174664626SKris Kennaway /* apps/enc.c */ 274664626SKris Kennaway /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) 374664626SKris Kennaway * All rights reserved. 474664626SKris Kennaway * 574664626SKris Kennaway * This package is an SSL implementation written 674664626SKris Kennaway * by Eric Young (eay@cryptsoft.com). 774664626SKris Kennaway * The implementation was written so as to conform with Netscapes SSL. 874664626SKris Kennaway * 974664626SKris Kennaway * This library is free for commercial and non-commercial use as long as 1074664626SKris Kennaway * the following conditions are aheared to. The following conditions 1174664626SKris Kennaway * apply to all code found in this distribution, be it the RC4, RSA, 1274664626SKris Kennaway * lhash, DES, etc., code; not just the SSL code. The SSL documentation 1374664626SKris Kennaway * included with this distribution is covered by the same copyright terms 1474664626SKris Kennaway * except that the holder is Tim Hudson (tjh@cryptsoft.com). 1574664626SKris Kennaway * 1674664626SKris Kennaway * Copyright remains Eric Young's, and as such any Copyright notices in 1774664626SKris Kennaway * the code are not to be removed. 1874664626SKris Kennaway * If this package is used in a product, Eric Young should be given attribution 1974664626SKris Kennaway * as the author of the parts of the library used. 2074664626SKris Kennaway * This can be in the form of a textual message at program startup or 2174664626SKris Kennaway * in documentation (online or textual) provided with the package. 2274664626SKris Kennaway * 2374664626SKris Kennaway * Redistribution and use in source and binary forms, with or without 2474664626SKris Kennaway * modification, are permitted provided that the following conditions 2574664626SKris Kennaway * are met: 2674664626SKris Kennaway * 1. Redistributions of source code must retain the copyright 2774664626SKris Kennaway * notice, this list of conditions and the following disclaimer. 2874664626SKris Kennaway * 2. Redistributions in binary form must reproduce the above copyright 2974664626SKris Kennaway * notice, this list of conditions and the following disclaimer in the 3074664626SKris Kennaway * documentation and/or other materials provided with the distribution. 3174664626SKris Kennaway * 3. All advertising materials mentioning features or use of this software 3274664626SKris Kennaway * must display the following acknowledgement: 3374664626SKris Kennaway * "This product includes cryptographic software written by 3474664626SKris Kennaway * Eric Young (eay@cryptsoft.com)" 3574664626SKris Kennaway * The word 'cryptographic' can be left out if the rouines from the library 3674664626SKris Kennaway * being used are not cryptographic related :-). 3774664626SKris Kennaway * 4. If you include any Windows specific code (or a derivative thereof) from 3874664626SKris Kennaway * the apps directory (application code) you must include an acknowledgement: 3974664626SKris Kennaway * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)" 4074664626SKris Kennaway * 4174664626SKris Kennaway * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND 4274664626SKris Kennaway * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 4374664626SKris Kennaway * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 4474664626SKris Kennaway * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 4574664626SKris Kennaway * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 4674664626SKris Kennaway * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 4774664626SKris Kennaway * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 4874664626SKris Kennaway * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 4974664626SKris Kennaway * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 5074664626SKris Kennaway * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 5174664626SKris Kennaway * SUCH DAMAGE. 5274664626SKris Kennaway * 5374664626SKris Kennaway * The licence and distribution terms for any publically available version or 5474664626SKris Kennaway * derivative of this code cannot be changed. i.e. this code cannot simply be 5574664626SKris Kennaway * copied and put under another distribution licence 5674664626SKris Kennaway * [including the GNU Public Licence.] 