Implement EdDSA public key export

Signed-off-by: Jakub Jelen <[email protected]>
Jakuje · Sep 20, 2023 · 8a06db9 · 8a06db9
1 parent aa89129
commit 8a06db9
Show file tree

Hide file tree

Showing 5 changed files with 104 additions and 1 deletion.
diff --git a/src/keymgmt.c b/src/keymgmt.c
@@ -1757,14 +1757,35 @@ static int p11prov_ed_get_params(void *keydata, OSSL_PARAM params[])
             return ret;
         }
     }
+    p = OSSL_PARAM_locate(params, OSSL_PKEY_PARAM_PUB_KEY);
+    if (p) {
+        CK_ATTRIBUTE *pub;
+
+        if (p->data_type != OSSL_PARAM_OCTET_STRING) {
+            return RET_OSSL_ERR;
+        }
+        ret = p11prov_obj_get_ed_pub_key(key, &pub);
+        if (ret != RET_OSSL_OK) {
+            return ret;
+        }
+
+        p->return_size = pub->ulValueLen;
+        if (p->data) {
+            if (p->data_size < pub->ulValueLen) {
+                return RET_OSSL_ERR;
+            }
+            memcpy(p->data, pub->pValue, pub->ulValueLen);
+            p->data_size = pub->ulValueLen;
+        }
+    }
 
     return RET_OSSL_OK;
 }
 
 static const OSSL_PARAM *p11prov_ed_gettable_params(void *provctx)
 {
     static const OSSL_PARAM params[] = {
-        /* TODO: OSSL_PARAM_octet_string(OSSL_PKEY_PARAM_PUB_KEY, NULL, 0), */
+        OSSL_PARAM_octet_string(OSSL_PKEY_PARAM_PUB_KEY, NULL, 0),
         OSSL_PARAM_int(OSSL_PKEY_PARAM_BITS, NULL),
         OSSL_PARAM_int(OSSL_PKEY_PARAM_SECURITY_BITS, NULL),
         OSSL_PARAM_int(OSSL_PKEY_PARAM_MAX_SIZE, NULL),

diff --git a/src/objects.c b/src/objects.c
@@ -1851,6 +1851,39 @@ int p11prov_obj_export_public_key(P11PROV_OBJ *obj, CK_KEY_TYPE key_type,
     }
 }
 
+int p11prov_obj_get_ed_pub_key(P11PROV_OBJ *obj, CK_ATTRIBUTE **pub)
+{
+    CK_ATTRIBUTE *a;
+
+    P11PROV_debug("get ed pubkey %p", *obj);
+
+    if (!obj) {
+        return RET_OSSL_ERR;
+    }
+
+    if (obj->class != CKO_PRIVATE_KEY && obj->class != CKO_PUBLIC_KEY) {
+        P11PROV_raise(obj->ctx, CKR_GENERAL_ERROR, "Invalid Object Class");
+        return RET_OSSL_ERR;
+    }
+
+    if (obj->data.key.type != CKK_EC_EDWARDS) {
+        P11PROV_raise(obj->ctx, CKR_GENERAL_ERROR, "Unsupported key type");
+        return RET_OSSL_ERR;
+    }
+
+    /* See if we have cached attributes first */
+    a = p11prov_obj_get_attr(obj, CKA_P11PROV_PUB_KEY);
+    if (!a) {
+        return RET_OSSL_ERR;
+    }
+
+    if (pub) {
+        *pub = a;
+    }
+    return RET_OSSL_OK;
+
+}
+
 int p11prov_obj_get_ec_public_x_y(P11PROV_OBJ *obj, CK_ATTRIBUTE **pub_x,
                                   CK_ATTRIBUTE **pub_y)
 {

diff --git a/src/objects.h b/src/objects.h
@@ -53,6 +53,7 @@ int p11prov_obj_export_public_key(P11PROV_OBJ *obj, CK_KEY_TYPE key_type,
                                   void *cb_arg);
 int p11prov_obj_get_ec_public_x_y(P11PROV_OBJ *obj, CK_ATTRIBUTE **pub_x,
                                   CK_ATTRIBUTE **pub_y);
+int p11prov_obj_get_ed_pub_key(P11PROV_OBJ *obj, CK_ATTRIBUTE **pub);
 
 #define OBJ_CMP_KEY_TYPE 0x00
 #define OBJ_CMP_KEY_PUBLIC 0x01

diff --git a/tests/tbasic b/tests/tbasic
@@ -201,6 +201,7 @@ fi
 if [[ -n $EDPUBURI ]]; then
     echo "EDPUBURI is $EDPUBURI"
     title PARA "Test EVP_PKEY_eq on public Edwards key via import"
+    cat "${TMPPDIR}"/ed.pub.uripin.pem
     $CHECKER ./tcmpkeys "$EDPUBURI" "${TMPPDIR}"/ed.pub.uripin.pem
     title PARA "Match private Edwards key against public key"
     $CHECKER ./tcmpkeys "$EDPRIURI" "${TMPPDIR}"/ed.pub.uripin.pem

diff --git a/tests/tgenkey.c b/tests/tgenkey.c
@@ -110,6 +110,29 @@ static void check_keys(OSSL_STORE_CTX *store, const char *key_type)
             BN_free(tmp);
             tmp = NULL;
         }
+    } else if (strcmp(key_type, "ED25519") == 0) {
+        unsigned char *tmp = NULL;
+        size_t len = 0;
+        int ret;
+
+        ret = EVP_PKEY_get_octet_string_param(pubkey, OSSL_PKEY_PARAM_PUB_KEY, NULL, 0, &len);
+        if (ret != 1) {
+            fprintf(stderr, "Failed to get public key size");
+            exit(EXIT_FAILURE);
+        }
+        tmp = malloc(len);
+        if (tmp == NULL) {
+            fprintf(stderr, "Failed to allocate memory for public key");
+            exit(EXIT_FAILURE);
+        }
+        ret = EVP_PKEY_get_octet_string_param(pubkey, OSSL_PKEY_PARAM_PUB_KEY, tmp, len, NULL);
+        if (ret != 1) {
+            fprintf(stderr, "Failed to get public key");
+            exit(EXIT_FAILURE);
+        } else {
+            free(tmp);
+            tmp = NULL;
+        }
     }
 
     EVP_PKEY_free(privkey);
@@ -417,7 +440,31 @@ int main(int argc, char *argv[])
                                                  (char *)bad_usage, 0);
 
     gen_keys("RSA", label, idhex, params, true);
+    free(label);
+    free(uri);
+
+    /* Check Ed25519 keys if supported */
+    ret = RAND_bytes(id, 16);
+    if (ret != 1) {
+        fprintf(stderr, "Failed to set generate key id\n");
+        exit(EXIT_FAILURE);
+    }
+    miniid = (id[0] << 24) + (id[1] << 16) + (id[2] << 8) + id[3];
+    ret = asprintf(&label, "Test-Ed-gen-%08x", miniid);
+    if (ret == -1) {
+        fprintf(stderr, "Failed to make label");
+        exit(EXIT_FAILURE);
+    }
+    hexify(idhex, id, 16);
+    ret = asprintf(&uri, "pkcs11:object=%s;id=%s", label, idhex);
+    if (ret == -1) {
+        fprintf(stderr, "Failed to make label");
+        exit(EXIT_FAILURE);
+    }
+    params[0] = OSSL_PARAM_construct_utf8_string("pkcs11_uri", uri, 0);
+    params[1] = OSSL_PARAM_construct_end();
 
+    gen_keys("ED25519", label, idhex, params, false);
     free(label);
     free(uri);