Lines Matching refs:rsa
22 unsigned char *to, RSA *rsa, int padding);
24 unsigned char *to, RSA *rsa, int padding);
26 unsigned char *to, RSA *rsa, int padding);
28 unsigned char *to, RSA *rsa, int padding);
29 static int rsa_ossl_mod_exp(BIGNUM *r0, const BIGNUM *i, RSA *rsa,
31 static int rsa_ossl_init(RSA *rsa);
32 static int rsa_ossl_finish(RSA *rsa);
75 unsigned char *to, RSA *rsa, int padding) in rsa_ossl_public_encrypt() argument
82 if (BN_num_bits(rsa->n) > OPENSSL_RSA_MAX_MODULUS_BITS) { in rsa_ossl_public_encrypt()
87 if (BN_ucmp(rsa->n, rsa->e) <= 0) { in rsa_ossl_public_encrypt()
93 if (BN_num_bits(rsa->n) > OPENSSL_RSA_SMALL_MODULUS_BITS) { in rsa_ossl_public_encrypt()
94 if (BN_num_bits(rsa->e) > OPENSSL_RSA_MAX_PUBEXP_BITS) { in rsa_ossl_public_encrypt()
100 if ((ctx = BN_CTX_new_ex(rsa->libctx)) == NULL) in rsa_ossl_public_encrypt()
105 num = BN_num_bytes(rsa->n); in rsa_ossl_public_encrypt()
114 i = ossl_rsa_padding_add_PKCS1_type_2_ex(rsa->libctx, buf, num, in rsa_ossl_public_encrypt()
118 i = ossl_rsa_padding_add_PKCS1_OAEP_mgf1_ex(rsa->libctx, buf, num, in rsa_ossl_public_encrypt()
135 if (BN_ucmp(f, rsa->n) >= 0) { in rsa_ossl_public_encrypt()
141 if (rsa->flags & RSA_FLAG_CACHE_PUBLIC) in rsa_ossl_public_encrypt()
142 if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock, in rsa_ossl_public_encrypt()
143 rsa->n, ctx)) in rsa_ossl_public_encrypt()
146 if (!rsa->meth->bn_mod_exp(ret, f, rsa->e, rsa->n, ctx, in rsa_ossl_public_encrypt()
147 rsa->_method_mod_n)) in rsa_ossl_public_encrypt()
162 static BN_BLINDING *rsa_get_blinding(RSA *rsa, int *local, BN_CTX *ctx) in rsa_get_blinding() argument
166 if (!CRYPTO_THREAD_write_lock(rsa->lock)) in rsa_get_blinding()
169 if (rsa->blinding == NULL) { in rsa_get_blinding()
170 rsa->blinding = RSA_setup_blinding(rsa, ctx); in rsa_get_blinding()
173 ret = rsa->blinding; in rsa_get_blinding()
191 if (rsa->mt_blinding == NULL) { in rsa_get_blinding()
192 rsa->mt_blinding = RSA_setup_blinding(rsa, ctx); in rsa_get_blinding()
194 ret = rsa->mt_blinding; in rsa_get_blinding()
198 CRYPTO_THREAD_unlock(rsa->lock); in rsa_get_blinding()
240 unsigned char *to, RSA *rsa, int padding) in rsa_ossl_private_encrypt() argument
255 if ((ctx = BN_CTX_new_ex(rsa->libctx)) == NULL) in rsa_ossl_private_encrypt()
260 num = BN_num_bytes(rsa->n); in rsa_ossl_private_encrypt()
287 if (BN_ucmp(f, rsa->n) >= 0) { in rsa_ossl_private_encrypt()
293 if (rsa->flags & RSA_FLAG_CACHE_PUBLIC) in rsa_ossl_private_encrypt()
294 if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock, in rsa_ossl_private_encrypt()
295 rsa->n, ctx)) in rsa_ossl_private_encrypt()