5774664626SKris Kennaway */ 5874664626SKris Kennaway 5974664626SKris Kennaway #include <stdio.h> 6074664626SKris Kennaway #include <stdlib.h> 6174664626SKris Kennaway #include <string.h> 6274664626SKris Kennaway #include "apps.h" 6374664626SKris Kennaway #include <openssl/bio.h> 6474664626SKris Kennaway #include <openssl/err.h> 6574664626SKris Kennaway #include <openssl/evp.h> 6674664626SKris Kennaway #include <openssl/objects.h> 6774664626SKris Kennaway #include <openssl/x509.h> 68f579bf8eSKris Kennaway #include <openssl/rand.h> 6974664626SKris Kennaway #include <openssl/pem.h> 70a93cbc2bSJung-uk Kim #ifndef OPENSSL_NO_COMP 711f13597dSJung-uk Kim # include <openssl/comp.h> 72a93cbc2bSJung-uk Kim #endif 735c87c606SMark Murray #include <ctype.h> 7474664626SKris Kennaway 7574664626SKris Kennaway int set_hex(char *in, unsigned char *out, int size); 7674664626SKris Kennaway #undef SIZE 7774664626SKris Kennaway #undef BSIZE 7874664626SKris Kennaway #undef PROG 7974664626SKris Kennaway 8074664626SKris Kennaway #define SIZE (512) 8174664626SKris Kennaway #define BSIZE (8*1024) 8274664626SKris Kennaway #define PROG enc_main 8374664626SKris Kennaway 845c87c606SMark Murray static void show_ciphers(const OBJ_NAME *name, void *bio_) 855c87c606SMark Murray { 865c87c606SMark Murray BIO *bio = bio_; 875c87c606SMark Murray static int n; 885c87c606SMark Murray 895c87c606SMark Murray if (!islower((unsigned char)*name->name)) 905c87c606SMark Murray return; 915c87c606SMark Murray 925c87c606SMark Murray BIO_printf(bio, "-%-25s", name->name); 936f9291ceSJung-uk Kim if (++n == 3) { 945c87c606SMark Murray BIO_printf(bio, "\n"); 955c87c606SMark Murray n = 0; 966f9291ceSJung-uk Kim } else 975c87c606SMark Murray BIO_printf(bio, " "); 985c87c606SMark Murray } 995c87c606SMark Murray 100f579bf8eSKris Kennaway int MAIN(int, char **); 101f579bf8eSKris Kennaway 10274664626SKris Kennaway int MAIN(int argc, char **argv) 10374664626SKris Kennaway { 104f579bf8eSKris Kennaway static const char magic[] = "Salted__"; 1055c87c606SMark Murray char mbuf[sizeof magic - 1]; 10674664626SKris Kennaway char *strbuf = NULL; 10774664626SKris Kennaway unsigned char *buff = NULL, *bufsize = NULL; 10874664626SKris Kennaway int bsize = BSIZE, verbose = 0; 10974664626SKris Kennaway int ret = 1, inl; 1105c87c606SMark Murray int nopad = 0; 1115c87c606SMark Murray unsigned char key[EVP_MAX_KEY_LENGTH], iv[EVP_MAX_IV_LENGTH]; 112f579bf8eSKris Kennaway unsigned char salt[PKCS5_SALT_LEN]; 113f579bf8eSKris Kennaway char *str = NULL, *passarg = NULL, *pass = NULL; 114f579bf8eSKris Kennaway char *hkey = NULL, *hiv = NULL, *hsalt = NULL; 1156be8ae07SJacques Vidrine char *md = NULL; 11674664626SKris Kennaway int enc = 1, printkey = 0, i, base64 = 0; 1171f13597dSJung-uk Kim #ifdef ZLIB 1181f13597dSJung-uk Kim int do_zlib = 0; 1191f13597dSJung-uk Kim BIO *bzl = NULL; 1201f13597dSJung-uk Kim #endif 121f579bf8eSKris Kennaway int debug = 0, olb64 = 0, nosalt = 0; 12274664626SKris Kennaway const EVP_CIPHER *cipher = NULL, *c; 1233b4e3dcbSSimon L. B. Nielsen EVP_CIPHER_CTX *ctx = NULL; 12474664626SKris Kennaway char *inf = NULL, *outf = NULL; 1256f9291ceSJung-uk Kim BIO *in = NULL, *out = NULL, *b64 = NULL, *benc = NULL, *rbio = 1266f9291ceSJung-uk Kim NULL, *wbio = NULL; 127c1803d78SJacques Vidrine #define PROG_NAME_SIZE 39 128c1803d78SJacques Vidrine char pname[PROG_NAME_SIZE + 1]; 129fceca8a3SJacques Vidrine #ifndef OPENSSL_NO_ENGINE 1305c87c606SMark Murray char *engine = NULL; 131fceca8a3SJacques Vidrine #endif 1326be8ae07SJacques Vidrine const EVP_MD *dgst = NULL; 133db522d3aSSimon L. B. Nielsen int non_fips_allow = 0; 13474664626SKris Kennaway 13574664626SKris Kennaway apps_startup(); 13674664626SKris Kennaway 13774664626SKris Kennaway if (bio_err == NULL) 13874664626SKris Kennaway if ((bio_err = BIO_new(BIO_s_file())) != NULL) 13974664626SKris Kennaway BIO_set_fp(bio_err, stderr, BIO_NOCLOSE | BIO_FP_TEXT); 14074664626SKris Kennaway 1415c87c606SMark Murray if (!load_config(bio_err, NULL)) 1425c87c606SMark Murray goto end; 1435c87c606SMark Murray 14474664626SKris Kennaway /* first check the program name */ 1455c87c606SMark Murray program_name(argv[0], pname, sizeof pname); 14674664626SKris Kennaway if (strcmp(pname, "base64") == 0) 14774664626SKris Kennaway base64 = 1; 1481f13597dSJung-uk Kim #ifdef ZLIB 1491f13597dSJung-uk Kim if (strcmp(pname, "zlib") == 0) 1501f13597dSJung-uk Kim do_zlib = 1; 1511f13597dSJung-uk Kim #endif 15274664626SKris Kennaway 15374664626SKris Kennaway cipher = EVP_get_cipherbyname(pname); 1541f13597dSJung-uk Kim #ifdef