X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?a=blobdiff_plain;f=rsa.c;h=c2e8e1b8932a9c6ff8651940104dd4391459e4ac;hb=7a37fb30a8b7afb5b61b37b3ef83223f0bbff150;hp=18b4f3f2e55b592da2bbb28eb191c39c55617103;hpb=52893bf3a9ac6bca4d39c15d003de3f405e9de63;p=secnet.git diff --git a/rsa.c b/rsa.c index 18b4f3f..c2e8e1b 100644 --- a/rsa.c +++ b/rsa.c @@ -45,12 +45,15 @@ struct rsacommon { uint8_t *hashbuf; }; +#define FREE(b) ({ free((b)); (b)=0; }) + struct load_ctx { - void (*verror)(struct load_ctx *l, + void (*verror)(struct load_ctx *l, struct cloc loc, FILE *maybe_f, bool_t unsup, const char *message, va_list args); bool_t (*postreadcheck)(struct load_ctx *l, FILE *f); - struct cloc *loc; + const char *what; + struct cloc loc; union { struct { struct log_if *log; @@ -58,21 +61,31 @@ struct load_ctx { } u; }; -FORMAT(printf,4,0) -static void verror_tryload(struct load_ctx *l, +static void load_err(struct load_ctx *l, + const struct cloc *maybe_loc, FILE *maybe_f, + bool_t unsup, const char *fmt, ...) +{ + va_list al; + va_start(al,fmt); + l->verror(l, maybe_loc ? *maybe_loc : l->loc, maybe_f,unsup,fmt,al); + va_end(al); +} + +FORMAT(printf,5,0) +static void verror_tryload(struct load_ctx *l, struct cloc loc, FILE *maybe_f, bool_t unsup, const char *message, va_list args) { int class=unsup ? M_DEBUG : M_ERR; - slilog_part(l->u.tryload.log,class,"rsa1priv load: "); + slilog_part(l->u.tryload.log,class,"%s: ",l->what); vslilog(l->u.tryload.log,class,message,args); } -static void verror_cfgfatal(struct load_ctx *l, +static void verror_cfgfatal(struct load_ctx *l, struct cloc loc, FILE *maybe_f, bool_t unsup, const char *message, va_list args) { - vcfgfatal_maybefile(maybe_f,*l->loc,"rsa-private",message,args); + vcfgfatal_maybefile(maybe_f,l->loc,l->what,message,args); } struct rsapriv { @@ -85,6 +98,17 @@ struct rsapriv { MP_INT q, dq; MP_INT w; }; + +#define RSAPUB_BNS(each) \ + each(0,e,"public exponent") \ + each(1,n,"modulus") + +#define RSAPUB_LOADCORE_PASSBN(ix,en,what) \ + en##s, en##_loc, + +#define RSAPUB_INIT_ST_BN( ix,en,what) mpz_init (&st->en); +#define RSAPUB_CLEAR_ST_BN(ix,en,what) mpz_clear(&st->en); + struct rsapub { closure_t cl; struct sigpubkey_if ops; @@ -295,18 +319,22 @@ static bool_t rsa_sig_check(void *sst, uint8_t *data, int32_t datalen, static void rsapub_dispose(void *sst) { struct rsapub *st=sst; - mpz_clear(&st->e); - mpz_clear(&st->n); + if (!st) return; + RSAPUB_BNS(RSAPUB_CLEAR_ST_BN) rsacommon_dispose(&st->common); free(st); } -static list_t *rsapub_apply(closure_t *self, struct cloc loc, dict_t *context, - list_t *args) +#define RSAPUB_LOADCORE_DEFBN(ix,en,what) \ + const char *en##s, struct cloc en##_loc, + +#define LDPUBFATAL(enloc,...) \ + cfgfatal(enloc, "rsa-public", __VA_ARGS__) + +static struct rsapub *rsa_loadpub_core(RSAPUB_BNS(RSAPUB_LOADCORE_DEFBN) + struct cloc overall_loc) { struct rsapub *st; - item_t *i; - string_t e,n; NEW(st); st->cl.description="rsapub"; @@ -320,58 +348,56 @@ static list_t *rsapub_apply(closure_t *self, struct cloc loc, dict_t *context, st->ops.check=rsa_sig_check; st->ops.hash=0; st->ops.dispose=rsapub_dispose; - st->loc=loc; - - i=list_elem(args,0); - if (i) { - if (i->type!=t_string) { - cfgfatal(i->loc,"rsa-public","first argument must be a string\n"); - } - e=i->data.string; - if (mpz_init_set_str(&st->e,e,10)!=0) { - cfgfatal(i->loc,"rsa-public","encryption key \"%s\" is not a " - "decimal number string\n",e); - } - } else { - cfgfatal(loc,"rsa-public","you must provide an encryption key\n"); + st->loc=overall_loc; + RSAPUB_BNS(RSAPUB_INIT_ST_BN) + +#define RSAPUB_LOADCORE_GETBN(ix,en,what) \ + if (mpz_init_set_str(&st->en,en##s,10)!