openssl.c File Reference

Openssl-based encryption/decryption routines. More...

#include <regex.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <openssl/rand.h>
#include <openssl/err.h>
#include <openssl/pem.h>
#include <openssl/sha.h>
#include <openssl/bn.h>
#include <openssl/aes.h>
#include <openssl/evp.h>
#include "para.h"
#include "error.h"
#include "string.h"
#include "crypt.h"
#include "crypt_backend.h"
#include "portable_io.h"

Functions
void	get_random_bytes_or_die (unsigned char *buf, int num)
	Fill a buffer with random content. More...
void	crypt_init (void)
	Initialize the crypto backend. More...
void	crypt_shutdown (void)
	Allocate all resources of the crypto backend. More...
int	apc_get_pubkey (const char *key_file, struct asymmetric_key **result)
	Read an asymmetric key from a file. More...
void	apc_free_pubkey (struct asymmetric_key *pub)
	Deallocate a public key. More...
int	apc_priv_decrypt (const char *key_file, unsigned char **outbuf, unsigned char *inbuf, int inlen)
	Decrypt a buffer using a private key. More...
int	apc_pub_encrypt (struct asymmetric_key *pub, unsigned char *inbuf, unsigned len, unsigned char **outbuf)
	Encrypt a buffer using asymmetric keys. More...
struct stream_cipher *	sc_new (const unsigned char *data, int len)
	Allocate and initialize an aes_ctr128 stream cipher structure. More...
void	sc_free (struct stream_cipher *sc)
	Deallocate a stream cipher structure. More...
void	sc_crypt (struct stream_cipher *sc, struct iovec *src, struct iovec *dst)
	Encrypt or decrypt a buffer using a stream cipher. More...
void	hash_function (const char *data, unsigned long len, unsigned char *hash)
	Compute the hash of the given input data. More...
void	hash2_function (const char *data, unsigned long len, unsigned char *hash)
	Compute the hash2 of the given input data. More...

Detailed Description

Openssl-based encryption/decryption routines.

Function Documentation

get_random_bytes_or_die()

void get_random_bytes_or_die	(	unsigned char *	buf,
		int	num
	)

Fill a buffer with random content.

Parameters

buf	The buffer to fill.
num	The size of buf in bytes.

This function puts num cryptographically strong pseudo-random bytes into buf. If it can not guarantee an unpredictable byte sequence (for example because the PRNG has not been seeded with enough randomness) the function logs an error message and calls exit().

Referenced by crypt_init().

crypt_init()

void crypt_init

(

void

)

Initialize the crypto backend.

This function initializes the crypto library and seeds the pseudo random number generator used by random() with a random seed obtained from the crypto implementation. On errors, an error message is logged and the function calls exit().

See also

get_random_bytes_or_die(), srandom(3), random(3), para_random().

References get_random_bytes_or_die(), and PARA_EMERG_LOG.

Referenced by main().

crypt_shutdown()

void crypt_shutdown

(

void

)

Allocate all resources of the crypto backend.

apc_get_pubkey()

int apc_get_pubkey	(	const char *	key_file,
		struct asymmetric_key **	result
	)

Read an asymmetric key from a file.

Parameters

key_file	The file containing the key.
result	The key structure is returned here.

Returns

The size of the key in bytes on success, negative on errors.

References decode_public_key(), and zalloc().

apc_free_pubkey()

void apc_free_pubkey

(

struct asymmetric_key *

key

)

Deallocate a public key.

Parameters

key	Pointer to the key structure to free.

This should be called for keys obtained by apc_get_pubkey() if the key is no longer needed.

apc_priv_decrypt()

int apc_priv_decrypt	(	const char *	key_file,
		unsigned char **	outbuf,
		unsigned char *	inbuf,
		int	inlen
	)

Decrypt a buffer using a private key.

Parameters

key_file	Full path of the key.
outbuf	The output buffer is allocated by the callee.
inbuf	The encrypted input buffer.
inlen	The length of inbuf.

The outbuf must be large enough to hold at least 512 bytes.

Returns

The size of the recovered plaintext on success, negative on errors.

References check_private_key_file(), and zalloc().

apc_pub_encrypt()

int apc_pub_encrypt	(	struct asymmetric_key *	pub,
		unsigned char *	inbuf,
		unsigned	len,
		unsigned char **	outbuf
	)

Encrypt a buffer using asymmetric keys.

Parameters

pub	The public key.
inbuf	The input buffer.
len	The length of inbuf.
outbuf	The output buffer will be allocated by the callee.

Returns

The size of the encrypted data on success, negative on errors.

sc_new()

struct stream_cipher* sc_new	(	const unsigned char *	data,
		int	len
	)

Allocate and initialize an aes_ctr128 stream cipher structure.

Parameters

data	The key.
len	The size of the key.

Returns

A new stream cipher structure.

References AES_CRT128_BLOCK_SIZE, and alloc().

sc_free()

void sc_free

(

struct stream_cipher *

sc

)

Deallocate a stream cipher structure.

Parameters

sc	A stream cipher previously obtained by sc_new().

sc_crypt()

void sc_crypt	(	struct stream_cipher *	sc,
		struct iovec *	src,
		struct iovec *	dst
	)

Encrypt or decrypt a buffer using a stream cipher.

Parameters

sc	Crypto key.
src	The source buffer and length.
dst	The destination buffer and length, filled out by the function.

It is up to the implementation to decide whether the crypt operation is performed in place. The caller can tell by looking if the buffers given by src and dst coincide after the call. If (and only if) the crypt operation was not performed in place, the function allocated a new buffer for the result, so dst->iov_base is different from src->iov_base. In this case, the destination buffer must be freed by the caller when it is no longer needed.

Referenced by sc_trafo().

hash_function()

void hash_function	(	const char *	data,
		unsigned long	len,
		unsigned char *	hash
	)

Compute the hash of the given input data.

Parameters

data	Pointer to the data to compute the hash value from.
len	The length of data in bytes.
hash	Result pointer.

hash must point to an area at least HASH_SIZE bytes large.

See also

sha(3), openssl(1).

hash2_function()

void hash2_function	(	const char *	data,
		unsigned long	len,
		unsigned char *	hash
	)

Compute the hash2 of the given input data.

Parameters

data	Pointer to the data to compute the hash value from.
len	The length of data in bytes.
hash	Result pointer.

hash must point to an area at least HASH2_SIZE bytes large.

See also

sha(3), openssl(1).