298 if (!(rsa->flags & RSA_FLAG_NO_BLINDING)) { in rsa_ossl_private_encrypt()
299 blinding = rsa_get_blinding(rsa, &local_blinding, ctx); in rsa_ossl_private_encrypt()
315 if ((rsa->flags & RSA_FLAG_EXT_PKEY) || in rsa_ossl_private_encrypt()
316 (rsa->version == RSA_ASN1_VERSION_MULTI) || in rsa_ossl_private_encrypt()
317 ((rsa->p != NULL) && in rsa_ossl_private_encrypt()
318 (rsa->q != NULL) && in rsa_ossl_private_encrypt()
319 (rsa->dmp1 != NULL) && (rsa->dmq1 != NULL) && (rsa->iqmp != NULL))) { in rsa_ossl_private_encrypt()
320 if (!rsa->meth->rsa_mod_exp(ret, f, rsa, ctx)) in rsa_ossl_private_encrypt()
328 if (rsa->d == NULL) { in rsa_ossl_private_encrypt()
333 BN_with_flags(d, rsa->d, BN_FLG_CONSTTIME); in rsa_ossl_private_encrypt()
335 if (!rsa->meth->bn_mod_exp(ret, f, d, rsa->n, ctx, in rsa_ossl_private_encrypt()
336 rsa->_method_mod_n)) { in rsa_ossl_private_encrypt()
349 if (!BN_sub(f, rsa->n, ret)) in rsa_ossl_private_encrypt()
372 unsigned char *to, RSA *rsa, int padding) in rsa_ossl_private_decrypt() argument
387 if ((ctx = BN_CTX_new_ex(rsa->libctx)) == NULL) in rsa_ossl_private_decrypt()
392 num = BN_num_bytes(rsa->n); in rsa_ossl_private_decrypt()
412 if (BN_ucmp(f, rsa->n) >= 0) { in rsa_ossl_private_decrypt()
417 if (!(rsa->flags & RSA_FLAG_NO_BLINDING)) { in rsa_ossl_private_decrypt()
418 blinding = rsa_get_blinding(rsa, &local_blinding, ctx); in rsa_ossl_private_decrypt()
435 if ((rsa->flags & RSA_FLAG_EXT_PKEY) || in rsa_ossl_private_decrypt()
436 (rsa->version == RSA_ASN1_VERSION_MULTI) || in rsa_ossl_private_decrypt()
437 ((rsa->p != NULL) && in rsa_ossl_private_decrypt()
438 (rsa->q != NULL) && in rsa_ossl_private_decrypt()
439 (rsa->dmp1 != NULL) && (rsa->dmq1 != NULL) && (rsa->iqmp != NULL))) { in rsa_ossl_private_decrypt()
440 if (!rsa->meth->rsa_mod_exp(ret, f, rsa, ctx)) in rsa_ossl_private_decrypt()
448 if (rsa->d == NULL) { in rsa_ossl_private_decrypt()
453 BN_with_flags(d, rsa->d, BN_FLG_CONSTTIME); in rsa_ossl_private_decrypt()
455 if (rsa->flags & RSA_FLAG_CACHE_PUBLIC) in rsa_ossl_private_decrypt()
456 if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock, in rsa_ossl_private_decrypt()
457 rsa->n, ctx)) { in rsa_ossl_private_decrypt()
461 if (!rsa->meth->bn_mod_exp(ret, f, d, rsa->n, ctx, in rsa_ossl_private_decrypt()
462 rsa->_method_mod_n)) { in rsa_ossl_private_decrypt()
511 unsigned char *to, RSA *rsa, int padding) in rsa_ossl_public_decrypt() argument
518 if (BN_num_bits(rsa->n) > OPENSSL_RSA_MAX_MODULUS_BITS) { in rsa_ossl_public_decrypt()
523 if (BN_ucmp(rsa->n, rsa->e) <= 0) { in rsa_ossl_public_decrypt()