ZLIB 1551f13597dSJung-uk Kim if (!do_zlib && !base64 && (cipher == NULL) 1561f13597dSJung-uk Kim && (strcmp(pname, "enc") != 0)) 1571f13597dSJung-uk Kim #else 15874664626SKris Kennaway if (!base64 && (cipher == NULL) && (strcmp(pname, "enc") != 0)) 1591f13597dSJung-uk Kim #endif 16074664626SKris Kennaway { 16174664626SKris Kennaway BIO_printf(bio_err, "%s is an unknown cipher\n", pname); 16274664626SKris Kennaway goto bad; 16374664626SKris Kennaway } 16474664626SKris Kennaway 16574664626SKris Kennaway argc--; 16674664626SKris Kennaway argv++; 1676f9291ceSJung-uk Kim while (argc >= 1) { 16874664626SKris Kennaway if (strcmp(*argv, "-e") == 0) 16974664626SKris Kennaway enc = 1; 1706f9291ceSJung-uk Kim else if (strcmp(*argv, "-in") == 0) { 1716f9291ceSJung-uk Kim if (--argc < 1) 1726f9291ceSJung-uk Kim goto bad; 17374664626SKris Kennaway inf = *(++argv); 1746f9291ceSJung-uk Kim } else if (strcmp(*argv, "-out") == 0) { 1756f9291ceSJung-uk Kim if (--argc < 1) 1766f9291ceSJung-uk Kim goto bad; 17774664626SKris Kennaway outf = *(++argv); 1786f9291ceSJung-uk Kim } else if (strcmp(*argv, "-pass") == 0) { 1796f9291ceSJung-uk Kim if (--argc < 1) 1806f9291ceSJung-uk Kim goto bad; 181f579bf8eSKris Kennaway passarg = *(++argv); 182f579bf8eSKris Kennaway } 183fceca8a3SJacques Vidrine #ifndef OPENSSL_NO_ENGINE 1846f9291ceSJung-uk Kim else if (strcmp(*argv, "-engine") == 0) { 1856f9291ceSJung-uk Kim if (--argc < 1) 1866f9291ceSJung-uk Kim goto bad; 1875c87c606SMark Murray engine = *(++argv); 1885c87c606SMark Murray } 189fceca8a3SJacques Vidrine #endif 19074664626SKris Kennaway else if (strcmp(*argv, "-d") == 0) 19174664626SKris Kennaway enc = 0; 19274664626SKris Kennaway else if (strcmp(*argv, "-p") == 0) 19374664626SKris Kennaway printkey = 1; 19474664626SKris Kennaway else if (strcmp(*argv, "-v") == 0) 19574664626SKris Kennaway verbose = 1; 1965c87c606SMark Murray else if (strcmp(*argv, "-nopad") == 0) 1975c87c606SMark Murray nopad = 1; 198f579bf8eSKris Kennaway else if (strcmp(*argv, "-salt") == 0) 199f579bf8eSKris Kennaway nosalt = 0; 200f579bf8eSKris Kennaway else if (strcmp(*argv, "-nosalt") == 0) 201f579bf8eSKris Kennaway nosalt = 1; 202f579bf8eSKris Kennaway else if (strcmp(*argv, "-debug") == 0) 20374664626SKris Kennaway debug = 1; 20474664626SKris Kennaway else if (strcmp(*argv, "-P") == 0) 20574664626SKris Kennaway printkey = 2; 20674664626SKris Kennaway else if (strcmp(*argv, "-A") == 0) 20774664626SKris Kennaway olb64 = 1; 20874664626SKris Kennaway else if (strcmp(*argv, "-a") == 0) 20974664626SKris Kennaway base64 = 1; 21074664626SKris Kennaway else if (strcmp(*argv, "-base64") == 0) 21174664626SKris Kennaway base64 = 1; 2121f13597dSJung-uk Kim #ifdef ZLIB 2131f13597dSJung-uk Kim else if (strcmp(*argv, "-z") == 0) 2141f13597dSJung-uk Kim do_zlib = 1; 2151f13597dSJung-uk Kim #endif 2166f9291ceSJung-uk Kim else if (strcmp(*argv, "-bufsize") == 0) { 2176f9291ceSJung-uk Kim if (--argc < 1) 2186f9291ceSJung-uk Kim goto bad; 21974664626SKris Kennaway bufsize = (unsigned char *)*(++argv); 2206f9291ceSJung-uk Kim } else if (strcmp(*argv, "-k") == 0) { 2216f9291ceSJung-uk Kim if (--argc < 1) 2226f9291ceSJung-uk Kim goto bad; 22374664626SKris Kennaway str = *(++argv); 2246f9291ceSJung-uk Kim } else if (strcmp(*argv, "-kfile") == 0) { 22574664626SKris Kennaway static char buf[128]; 22674664626SKris Kennaway FILE *infile; 22774664626SKris Kennaway char *file; 22874664626SKris Kennaway 2296f9291ceSJung-uk Kim if (--argc < 1) 2306f9291ceSJung-uk Kim goto bad; 23174664626SKris Kennaway file = *(++argv); 23274664626SKris Kennaway infile = fopen(file, "r"); 2336f9291ceSJung-uk Kim if (infile == NULL) { 2346f9291ceSJung-uk Kim BIO_printf(bio_err, "unable to read key from '%s'\n", file); 23574664626SKris Kennaway goto bad; 23674664626SKris Kennaway } 23774664626SKris Kennaway buf[0] = '\0'; 2386f9291ceSJung-uk Kim if (!fgets(buf, sizeof buf, infile)) { 2396f9291ceSJung-uk Kim BIO_printf(bio_err, "unable to read key from '%s'\n", file); 2406a599222SSimon L. B. Nielsen goto bad; 2416a599222SSimon L. B. Nielsen } 24274664626SKris Kennaway fclose(infile); 24374664626SKris Kennaway i = strlen(buf); 2446f9291ceSJung-uk Kim if ((i > 0) && ((buf[i - 1] == '\n') || (buf[i - 1] == '\r'))) 24574664626SKris Kennaway buf[--i] = '\0'; 2466f9291ceSJung-uk Kim if ((i > 0) && ((buf[i - 1] == '\n') || (buf[i - 1] == '\r'))) 24774664626SKris Kennaway buf[--i] = '\0'; 