xref: /freebsd/crypto/libecc/src/curves/curves.c (revision f0865ec9906d5a18fa2a3b61381f22ce16e606ad)
1*f0865ec9SKyle Evans /*
2*f0865ec9SKyle Evans  *  Copyright (C) 2017 - This file is part of libecc project
3*f0865ec9SKyle Evans  *
4*f0865ec9SKyle Evans  *  Authors:
5*f0865ec9SKyle Evans  *      Ryad BENADJILA <ryadbenadjila@gmail.com>
6*f0865ec9SKyle Evans  *      Arnaud EBALARD <arnaud.ebalard@ssi.gouv.fr>
7*f0865ec9SKyle Evans  *      Jean-Pierre FLORI <jean-pierre.flori@ssi.gouv.fr>
8*f0865ec9SKyle Evans  *
9*f0865ec9SKyle Evans  *  Contributors:
10*f0865ec9SKyle Evans  *      Nicolas VIVET <nicolas.vivet@ssi.gouv.fr>
11*f0865ec9SKyle Evans  *      Karim KHALFALLAH <karim.khalfallah@ssi.gouv.fr>
12*f0865ec9SKyle Evans  *
13*f0865ec9SKyle Evans  *  This software is licensed under a dual BSD and GPL v2 license.
14*f0865ec9SKyle Evans  *  See LICENSE file at the root folder of the project.
15*f0865ec9SKyle Evans  */
16*f0865ec9SKyle Evans #include <libecc/curves/curves.h>
17*f0865ec9SKyle Evans 
18*f0865ec9SKyle Evans /*
19*f0865ec9SKyle Evans  * From a null-terminated string 'ec_name' of exact length 'ec_name_len'
20*f0865ec9SKyle Evans  * (including final null character), the function returns a pointer
21*f0865ec9SKyle Evans  * to the parameters for that curve via 'ec_params'. The function returns
22*f0865ec9SKyle Evans  * -1 on error or if the search was unsuccessful. It returns 0 on success.
23*f0865ec9SKyle Evans  * 'ec_params' is not meaningful on error.
24*f0865ec9SKyle Evans  */
ec_get_curve_params_by_name(const u8 * ec_name,u8 ec_name_len,const ec_str_params ** ec_s_params)25*f0865ec9SKyle Evans int ec_get_curve_params_by_name(const u8 *ec_name, u8 ec_name_len,
26*f0865ec9SKyle Evans 				const ec_str_params **ec_s_params)
27*f0865ec9SKyle Evans {
28*f0865ec9SKyle Evans 	const ec_str_params *params;
29*f0865ec9SKyle Evans 	u8 comp_len, name_len;
30*f0865ec9SKyle Evans 	u32 len;
31*f0865ec9SKyle Evans 	const ec_mapping *map;
32*f0865ec9SKyle Evans 	const u8 *name;
33*f0865ec9SKyle Evans 	unsigned int i;
34*f0865ec9SKyle Evans 	int ret, check;
35*f0865ec9SKyle Evans 
36*f0865ec9SKyle Evans 	MUST_HAVE((ec_name != NULL), ret, err);
37*f0865ec9SKyle Evans 	MUST_HAVE((ec_s_params != NULL), ret, err);
38*f0865ec9SKyle Evans 	MUST_HAVE(((ec_name_len > 2) && (ec_name_len <= MAX_CURVE_NAME_LEN)), ret, err);
39*f0865ec9SKyle Evans 
40*f0865ec9SKyle Evans 	/*
41*f0865ec9SKyle Evans 	 * User has been warned ec_name_len is expected to include final
42*f0865ec9SKyle Evans 	 * null character.
