xca/lib/pki_key.cpp

/* vi: set sw=4 ts=4: */
/*
 * Copyright (C) 2001 Christian Hohnstaedt.
 *
 *  All rights reserved.
 *
 *
 *  Redistribution and use in source and binary forms, with or without
 *  modification, are permitted provided that the following conditions are met:
 *
 *  - Redistributions of source code must retain the above copyright notice,
 *    this list of conditions and the following disclaimer.
 *  - Redistributions in binary form must reproduce the above copyright notice,
 *    this list of conditions and the following disclaimer in the documentation
 *    and/or other materials provided with the distribution.
 *  - Neither the name of the author nor the names of its contributors may be
 *    used to endorse or promote products derived from this software without
 *    specific prior written permission.
 *
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
 * OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 *
 *
 * This program links to software with different licenses from:
 *
 *	http://www.openssl.org which includes cryptographic software
 *	written by Eric Young (eay@cryptsoft.com)"
 *
 *	http://www.trolltech.com
 *
 *
 *
 * http://www.hohnstaedt.de/xca
 * email: christian@hohnstaedt.de
 *
 * $Id$
 *
 */


#include "pki_key.h"
#include "pass_info.h"
#include "func.h"
#include "db.h"
#include <openssl/rand.h>
#include <Qt/qprogressdialog.h>
#include <Qt/qapplication.h>
#include <Qt/qdir.h>
#include <widgets/MainWindow.h>

char pki_key::passwd[40]={0,};

QPixmap *pki_key::icon[2]= { NULL, NULL };

void pki_key::erasePasswd(){
	for (int i=0; i<40; i++)
		passwd[i] = 0;
}

void pki_key::init(int type)
{
	ucount = 0;
	key = EVP_PKEY_new();
	key->type = type;
	class_name = "pki_key";
	encKey = NULL;
	encKey_len = 0;
	ownPass = 0;
	dataVersion=1;
	pkiType=asym_key;
	cols=4;
}

void pki_key::incProgress(int a, int b, void *progress)
{
	int i = ((QProgressBar *)progress)->value();
			((QProgressBar *)progress)->setValue(++i);
}

QString pki_key::getTypeString()
{
	QString type;
	switch (key->type) {
		case EVP_PKEY_RSA:
			type = "RSA";
			break;
		case EVP_PKEY_DSA:
			type = "DSA";
			break;
		default:
			type = "---";
	}
	return type;
}

QString pki_key::getIntNameWithType()
{
	QString postfix;
	switch (key->type) {
		case EVP_PKEY_RSA:
			postfix = " (RSA)";
			break;
		case EVP_PKEY_DSA:
			postfix = " (DSA)";
			break;
		default:
			postfix = " (---)";
	}
	return getIntName() + " (" + getTypeString() + ")";
}
QString pki_key::removeTypeFromIntName(QString n)
{
	if (n.right(1) != ")" ) return n;
	n.truncate(n.length() - 6);
	return n;
}

void pki_key::setOwnPass(int x)
{
	EVP_PKEY *pk;
	if (x) x=1;
	if (ownPass == x) return;

	pk = decryptKey();
	if (pk == NULL) return;

	EVP_PKEY_free(key);
	key = pk;
	ownPass = x;
	encryptKey();
}

void pki_key::generate(int bits, int type, QProgressBar *progress)
{
	RSA *rsakey = NULL;
	DSA *dsakey = NULL;

	progress->setMinimum(0);
	progress->setMaximum(100);
	progress->setValue(50);

	if (type == EVP_PKEY_RSA) {
		rsakey = RSA_generate_key(bits, 0x10001, &incProgress, progress);
		if (rsakey) EVP_PKEY_set1_RSA(key, rsakey);
	} else if (type == EVP_PKEY_DSA) {
		progress->setMaximum(500);
		dsakey = DSA_generate_parameters(bits,NULL,0,NULL,NULL,&incProgress, progress);
		DSA_generate_key(dsakey);
		if(dsakey) EVP_PKEY_set1_DSA(key,dsakey);
	}
	openssl_error();
	encryptKey();