2486f9291ceSJung-uk Kim if (i < 1) { 24974664626SKris Kennaway BIO_printf(bio_err, "zero length password\n"); 25074664626SKris Kennaway goto bad; 25174664626SKris Kennaway } 25274664626SKris Kennaway str = buf; 2536f9291ceSJung-uk Kim } else if (strcmp(*argv, "-K") == 0) { 2546f9291ceSJung-uk Kim if (--argc < 1) 2556f9291ceSJung-uk Kim goto bad; 25674664626SKris Kennaway hkey = *(++argv); 2576f9291ceSJung-uk Kim } else if (strcmp(*argv, "-S") == 0) { 2586f9291ceSJung-uk Kim if (--argc < 1) 2596f9291ceSJung-uk Kim goto bad; 260f579bf8eSKris Kennaway hsalt = *(++argv); 2616f9291ceSJung-uk Kim } else if (strcmp(*argv, "-iv") == 0) { 2626f9291ceSJung-uk Kim if (--argc < 1) 2636f9291ceSJung-uk Kim goto bad; 26474664626SKris Kennaway hiv = *(++argv); 2656f9291ceSJung-uk Kim } else if (strcmp(*argv, "-md") == 0) { 2666f9291ceSJung-uk Kim if (--argc < 1) 2676f9291ceSJung-uk Kim goto bad; 2686be8ae07SJacques Vidrine md = *(++argv); 2696f9291ceSJung-uk Kim } else if (strcmp(*argv, "-non-fips-allow") == 0) 270db522d3aSSimon L. B. Nielsen non_fips_allow = 1; 27174664626SKris Kennaway else if ((argv[0][0] == '-') && 2726f9291ceSJung-uk Kim ((c = EVP_get_cipherbyname(&(argv[0][1]))) != NULL)) { 27374664626SKris Kennaway cipher = c; 2746f9291ceSJung-uk Kim } else if (strcmp(*argv, "-none") == 0) 27574664626SKris Kennaway cipher = NULL; 2766f9291ceSJung-uk Kim else { 27774664626SKris Kennaway BIO_printf(bio_err, "unknown option '%s'\n", *argv); 27874664626SKris Kennaway bad: 27974664626SKris Kennaway BIO_printf(bio_err, "options are\n"); 28074664626SKris Kennaway BIO_printf(bio_err, "%-14s input file\n", "-in <file>"); 281f579bf8eSKris Kennaway BIO_printf(bio_err, "%-14s output file\n", "-out <file>"); 282f579bf8eSKris Kennaway BIO_printf(bio_err, "%-14s pass phrase source\n", "-pass <arg>"); 28374664626SKris Kennaway BIO_printf(bio_err, "%-14s encrypt\n", "-e"); 28474664626SKris Kennaway BIO_printf(bio_err, "%-14s decrypt\n", "-d"); 2856f9291ceSJung-uk Kim BIO_printf(bio_err, 2866f9291ceSJung-uk Kim "%-14s base64 encode/decode, depending on encryption flag\n", 2876f9291ceSJung-uk Kim "-a/-base64"); 2886f9291ceSJung-uk Kim BIO_printf(bio_err, "%-14s passphrase is the next argument\n", 2896f9291ceSJung-uk Kim "-k"); 2906f9291ceSJung-uk Kim BIO_printf(bio_err, 2916f9291ceSJung-uk Kim "%-14s passphrase is the first line of the file argument\n", 2926f9291ceSJung-uk Kim "-kfile"); 2936f9291ceSJung-uk Kim BIO_printf(bio_err, 2946f9291ceSJung-uk Kim "%-14s the next argument is the md to use to create a key\n", 2956f9291ceSJung-uk Kim "-md"); 2966f9291ceSJung-uk Kim BIO_printf(bio_err, 2976f9291ceSJung-uk Kim "%-14s from a passphrase. One of md2, md5, sha or sha1\n", 2986f9291ceSJung-uk Kim ""); 2996f9291ceSJung-uk Kim BIO_printf(bio_err, "%-14s salt in hex is the next argument\n", 3006f9291ceSJung-uk Kim "-S"); 3016f9291ceSJung-uk Kim BIO_printf(bio_err, "%-14s key/iv in hex is the next argument\n", 3026f9291ceSJung-uk Kim "-K/-iv"); 3036f9291ceSJung-uk Kim BIO_printf(bio_err, "%-14s print the iv/key (then exit if -P)\n", 3046f9291ceSJung-uk Kim "-[pP]"); 30574664626SKris Kennaway BIO_printf(bio_err, "%-14s buffer size\n", "-bufsize <n>"); 3066f9291ceSJung-uk Kim BIO_printf(bio_err, "%-14s disable standard block padding\n", 3076f9291ceSJung-uk Kim "-nopad"); 308fceca8a3SJacques Vidrine #ifndef OPENSSL_NO_ENGINE 3096f9291ceSJung-uk Kim BIO_printf(bio_err, 3106f9291ceSJung-uk Kim "%-14s use engine e, possibly a hardware device.\n", 3116f9291ceSJung-uk Kim "-engine e"); 312fceca8a3SJacques Vidrine #endif 31374664626SKris Kennaway 31474664626SKris Kennaway BIO_printf(bio_err, "Cipher Types\n"); 3155c87c606SMark Murray OBJ_NAME_do_all_sorted(OBJ_NAME_TYPE_CIPHER_METH, 3166f9291ceSJung-uk Kim show_ciphers, bio_err); 3175c87c606SMark Murray BIO_printf(bio_err, "\n"); 31874664626SKris Kennaway 31974664626SKris Kennaway goto end; 32074664626SKris Kennaway } 32174664626SKris Kennaway argc--; 32274664626SKris Kennaway argv++; 32374664626SKris Kennaway } 32474664626SKris Kennaway 325fceca8a3SJacques Vidrine #ifndef OPENSSL_NO_ENGINE 326a3ddd25aSSimon L. B. Nielsen setup_engine(bio_err, engine, 0); 327fceca8a3SJacques Vidrine #endif 3285c87c606SMark Murray 3296f9291ceSJung-uk Kim if (cipher && EVP_CIPHER_flags(cipher) & EVP_CIPH_FLAG_AEAD_CIPHER) { 3306f9291ceSJung-uk Kim BIO_printf(bio_err, 3316f9291ceSJung-uk Kim "AEAD ciphers not supported by the enc utility\n"); 33294ad176cSJung-uk