=0) { \ + LDPUBFATAL(en##_loc, what " \"%s\" is not a " \ + "decimal number string\n",en##s); \ + } \ + if (mpz_sizeinbase(&st->en, 256) > RSA_MAX_MODBYTES) { \ + LDPUBFATAL(en##_loc, "implausibly large " what "\n"); \ } - if (mpz_sizeinbase(&st->e, 256) > RSA_MAX_MODBYTES) { - cfgfatal(loc, "rsa-public", "implausibly large public exponent\n"); - } - - i=list_elem(args,1); - if (i) { - if (i->type!=t_string) { - cfgfatal(i->loc,"rsa-public","second argument must be a string\n"); - } - n=i->data.string; - if (mpz_init_set_str(&st->n,n,10)!=0) { - cfgfatal(i->loc,"rsa-public","modulus \"%s\" is not a decimal " - "number string\n",n); - } - } else { - cfgfatal(loc,"rsa-public","you must provide a modulus\n"); - } - if (mpz_sizeinbase(&st->n, 256) > RSA_MAX_MODBYTES) { - cfgfatal(loc, "rsa-public", "implausibly large modulus\n"); - } - return new_closure(&st->cl); + + RSAPUB_BNS(RSAPUB_LOADCORE_GETBN) + + return st; + + error_out: + rsapub_dispose(st); + return 0; } -static void load_error(struct load_ctx *l, FILE *maybe_f, - bool_t unsup, const char *fmt, ...) +static list_t *rsapub_apply(closure_t *self, struct cloc loc, dict_t *context, + list_t *args) { - va_list al; - va_start(al,fmt); - l->verror(l,maybe_f,unsup,fmt,al); - va_end(al); + +#define RSAPUB_APPLY_GETBN(ix,en,what) \ + item_t *en##i; \ + const char *en##s; \ + en##i=list_elem(args,ix); \ + if (!en##i) \ + cfgfatal(loc,"rsa-public", \ + "you must provide an encryption key\n"); \ + struct cloc en##_loc=en##i->loc; \ + if (en##i->type!=t_string) \ + cfgfatal(en##_loc,"rsa-public", \ + "first argument must be a string\n"); \ + en##s=en##i->data.string; + + RSAPUB_BNS(RSAPUB_APPLY_GETBN) + + struct rsapub *st=rsa_loadpub_core(RSAPUB_BNS(RSAPUB_LOADCORE_PASSBN) + loc); + + return new_closure(&st->cl); } -#define LDFATAL(...) ({ load_error(l,0,0,__VA_ARGS__); goto error_out; }) -#define LDUNSUP(...) ({ load_error(l,0,1,__VA_ARGS__); goto error_out; }) -#define LDFATAL_FILE(...) ({ load_error(l,f,0,__VA_ARGS__); goto error_out; }) -#define LDUNSUP_FILE(...) ({ load_error(l,f,1,__VA_ARGS__); goto error_out; }) -#define FREE(b) ({ free((b)); (b)=0; }) +#define LDFATAL(...) ({ load_err(l,0,0,0,__VA_ARGS__); goto error_out; }) +#define LDUNSUP(...) ({ load_err(l,0,0,1,__VA_ARGS__); goto error_out; }) +#define LDFATAL_FILE(...) ({ load_err(l,0,f,0,__VA_ARGS__); goto error_out; }) +#define LDUNSUP_FILE(...) ({ load_err(l,0,f,1,__VA_ARGS__); goto error_out; }) #define KEYFILE_GET(is) ({ \ uint##is##_t keyfile_get_tmp=keyfile_get_##is(l,f); \ if (!l->postreadcheck(l,f)) goto error_out; \ @@ -639,7 +665,7 @@ error_out: static bool_t postreadcheck_tryload(struct load_ctx *l, FILE *f) { assert(!ferror(f)); - if (feof(f)) { load_error(l,0,0,"eof mid-integer"); return False; } + if (feof(f)) { load_err(l,0,0,0,"eof mid-integer"); return False; } return True; } @@ -658,9 +684,10 @@ bool_t rsa1_loadpriv(const struct sigscheme_info *algo, } struct load_ctx l[1]; + l->what="rsa1priv load"; l->verror=verror_tryload; l->postreadcheck=postreadcheck_tryload; - l->loc=&loc; + l->loc=loc; l->u.tryload.log=log; st=rsa_loadpriv_core(l,f,loc,False); @@ -678,7 +705,7 @@ bool_t rsa1_loadpriv(const struct sigscheme_info *algo, static bool_t postreadcheck_apply(struct load_ctx *l, FILE *f) { - cfgfile_postreadcheck(*l->loc,f); + cfgfile_postreadcheck(l->loc,f); return True; } @@ -691,9 +718,10 @@ static list_t *rsapriv_apply(closure_t *self, struct cloc loc, dict_t *context, FILE *f; struct load_ctx l[1]; + l->what="rsa-private"; l->verror=verror_cfgfatal; l->postreadcheck=postreadcheck_apply; - l->loc=&loc; + l->loc=loc; /* Argument is filename pointing to SSH1 private key file */ i=list_elem(args,0);