	printf("encryption  DONE\n");
}

pki_key::pki_key(const pki_key *pk)
	:pki_base(pk->desc)
{
	init();
	openssl_error();
	if (pk == NULL) return;
	printf("EVP_PKEY_COPY (no error)\n");
	if (pk->key->type == EVP_PKEY_RSA)
		EVP_PKEY_assign_RSA(key, EVP_PKEY_get1_RSA(pk->key));
	if (pk->key->type == EVP_PKEY_DSA)
		EVP_PKEY_assign_DSA(key, EVP_PKEY_get1_DSA(pk->key));
#if 0
	key->type = pk->key->type;
	if (key->type == EVP_PKEY_RSA) {
		//rsakey = RSA_dup(pk->key->pkey.rsa);
		key->pkey.rsa=((RSA *)ASN1_dup( (int (*)())i2d_RSAPrivateKey, (char *(*)())d2i_RSAPrivateKey,(char *)pk->key->pkey.rsa));
	}
	if (key->type == EVP_PKEY_DSA) {
		key->pkey.dsa=((DSA *)ASN1_dup( (int(*)())i2d_DSAPrivateKey, (char *(*)())d2i_DSAPrivateKey,(char *)pk->key->pkey.dsa));
	}
#endif
	openssl_error();
	encryptKey();
}

pki_key::pki_key(const QString name, int type )
	:pki_base(name)
{
	init(type);
	openssl_error();
}

pki_key::pki_key(EVP_PKEY *pkey)
	:pki_base()
{
	init();
	if (key) {
		EVP_PKEY_free(key);
	}
	key = pkey;
}

void pki_key::fload(const QString fname)
{
	pass_info p(XCA_TITLE, qApp->translate("MainWindow", "Please enter the password to decrypt the private key.")
		+ "\n'" + fname + "'"); 
	pem_password_cb *cb = MainWindow::passRead;
	FILE *fp = fopen(CCHAR(fname), "r");
	EVP_PKEY *pkey = NULL;
	bool priv = true;

	if (fp != NULL) {
		pkey = PEM_read_PrivateKey(fp, NULL, cb, &p);
		if (!pkey) {
			ign_openssl_error();
			rewind(fp);
			pkey = d2i_PrivateKey_fp(fp, NULL);
		}
		if (!pkey) {
			ign_openssl_error();
			rewind(fp);
			pkey = PEM_read_PUBKEY(fp, NULL, cb, &p);
			if (pkey) priv=false;
		}
		if (!pkey) {
			ign_openssl_error();
			rewind(fp);
			pkey = d2i_PUBKEY_fp(fp, NULL);
			if (pkey) priv=false;
		}
		if (pkey){
			if (key)
				EVP_PKEY_free(key);
			key = pkey;
			if (priv)
				encryptKey();
			setIntName(rmslashdot(fname));
		}

		openssl_error();
	} else
		fopen_error(fname);

	fclose(fp);
}

void pki_key::fromData(const unsigned char *p, db_header_t *head )
{
	const unsigned char *p1;
	int version, type, size;

	p1 = p;
	size = head->len - sizeof(db_header_t);
	version = head->version;

	if (key)
		EVP_PKEY_free(key);

	key = NULL;
	type = db::intFromData(&p1);
	ownPass = db::intFromData(&p1);
	D2I_CLASHT(d2i_PublicKey, type, &key, &p1, size - (2*sizeof(int)));
	openssl_error();

	encKey_len = size - (p1-p);
	if (encKey_len) {
		encKey = (unsigned char *)OPENSSL_malloc(encKey_len);
		memcpy(encKey, p1 ,encKey_len);
	}