Kim goto end; 33394ad176cSJung-uk Kim } 33494ad176cSJung-uk Kim 3356f9291ceSJung-uk Kim if (cipher && (EVP_CIPHER_mode(cipher) == EVP_CIPH_XTS_MODE)) { 3366f9291ceSJung-uk Kim BIO_printf(bio_err, 3376f9291ceSJung-uk Kim "Ciphers in XTS mode are not supported by the enc utility\n"); 338a93cbc2bSJung-uk Kim goto end; 339a93cbc2bSJung-uk Kim } 340a93cbc2bSJung-uk Kim 3416f9291ceSJung-uk Kim if (md && (dgst = EVP_get_digestbyname(md)) == NULL) { 3426be8ae07SJacques Vidrine BIO_printf(bio_err, "%s is an unsupported message digest type\n", md); 3436be8ae07SJacques Vidrine goto end; 3446be8ae07SJacques Vidrine } 3456be8ae07SJacques Vidrine 3466f9291ceSJung-uk Kim if (dgst == NULL) { 3476be8ae07SJacques Vidrine dgst = EVP_md5(); 3486be8ae07SJacques Vidrine } 3496be8ae07SJacques Vidrine 3506f9291ceSJung-uk Kim if (bufsize != NULL) { 35174664626SKris Kennaway unsigned long n; 35274664626SKris Kennaway 3536f9291ceSJung-uk Kim for (n = 0; *bufsize; bufsize++) { 35474664626SKris Kennaway i = *bufsize; 35574664626SKris Kennaway if ((i <= '9') && (i >= '0')) 35674664626SKris Kennaway n = n * 10 + i - '0'; 3576f9291ceSJung-uk Kim else if (i == 'k') { 35874664626SKris Kennaway n *= 1024; 35974664626SKris Kennaway bufsize++; 36074664626SKris Kennaway break; 36174664626SKris Kennaway } 36274664626SKris Kennaway } 3636f9291ceSJung-uk Kim if (*bufsize != '\0') { 36474664626SKris Kennaway BIO_printf(bio_err, "invalid 'bufsize' specified.\n"); 36574664626SKris Kennaway goto end; 36674664626SKris Kennaway } 36774664626SKris Kennaway 36874664626SKris Kennaway /* It must be large enough for a base64 encoded line */ 3696f9291ceSJung-uk Kim if (base64 && n < 80) 3706f9291ceSJung-uk Kim n = 80; 37174664626SKris Kennaway 37274664626SKris Kennaway bsize = (int)n; 3736f9291ceSJung-uk Kim if (verbose) 3746f9291ceSJung-uk Kim BIO_printf(bio_err, "bufsize=%d\n", bsize); 37574664626SKris Kennaway } 37674664626SKris Kennaway 377ddd58736SKris Kennaway strbuf = OPENSSL_malloc(SIZE); 378ddd58736SKris Kennaway buff = (unsigned char *)OPENSSL_malloc(EVP_ENCODE_LENGTH(bsize)); 3796f9291ceSJung-uk Kim if ((buff == NULL) || (strbuf == NULL)) { 3806f9291ceSJung-uk Kim BIO_printf(bio_err, "OPENSSL_malloc failure %ld\n", 3816f9291ceSJung-uk Kim (long)EVP_ENCODE_LENGTH(bsize)); 38274664626SKris Kennaway goto end; 38374664626SKris Kennaway } 38474664626SKris Kennaway 38574664626SKris Kennaway in = BIO_new(BIO_s_file()); 38674664626SKris Kennaway out = BIO_new(BIO_s_file()); 3876f9291ceSJung-uk Kim if ((in == NULL) || (out == NULL)) { 38874664626SKris Kennaway ERR_print_errors(bio_err); 38974664626SKris Kennaway goto end; 39074664626SKris Kennaway } 3916f9291ceSJung-uk Kim if (debug) { 39274664626SKris Kennaway BIO_set_callback(in, BIO_debug_callback); 39374664626SKris Kennaway BIO_set_callback(out, BIO_debug_callback); 3945471f83eSSimon L. B. Nielsen BIO_set_callback_arg(in, (char *)bio_err); 3955471f83eSSimon L. B. Nielsen BIO_set_callback_arg(out, (char *)bio_err); 39674664626SKris Kennaway } 39774664626SKris Kennaway 3986f9291ceSJung-uk Kim if (inf == NULL) { 3991f13597dSJung-uk Kim #ifndef OPENSSL_NO_SETVBUF_IONBF 400ed5d4f9aSSimon L. B. Nielsen if (bufsize != NULL) 401ed5d4f9aSSimon L. B. Nielsen setvbuf(stdin, (char *)NULL, _IONBF, 0); 4021f13597dSJung-uk Kim #endif /* ndef OPENSSL_NO_SETVBUF_IONBF */ 40374664626SKris Kennaway BIO_set_fp(in, stdin, BIO_NOCLOSE); 4046f9291ceSJung-uk Kim } else { 4056f9291ceSJung-uk Kim if (BIO_read_filename(in, inf) <= 0) { 40674664626SKris Kennaway perror(inf); 40774664626SKris Kennaway goto end; 40874664626SKris Kennaway } 40974664626SKris Kennaway } 41074664626SKris Kennaway 411f579bf8eSKris Kennaway if (!str && passarg) { 412f579bf8eSKris Kennaway if (!app_passwd(bio_err, passarg, NULL, &pass, NULL)) { 413f579bf8eSKris Kennaway BIO_printf(bio_err, "Error getting password\n"); 414f579bf8eSKris Kennaway goto end; 415f579bf8eSKris Kennaway } 416f579bf8eSKris Kennaway str = pass; 417f579bf8eSKris Kennaway } 418f579bf8eSKris Kennaway 4196f9291ceSJung-uk Kim if ((str == NULL) && (cipher != NULL) && (hkey == NULL)) { 4206f9291ceSJung-uk Kim for (;;) { 42174664626SKris Kennaway char buf[200]; 42274664626SKris Kennaway 423ced566fdSJacques Vidrine BIO_snprintf(buf, sizeof buf, "enter %s %s password:", 42474664626SKris Kennaway OBJ_nid2ln(EVP_CIPHER_nid(cipher)), 42574664626SKris Kennaway (enc) ? "encryption" : "decryption"); 42674664626SKris Kennaway