43*f0865ec9SKyle Evans 	 */
44*f0865ec9SKyle Evans 	ret = local_strnlen((const char *)ec_name, ec_name_len, &len); EG(ret, err);
45*f0865ec9SKyle Evans 	comp_len = (u8)len;
46*f0865ec9SKyle Evans 	MUST_HAVE(((comp_len + 1) == ec_name_len), ret, err);
47*f0865ec9SKyle Evans 
48*f0865ec9SKyle Evans 	/* Iterate on our list of curves */
49*f0865ec9SKyle Evans 	ret = -1;
50*f0865ec9SKyle Evans 	for (i = 0; i < EC_CURVES_NUM; i++) {
51*f0865ec9SKyle Evans 		map = &ec_maps[i];
52*f0865ec9SKyle Evans 		params = map->params;
53*f0865ec9SKyle Evans 
54*f0865ec9SKyle Evans 		MUST_HAVE((params != NULL), ret, err);
55*f0865ec9SKyle Evans 		MUST_HAVE((params->name != NULL), ret, err);
56*f0865ec9SKyle Evans 		MUST_HAVE((params->name->buf != NULL), ret, err);
57*f0865ec9SKyle Evans 
58*f0865ec9SKyle Evans 		name = params->name->buf;
59*f0865ec9SKyle Evans 		name_len = params->name->buflen;
60*f0865ec9SKyle Evans 
61*f0865ec9SKyle Evans 		if (name_len != ec_name_len) {
62*f0865ec9SKyle Evans 			continue;
63*f0865ec9SKyle Evans 		}
64*f0865ec9SKyle Evans 
65*f0865ec9SKyle Evans 		if ((!are_str_equal((const char *)ec_name, (const char *)name, &check)) && check) {
66*f0865ec9SKyle Evans 			(*ec_s_params) = params;
67*f0865ec9SKyle Evans 			ret = 0;
68*f0865ec9SKyle Evans 			break;
69*f0865ec9SKyle Evans 		}
70*f0865ec9SKyle Evans 	}
71*f0865ec9SKyle Evans 
72*f0865ec9SKyle Evans  err:
73*f0865ec9SKyle Evans 	return ret;
74*f0865ec9SKyle Evans }
75*f0865ec9SKyle Evans 
76*f0865ec9SKyle Evans /*
77*f0865ec9SKyle Evans  * From given curve type 'ec_type', the function provides a pointer to the
78*f0865ec9SKyle Evans  * parameters for that curve if it is known, using 'ec_params' out parameter.
79*f0865ec9SKyle Evans  * On error, or if the curve is unknown, the function returns -1, in which
80*f0865ec9SKyle Evans  * case 'ec_params' is not meaningful. The function returns 0 on success.
81*f0865ec9SKyle Evans  */
ec_get_curve_params_by_type(ec_curve_type ec_type,const ec_str_params ** ec_s_params)82*f0865ec9SKyle Evans int ec_get_curve_params_by_type(ec_curve_type ec_type,
83*f0865ec9SKyle Evans 				const ec_str_params **ec_s_params)
84*f0865ec9SKyle Evans {
85*f0865ec9SKyle Evans 	const ec_str_params *params;
86*f0865ec9SKyle Evans 	const ec_mapping *map;
87*f0865ec9SKyle Evans 	const u8 *name;
88*f0865ec9SKyle Evans 	u32 len;
89*f0865ec9SKyle Evans 	u8 name_len;
90*f0865ec9SKyle Evans 	unsigned int i;
91*f0865ec9SKyle Evans 	int ret;
92*f0865ec9SKyle Evans 
93*f0865ec9SKyle Evans 	MUST_HAVE((ec_s_params != NULL), ret, err);
94*f0865ec9SKyle Evans 
95*f0865ec9SKyle Evans 	ret = -1;
96*f0865ec9SKyle Evans 	for (i = 0; i < EC_CURVES_NUM; i++) {
97*f0865ec9SKyle Evans 		map = &ec_maps[i];