}
#if 0
void pki_key::oldFromData(const unsigned char *p, int size )
{
	unsigned char *sik, *pdec;
	const unsigned char *pdec1, *sik1;
	int outl, decsize;
	unsigned char iv[EVP_MAX_IV_LENGTH];
	unsigned char ckey[EVP_MAX_KEY_LENGTH];
	memset(iv, 0, EVP_MAX_IV_LENGTH);
	RSA *rsakey;
	EVP_CIPHER_CTX ctx;
	const EVP_CIPHER *cipher = EVP_des_ede3_cbc();
	sik = (unsigned char *)OPENSSL_malloc(size);
	openssl_error();
	pdec = (unsigned char *)OPENSSL_malloc(size);
	if (pdec == NULL ) {
		OPENSSL_free(sik); 
		openssl_error();
	}
	pdec1=pdec;
	sik1=sik;
	memcpy(iv, p, 8); /* recover the iv */
	/* generate the key */
	EVP_BytesToKey(cipher, EVP_sha1(), iv, (unsigned char *)passwd,
		strlen(passwd), 1, ckey,NULL);
	/* we use sha1 as message digest, 
	 * because an md5 version of the password is 
	 * stored in the database...
	 */
	EVP_CIPHER_CTX_init (&ctx);
	EVP_DecryptInit( &ctx, cipher, ckey, iv);
	EVP_DecryptUpdate( &ctx, pdec , &outl, p + 8, size -8 );
	decsize = outl;
	EVP_DecryptFinal( &ctx, pdec + decsize , &outl );
	decsize += outl;
	openssl_error();
	memcpy(sik, pdec, decsize);
	if (key->type == EVP_PKEY_RSA) {
		rsakey = d2i_RSAPrivateKey(NULL, &pdec1, decsize);
		if (ign_openssl_error()) {
			rsakey = D2I_CLASH(d2i_RSA_PUBKEY, NULL, &sik1, decsize);
		}
		openssl_error(); 
		if (rsakey) EVP_PKEY_assign_RSA(key, rsakey);
	}
	OPENSSL_free(sik);
	OPENSSL_free(pdec);
	EVP_CIPHER_CTX_cleanup(&ctx);
	openssl_error();
	encryptKey();
}
#endif
EVP_PKEY *pki_key::decryptKey()
{
	unsigned char *p;
	const unsigned char *p1;
	int outl, decsize;
	unsigned char iv[EVP_MAX_IV_LENGTH];
	unsigned char ckey[EVP_MAX_KEY_LENGTH];

	EVP_PKEY *tmpkey;
	EVP_CIPHER_CTX ctx;
	const EVP_CIPHER *cipher = EVP_des_ede3_cbc();
	char ownPassBuf[MAX_PASS_LENGTH];

	/* This key has its own password */
	if (ownPass == 1) {
		pass_info pi(XCA_TITLE, qApp->translate("MainWindow", "Please enter the password to decrypt the private key: '") + getIntName() + "'");
		MainWindow::passRead(ownPassBuf, MAX_PASS_LENGTH, 0, &pi);
	}
	else {
		if (strlen(passwd) != 0)
			memcpy(ownPassBuf, passwd, MAX_PASS_LENGTH);
		else {
			int retlen = 0;
			pass_info p(XCA_TITLE, qApp->translate("MainWindow",
					"Please enter the default password"));
			while (strlen(passwd) == 0 && retlen == 0) {
				retlen = MainWindow::passRead(passwd, MAX_PASS_LENGTH, 0, &p);
			}
		}
	}

	p = (unsigned char *)OPENSSL_malloc(encKey_len);
	openssl_error();
	p1 = p;
	memset(iv, 0, EVP_MAX_IV_LENGTH);

