cryptoimpl/DHImpl.hpp

#pragma once

#ifndef GEODE_CRYPTOIMPL_DHIMPL_H_
#define GEODE_CRYPTOIMPL_DHIMPL_H_

/*
 * Licensed to the Apache Software Foundation (ASF) under one or more
 * contributor license agreements.  See the NOTICE file distributed with
 * this work for additional information regarding copyright ownership.
 * The ASF licenses this file to You under the Apache License, Version 2.0
 * (the "License"); you may not use this file except in compliance with
 * the License.  You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

#include <openssl/asn1t.h>
#include <openssl/dh.h>
#include <openssl/x509.h>

#include <cstring>
#include <string>
#include <vector>

#include "cryptoimpl_export.h"

#define DH_ERR_NO_ERROR 0
#define DH_ERR_UNSUPPORTED_ALGO 1
#define DH_ERR_ILLEGAL_KEYSIZE 2
#define DH_ERR_SUBJECT_NOT_FOUND 3
#define DH_ERR_NO_CERTIFICATES 4
#define DH_ERR_INVALID_SIGN 5

#ifdef _DEBUG
#define LOGDH printf
#else
#define LOGDH(...)
#endif

//  We need to declare our own structures and macros for
// DH public key x509 encoding because it's not available in
// OpenSSL yet.
typedef struct DH_pubkey_st {
  X509_ALGOR* algor;
  ASN1_BIT_STRING* public_key;
  EVP_PKEY* pkey;
} DH_PUBKEY;

extern "C" {
CRYPTOIMPL_EXPORT int gf_initDhKeys(void** dhCtx, const char* dhAlgo,
                                    const char* ksPath);
CRYPTOIMPL_EXPORT void gf_clearDhKeys(void* dhCtx);
CRYPTOIMPL_EXPORT unsigned char* gf_getPublicKey(void* dhCtx, int* len);
CRYPTOIMPL_EXPORT void gf_setPublicKeyOther(void* dhCtx,
                                            const unsigned char* pubkey,
                                            int length);
CRYPTOIMPL_EXPORT void gf_computeSharedSecret(void* dhCtx);
CRYPTOIMPL_EXPORT unsigned char* gf_encryptDH(void* dhCtx,
                                              const unsigned char* cleartext,
                                              int len, int* retLen);
CRYPTOIMPL_EXPORT unsigned char* gf_decryptDH(void* dhCtx,
                                              const unsigned char* cleartext,
                                              int len, int* retLen);
CRYPTOIMPL_EXPORT bool gf_verifyDH(void* dhCtx, const char* subject,
                                   const unsigned char* challenge,
                                   int challengeLen,
                                   const unsigned char* response,
                                   int responseLen, int* reason);
}

class DHImpl {
 public:
  DH* m_dh;
  std::string m_skAlgo;
  int m_keySize;
  BIGNUM* m_pubKeyOther;
  unsigned char m_key[128];
  std::vector<X509*> m_serverCerts;

  const EVP_CIPHER* getCipherFunc();
  int setSkAlgo(const char* skalgo);

  DHImpl() : m_dh(nullptr), m_keySize(0), m_pubKeyOther(nullptr) {
    /* adongre
     * CID 28924: Uninitialized scalar field (UNINIT_CTOR)
     */
    std::memset(m_key, 0, sizeof(m_key));
  }
  static bool m_init;
};

bool DHImpl::m_init = false;

#endif  // GEODE_CRYPTOIMPL_DHIMPL_H_