98*f0865ec9SKyle Evans 		params = map->params;
99*f0865ec9SKyle Evans 
100*f0865ec9SKyle Evans 		MUST_HAVE((params != NULL), ret, err);
101*f0865ec9SKyle Evans 
102*f0865ec9SKyle Evans 		if (ec_type == map->type) {
103*f0865ec9SKyle Evans 			/* Do some sanity check before returning */
104*f0865ec9SKyle Evans 			MUST_HAVE((params->name != NULL), ret, err);
105*f0865ec9SKyle Evans 			MUST_HAVE((params->name->buf != NULL), ret, err);
106*f0865ec9SKyle Evans 
107*f0865ec9SKyle Evans 			name = params->name->buf;
108*f0865ec9SKyle Evans 			ret = local_strlen((const char *)name, &len); EG(ret, err);
109*f0865ec9SKyle Evans 			MUST_HAVE(len < 256, ret, err);
110*f0865ec9SKyle Evans 			name_len = (u8)len;
111*f0865ec9SKyle Evans 
112*f0865ec9SKyle Evans 			MUST_HAVE((params->name->buflen == (name_len + 1)), ret, err);
113*f0865ec9SKyle Evans 
114*f0865ec9SKyle Evans 			(*ec_s_params) = params;
115*f0865ec9SKyle Evans 			ret = 0;
116*f0865ec9SKyle Evans 			break;
117*f0865ec9SKyle Evans 		}
118*f0865ec9SKyle Evans 	}
119*f0865ec9SKyle Evans 
120*f0865ec9SKyle Evans err:
121*f0865ec9SKyle Evans 	return ret;
122*f0865ec9SKyle Evans }
123*f0865ec9SKyle Evans 
124*f0865ec9SKyle Evans /*
125*f0865ec9SKyle Evans  * From a null-terminated string 'ec_name' of exact length 'ec_name_len'
126*f0865ec9SKyle Evans  * (including final null character), the function returns the curve type
127*f0865ec9SKyle Evans  * via 'ec_type'. The function returns -1 on error or if the search was
128*f0865ec9SKyle Evans  * unsuccessful. It returns 0 on success. 'ec_types' is not meaningful
129*f0865ec9SKyle Evans  * on error.
130*f0865ec9SKyle Evans  */
ec_get_curve_type_by_name(const u8 * ec_name,u8 ec_name_len,ec_curve_type * ec_type)131*f0865ec9SKyle Evans int ec_get_curve_type_by_name(const u8 *ec_name, u8 ec_name_len,
132*f0865ec9SKyle Evans 			      ec_curve_type *ec_type)
133*f0865ec9SKyle Evans {
134*f0865ec9SKyle Evans 	const ec_str_params *params;
135*f0865ec9SKyle Evans 	u32 len;
136*f0865ec9SKyle Evans 	u8 name_len, comp_len;
137*f0865ec9SKyle Evans 	const ec_mapping *map;
138*f0865ec9SKyle Evans 	const u8 *name;
139*f0865ec9SKyle Evans 	unsigned int i;
140*f0865ec9SKyle Evans 	int ret, check;
141*f0865ec9SKyle Evans 
142*f0865ec9SKyle Evans 	/* No need to bother w/ obvious crap */
143*f0865ec9SKyle Evans 	MUST_HAVE(((ec_name_len > 2) && (ec_name_len <= MAX_CURVE_NAME_LEN)), ret, err);
144*f0865ec9SKyle Evans 	MUST_HAVE((ec_type != NULL), ret, err);
145*f0865ec9SKyle Evans 	MUST_HAVE((ec_name != NULL), ret, err);
146*f0865ec9SKyle Evans 
147*f0865ec9SKyle Evans 	/*
148*f0865ec9SKyle Evans 	 * User has been warned ec_name_len is expected to include final
149*f0865ec9SKyle Evans 	 * null character.