strbuf[0] = '\0'; 42774664626SKris Kennaway i = EVP_read_pw_string((char *)strbuf, SIZE, buf, enc); 4286f9291ceSJung-uk Kim if (i == 0) { 4296f9291ceSJung-uk Kim if (strbuf[0] == '\0') { 43074664626SKris Kennaway ret = 1; 43174664626SKris Kennaway goto end; 43274664626SKris Kennaway } 43374664626SKris Kennaway str = strbuf; 43474664626SKris Kennaway break; 43574664626SKris Kennaway } 4366f9291ceSJung-uk Kim if (i < 0) { 43774664626SKris Kennaway BIO_printf(bio_err, "bad password read\n"); 43874664626SKris Kennaway goto end; 43974664626SKris Kennaway } 44074664626SKris Kennaway } 44174664626SKris Kennaway } 44274664626SKris Kennaway 4436f9291ceSJung-uk Kim if (outf == NULL) { 44474664626SKris Kennaway BIO_set_fp(out, stdout, BIO_NOCLOSE); 4451f13597dSJung-uk Kim #ifndef OPENSSL_NO_SETVBUF_IONBF 446ed5d4f9aSSimon L. B. Nielsen if (bufsize != NULL) 447ed5d4f9aSSimon L. B. Nielsen setvbuf(stdout, (char *)NULL, _IONBF, 0); 4481f13597dSJung-uk Kim #endif /* ndef OPENSSL_NO_SETVBUF_IONBF */ 4495c87c606SMark Murray #ifdef OPENSSL_SYS_VMS 450ddd58736SKris Kennaway { 451ddd58736SKris Kennaway BIO *tmpbio = BIO_new(BIO_f_linebuffer()); 452ddd58736SKris Kennaway out = BIO_push(tmpbio, out); 453ddd58736SKris Kennaway } 454ddd58736SKris Kennaway #endif 4556f9291ceSJung-uk Kim } else { 4566f9291ceSJung-uk Kim if (BIO_write_filename(out, outf) <= 0) { 45774664626SKris Kennaway perror(outf); 45874664626SKris Kennaway goto end; 45974664626SKris Kennaway } 46074664626SKris Kennaway } 46174664626SKris Kennaway 46274664626SKris Kennaway rbio = in; 46374664626SKris Kennaway wbio = out; 46474664626SKris Kennaway 4651f13597dSJung-uk Kim #ifdef ZLIB 4661f13597dSJung-uk Kim 4676f9291ceSJung-uk Kim if (do_zlib) { 4681f13597dSJung-uk Kim if ((bzl = BIO_new(BIO_f_zlib())) == NULL) 4691f13597dSJung-uk Kim goto end; 4701f13597dSJung-uk Kim if (enc) 4711f13597dSJung-uk Kim wbio = BIO_push(bzl, wbio); 4721f13597dSJung-uk Kim else 4731f13597dSJung-uk Kim rbio = BIO_push(bzl, rbio); 4741f13597dSJung-uk Kim } 4751f13597dSJung-uk Kim #endif 4761f13597dSJung-uk Kim 4776f9291ceSJung-uk Kim if (base64) { 47874664626SKris Kennaway if ((b64 = BIO_new(BIO_f_base64())) == NULL) 47974664626SKris Kennaway goto end; 4806f9291ceSJung-uk Kim if (debug) { 48174664626SKris Kennaway BIO_set_callback(b64, BIO_debug_callback); 4825471f83eSSimon L. B. Nielsen BIO_set_callback_arg(b64, (char *)bio_err); 48374664626SKris Kennaway } 48474664626SKris Kennaway if (olb64) 48574664626SKris Kennaway BIO_set_flags(b64, BIO_FLAGS_BASE64_NO_NL); 48674664626SKris Kennaway if (enc) 48774664626SKris Kennaway wbio = BIO_push(b64, wbio); 48874664626SKris Kennaway else 48974664626SKris Kennaway rbio = BIO_push(b64, rbio); 49074664626SKris Kennaway } 49174664626SKris Kennaway 4926f9291ceSJung-uk Kim if (cipher != NULL) { 4936f9291ceSJung-uk Kim /* 4946f9291ceSJung-uk Kim * Note that str is NULL if a key was passed on the command line, so 4956f9291ceSJung-uk Kim * we get no salt in that case. Is this a bug? 4965c87c606SMark Murray */ 4976f9291ceSJung-uk Kim if (str != NULL) { 4986f9291ceSJung-uk Kim /* 4996f9291ceSJung-uk Kim * Salt handling: if encrypting generate a salt and write to 5006f9291ceSJung-uk Kim * output BIO. If decrypting read salt from input BIO. 501f579bf8eSKris Kennaway */ 502f579bf8eSKris Kennaway unsigned char *sptr; 5036f9291ceSJung-uk Kim if (nosalt) 5046f9291ceSJung-uk Kim sptr = NULL; 505f579bf8eSKris Kennaway else { 506f579bf8eSKris Kennaway if (enc) { 507f579bf8eSKris Kennaway if (hsalt) { 5085c87c606SMark Murray if (!set_hex(hsalt, salt, sizeof salt)) { 5096f9291ceSJung-uk Kim BIO_printf(bio_err, "invalid hex salt value\n"); 510f579bf8eSKris Kennaway goto end; 511f579bf8eSKris Kennaway } 5125c87c606SMark Murray } else if (RAND_pseudo_bytes(salt, sizeof salt) < 0) 513f579bf8eSKris Kennaway goto end; 5146f9291ceSJung-uk Kim /* 5156f9291ceSJung-uk Kim * If -P option then don't bother writing 5166f9291ceSJung-uk Kim */ 517f579bf8eSKris Kennaway if ((printkey != 2) 518f579bf8eSKris Kennaway && (BIO_write(wbio, magic, 519f579bf8eSKris Kennaway sizeof magic - 1) != sizeof magic - 1 520f579bf8eSKris Kennaway || BIO_write(wbio, 521f579bf8eSKris Kennaway (char *)salt, 5225c87c606SMark Murray sizeof salt) != sizeof salt)) { 523f579bf8eSKris Kennaway BIO_printf(bio_err, "error writing output file\n"); 524f579bf8eSKris Kennaway goto end; 525f579bf8eSKris Kennaway } 526f579bf8eSKris Kennaway } else if (BIO_read(rbio, mbuf, sizeof mbuf) != sizeof mbuf 527f579bf8eSKris Kennaway || BIO_read(rbio, 528f579bf8eSKris Kennaway (unsigned char *)salt, 5295c87c606SMark Murray sizeof salt) != sizeof salt) { 530f579bf8eSKris Kennaway BIO_printf(bio_err, "error reading input file\n"); 531f579bf8eSKris Kennaway goto end; 532f579bf8eSKris Kennaway } else if (memcmp(mbuf, magic, sizeof magic - 1)) { 533f579bf8eSKris Kennaway BIO_printf(bio_err, "bad magic number\n"); 534f579bf8eSKris Kennaway goto end; 535f579bf8eSKris Kennaway } 536f579bf8eSKris Kennaway 537f579bf8eSKris Kennaway sptr = salt; 538f579bf8eSKris Kennaway } 539f579bf8eSKris Kennaway 5406be8ae07SJacques Vidrine EVP_BytesToKey(cipher, dgst, sptr, 5416f9291ceSJung-uk Kim (unsigned char *)str, strlen(str), 1, key, iv); 5426f9291ceSJung-uk Kim /* 5436f9291ceSJung-uk Kim * zero the complete buffer or the string passed from the command 5446f9291ceSJung-uk Kim * line bug picked up by Larry J. Hughes Jr. <hughes@indiana.edu> 5456f9291ceSJung-uk Kim */ 546f579bf8eSKris Kennaway if (str == strbuf) 5475c87c606SMark Murray OPENSSL_cleanse(str, SIZE); 548f579bf8eSKris Kennaway else 5495c87c606SMark Murray OPENSSL_cleanse(str, strlen(str)); 550f579bf8eSKris Kennaway } 551*ed6b93beSJung-uk Kim if (hiv != NULL) { 552*ed6b93beSJung-uk Kim int siz = EVP_CIPHER_iv_length(cipher); 553*ed6b93beSJung-uk Kim if (siz == 0) { 554*ed6b93beSJung-uk Kim BIO_printf(bio_err, "warning: iv not use by this cipher\n"); 555*ed6b93beSJung-uk Kim } else if (!set_hex(hiv, iv, sizeof iv)) { 556f579bf8eSKris Kennaway BIO_printf(bio_err, "invalid hex iv value\n"); 557f579bf8eSKris Kennaway goto end; 558f579bf8eSKris Kennaway } 559*ed6b93beSJung-uk Kim } 560db522d3aSSimon L. B. Nielsen if ((hiv == NULL) && (str == NULL) 5616f9291ceSJung-uk Kim && EVP_CIPHER_iv_length(cipher) != 0) { 5626f9291ceSJung-uk Kim /* 5636f9291ceSJung-uk Kim * No IV was explicitly set and no IV was generated during 5646f9291ceSJung-uk Kim * EVP_BytesToKey. Hence the IV is undefined, making correct 5656f9291ceSJung-uk Kim * decryption impossible. 5666f9291ceSJung-uk Kim */ 56726d191b4SKris Kennaway BIO_printf(bio_err, "iv undefined\n"); 56826d191b4SKris Kennaway goto end; 56926d191b4SKris Kennaway } 570*ed6b93beSJung-uk Kim if ((hkey != NULL) && !set_hex(hkey, key, EVP_CIPHER_key_length(cipher))) { 571f579bf8eSKris Kennaway BIO_printf(bio_err, "invalid hex key value\n"); 572f579bf8eSKris Kennaway goto end; 573f579bf8eSKris Kennaway } 574f579bf8eSKris Kennaway 575f579bf8eSKris Kennaway if ((benc = BIO_new(BIO_f_cipher())) == NULL) 576f579bf8eSKris Kennaway goto end; 5773b4e3dcbSSimon L. B. Nielsen 5786f9291ceSJung-uk Kim /* 5796f9291ceSJung-uk Kim * Since we may be changing parameters work on the encryption context 5806f9291ceSJung-uk Kim * rather than calling BIO_set_cipher(). 5813b4e3dcbSSimon L. B. Nielsen */ 5823b4e3dcbSSimon L. B. Nielsen 5835c87c606SMark Murray BIO_get_cipher_ctx(benc, &ctx); 584db522d3aSSimon L. B. Nielsen 585db522d3aSSimon L. B. Nielsen if (non_fips_allow) 5866f9291ceSJung-uk Kim EVP_CIPHER_CTX_set_flags(ctx, EVP_CIPH_FLAG_NON_FIPS_ALLOW); 587db522d3aSSimon L. B. Nielsen 5886f9291ceSJung-uk Kim if (!EVP_CipherInit_ex(ctx, cipher, NULL, NULL, NULL, enc)) { 5893b4e3dcbSSimon L. B. Nielsen BIO_printf(bio_err, "Error setting cipher %s\n", 5903b4e3dcbSSimon L. B. Nielsen EVP_CIPHER_name(cipher)); 5913b4e3dcbSSimon L. B. Nielsen ERR_print_errors(bio_err); 5923b4e3dcbSSimon L. B. Nielsen goto end; 5935c87c606SMark Murray } 5943b4e3dcbSSimon L. B. Nielsen 5953b4e3dcbSSimon L. B. Nielsen if (nopad) 5963b4e3dcbSSimon L. B. Nielsen EVP_CIPHER_CTX_set_padding(ctx, 0); 5973b4e3dcbSSimon L. B. Nielsen 5986f9291ceSJung-uk Kim if (!EVP_CipherInit_ex(ctx, NULL, NULL, key, iv, enc)) { 5993b4e3dcbSSimon L. B. Nielsen BIO_printf(bio_err, "Error setting cipher %s\n", 6003b4e3dcbSSimon L. B. Nielsen EVP_CIPHER_name(cipher)); 6013b4e3dcbSSimon L. B. Nielsen ERR_print_errors(bio_err); 6023b4e3dcbSSimon L. B. Nielsen goto end; 6033b4e3dcbSSimon L. B. Nielsen } 6043b4e3dcbSSimon L. B. Nielsen 6056f9291ceSJung-uk Kim if (debug) { 606f579bf8eSKris Kennaway BIO_set_callback(benc, BIO_debug_callback); 6075471f83eSSimon L. B. Nielsen BIO_set_callback_arg(benc, (char *)bio_err); 608f579bf8eSKris Kennaway } 609f579bf8eSKris Kennaway 6106f9291ceSJung-uk Kim if (printkey) { 6116f9291ceSJung-uk Kim if (!nosalt) { 612f579bf8eSKris Kennaway printf("salt="); 6133b4e3dcbSSimon