CryptRsaExt.c

Go to the documentation of this file.

 
#include "InternalCryptLib.h"
#include <mbedtls/rsa.h>
 
BOOLEAN
EFIAPI
RsaGetKey (
  IN OUT VOID     *RsaContext,
  IN RSA_KEY_TAG  KeyTag,
  OUT UINT8       *BigNumber,
  IN OUT UINTN    *BnSize
  )
{
  mbedtls_rsa_context  *RsaKey;
  INT32                Ret;
  mbedtls_mpi          Value;
  UINTN                Size;
 
  //
  // Check input parameters.
  //
  if ((RsaContext == NULL) || (*BnSize > INT_MAX)) {
    return FALSE;
  }
 
  //
  // Init mbedtls_mpi
  //
  mbedtls_mpi_init (&Value);
  Size    = *BnSize;
  *BnSize = 0;
 
  RsaKey = (mbedtls_rsa_context *)RsaContext;
 
  switch (KeyTag) {
    case RsaKeyN:
      Ret = mbedtls_rsa_export (RsaKey, &Value, NULL, NULL, NULL, NULL);
      break;
    case RsaKeyE:
      Ret = mbedtls_rsa_export (RsaKey, NULL, NULL, NULL, NULL, &Value);
      break;
    case RsaKeyD:
      Ret = mbedtls_rsa_export (RsaKey, NULL, NULL, NULL, &Value, NULL);
      break;
    case RsaKeyQ:
      Ret = mbedtls_rsa_export (RsaKey, NULL, NULL, &Value, NULL, NULL);
      break;
    case RsaKeyP:
      Ret = mbedtls_rsa_export (RsaKey, NULL, &Value, NULL, NULL, NULL);
      break;
    case RsaKeyDp:
    case RsaKeyDq:
    case RsaKeyQInv:
    default:
      Ret = -1;
      break;
  }
 
  if (Ret != 0) {
    goto End;
  }
 
  if (mbedtls_mpi_size (&Value) == 0) {
    Ret = 0;
    goto End;
  }
 
  *BnSize = Size;
 
  Size = mbedtls_mpi_size (&Value);
  if (*BnSize < Size) {
    Ret     = 1;
    *BnSize = Size;
    goto End;
  }
 
  if (BigNumber == NULL) {
    Ret     = 0;
    *BnSize = Size;
    goto End;
  }
 
  if ((BigNumber != NULL) && (Ret == 0)) {
    Ret     = mbedtls_mpi_write_binary (&Value, BigNumber, Size);
    *BnSize = Size;
  }
 
End:
  mbedtls_mpi_free (&Value);
  return Ret == 0;
}
 
BOOLEAN
EFIAPI
RsaGenerateKey (
  IN OUT VOID     *RsaContext,
  IN UINTN        ModulusLength,
  IN CONST UINT8  *PublicExponent,
  IN UINTN        PublicExponentSize
  )
{
  INT32                Ret;
  mbedtls_rsa_context  *Rsa;
  INT32                Pe;
 
  //
  // Check input parameters.
  //
  if ((RsaContext == NULL) || (ModulusLength > INT_MAX) || (PublicExponentSize > INT_MAX)) {
    return FALSE;
  }
 
  Rsa = (mbedtls_rsa_context *)RsaContext;
 
  if (PublicExponent == NULL) {
    Pe = 0x10001;
  } else {
    if (PublicExponentSize == 0) {
      return FALSE;
    }
 
    switch (PublicExponentSize) {
      case 1:
        Pe = PublicExponent[0];
        break;
      case 2:
        Pe = PublicExponent[0] << 8 | PublicExponent[1];
        break;
      case 3:
        Pe = PublicExponent[0] << 16 | PublicExponent[1] << 8 |
             PublicExponent[2];
        break;
      case 4:
        Pe = PublicExponent[0] << 24 | PublicExponent[1] << 16 |
             PublicExponent[2] << 8 | PublicExponent[3];
        break;
      default:
        return FALSE;
    }
  }
 
  Ret = mbedtls_rsa_gen_key (
          Rsa,
          MbedtlsRand,
          NULL,
          (UINT32)ModulusLength,
          Pe
          );
 
  return Ret == 0;
}
 
BOOLEAN
EFIAPI
RsaCheckKey (
  IN VOID  *RsaContext
  )
{
  if (RsaContext == NULL) {
    return FALSE;
  }
 
  UINT32  Ret;
 
  Ret = mbedtls_rsa_complete (RsaContext);
  if (Ret == 0) {
    Ret = mbedtls_rsa_check_privkey (RsaContext);
  }
 
  return Ret == 0;
}
 
BOOLEAN
EFIAPI
RsaPkcs1Sign (
  IN VOID         *RsaContext,
  IN CONST UINT8  *MessageHash,
  IN UINTN        HashSize,
  OUT UINT8       *Signature,
  IN OUT UINTN    *SigSize
  )
{
  INT32              Ret;
  mbedtls_md_type_t  MdAlg;
 
  if ((RsaContext == NULL) || (MessageHash == NULL)) {
    return FALSE;
  }
 
  if (mbedtls_rsa_complete ((mbedtls_rsa_context *)RsaContext) != 0) {
    return FALSE;
  }
 
  switch (HashSize) {
 #ifndef DISABLE_SHA1_DEPRECATED_INTERFACES
    case SHA1_DIGEST_SIZE:
      MdAlg = MBEDTLS_MD_SHA1;
      break;
 #endif
 
    case SHA256_DIGEST_SIZE:
      MdAlg = MBEDTLS_MD_SHA256;
      break;
 
    case SHA384_DIGEST_SIZE:
      MdAlg = MBEDTLS_MD_SHA384;
      break;
 
    case SHA512_DIGEST_SIZE:
      MdAlg = MBEDTLS_MD_SHA512;
      break;
 
    default:
      return FALSE;
  }
 
  if (mbedtls_rsa_get_len (RsaContext) > *SigSize) {
    *SigSize = mbedtls_rsa_get_len (RsaContext);
    return FALSE;
  }
 
  if (Signature == NULL) {
    return FALSE;
  }
 
  Ret = mbedtls_rsa_set_padding (RsaContext, MBEDTLS_RSA_PKCS_V15, MdAlg);
  if (Ret != 0) {
    return FALSE;
  }
 
  Ret = mbedtls_rsa_pkcs1_sign (
          RsaContext,
          MbedtlsRand,
          NULL,
          MdAlg,
          (UINT32)HashSize,
          MessageHash,
          Signature
          );
  if (Ret != 0) {
    return FALSE;
  }
 
  *SigSize = mbedtls_rsa_get_len (RsaContext);
  return TRUE;
}