150*f0865ec9SKyle Evans 	 */
151*f0865ec9SKyle Evans 	ret = local_strnlen((const char *)ec_name, ec_name_len, &len); EG(ret, err);
152*f0865ec9SKyle Evans 	MUST_HAVE(len < 256, ret, err);
153*f0865ec9SKyle Evans 	comp_len = (u8)len;
154*f0865ec9SKyle Evans 	MUST_HAVE(((comp_len + 1) == ec_name_len), ret, err);
155*f0865ec9SKyle Evans 
156*f0865ec9SKyle Evans 	/* Iterate on our list of curves */
157*f0865ec9SKyle Evans 	ret = -1;
158*f0865ec9SKyle Evans 	for (i = 0; i < EC_CURVES_NUM; i++) {
159*f0865ec9SKyle Evans 		map = &ec_maps[i];
160*f0865ec9SKyle Evans 		params = map->params;
161*f0865ec9SKyle Evans 
162*f0865ec9SKyle Evans 		MUST_HAVE((params != NULL), ret, err);
163*f0865ec9SKyle Evans 		MUST_HAVE((params->name != NULL), ret, err);
164*f0865ec9SKyle Evans 		MUST_HAVE((params->name->buf != NULL), ret, err);
165*f0865ec9SKyle Evans 
166*f0865ec9SKyle Evans 		name = params->name->buf;
167*f0865ec9SKyle Evans 		name_len = params->name->buflen;
168*f0865ec9SKyle Evans 
169*f0865ec9SKyle Evans 		if (name_len != ec_name_len) {
170*f0865ec9SKyle Evans 			continue;
171*f0865ec9SKyle Evans 		}
172*f0865ec9SKyle Evans 
173*f0865ec9SKyle Evans 		if((!are_str_equal((const char *)ec_name, (const char *)name, &check)) && check) {
174*f0865ec9SKyle Evans 			(*ec_type) = map->type;
175*f0865ec9SKyle Evans 			ret = 0;
176*f0865ec9SKyle Evans 			break;
177*f0865ec9SKyle Evans 		}
178*f0865ec9SKyle Evans 	}
179*f0865ec9SKyle Evans 
180*f0865ec9SKyle Evans  err:
181*f0865ec9SKyle Evans 	return ret;
182*f0865ec9SKyle Evans }
183*f0865ec9SKyle Evans 
184*f0865ec9SKyle Evans /*
185*f0865ec9SKyle Evans  * Given a curve type, the function finds the curve described by given type
186*f0865ec9SKyle Evans  * and write its name (null terminated string) to given output buffer 'out'
187*f0865ec9SKyle Evans  * of length 'outlen'. 0 is returned on success, -1 otherwise.
188*f0865ec9SKyle Evans  */
ec_get_curve_name_by_type(const ec_curve_type ec_type,u8 * out,u8 outlen)189*f0865ec9SKyle Evans int ec_get_curve_name_by_type(const ec_curve_type ec_type, u8 *out, u8 outlen)
190*f0865ec9SKyle Evans {
191*f0865ec9SKyle Evans 	const ec_str_params *by_type;
192*f0865ec9SKyle Evans 	const u8 *name;
193*f0865ec9SKyle Evans 	u8 name_len;
194*f0865ec9SKyle Evans 	int ret;
195*f0865ec9SKyle Evans 
196*f0865ec9SKyle Evans 	MUST_HAVE((out != NULL), ret, err);
197*f0865ec9SKyle Evans 
198*f0865ec9SKyle Evans 	/* Let's first do the lookup by type */
199*f0865ec9SKyle Evans 	ret =  ec_get_curve_params_by_type(ec_type, &by_type); EG(ret, err);
200*f0865ec9SKyle Evans 
201*f0865ec9SKyle Evans 	/* Found a curve for that type. Let's check name matches. */
202*f0865ec9SKyle Evans 	MUST_HAVE((by_type != NULL), ret, err);
203*f0865ec9SKyle Evans 	MUST_HAVE((by_type->name != NULL), ret, err);
