git.distorted.org.uk Git - u/mdw/putty/blob - sshrsa.c

   1 /*
   2  * RSA implementation just sufficient for ssh client-side
   3  * initialisation step
   4  *
   5  * Rewritten for more speed by Joris van Rantwijk, Jun 1999.
   6  */
   7
   8 #include <stdio.h>
   9 #include <stdlib.h>
  10 #include <string.h>
  11
  12 #include "ssh.h"
  13
  14
  15 int makekey(unsigned char *data, struct RSAKey *result,
  16             unsigned char **keystr, int order) {
  17     unsigned char *p = data;
  18     int i;
  19
  20     if (result) {
  21         result->bits = 0;
  22         for (i=0; i<4; i++)
  23             result->bits = (result->bits << 8) + *p++;
  24     } else
  25         p += 4;
  26
  27     /*
  28      * order=0 means exponent then modulus (the keys sent by the
  29      * server). order=1 means modulus then exponent (the keys
  30      * stored in a keyfile).
  31      */
  32
  33     if (order == 0)
  34         p += ssh1_read_bignum(p, result ? &result->exponent : NULL);
  35     if (result)
  36         result->bytes = (((p[0] << 8) + p[1]) + 7) / 8;
  37     if (keystr) *keystr = p+2;
  38     p += ssh1_read_bignum(p, result ? &result->modulus : NULL);
  39     if (order == 1)
  40         p += ssh1_read_bignum(p, result ? &result->exponent : NULL);
  41
  42     return p - data;
  43 }
  44
  45 int makeprivate(unsigned char *data, struct RSAKey *result) {
  46     return ssh1_read_bignum(data, &result->private_exponent);
  47 }
  48
  49 void rsaencrypt(unsigned char *data, int length, struct RSAKey *key) {
  50     Bignum b1, b2;
  51     int w, i;
  52     unsigned char *p;
  53
  54     memmove(data+key->bytes-length, data, length);
  55     data[0] = 0;
  56     data[1] = 2;
  57
  58     for (i = 2; i < key->bytes-length-1; i++) {
  59         do {
  60             data[i] = random_byte();
  61         } while (data[i] == 0);
  62     }
  63     data[key->bytes-length-1] = 0;
  64
  65     w = (key->bytes+1)/2;
  66
  67     b1 = newbn(w);
  68     b2 = newbn(w);
  69
  70     p = data;
  71     for (i=1; i<=w; i++)
  72         b1[i] = 0;
  73     for (i=key->bytes; i-- ;) {
  74         unsigned char byte = *p++;
  75         if (i & 1)
  76             b1[1+i/2] |= byte<<8;
  77         else
  78             b1[1+i/2] |= byte;
  79     }
  80
  81     modpow(b1, key->exponent, key->modulus, b2);
  82
  83     p = data;
  84     for (i=key->bytes; i-- ;) {
  85         unsigned char b;
  86         if (i & 1)
  87             b = b2[1+i/2] >> 8;
  88         else
  89             b = b2[1+i/2] & 0xFF;
  90         *p++ = b;
  91     }
  92
  93     freebn(b1);
  94     freebn(b2);
  95 }
  96
  97 Bignum rsadecrypt(Bignum input, struct RSAKey *key) {
  98     Bignum ret;
  99     ret = newbn(key->modulus[0]);
 100     modpow(input, key->private_exponent, key->modulus, ret);
 101     return ret;
 102 }
 103
 104 int rsastr_len(struct RSAKey *key) {
 105     Bignum md, ex;
 106
 107     md = key->modulus;
 108     ex = key->exponent;
 109     return 4 * (ex[0]+md[0]) + 10;
 110 }
 111
 112 void rsastr_fmt(char *str, struct RSAKey *key) {
 113     Bignum md, ex;
 114     int len = 0, i;
 115
 116     md = key->modulus;
 117     ex = key->exponent;
 118
 119     for (i=1; i<=ex[0]; i++) {
 120         sprintf(str+len, "%04x", ex[i]);
 121         len += strlen(str+len);
 122     }
 123     str[len++] = '/';
 124     for (i=1; i<=md[0]; i++) {
 125         sprintf(str+len, "%04x", md[i]);
 126         len += strlen(str+len);
 127     }
 128     str[len] = '\0';
 129 }
 130
 131 /*
 132  * Generate a fingerprint string for the key. Compatible with the
 133  * OpenSSH fingerprint code.
 134  */
 135 void rsa_fingerprint(char *str, int len, struct RSAKey *key) {
 136     struct MD5Context md5c;
 137     unsigned char digest[16];
 138     char buffer[16*3+40];
 139     int numlen, slen, i;
 140
 141     MD5Init(&md5c);
 142     numlen = ssh1_bignum_length(key->modulus) - 2;
 143     for (i = numlen; i-- ;) {
 144         unsigned char c = bignum_byte(key->modulus, i);
 145         MD5Update(&md5c, &c, 1);
 146     }
 147     numlen = ssh1_bignum_length(key->exponent) - 2;
 148     for (i = numlen; i-- ;) {
 149         unsigned char c = bignum_byte(key->exponent, i);
 150         MD5Update(&md5c, &c, 1);
 151     }
 152     MD5Final(digest, &md5c);
 153
 154     sprintf(buffer, "%d ", ssh1_bignum_bitcount(key->modulus));
 155     for (i = 0; i < 16; i++)
 156         sprintf(buffer+strlen(buffer), "%s%02x", i?":":"", digest[i]);
 157     strncpy(str, buffer, len); str[len-1] = '\0';
 158     slen = strlen(str);
 159     if (key->comment && slen < len-1) {
 160         str[slen] = ' ';
 161         strncpy(str+slen+1, key->comment, len-slen-1);
 162         str[len-1] = '\0';
 163     }
 164 }
 165
 166 void freersakey(struct RSAKey *key) {
 167     if (key->modulus) freebn(key->modulus);
 168     if (key->exponent) freebn(key->exponent);
 169     if (key->private_exponent) freebn(key->private_exponent);
 170     if (key->comment) free(key->comment);
 171 }