L. B. Nielsen for (i = 0; i < (int)sizeof(salt); i++) 614f579bf8eSKris Kennaway printf("%02X", salt[i]); 615f579bf8eSKris Kennaway printf("\n"); 616f579bf8eSKris Kennaway } 6176f9291ceSJung-uk Kim if (cipher->key_len > 0) { 618f579bf8eSKris Kennaway printf("key="); 619f579bf8eSKris Kennaway for (i = 0; i < cipher->key_len; i++) 620f579bf8eSKris Kennaway printf("%02X", key[i]); 621f579bf8eSKris Kennaway printf("\n"); 622f579bf8eSKris Kennaway } 6236f9291ceSJung-uk Kim if (cipher->iv_len > 0) { 624f579bf8eSKris Kennaway printf("iv ="); 625f579bf8eSKris Kennaway for (i = 0; i < cipher->iv_len; i++) 626f579bf8eSKris Kennaway printf("%02X", iv[i]); 627f579bf8eSKris Kennaway printf("\n"); 628f579bf8eSKris Kennaway } 6296f9291ceSJung-uk Kim if (printkey == 2) { 630f579bf8eSKris Kennaway ret = 0; 631f579bf8eSKris Kennaway goto end; 632f579bf8eSKris Kennaway } 633f579bf8eSKris Kennaway } 634f579bf8eSKris Kennaway } 635f579bf8eSKris Kennaway 63674664626SKris Kennaway /* Only encrypt/decrypt as we write the file */ 63774664626SKris Kennaway if (benc != NULL) 63874664626SKris Kennaway wbio = BIO_push(benc, wbio); 63974664626SKris Kennaway 6406f9291ceSJung-uk Kim for (;;) { 64174664626SKris Kennaway inl = BIO_read(rbio, (char *)buff, bsize); 6426f9291ceSJung-uk Kim if (inl <= 0) 6436f9291ceSJung-uk Kim break; 6446f9291ceSJung-uk Kim if (BIO_write(wbio, (char *)buff, inl) != inl) { 64574664626SKris Kennaway BIO_printf(bio_err, "error writing output file\n"); 64674664626SKris Kennaway goto end; 64774664626SKris Kennaway } 64874664626SKris Kennaway } 6496f9291ceSJung-uk Kim if (!BIO_flush(wbio)) { 65074664626SKris Kennaway BIO_printf(bio_err, "bad decrypt\n"); 65174664626SKris Kennaway goto end; 65274664626SKris Kennaway } 65374664626SKris Kennaway 65474664626SKris Kennaway ret = 0; 6556f9291ceSJung-uk Kim if (verbose) { 65674664626SKris Kennaway BIO_printf(bio_err, "bytes read :%8ld\n", BIO_number_read(in)); 65774664626SKris Kennaway BIO_printf(bio_err, "bytes written:%8ld\n", BIO_number_written(out)); 65874664626SKris Kennaway } 65974664626SKris Kennaway end: 660f579bf8eSKris Kennaway ERR_print_errors(bio_err); 6616f9291ceSJung-uk Kim if (strbuf != NULL) 6626f9291ceSJung-uk Kim OPENSSL_free(strbuf); 6636f9291ceSJung-uk Kim if (buff != NULL) 6646f9291ceSJung-uk Kim OPENSSL_free(buff); 6656f9291ceSJung-uk Kim if (in != NULL) 6666f9291ceSJung-uk Kim BIO_free(in); 6676f9291ceSJung-uk Kim if (out != NULL) 6686f9291ceSJung-uk Kim BIO_free_all(out); 6696f9291ceSJung-uk Kim if (benc != NULL) 6706f9291ceSJung-uk Kim BIO_free(benc); 6716f9291ceSJung-uk Kim if (b64 != NULL) 6726f9291ceSJung-uk Kim BIO_free(b64); 6731f13597dSJung-uk Kim #ifdef ZLIB 6746f9291ceSJung-uk Kim if (bzl != NULL) 6756f9291ceSJung-uk Kim BIO_free(bzl); 6761f13597dSJung-uk Kim #endif 6776f9291ceSJung-uk Kim if (pass) 6786f9291ceSJung-uk Kim OPENSSL_free(pass); 6795c87c606SMark Murray apps_shutdown(); 6805c87c606SMark Murray OPENSSL_EXIT(ret); 68174664626SKris Kennaway } 68274664626SKris Kennaway 68374664626SKris Kennaway int set_hex(char *in, unsigned char *out, int size) 68474664626SKris Kennaway { 68574664626SKris Kennaway int i, n; 68674664626SKris Kennaway unsigned char j; 68774664626SKris Kennaway 68874664626SKris Kennaway n = strlen(in); 6896f9291ceSJung-uk Kim if (n > (size * 2)) { 69074664626SKris Kennaway BIO_printf(bio_err, "hex string is too long\n"); 69174664626SKris Kennaway return (0); 69274664626SKris Kennaway } 69374664626SKris Kennaway memset(out, 0, size); 6946f9291ceSJung-uk Kim for (i = 0; i < n; i++) { 69574664626SKris Kennaway j = (unsigned char)*in; 69674664626SKris Kennaway *(in++) = '\0'; 6976f9291ceSJung-uk Kim if (j == 0) 6986f9291ceSJung-uk Kim break; 69974664626SKris Kennaway if ((j >= '0') && (j <= '9')) 70074664626SKris Kennaway j -= '0'; 70174664626SKris Kennaway else if ((j >= 'A') && (j <= 'F')) 70274664626SKris Kennaway j = j - 'A' + 10; 70374664626SKris Kennaway else if ((j >= 'a') && (j <= 'f')) 70474664626SKris Kennaway j = j - 'a' + 10; 7056f9291ceSJung-uk Kim else { 70674664626SKris Kennaway BIO_printf(bio_err, "non-hex digit\n"); 70774664626SKris Kennaway return (0); 70874664626SKris Kennaway } 70974664626SKris Kennaway if (i & 1) 71074664626SKris Kennaway out[i / 2] |= j; 71174664626SKris Kennaway else 71274664626SKris Kennaway out[i / 2] = (j << 4); 71374664626SKris Kennaway } 71474664626SKris Kennaway return (1); 71574664626SKris Kennaway } 716