529 if (BN_num_bits(rsa->n) > OPENSSL_RSA_SMALL_MODULUS_BITS) { in rsa_ossl_public_decrypt()
530 if (BN_num_bits(rsa->e) > OPENSSL_RSA_MAX_PUBEXP_BITS) { in rsa_ossl_public_decrypt()
536 if ((ctx = BN_CTX_new_ex(rsa->libctx)) == NULL) in rsa_ossl_public_decrypt()
541 num = BN_num_bytes(rsa->n); in rsa_ossl_public_decrypt()
560 if (BN_ucmp(f, rsa->n) >= 0) { in rsa_ossl_public_decrypt()
565 if (rsa->flags & RSA_FLAG_CACHE_PUBLIC) in rsa_ossl_public_decrypt()
566 if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock, in rsa_ossl_public_decrypt()
567 rsa->n, ctx)) in rsa_ossl_public_decrypt()
570 if (!rsa->meth->bn_mod_exp(ret, f, rsa->e, rsa->n, ctx, in rsa_ossl_public_decrypt()
571 rsa->_method_mod_n)) in rsa_ossl_public_decrypt()
575 if (!BN_sub(ret, rsa->n, ret)) in rsa_ossl_public_decrypt()
606 static int rsa_ossl_mod_exp(BIGNUM *r0, const BIGNUM *I, RSA *rsa, BN_CTX *ctx) in rsa_ossl_mod_exp() argument
628 if (rsa->version == RSA_ASN1_VERSION_MULTI in rsa_ossl_mod_exp()
629 && ((ex_primes = sk_RSA_PRIME_INFO_num(rsa->prime_infos)) <= 0 in rsa_ossl_mod_exp()
634 if (rsa->flags & RSA_FLAG_CACHE_PRIVATE) { in rsa_ossl_mod_exp()
644 if (!(BN_with_flags(factor, rsa->p, BN_FLG_CONSTTIME), in rsa_ossl_mod_exp()
645 BN_MONT_CTX_set_locked(&rsa->_method_mod_p, rsa->lock, in rsa_ossl_mod_exp()
647 || !(BN_with_flags(factor, rsa->q, BN_FLG_CONSTTIME), in rsa_ossl_mod_exp()
648 BN_MONT_CTX_set_locked(&rsa->_method_mod_q, rsa->lock, in rsa_ossl_mod_exp()
655 pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i); in rsa_ossl_mod_exp()
657 if (!BN_MONT_CTX_set_locked(&pinfo->m, rsa->lock, factor, ctx)) { in rsa_ossl_mod_exp()
668 smooth = (rsa->meth->bn_mod_exp == BN_mod_exp_mont) in rsa_ossl_mod_exp()
672 && (BN_num_bits(rsa->q) == BN_num_bits(rsa->p)); in rsa_ossl_mod_exp()
675 if (rsa->flags & RSA_FLAG_CACHE_PUBLIC) in rsa_ossl_mod_exp()
676 if (!BN_MONT_CTX_set_locked(&rsa->_method_mod_n, rsa->lock, in rsa_ossl_mod_exp()
677 rsa->n, ctx)) in rsa_ossl_mod_exp()
689 !bn_from_mont_fixed_top(m1, I, rsa->_method_mod_q, ctx) in rsa_ossl_mod_exp()
690 || !bn_to_mont_fixed_top(m1, m1, rsa->_method_mod_q, ctx) in rsa_ossl_mod_exp()
692 || !bn_from_mont_fixed_top(r1, I, rsa->_method_mod_p, ctx) in rsa_ossl_mod_exp()
693 || !bn_to_mont_fixed_top(r1, r1, rsa->_method_mod_p, ctx) in rsa_ossl_mod_exp()
700 || !BN_mod_exp_mont_consttime_x2(m1, m1, rsa->dmq1, rsa->q, in rsa_ossl_mod_exp()
701 rsa->_method_mod_q, in rsa_ossl_mod_exp()
702 r1, r1, rsa->dmp1, rsa->p, in rsa_ossl_mod_exp()
703 rsa->_method_mod_p, in rsa_ossl_mod_exp()
712 || !bn_mod_sub_fixed_top(r1, r1, m1, rsa->p) in rsa_ossl_mod_exp()
715 || !bn_to_mont_fixed_top(r1, r1, rsa->_method_mod_p, ctx) in rsa_ossl_mod_exp()
