srp.h 5.8 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179
  1. /* crypto/srp/srp.h */
  2. /*
  3. * Written by Christophe Renou ([email protected]) with the
  4. * precious help of Peter Sylvester ([email protected]) for the
  5. * EdelKey project and contributed to the OpenSSL project 2004.
  6. */
  7. /* ====================================================================
  8. * Copyright (c) 2004 The OpenSSL Project. All rights reserved.
  9. *
  10. * Redistribution and use in source and binary forms, with or without
  11. * modification, are permitted provided that the following conditions
  12. * are met:
  13. *
  14. * 1. Redistributions of source code must retain the above copyright
  15. * notice, this list of conditions and the following disclaimer.
  16. *
  17. * 2. Redistributions in binary form must reproduce the above copyright
  18. * notice, this list of conditions and the following disclaimer in
  19. * the documentation and/or other materials provided with the
  20. * distribution.
  21. *
  22. * 3. All advertising materials mentioning features or use of this
  23. * software must display the following acknowledgment:
  24. * "This product includes software developed by the OpenSSL Project
  25. * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
  26. *
  27. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  28. * endorse or promote products derived from this software without
  29. * prior written permission. For written permission, please contact
  30. * [email protected].
  31. *
  32. * 5. Products derived from this software may not be called "OpenSSL"
  33. * nor may "OpenSSL" appear in their names without prior written
  34. * permission of the OpenSSL Project.
  35. *
  36. * 6. Redistributions of any form whatsoever must retain the following
  37. * acknowledgment:
  38. * "This product includes software developed by the OpenSSL Project
  39. * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  42. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  44. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  45. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  46. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  47. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  48. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  49. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  50. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  51. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  52. * OF THE POSSIBILITY OF SUCH DAMAGE.
  53. * ====================================================================
  54. *
  55. * This product includes cryptographic software written by Eric Young
  56. * ([email protected]). This product includes software written by Tim
  57. * Hudson ([email protected]).
  58. *
  59. */
  60. #ifndef __SRP_H__
  61. # define __SRP_H__
  62. # ifndef OPENSSL_NO_SRP
  63. # include <stdio.h>
  64. # include <string.h>
  65. #ifdef __cplusplus
  66. extern "C" {
  67. #endif
  68. # include <openssl/safestack.h>
  69. # include <openssl/bn.h>
  70. # include <openssl/crypto.h>
  71. typedef struct SRP_gN_cache_st {
  72. char *b64_bn;
  73. BIGNUM *bn;
  74. } SRP_gN_cache;
  75. DECLARE_STACK_OF(SRP_gN_cache)
  76. typedef struct SRP_user_pwd_st {
  77. /* Owned by us. */
  78. char *id;
  79. BIGNUM *s;
  80. BIGNUM *v;
  81. /* Not owned by us. */
  82. const BIGNUM *g;
  83. const BIGNUM *N;
  84. /* Owned by us. */
  85. char *info;
  86. } SRP_user_pwd;
  87. DECLARE_STACK_OF(SRP_user_pwd)
  88. void SRP_user_pwd_free(SRP_user_pwd *user_pwd);
  89. typedef struct SRP_VBASE_st {
  90. STACK_OF(SRP_user_pwd) *users_pwd;
  91. STACK_OF(SRP_gN_cache) *gN_cache;
  92. /* to simulate a user */
  93. char *seed_key;
  94. BIGNUM *default_g;
  95. BIGNUM *default_N;
  96. } SRP_VBASE;
  97. /*
  98. * Structure interne pour retenir les couples N et g
  99. */
  100. typedef struct SRP_gN_st {
  101. char *id;
  102. BIGNUM *g;
  103. BIGNUM *N;
  104. } SRP_gN;
  105. DECLARE_STACK_OF(SRP_gN)
  106. SRP_VBASE *SRP_VBASE_new(char *seed_key);
  107. int SRP_VBASE_free(SRP_VBASE *vb);
  108. int SRP_VBASE_init(SRP_VBASE *vb, char *verifier_file);
  109. /* This method ignores the configured seed and fails for an unknown user. */
  110. SRP_user_pwd *SRP_VBASE_get_by_user(SRP_VBASE *vb, char *username);
  111. /* NOTE: unlike in SRP_VBASE_get_by_user, caller owns the returned pointer.*/
  112. SRP_user_pwd *SRP_VBASE_get1_by_user(SRP_VBASE *vb, char *username);
  113. char *SRP_create_verifier(const char *user, const char *pass, char **salt,
  114. char **verifier, const char *N, const char *g);
  115. int SRP_create_verifier_BN(const char *user, const char *pass, BIGNUM **salt,
  116. BIGNUM **verifier, BIGNUM *N, BIGNUM *g);
  117. # define SRP_NO_ERROR 0
  118. # define SRP_ERR_VBASE_INCOMPLETE_FILE 1
  119. # define SRP_ERR_VBASE_BN_LIB 2
  120. # define SRP_ERR_OPEN_FILE 3
  121. # define SRP_ERR_MEMORY 4
  122. # define DB_srptype 0
  123. # define DB_srpverifier 1
  124. # define DB_srpsalt 2
  125. # define DB_srpid 3
  126. # define DB_srpgN 4
  127. # define DB_srpinfo 5
  128. # undef DB_NUMBER
  129. # define DB_NUMBER 6
  130. # define DB_SRP_INDEX 'I'
  131. # define DB_SRP_VALID 'V'
  132. # define DB_SRP_REVOKED 'R'
  133. # define DB_SRP_MODIF 'v'
  134. /* see srp.c */
  135. char *SRP_check_known_gN_param(BIGNUM *g, BIGNUM *N);
  136. SRP_gN *SRP_get_default_gN(const char *id);
  137. /* server side .... */
  138. BIGNUM *SRP_Calc_server_key(BIGNUM *A, BIGNUM *v, BIGNUM *u, BIGNUM *b,
  139. BIGNUM *N);
  140. BIGNUM *SRP_Calc_B(BIGNUM *b, BIGNUM *N, BIGNUM *g, BIGNUM *v);
  141. int SRP_Verify_A_mod_N(BIGNUM *A, BIGNUM *N);
  142. BIGNUM *SRP_Calc_u(BIGNUM *A, BIGNUM *B, BIGNUM *N);
  143. /* client side .... */
  144. BIGNUM *SRP_Calc_x(BIGNUM *s, const char *user, const char *pass);
  145. BIGNUM *SRP_Calc_A(BIGNUM *a, BIGNUM *N, BIGNUM *g);
  146. BIGNUM *SRP_Calc_client_key(BIGNUM *N, BIGNUM *B, BIGNUM *g, BIGNUM *x,
  147. BIGNUM *a, BIGNUM *u);
  148. int SRP_Verify_B_mod_N(BIGNUM *B, BIGNUM *N);
  149. # define SRP_MINIMAL_N 1024
  150. #ifdef __cplusplus
  151. }
  152. #endif
  153. # endif
  154. #endif