This source file includes following definitions.
- ExportKeyWithBio
- ExportKey
- IsSupported
- Create
- CreateFromEncryptedPrivateKeyInfo
- ExportEncryptedPrivateKey
- ExportPublicKey
- ExportValue
- ExportECParams
#include "crypto/ec_private_key.h"
#include <openssl/ec.h>
#include <openssl/evp.h>
#include <openssl/pkcs12.h>
#include <openssl/x509.h>
#include "base/logging.h"
#include "base/memory/scoped_ptr.h"
#include "crypto/openssl_util.h"
namespace crypto {
namespace {
typedef int (*ExportBioFunction)(BIO* bio, const void* key);
bool ExportKeyWithBio(const void* key,
ExportBioFunction export_fn,
std::vector<uint8>* output) {
if (!key)
return false;
ScopedOpenSSL<BIO, BIO_free_all> bio(BIO_new(BIO_s_mem()));
if (!bio.get())
return false;
if (!export_fn(bio.get(), key))
return false;
char* data = NULL;
long len = BIO_get_mem_data(bio.get(), &data);
if (!data || len < 0)
return false;
output->assign(data, data + len);
return true;
}
typedef int (*ExportDataFunction)(const void* key, unsigned char** data);
bool ExportKey(const void* key,
ExportDataFunction export_fn,
std::vector<uint8>* output) {
if (!key)
return false;
int data_len = export_fn(key, NULL);
if (data_len < 0)
return false;
output->resize(static_cast<size_t>(data_len));
unsigned char* data = &(*output)[0];
if (export_fn(key, &data) < 0)
return false;
return true;
}
}
ECPrivateKey::~ECPrivateKey() {
if (key_)
EVP_PKEY_free(key_);
}
bool ECPrivateKey::IsSupported() { return true; }
ECPrivateKey* ECPrivateKey::Create() {
OpenSSLErrStackTracer err_tracer(FROM_HERE);
ScopedOpenSSL<EC_KEY, EC_KEY_free> ec_key(
EC_KEY_new_by_curve_name(NID_X9_62_prime256v1));
if (!ec_key.get() || !EC_KEY_generate_key(ec_key.get()))
return NULL;
scoped_ptr<ECPrivateKey> result(new ECPrivateKey());
result->key_ = EVP_PKEY_new();
if (!result->key_ || !EVP_PKEY_set1_EC_KEY(result->key_, ec_key.get()))
return NULL;
return result.release();
}
ECPrivateKey* ECPrivateKey::CreateFromEncryptedPrivateKeyInfo(
const std::string& password,
const std::vector<uint8>& encrypted_private_key_info,
const std::vector<uint8>& subject_public_key_info) {
if (encrypted_private_key_info.empty())
return NULL;
OpenSSLErrStackTracer err_tracer(FROM_HERE);
char* private_key_data = reinterpret_cast<char*>(
const_cast<uint8*>(&encrypted_private_key_info[0]));
int private_key_data_len =
static_cast<int>(encrypted_private_key_info.size());
ScopedOpenSSL<BIO, BIO_free_all> bio(
BIO_new_mem_buf(private_key_data, private_key_data_len));
if (!bio.get())
return NULL;
ScopedOpenSSL<X509_SIG, X509_SIG_free> p8_encrypted(
d2i_PKCS8_bio(bio.get(), NULL));
if (!p8_encrypted.get())
return NULL;
ScopedOpenSSL<PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO_free> p8_decrypted(
PKCS8_decrypt(p8_encrypted.get(),
password.c_str(),
static_cast<int>(password.size())));
if (!p8_decrypted.get() && password.empty()) {
p8_decrypted.reset(PKCS8_decrypt(p8_encrypted.get(), NULL, 0));
}
if (!p8_decrypted.get())
return NULL;
scoped_ptr<ECPrivateKey> result(new ECPrivateKey);
result->key_ = EVP_PKCS82PKEY(p8_decrypted.get());
if (!result->key_)
return NULL;
return result.release();
}
bool ECPrivateKey::ExportEncryptedPrivateKey(
const std::string& password,
int iterations,
std::vector<uint8>* output) {
OpenSSLErrStackTracer err_tracer(FROM_HERE);
ScopedOpenSSL<PKCS8_PRIV_KEY_INFO, PKCS8_PRIV_KEY_INFO_free> pkcs8(
EVP_PKEY2PKCS8(key_));
if (!pkcs8.get())
return false;
ScopedOpenSSL<X509_SIG, X509_SIG_free> encrypted(
PKCS8_encrypt(NID_pbe_WithSHA1And3_Key_TripleDES_CBC,
NULL,
password.c_str(),
static_cast<int>(password.size()),
NULL,
0,
iterations,
pkcs8.get()));
if (!encrypted.get())
return false;
return ExportKeyWithBio(encrypted.get(),
reinterpret_cast<ExportBioFunction>(i2d_PKCS8_bio),
output);
}
bool ECPrivateKey::ExportPublicKey(std::vector<uint8>* output) {
OpenSSLErrStackTracer err_tracer(FROM_HERE);
return ExportKeyWithBio(
key_, reinterpret_cast<ExportBioFunction>(i2d_PUBKEY_bio), output);
}
bool ECPrivateKey::ExportValue(std::vector<uint8>* output) {
OpenSSLErrStackTracer err_tracer(FROM_HERE);
ScopedOpenSSL<EC_KEY, EC_KEY_free> ec_key(EVP_PKEY_get1_EC_KEY(key_));
return ExportKey(ec_key.get(),
reinterpret_cast<ExportDataFunction>(i2d_ECPrivateKey),
output);
}
bool ECPrivateKey::ExportECParams(std::vector<uint8>* output) {
OpenSSLErrStackTracer err_tracer(FROM_HERE);
ScopedOpenSSL<EC_KEY, EC_KEY_free> ec_key(EVP_PKEY_get1_EC_KEY(key_));
return ExportKey(ec_key.get(),
reinterpret_cast<ExportDataFunction>(i2d_ECParameters),
output);
}
ECPrivateKey::ECPrivateKey() : key_(NULL) {}
}