X-Git-Url: https://git.distorted.org.uk/u/mdw/catacomb/blobdiff_plain/9f05f5d854797e4f45abb1654ec820df0dfb9699..4e67e30be6dbcc7d4f23be754b67bf7c6a0ade92:/keyutil.c diff --git a/keyutil.c b/keyutil.c index 269a85d..1adb840 100644 --- a/keyutil.c +++ b/keyutil.c @@ -197,6 +197,7 @@ typedef struct keyopts { #define f_limlee 8u /* Generate Lim-Lee primes */ #define f_subgroup 16u /* Generate a subgroup */ #define f_retag 32u /* Remove any existing tag */ +#define f_kcdsa 64u /* Generate KCDSA primes */ /* --- @dolock@ --- * * @@ -609,6 +610,24 @@ static void alg_dhparam(keyopts *k) key_putattr(k->kf, k->k, "factors", d.buf); dstr_destroy(&d); } + } else if (k->f & f_kcdsa) { + if (!k->qbits) + k->qbits = 256; + rc = dh_kcdsagen(&dp, k->qbits, k->bits, 0, + 0, k->r, (k->f & f_quiet) ? 0 : pgen_ev, 0); + if (!rc) { + dstr d = DSTR_INIT; + mp *v = MP_NEW; + + mp_writedstr(dp.q, &d, 10); + mp_div(&v, 0, dp.p, dp.q); + v = mp_lsr(v, v, 1); + dstr_puts(&d, ", "); + mp_writedstr(v, &d, 10); + mp_drop(v); + key_putattr(k->kf, k->k, "factors", d.buf); + dstr_destroy(&d); + } } else rc = dh_gen(&dp, k->qbits, k->bits, 0, k->r, (k->f & f_quiet) ? 0 : pgen_ev, 0); @@ -951,9 +970,10 @@ static int cmd_add(int argc, char *argv[]) { "quiet", 0, 0, 'q' }, { "lim-lee", 0, 0, 'L' }, { "subgroup", 0, 0, 'S' }, + { "kcdsa", 0, 0, 'K' }, { 0, 0, 0, 0 } }; - int i = mdwopt(argc, argv, "+a:b:B:p:e:c:t:R:C:A:s:n:lqrLS", + int i = mdwopt(argc, argv, "+a:b:B:p:e:c:t:R:C:A:s:n:lqrLKS", opt, 0, 0, 0); if (i < 0) break; @@ -1113,6 +1133,9 @@ static int cmd_add(int argc, char *argv[]) case 'L': k.f |= f_limlee; break; + case 'K': + k.f |= f_kcdsa; + break; case 'S': k.f |= f_subgroup; break; @@ -2102,7 +2125,7 @@ Options:\n\ { "tidy", cmd_tidy, "tidy" }, { "add", cmd_add, "add [-OPTIONS] TYPE [ATTR...]\n\ - Options: [-lqrLS] [-a ALG] [-bB BITS] [-p PARAM] [-R TAG]\n\ + Options: [-lqrLKS] [-a ALG] [-bB BITS] [-p PARAM] [-R TAG]\n\ [-A SEEDALG] [-s SEED] [-n BITS]\n\ [-e EXPIRE] [-t TAG] [-c COMMENT]", "\ Options:\n\ @@ -2126,6 +2149,7 @@ Options:\n\ -l, --lock Lock the generated key with a passphrase.\n\ -q, --quiet Don't give progress indicators while working.\n\ -L, --lim-lee Generate Lim-Lee primes for Diffie-Hellman groups.\n\ +-K, --kcdsa Generate KCDSA-style Lim-Lee primes for DH groups.\n\ -S, --subgroup Use a prime-order subgroup for Diffie-Hellman.\n\ " }, { 0, 0, 0 }