25개 이상의 토픽을 선택하실 수 없습니다. Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

123 lines
5.2 KiB

  1. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  2. * All rights reserved.
  3. *
  4. * This package is an SSL implementation written
  5. * by Eric Young (eay@cryptsoft.com).
  6. * The implementation was written so as to conform with Netscapes SSL.
  7. *
  8. * This library is free for commercial and non-commercial use as long as
  9. * the following conditions are aheared to. The following conditions
  10. * apply to all code found in this distribution, be it the RC4, RSA,
  11. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  12. * included with this distribution is covered by the same copyright terms
  13. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  14. *
  15. * Copyright remains Eric Young's, and as such any Copyright notices in
  16. * the code are not to be removed.
  17. * If this package is used in a product, Eric Young should be given attribution
  18. * as the author of the parts of the library used.
  19. * This can be in the form of a textual message at program startup or
  20. * in documentation (online or textual) provided with the package.
  21. *
  22. * Redistribution and use in source and binary forms, with or without
  23. * modification, are permitted provided that the following conditions
  24. * are met:
  25. * 1. Redistributions of source code must retain the copyright
  26. * notice, this list of conditions and the following disclaimer.
  27. * 2. Redistributions in binary form must reproduce the above copyright
  28. * notice, this list of conditions and the following disclaimer in the
  29. * documentation and/or other materials provided with the distribution.
  30. * 3. All advertising materials mentioning features or use of this software
  31. * must display the following acknowledgement:
  32. * "This product includes cryptographic software written by
  33. * Eric Young (eay@cryptsoft.com)"
  34. * The word 'cryptographic' can be left out if the rouines from the library
  35. * being used are not cryptographic related :-).
  36. * 4. If you include any Windows specific code (or a derivative thereof) from
  37. * the apps directory (application code) you must include an acknowledgement:
  38. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  39. *
  40. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  41. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  42. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  43. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  44. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  45. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  46. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  47. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  48. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  49. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  50. * SUCH DAMAGE.
  51. *
  52. * The licence and distribution terms for any publically available version or
  53. * derivative of this code cannot be changed. i.e. this code cannot simply be
  54. * copied and put under another distribution licence
  55. * [including the GNU Public Licence.] */
  56. #include <openssl/obj.h>
  57. #include "../internal.h"
  58. typedef struct {
  59. int sign_nid;
  60. int digest_nid;
  61. int pkey_nid;
  62. } nid_triple;
  63. static const nid_triple kTriples[] = {
  64. // RSA PKCS#1.
  65. {NID_md4WithRSAEncryption, NID_md4, NID_rsaEncryption},
  66. {NID_md5WithRSAEncryption, NID_md5, NID_rsaEncryption},
  67. {NID_sha1WithRSAEncryption, NID_sha1, NID_rsaEncryption},
  68. {NID_sha224WithRSAEncryption, NID_sha224, NID_rsaEncryption},
  69. {NID_sha256WithRSAEncryption, NID_sha256, NID_rsaEncryption},
  70. {NID_sha384WithRSAEncryption, NID_sha384, NID_rsaEncryption},
  71. {NID_sha512WithRSAEncryption, NID_sha512, NID_rsaEncryption},
  72. // DSA.
  73. {NID_dsaWithSHA1, NID_sha1, NID_dsa},
  74. {NID_dsaWithSHA1_2, NID_sha1, NID_dsa_2},
  75. {NID_dsa_with_SHA224, NID_sha224, NID_dsa},
  76. {NID_dsa_with_SHA256, NID_sha256, NID_dsa},
  77. // ECDSA.
  78. {NID_ecdsa_with_SHA1, NID_sha1, NID_X9_62_id_ecPublicKey},
  79. {NID_ecdsa_with_SHA224, NID_sha224, NID_X9_62_id_ecPublicKey},
  80. {NID_ecdsa_with_SHA256, NID_sha256, NID_X9_62_id_ecPublicKey},
  81. {NID_ecdsa_with_SHA384, NID_sha384, NID_X9_62_id_ecPublicKey},
  82. {NID_ecdsa_with_SHA512, NID_sha512, NID_X9_62_id_ecPublicKey},
  83. // The following algorithms use more complex (or simpler) parameters. The
  84. // digest "undef" indicates the caller should handle this explicitly.
  85. {NID_rsassaPss, NID_undef, NID_rsaEncryption},
  86. {NID_ED25519, NID_undef, NID_ED25519},
  87. };
  88. int OBJ_find_sigid_algs(int sign_nid, int *out_digest_nid, int *out_pkey_nid) {
  89. for (size_t i = 0; i < OPENSSL_ARRAY_SIZE(kTriples); i++) {
  90. if (kTriples[i].sign_nid == sign_nid) {
  91. if (out_digest_nid != NULL) {
  92. *out_digest_nid = kTriples[i].digest_nid;
  93. }
  94. if (out_pkey_nid != NULL) {
  95. *out_pkey_nid = kTriples[i].pkey_nid;
  96. }
  97. return 1;
  98. }
  99. }
  100. return 0;
  101. }
  102. int OBJ_find_sigid_by_algs(int *out_sign_nid, int digest_nid, int pkey_nid) {
  103. for (size_t i = 0; i < OPENSSL_ARRAY_SIZE(kTriples); i++) {
  104. if (kTriples[i].digest_nid == digest_nid &&
  105. kTriples[i].pkey_nid == pkey_nid) {
  106. if (out_sign_nid != NULL) {
  107. *out_sign_nid = kTriples[i].sign_nid;
  108. }
  109. return 1;
  110. }
  111. }
  112. return 0;
  113. }