	memcpy(iv, encKey, 8); /* recover the iv */
	/* generate the key */
	EVP_BytesToKey(cipher, EVP_sha1(), iv, (unsigned char *)ownPassBuf,
		strlen(ownPassBuf), 1, ckey,NULL);
	/* we use sha1 as message digest,
	 * because an md5 version of the password is
	 * stored in the database...
	 */
	EVP_CIPHER_CTX_init (&ctx);
	EVP_DecryptInit( &ctx, cipher, ckey, iv);
	EVP_DecryptUpdate( &ctx, p , &outl, encKey + 8, encKey_len - 8 );
	decsize = outl;
	EVP_DecryptFinal( &ctx, encKey + decsize , &outl );
	decsize += outl;
	printf("Decrypt decsize=%d, encKey_len=%d\n", decsize, encKey_len);
	openssl_error();
	tmpkey = D2I_CLASHT(d2i_PrivateKey, key->type, NULL, &p1, decsize);
	OPENSSL_free(p);
	EVP_CIPHER_CTX_cleanup(&ctx);
	openssl_error();
	return tmpkey;
}

unsigned char *pki_key::toData(int *size)
{
	unsigned char *p, *p1;
	int pubsize;

	pubsize = i2d_PublicKey(key, NULL);
	*size = pubsize + encKey_len + (2*sizeof(int));
	p = (unsigned char *)OPENSSL_malloc(*size);
	openssl_error();
	p1 = p;
	db::intToData(&p1, key->type);
	db::intToData(&p1, ownPass);
	i2d_PublicKey(key, &p1);
	openssl_error();
	if (encKey_len) {
		memcpy(p1, encKey, encKey_len);
	}
	printf("To data: pubsize=%d, encKey_len: %d, *size=%d\n",
			pubsize, encKey_len, *size);
	return p;
}

void pki_key::encryptKey()
{
	int outl, keylen;
	EVP_PKEY *pkey1 = NULL;
	EVP_CIPHER_CTX ctx;
	const EVP_CIPHER *cipher = EVP_des_ede3_cbc();
	unsigned char iv[EVP_MAX_IV_LENGTH], *punenc, *punenc1;
	const unsigned char *punencc;
	unsigned char ckey[EVP_MAX_KEY_LENGTH];
	char ownPassBuf[MAX_PASS_LENGTH];

	/* This key has its own, private password ? */
	if (ownPass == 1) {
		pass_info p(XCA_TITLE, qApp->translate("MainWindow",
			"Please enter the password to protect the private key: '") +
			getIntName() + "'");
		while (!MainWindow::passWrite(ownPassBuf, MAX_PASS_LENGTH, 0, &p) );
	}
	else {
		int retlen = 0;
		pass_info p(XCA_TITLE, qApp->translate("MainWindow",
				"Please enter the default password for encrypting keys"));
		while (strlen(passwd) == 0 && retlen == 0) {
			retlen = MainWindow::passWrite(passwd, MAX_PASS_LENGTH, 0, &p);
		}
		memcpy(ownPassBuf, passwd, MAX_PASS_LENGTH);
	}

	/* Prepare Encryption */
	memset(iv, 0, EVP_MAX_IV_LENGTH);
	RAND_pseudo_bytes(iv,8);      /* Generate a salt */
	EVP_BytesToKey(cipher, EVP_sha1(), iv, (unsigned char *)ownPassBuf,
			strlen(ownPassBuf), 1, ckey, NULL);
	EVP_CIPHER_CTX_init (&ctx);
	openssl_error();
	if (encKey)
		OPENSSL_free(encKey);
	encKey_len = 0;

	/* reserve space for unencrypted and encrypted key */
	keylen = i2d_PrivateKey(key, NULL);
	encKey = (unsigned char *)OPENSSL_malloc(keylen + EVP_MAX_KEY_LENGTH + 8);
	punenc = (unsigned char *)OPENSSL_malloc(keylen);
	openssl_error();
	punencc = punenc1 = punenc;
	memcpy(encKey, iv, 8); /* store the iv */
	/* convert rsa/dsa to Pubkey */
    i2d_PublicKey(key, &punenc);
	punenc = punenc1;
	D2I_CLASHT(d2i_PublicKey, key->type, &pkey1, &punencc, keylen);
	openssl_error();
    i2d_PrivateKey(key, &punenc);
	punenc = punenc1;
	/*
	 * Now DER version of privkey is in punenc, pubkey is in pkey1
	 * and privkey is still in key
	 */