204*f0865ec9SKyle Evans 	MUST_HAVE((by_type->name->buf != NULL), ret, err);
205*f0865ec9SKyle Evans 
206*f0865ec9SKyle Evans 	name_len = by_type->name->buflen;
207*f0865ec9SKyle Evans 	name = by_type->name->buf;
208*f0865ec9SKyle Evans 
209*f0865ec9SKyle Evans 	/* Not enough room to copy curve name? */
210*f0865ec9SKyle Evans 	MUST_HAVE((name_len <= outlen), ret, err);
211*f0865ec9SKyle Evans 
212*f0865ec9SKyle Evans 	ret = local_memcpy(out, name, name_len);
213*f0865ec9SKyle Evans 
214*f0865ec9SKyle Evans  err:
215*f0865ec9SKyle Evans 	return ret;
216*f0865ec9SKyle Evans }
217*f0865ec9SKyle Evans 
218*f0865ec9SKyle Evans /*
219*f0865ec9SKyle Evans  * The function verifies the coherency between given curve type value and
220*f0865ec9SKyle Evans  * associated name 'ec_name' of length 'ec_name_len' (including final
221*f0865ec9SKyle Evans  * null character). The function returns 0 if the curve type is known
222*f0865ec9SKyle Evans  * and provided name matches expected one. The function returns -1
223*f0865ec9SKyle Evans  * otherwise.
224*f0865ec9SKyle Evans  */
ec_check_curve_type_and_name(const ec_curve_type ec_type,const u8 * ec_name,u8 ec_name_len)225*f0865ec9SKyle Evans int ec_check_curve_type_and_name(const ec_curve_type ec_type,
226*f0865ec9SKyle Evans 				 const u8 *ec_name, u8 ec_name_len)
227*f0865ec9SKyle Evans {
228*f0865ec9SKyle Evans 	const ec_str_params *by_type;
229*f0865ec9SKyle Evans 	const u8 *name;
230*f0865ec9SKyle Evans 	u8 name_len;
231*f0865ec9SKyle Evans 	int ret, check;
232*f0865ec9SKyle Evans 
233*f0865ec9SKyle Evans 	/* No need to bother w/ obvious crap */
234*f0865ec9SKyle Evans 	MUST_HAVE((ec_name != NULL), ret, err);
235*f0865ec9SKyle Evans 	MUST_HAVE(((ec_name_len > 2) && (ec_name_len <= MAX_CURVE_NAME_LEN)), ret, err);
236*f0865ec9SKyle Evans 
237*f0865ec9SKyle Evans 	/* Let's first do the lookup by type */
238*f0865ec9SKyle Evans 	ret = ec_get_curve_params_by_type(ec_type, &by_type); EG(ret, err);
239*f0865ec9SKyle Evans 
240*f0865ec9SKyle Evans 	/* Found a curve for that type. Let's check name matches. */
241*f0865ec9SKyle Evans 	MUST_HAVE((by_type != NULL), ret, err);
242*f0865ec9SKyle Evans 	MUST_HAVE((by_type->name != NULL), ret, err);
243*f0865ec9SKyle Evans 	MUST_HAVE((by_type->name->buf != NULL), ret, err);
244*f0865ec9SKyle Evans 
245*f0865ec9SKyle Evans 	name = by_type->name->buf;
246*f0865ec9SKyle Evans 	name_len = by_type->name->buflen;
247*f0865ec9SKyle Evans 
248*f0865ec9SKyle Evans 	MUST_HAVE((name_len == ec_name_len), ret, err);
249*f0865ec9SKyle Evans 
250*f0865ec9SKyle Evans 	if ((!are_str_equal((const char *)ec_name, (const char *)name, &check)) && (!check)) {
251*f0865ec9SKyle Evans 		ret = -1;
252*f0865ec9SKyle Evans 	}
253*f0865ec9SKyle Evans 
254*f0865ec9SKyle Evans err:
255*f0865ec9SKyle Evans 	return ret;
256*f0865ec9SKyle Evans }
257