated to do so.  If you
 * do not wish to do so, delete this exception statement from your
 * version.  If you delete this exception statement from all source
 * files in the program, then also delete it here.
 */
/* copyright --> */
#include "LibsslDHKeyExchange.h"

#include <cstring>

#include <openssl/rand.h>
#include <openssl/err.h>

#include "DlAbortEx.h"
#include "fmt.h"

namespace aria2 {

namespace {
void handleError(const std::string& funName)
{
50 51 52
  throw DL_ABORT_EX(
      fmt("Exception in libssl routine %s(DHKeyExchange class): %s",
          funName.c_str(), ERR_error_string(ERR_get_error(), nullptr)));
53 54 55 56
}
} // namespace

DHKeyExchange::DHKeyExchange()
57 58 59 60 61 62 63 64
    : bnCtx_(nullptr),
      keyLength_(0),
      prime_(nullptr),
      generator_(nullptr),
      privateKey_(nullptr),
      publicKey_(nullptr)
{
}
65 66 67 68 69 70 71 72 73 74 75

DHKeyExchange::~DHKeyExchange()
{
  BN_CTX_free(bnCtx_);
  BN_free(prime_);
  BN_free(generator_);
  BN_free(privateKey_);
  BN_free(publicKey_);
}

void DHKeyExchange::init(const unsigned char* prime, size_t primeBits,
76
                         const unsigned char* generator, size_t privateKeyBits)
77 78 79
{
  BN_CTX_free(bnCtx_);
  bnCtx_ = BN_CTX_new();
80
  if (!bnCtx_) {
81 82 83 84
    handleError("BN_CTX_new in init");
  }

  BN_free(prime_);
85
  prime_ = nullptr;
86
  BN_free(generator_);
87
  generator_ = nullptr;
88
  BN_free(privateKey_);
89
  privateKey_ = nullptr;
90

91
  if (BN_hex2bn(&prime_, reinterpret_cast<const char*>(prime)) == 0) {
92 93
    handleError("BN_hex2bn in init");
  }
94
  if (BN_hex2bn(&generator_, reinterpret_cast<const char*>(generator)) == 0) {
95 96 97
    handleError("BN_hex2bn in init");
  }
  privateKey_ = BN_new();
98
  if (BN_rand(privateKey_, privateKeyBits, -1, false) == 0) {
99 100
    handleError("BN_new in init");
  }
101
  keyLength_ = (primeBits + 7) / 8;
102 103 104 105 106 107 108 109 110
}

void DHKeyExchange::generatePublicKey()
{
  BN_free(publicKey_);
  publicKey_ = BN_new();
  BN_mod_exp(publicKey_, generator_, privateKey_, prime_, bnCtx_);
}

111
size_t DHKeyExchange::getPublicKey(unsigned char* out, size_t outLength) const
112
{
113 114 115 116 117
  if (outLength < keyLength_) {
    throw DL_ABORT_EX(
        fmt("Insufficient buffer for public key. expect:%lu, actual:%lu",
            static_cast<unsigned long>(keyLength_),
            static_cast<unsigned long>(outLength)));
118 119 120
  }
  memset(out, 0, outLength);
  size_t publicKeyBytes = BN_num_bytes(publicKey_);
121 122 123 124 125 126 127 128
  size_t offset = keyLength_ - publicKeyBytes;
  size_t nwritten = BN_bn2bin(publicKey_, out + offset);
  if (nwritten != publicKeyBytes) {
    throw DL_ABORT_EX(
        fmt("BN_bn2bin in DHKeyExchange::getPublicKey, %lu bytes written,"
            " but %lu bytes expected.",
            static_cast<unsigned long>(nwritten),
            static_cast<unsigned long>(publicKeyBytes)));
129 130 131 132 133 134
  }
  return nwritten;
}

void DHKeyExchange::generateNonce(unsigned char* out, size_t outLength) const
{
135
  if (RAND_bytes(out, outLength) != 1) {
136 137 138 139 140 141 142 143
    handleError("RAND_bytes in generateNonce");
  }
}

size_t DHKeyExchange::computeSecret(unsigned char* out, size_t outLength,
                                    const unsigned char* peerPublicKeyData,
                                    size_t peerPublicKeyLength) const
{
144 145 146 147 148
  if (outLength < keyLength_) {
    throw DL_ABORT_EX(
        fmt("Insufficient buffer for secret. expect:%lu, actual:%lu",
            static_cast<unsigned long>(keyLength_),
            static_cast<unsigned long>(outLength)));
149 150
  }

151 152 153
  BIGNUM* peerPublicKey =
      BN_bin2bn(peerPublicKeyData, peerPublicKeyLength, nullptr);
  if (!peerPublicKey) {
154 155 156 157 158 159 160 161 162
    handleError("BN_bin2bn in computeSecret");
  }

  BIGNUM* secret = BN_new();
  BN_mod_exp(secret, peerPublicKey, privateKey_, prime_, bnCtx_);
  BN_free(peerPublicKey);

  memset(out, 0, outLength);
  size_t secretBytes = BN_num_bytes(secret);
163 164
  size_t offset = keyLength_ - secretBytes;
  size_t nwritten = BN_bn2bin(secret, out + offset);
165
  BN_free(secret);
166 167 168 169 170 171
  if (nwritten != secretBytes) {
    throw DL_ABORT_EX(
        fmt("BN_bn2bin in DHKeyExchange::getPublicKey, %lu bytes written,"
            " but %lu bytes expected.",
            static_cast<unsigned long>(nwritten),
            static_cast<unsigned long>(secretBytes)));
172 173 174 175 176
  }
  return nwritten;
}

} // namespace aria2