716 || !bn_mul_mont_fixed_top(r1, r1, rsa->iqmp, rsa->_method_mod_p, in rsa_ossl_mod_exp()
719 || !bn_mul_fixed_top(r0, r1, rsa->q, ctx) in rsa_ossl_mod_exp()
720 || !bn_mod_add_fixed_top(r0, r0, m1, rsa->n)) in rsa_ossl_mod_exp()
733 if (!BN_mod(r1, c, rsa->q, ctx)) { in rsa_ossl_mod_exp()
744 BN_with_flags(dmq1, rsa->dmq1, BN_FLG_CONSTTIME); in rsa_ossl_mod_exp()
747 if (!rsa->meth->bn_mod_exp(m1, r1, dmq1, rsa->q, ctx, in rsa_ossl_mod_exp()
748 rsa->_method_mod_q)) { in rsa_ossl_mod_exp()
758 if (!BN_mod(r1, c, rsa->p, ctx)) { in rsa_ossl_mod_exp()
770 BN_with_flags(dmp1, rsa->dmp1, BN_FLG_CONSTTIME); in rsa_ossl_mod_exp()
773 if (!rsa->meth->bn_mod_exp(r0, r1, dmp1, rsa->p, ctx, in rsa_ossl_mod_exp()
774 rsa->_method_mod_p)) { in rsa_ossl_mod_exp()
800 pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i); in rsa_ossl_mod_exp()
812 if (!rsa->meth->bn_mod_exp(m[i], r1, di, pinfo->r, ctx, pinfo->m)) { in rsa_ossl_mod_exp()
831 if (!BN_add(r0, r0, rsa->p)) in rsa_ossl_mod_exp()
834 if (!BN_mul(r1, r0, rsa->iqmp, ctx)) in rsa_ossl_mod_exp()
843 if (!BN_mod(r0, pr1, rsa->p, ctx)) { in rsa_ossl_mod_exp()
859 if (!BN_add(r0, r0, rsa->p)) in rsa_ossl_mod_exp()
861 if (!BN_mul(r1, r0, rsa->q, ctx)) in rsa_ossl_mod_exp()
875 pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i); in rsa_ossl_mod_exp()
912 if (rsa->e && rsa->n) { in rsa_ossl_mod_exp()
913 if (rsa->meth->bn_mod_exp == BN_mod_exp_mont) { in rsa_ossl_mod_exp()
914 if (!BN_mod_exp_mont(vrfy, r0, rsa->e, rsa->n, ctx, in rsa_ossl_mod_exp()
915 rsa->_method_mod_n)) in rsa_ossl_mod_exp()
919 if (!rsa->meth->bn_mod_exp(vrfy, r0, rsa->e, rsa->n, ctx, in rsa_ossl_mod_exp()
920 rsa->_method_mod_n)) in rsa_ossl_mod_exp()
936 if (!BN_mod(vrfy, vrfy, rsa->n, ctx)) in rsa_ossl_mod_exp()
939 if (!BN_add(vrfy, vrfy, rsa->n)) in rsa_ossl_mod_exp()
951 BN_with_flags(d, rsa->d, BN_FLG_CONSTTIME); in rsa_ossl_mod_exp()
953 if (!rsa->meth->bn_mod_exp(r0, I, d, rsa->n, ctx, in rsa_ossl_mod_exp()
954 rsa->_method_mod_n)) { in rsa_ossl_mod_exp()
977 static int rsa_ossl_init(RSA *rsa) in rsa_ossl_init() argument
979 rsa->flags |= RSA_FLAG_CACHE_PUBLIC | RSA_FLAG_CACHE_PRIVATE; in rsa_ossl_init()
983 static int rsa_ossl_finish(RSA *rsa) in rsa_ossl_finish() argument
989 for (i = 0; i < sk_RSA_PRIME_INFO_num(rsa->prime_infos); i++) { in rsa_ossl_finish()
990 pinfo = sk_RSA_PRIME_INFO_value(rsa->prime_infos, i); in rsa_ossl_finish()
995 BN_MONT_CTX_free(rsa->_method_mod_n); in rsa_ossl_finish()
996 BN_MONT_CTX_free(rsa->_method_mod_p); in rsa_ossl_finish()
997 BN_MONT_CTX_free(rsa->_method_mod_q); in rsa_ossl_finish()