From 1db3107ada6a93140b6b7deb59346b1c14e0adb8 Mon Sep 17 00:00:00 2001 From: "Dr. Stephen Henson" Date: Thu, 25 Feb 2016 17:46:14 +0000 Subject: TLS support for X25519 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Add X25519 to TLS supported curve list. Reject attempts to configure keys which cannot be used for signing. Reviewed-by: Rich Salz Reviewed-by: Emilia Käsper --- ssl/ssl_rsa.c | 5 +++++ ssl/t1_lib.c | 10 ++++++++-- 2 files changed, 13 insertions(+), 2 deletions(-) (limited to 'ssl') diff --git a/ssl/ssl_rsa.c b/ssl/ssl_rsa.c index f93db31c77..abced26ae1 100644 --- a/ssl/ssl_rsa.c +++ b/ssl/ssl_rsa.c @@ -378,6 +378,11 @@ static int ssl_set_cert(CERT *c, X509 *x) return 0; } + if (i == SSL_PKEY_ECC && !EC_KEY_can_sign(EVP_PKEY_get0_EC_KEY(pkey))) { + SSLerr(SSL_F_SSL_SET_CERT, SSL_R_ECC_CERT_NOT_FOR_SIGNING); + return 0; + } + if (c->pkeys[i].privatekey != NULL) { /* * The return code from EVP_PKEY_copy_parameters is deliberately diff --git a/ssl/t1_lib.c b/ssl/t1_lib.c index db5f0f6b44..f02317e09f 100644 --- a/ssl/t1_lib.c +++ b/ssl/t1_lib.c @@ -222,9 +222,11 @@ typedef struct { unsigned int flags; /* Flags: currently just field type */ } tls_curve_info; -# define TLS_CURVE_TYPE 0x1 -# define TLS_CURVE_CHAR2 0x1 +/* Mask for curve type */ +# define TLS_CURVE_TYPE 0x3 # define TLS_CURVE_PRIME 0x0 +# define TLS_CURVE_CHAR2 0x1 +# define TLS_CURVE_CUSTOM 0x2 /* * Table of curve information. @@ -261,6 +263,8 @@ static const tls_curve_info nid_list[] = { {NID_brainpoolP256r1, 128, TLS_CURVE_PRIME}, /* brainpoolP256r1 (26) */ {NID_brainpoolP384r1, 192, TLS_CURVE_PRIME}, /* brainpoolP384r1 (27) */ {NID_brainpoolP512r1, 256, TLS_CURVE_PRIME}, /* brainpool512r1 (28) */ + /* X25519 (29) */ + {NID_X25519, 128, TLS_CURVE_CUSTOM}, }; static const unsigned char ecformats_default[] = { @@ -271,6 +275,7 @@ static const unsigned char ecformats_default[] = { /* The default curves */ static const unsigned char eccurves_default[] = { + 0, 29, /* X25519 (29) */ /* Prefer P-256 which has the fastest and most secure implementations. */ 0, 23, /* secp256r1 (23) */ /* Other >= 256-bit prime curves. */ @@ -290,6 +295,7 @@ static const unsigned char eccurves_default[] = { }; static const unsigned char eccurves_all[] = { + 0, 29, /* X25519 (29) */ /* Prefer P-256 which has the fastest and most secure implementations. */ 0, 23, /* secp256r1 (23) */ /* Other >= 256-bit prime curves. */ -- cgit v1.2.3