	/* do the encryption */
	/* store key right after the iv */
	EVP_EncryptInit( &ctx, cipher, ckey, iv);
	EVP_EncryptUpdate( &ctx, encKey + 8, &outl, punenc, keylen );
	encKey_len = outl;
	EVP_EncryptFinal( &ctx, encKey + encKey_len + 8, &outl );
	encKey_len += outl + 8;

	/* Cleanup */
	EVP_CIPHER_CTX_cleanup(&ctx);
	/* wipe out the memory */
	memset(punenc, 0, keylen);
	OPENSSL_free(punenc);
	openssl_error();

	EVP_PKEY_free(key);
	key = pkey1;
	openssl_error();

	//CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_OFF);

	printf("Encrypt: encKey_len=%d\n", encKey_len);
	return;
}



pki_key::~pki_key()
{
	if (key)
		EVP_PKEY_free(key);
	if (encKey)
		OPENSSL_free(encKey);
}


void pki_key::writePKCS8(const QString fname, pem_password_cb *cb)
{
	EVP_PKEY *pkey;
	pass_info p(XCA_TITLE, qApp->translate("MainWindow", "Please enter the password protecting the PKCS#8 key"));
	FILE *fp = fopen(fname.toAscii(),"w");
	if (fp != NULL) {
		if (key){
			pkey = decryptKey();
			PEM_write_PKCS8PrivateKey_nid(fp, pkey,
						NID_pbeWithMD5AndDES_CBC, NULL, 0, cb, &p);
			EVP_PKEY_free(pkey);
			openssl_error();
	   }
	}
	else fopen_error(fname);
	fclose(fp);
}

static int mycb(char *buf, int size, int rwflag, void *userdata)
{
	strncpy(buf, pki_key::passwd, size);
	return strlen(pki_key::passwd);
}

void pki_key::writeDefault(const QString fname)
{
	writeKey(fname + QDir::separator() + getIntName() + ".pem",
			EVP_des_ede3_cbc(), mycb, true);
}

void pki_key::writeKey(const QString fname, const EVP_CIPHER *enc,
			pem_password_cb *cb, bool PEM)
{
	EVP_PKEY *pkey;
	pass_info p(XCA_TITLE, qApp->translate("MainWindow", "Please enter the export password for the private key"));
	if (isPubKey()) {
		writePublic(fname, PEM);
		return;
	}
	FILE *fp = fopen(CCHAR(fname), "w");
	if (!fp) {
		fopen_error(fname);
		return;
	}
	if (key){
		pkey = decryptKey();
		if (PEM) {
			PEM_write_PrivateKey(fp, pkey, enc, NULL, 0, cb, &p);
		} else {
			i2d_PrivateKey_fp(fp, pkey);
        }
		EVP_PKEY_free(pkey);
		openssl_error();
	}
	fclose(fp);
}

void pki_key::writePublic(const QString fname, bool PEM)
{
	FILE *fp = fopen(fname.toAscii(),"w");
	if (fp == NULL) {
		fopen_error(fname);
		return;
	}
	if (PEM)
		PEM_write_PUBKEY(fp, key);
	else
		i2d_PUBKEY_fp(fp, key);

	openssl_error();
	fclose(fp);
}


QString pki_key::length()
{
	char st[64];
	QString x;
	if (key->type == EVP_PKEY_DSA && key->pkey.dsa->p==NULL) {
		return x="???";
	}
	sprintf(st,"%i bit",  EVP_PKEY_bits(key) );
	openssl_error();
	x = st;
	return x;
}

