1 /*
2 * Copyright 2005-2026 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10 #include <openssl/bn.h>
11 #include "crypto/bn_dh.h"
12
13 #define COPY_BN(dst, src) (dst != NULL) ? BN_copy(dst, &src) : BN_dup(&src)
14
15 /*-
16 * "First Oakley Default Group" from RFC2409, section 6.1.
17 *
18 * The prime is: 2^768 - 2 ^704 - 1 + 2^64 * { [2^638 pi] + 149686 }
19 *
20 * RFC2409 specifies a generator of 2.
21 * RFC2412 specifies a generator of 22.
22 */
23
BN_get_rfc2409_prime_768(BIGNUM * bn)24 BIGNUM *BN_get_rfc2409_prime_768(BIGNUM *bn)
25 {
26 static const unsigned char RFC2409_PRIME_768[] = {
27 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xC9, 0x0F,
28 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, 0xC4, 0xC6, 0x62, 0x8B,
29 0x80, 0xDC, 0x1C, 0xD1, 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67,
30 0xCC, 0x74, 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
31 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, 0xEF, 0x95,
32 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, 0x30, 0x2B, 0x0A, 0x6D,
33 0xF2, 0x5F, 0x14, 0x37, 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51,
34 0xC2, 0x45, 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
35 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x3A, 0x36, 0x20, 0xFF, 0xFF,
36 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF
37 };
38 return BN_bin2bn(RFC2409_PRIME_768, sizeof(RFC2409_PRIME_768), bn);
39 }
40
41 /*-
42 * "Second Oakley Default Group" from RFC2409, section 6.2.
43 *
44 * The prime is: 2^1024 - 2^960 - 1 + 2^64 * { [2^894 pi] + 129093 }.
45 *
46 * RFC2409 specifies a generator of 2.
47 * RFC2412 specifies a generator of 22.
48 */
49
BN_get_rfc2409_prime_1024(BIGNUM * bn)50 BIGNUM *BN_get_rfc2409_prime_1024(BIGNUM *bn)
51 {
52 static const unsigned char RFC2409_PRIME_1024[] = {
53 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xC9, 0x0F,
54 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34, 0xC4, 0xC6, 0x62, 0x8B,
55 0x80, 0xDC, 0x1C, 0xD1, 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67,
56 0xCC, 0x74, 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
57 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD, 0xEF, 0x95,
58 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B, 0x30, 0x2B, 0x0A, 0x6D,
59 0xF2, 0x5F, 0x14, 0x37, 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51,
60 0xC2, 0x45, 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
61 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B, 0x0B, 0xFF,
62 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED, 0xEE, 0x38, 0x6B, 0xFB,
63 0x5A, 0x89, 0x9F, 0xA5, 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B,
64 0x1F, 0xE6, 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE6, 0x53, 0x81,
65 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF
66 };
67 return BN_bin2bn(RFC2409_PRIME_1024, sizeof(RFC2409_PRIME_1024), bn);
68 }
69
70 /*-
71 * "1536-bit MODP Group" from RFC3526, Section 2.
72 *
73 * The prime is: 2^1536 - 2^1472 - 1 + 2^64 * { [2^1406 pi] + 741804 }
74 *
75 * RFC3526 specifies a generator of 2.
76 * RFC2312 specifies a generator of 22.
77 */
78
BN_get_rfc3526_prime_1536(BIGNUM * bn)79 BIGNUM *BN_get_rfc3526_prime_1536(BIGNUM *bn)
80 {
81 return COPY_BN(bn, ossl_bignum_modp_1536_p);
82 }
83
84 /*-
85 * "2048-bit MODP Group" from RFC3526, Section 3.
86 *
87 * The prime is: 2^2048 - 2^1984 - 1 + 2^64 * { [2^1918 pi] + 124476 }
88 *
89 * RFC3526 specifies a generator of 2.
90 */
91
BN_get_rfc3526_prime_2048(BIGNUM * bn)92 BIGNUM *BN_get_rfc3526_prime_2048(BIGNUM *bn)
93 {
94 return COPY_BN(bn, ossl_bignum_modp_2048_p);
95 }
96
97 /*-
98 * "3072-bit MODP Group" from RFC3526, Section 4.
99 *
100 * The prime is: 2^3072 - 2^3008 - 1 + 2^64 * { [2^2942 pi] + 1690314 }
101 *
102 * RFC3526 specifies a generator of 2.
103 */
104
BN_get_rfc3526_prime_3072(BIGNUM * bn)105 BIGNUM *BN_get_rfc3526_prime_3072(BIGNUM *bn)
106 {
107 return COPY_BN(bn, ossl_bignum_modp_3072_p);
108 }
109
110 /*-
111 * "4096-bit MODP Group" from RFC3526, Section 5.
112 *
113 * The prime is: 2^4096 - 2^4032 - 1 + 2^64 * { [2^3966 pi] + 240904 }
114 *
115 * RFC3526 specifies a generator of 2.
116 */
117
BN_get_rfc3526_prime_4096(BIGNUM * bn)118 BIGNUM *BN_get_rfc3526_prime_4096(BIGNUM *bn)
119 {
120 return COPY_BN(bn, ossl_bignum_modp_4096_p);
121 }
122
123 /*-
124 * "6144-bit MODP Group" from RFC3526, Section 6.
125 *
126 * The prime is: 2^6144 - 2^6080 - 1 + 2^64 * { [2^6014 pi] + 929484 }
127 *
128 * RFC3526 specifies a generator of 2.
129 */
130
BN_get_rfc3526_prime_6144(BIGNUM * bn)131 BIGNUM *BN_get_rfc3526_prime_6144(BIGNUM *bn)
132 {
133 return COPY_BN(bn, ossl_bignum_modp_6144_p);
134 }
135
136 /*-
137 * "8192-bit MODP Group" from RFC3526, Section 7.
138 *
139 * The prime is: 2^8192 - 2^8128 - 1 + 2^64 * { [2^8062 pi] + 4743158 }
140 *
141 * RFC3526 specifies a generator of 2.
142 */
143
BN_get_rfc3526_prime_8192(BIGNUM * bn)144 BIGNUM *BN_get_rfc3526_prime_8192(BIGNUM *bn)
145 {
146 return COPY_BN(bn, ossl_bignum_modp_8192_p);
147 }
148