mirror of
https://git.libssh.org/projects/libssh.git
synced 2025-11-30 13:01:23 +03:00
778652460f
Summary: This patch adds support for mbedTLS as a crypto backend for libssh. mbedTLS is an SSL/TLS library that has been designed to mainly be used in embedded systems. It is loosely coupled and has a low memory footprint. mbedTLS also provides a cryptography library (libmbedcrypto) that can be used without the TLS modules. The patch is unfortunately quite big, since several new files had to be added. DSA is disabled at compile time, since mbedTLS doesn't support DSA Patch review and feedback would be appreciated, and if any issues or suggestions appear, I'm willing to work on them. Signed-off-by: Juraj Vijtiuk <juraj.vijtiuk@sartura.hr> Test Plan: * The patch has been tested with a Debug and MinSizeRel build, with libssh unit tests, client tests and the pkd tests. * All the tests have been run with valgrind's memcheck, drd and helgrind tools. * The examples/samplessh client works when built with the patch. Reviewers: asn, aris Subscribers: simonsj Differential Revision: https://bugs.libssh.org/D1
126 lines
3.3 KiB
C
126 lines
3.3 KiB
C
/*
|
|
* This file is part of the SSH Library
|
|
*
|
|
* Copyright (c) 2014 by Aris Adamantiadis <aris@badcode.be>
|
|
*
|
|
* The SSH Library is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU Lesser General Public License as published by
|
|
* the Free Software Foundation; either version 2.1 of the License, or (at your
|
|
* option) any later version.
|
|
*
|
|
* The SSH Library is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public
|
|
* License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public License
|
|
* along with the SSH Library; see the file COPYING. If not, write to
|
|
* the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
|
|
* MA 02111-1307, USA.
|
|
*/
|
|
|
|
#include "config.h"
|
|
|
|
#include <stdio.h>
|
|
|
|
#include "libssh/priv.h"
|
|
#include "libssh/bignum.h"
|
|
#include "libssh/string.h"
|
|
|
|
ssh_string ssh_make_bignum_string(bignum num) {
|
|
ssh_string ptr = NULL;
|
|
int pad = 0;
|
|
unsigned int len = bignum_num_bytes(num);
|
|
unsigned int bits = bignum_num_bits(num);
|
|
|
|
if (len == 0) {
|
|
return NULL;
|
|
}
|
|
|
|
/* If the first bit is set we have a negative number */
|
|
if (!(bits % 8) && bignum_is_bit_set(num, bits - 1)) {
|
|
pad++;
|
|
}
|
|
|
|
#ifdef DEBUG_CRYPTO
|
|
fprintf(stderr, "%d bits, %d bytes, %d padding\n", bits, len, pad);
|
|
#endif /* DEBUG_CRYPTO */
|
|
|
|
ptr = ssh_string_new(len + pad);
|
|
if (ptr == NULL) {
|
|
return NULL;
|
|
}
|
|
|
|
/* We have a negative number so we need a leading zero */
|
|
if (pad) {
|
|
ptr->data[0] = 0;
|
|
}
|
|
|
|
#ifdef HAVE_LIBGCRYPT
|
|
bignum_bn2bin(num, len, ptr->data + pad);
|
|
#elif HAVE_LIBCRYPTO
|
|
bignum_bn2bin(num, ptr->data + pad);
|
|
#elif HAVE_LIBMBEDCRYPTO
|
|
bignum_bn2bin(num, ptr->data + pad);
|
|
#endif
|
|
|
|
return ptr;
|
|
}
|
|
|
|
bignum ssh_make_string_bn(ssh_string string){
|
|
bignum bn = NULL;
|
|
unsigned int len = ssh_string_len(string);
|
|
|
|
#ifdef DEBUG_CRYPTO
|
|
fprintf(stderr, "Importing a %d bits, %d bytes object ...\n",
|
|
len * 8, len);
|
|
#endif /* DEBUG_CRYPTO */
|
|
|
|
#ifdef HAVE_LIBGCRYPT
|
|
bignum_bin2bn(string->data, len, &bn);
|
|
#elif defined HAVE_LIBCRYPTO
|
|
bn = bignum_bin2bn(string->data, len, NULL);
|
|
#elif defined HAVE_LIBMBEDCRYPTO
|
|
bn = bignum_new();
|
|
bignum_bin2bn(string->data, len, bn);
|
|
#endif
|
|
|
|
return bn;
|
|
}
|
|
|
|
void ssh_make_string_bn_inplace(ssh_string string, bignum bnout) {
|
|
unsigned int len = ssh_string_len(string);
|
|
#ifdef HAVE_LIBGCRYPT
|
|
/* XXX: FIXME as needed for LIBGCRYPT ECDSA codepaths. */
|
|
(void) len;
|
|
(void) bnout;
|
|
#elif defined HAVE_LIBCRYPTO
|
|
bignum_bin2bn(string->data, len, bnout);
|
|
#elif defined HAVE_LIBMBEDCRYPTO
|
|
bignum_bin2bn(string->data, len, bnout);
|
|
#endif
|
|
}
|
|
|
|
/* prints the bignum on stderr */
|
|
void ssh_print_bignum(const char *which, const bignum num) {
|
|
#ifdef HAVE_LIBGCRYPT
|
|
unsigned char *hex = NULL;
|
|
bignum_bn2hex(num, &hex);
|
|
#elif defined HAVE_LIBCRYPTO
|
|
char *hex = NULL;
|
|
hex = bignum_bn2hex(num);
|
|
#elif defined HAVE_LIBMBEDCRYPTO
|
|
char *hex = NULL;
|
|
hex = bignum_bn2hex(num);
|
|
#endif
|
|
fprintf(stderr, "%s value: ", which);
|
|
fprintf(stderr, "%s\n", (hex == NULL) ? "(null)" : (char *) hex);
|
|
#ifdef HAVE_LIBGCRYPT
|
|
SAFE_FREE(hex);
|
|
#elif defined HAVE_LIBCRYPTO
|
|
OPENSSL_free(hex);
|
|
#elif defined HAVE_LIBMBEDCRYPTO
|
|
SAFE_FREE(hex);
|
|
#endif
|
|
}
|