QString pki_key::BN2QString(BIGNUM *bn)
{
	if (bn == NULL) return "--";
	QString x="";
	char zs[10];
	int j;
	int size = BN_num_bytes(bn);
	unsigned char *buf = (unsigned char *)OPENSSL_malloc(size);
	BN_bn2bin(bn, buf);
	for (j = 0; j< size; j++) {
		sprintf(zs, "%02X%c",buf[j], ((j+1)%16 == 0) ?'\n':':');
		x += zs;
	}
	OPENSSL_free(buf);
	openssl_error();
	return x;
}

QString pki_key::modulus() {
	if (key->type != EVP_PKEY_RSA) return "??no rsa??";
	return BN2QString(key->pkey.rsa->n);
}

QString pki_key::pubEx() {
	if (key->type != EVP_PKEY_RSA) return "??no rsa??";
	return BN2QString(key->pkey.rsa->e);
}

QString pki_key::subprime() {
	if (key->type != EVP_PKEY_DSA) return "??no dsa??";
	return BN2QString(key->pkey.dsa->q);
}

QString pki_key::pubkey() {
	if (key->type != EVP_PKEY_DSA) return "??no dsa??";
	return BN2QString(key->pkey.dsa->pub_key);
}

bool pki_key::compare(pki_base *ref)
{
	pki_key *kref = (pki_key *)ref;
	if(key->type == EVP_PKEY_RSA) {
		if (kref==NULL || kref->key==NULL || kref->key->pkey.rsa->n==NULL)
			return false;
		if (key == NULL || key->pkey.rsa->n == NULL)
			return false;
		if (
			BN_cmp(key->pkey.rsa->n, kref->key->pkey.rsa->n) ||
			BN_cmp(key->pkey.rsa->e, kref->key->pkey.rsa->e) 
		){
			openssl_error();
			return false;
		}
	} else if(key->type == EVP_PKEY_DSA) {
		if(kref==NULL || kref->key==NULL || kref->key->pkey.dsa->pub_key==NULL)
			return false;
		if(key==NULL || key->pkey.dsa->pub_key==NULL)
			return false;
		if(BN_cmp(key->pkey.dsa->pub_key,kref->key->pkey.dsa->pub_key)){
			openssl_error();
			return false;
		}
	}
	openssl_error();
	return true;
}


bool pki_key::isPubKey()
{
	if (encKey_len == 0 || encKey == NULL) {
		return true;
	}
	return false;
}

bool pki_key::isPrivKey()
{
	return ! isPubKey();
}

int pki_key::verify()
{
	bool veri = false;
	return true;
	if (key->type == EVP_PKEY_RSA && isPrivKey()) {
	   if (RSA_check_key(key->pkey.rsa) == 1) veri = true;
	}
	if (isPrivKey()) veri = true;
	openssl_error();
	return veri;
}

int pki_key::getType()
{
	return key->type;
}

int pki_key::incUcount()
{
	ucount++;
	return ucount;
}
int pki_key::decUcount()
{
	ucount--;
	return ucount;
}

int pki_key::getUcount()
{
	return ucount;
}

const EVP_MD *pki_key::getDefaultMD(){
	const EVP_MD *md;
	switch (key->type) {
		case EVP_PKEY_RSA: md = EVP_md5(); break;
		case EVP_PKEY_DSA: md = EVP_dss1(); break;
		default: md = NULL; break;
	}
	return md;
}

QVariant pki_key::column_data(int col)
{
	switch (col) {
		case 0:
			return QVariant(getIntName());
		case 1:
			return QVariant(getTypeString());
		case 2:
			return QVariant(length());
		case 3:
			return QVariant(getUcount());
	}
	return QVariant();
}

QVariant pki_key::getIcon()
{
	int pixnum= isPubKey() ? 1 : 0;
	return QVariant(*icon[pixnum]);
}