denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Implemented RSA en-/decryption in openssl plugin

Browse Source
This commit is contained in:
Martin Willi
2010-08-11 09:53:45 +02:00
parent 133accfcfd
commit d775af9d18
2 changed files with 55 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/openssl/openssl_rsa_private_key.c
+27 -2
View File
@@ -169,8 +169,33 @@ METHOD(private_key_t, decrypt, bool,
private_openssl_rsa_private_key_t *this, encryption_scheme_t scheme,
chunk_t crypto, chunk_t *plain)
{
DBG1(DBG_LIB, "RSA private key decryption not implemented");
return FALSE;
int padding, len;
char *decrypted;
switch (scheme)
{
case ENCRYPT_RSA_PKCS1:
padding = RSA_PKCS1_PADDING;
break;
case ENCRYPT_RSA_OAEP_SHA1:
padding = RSA_PKCS1_OAEP_PADDING;
break;
default:
DBG1(DBG_LIB, "encryption scheme %N not supported via openssl",
encryption_scheme_names, scheme);
return FALSE;
}
decrypted = malloc(RSA_size(this->rsa));
len = RSA_private_decrypt(crypto.len, crypto.ptr, decrypted,
this->rsa, padding);
if (len < 0)
{
DBG1(DBG_LIB, "RSA decryption failed");
free(decrypted);
return FALSE;
}
*plain = chunk_create(decrypted, len);
return TRUE;
}
METHOD(private_key_t, get_keysize, int,
src/libstrongswan/plugins/openssl/openssl_rsa_public_key.c
+28 -3
View File
@@ -149,10 +149,35 @@ METHOD(public_key_t, verify, bool,
METHOD(public_key_t, encrypt, bool,
private_openssl_rsa_public_key_t *this, encryption_scheme_t scheme,
chunk_t crypto, chunk_t *plain)
chunk_t plain, chunk_t *crypto)
{
DBG1(DBG_LIB, "RSA public key encryption not implemented");
return FALSE;
int padding, len;
char *encrypted;
switch (scheme)
{
case ENCRYPT_RSA_PKCS1:
padding = RSA_PKCS1_PADDING;
break;
case ENCRYPT_RSA_OAEP_SHA1:
padding = RSA_PKCS1_OAEP_PADDING;
break;
default:
DBG1(DBG_LIB, "decryption scheme %N not supported via openssl",
encryption_scheme_names, scheme);
return FALSE;
}
encrypted = malloc(RSA_size(this->rsa));
len = RSA_public_encrypt(plain.len, plain.ptr, encrypted,
this->rsa, padding);
if (len < 0)
{
DBG1(DBG_LIB, "RSA decryption failed");
free(encrypted);
return FALSE;
}
*crypto = chunk_create(encrypted, len);
return TRUE;
}
METHOD(public_key_t, get_keysize, int,