1
0
mirror of git://git.gnupg.org/gnupg.git synced 2024-06-08 23:37:47 +02:00

ECC Fixes.

* agent/cvt-openpgp.c (get_keygrip, convert_secret_key)
(convert_transfer_key): Follow newer (>= 1.6) libgcrypt API, which
does not distinguish the detail.
(do_unprotect, convert_from_openpgp_main): Don't call
map_pk_openpgp_to_gcry, as it's the value of libgcrypt API already and
not the value defined by OpenPGP.
(convert_to_openpgp): It's "ecc".
* agent/gpg-agent.c (map_pk_openpgp_to_gcry): Remove.
* g10/call-agent.c (agent_pkdecrypt): Fix off-by-one error.
* g10/pubkey-enc.c (get_it): Fix swapping the fields error.
This commit is contained in:
NIIBE Yutaka 2014-04-28 10:36:16 +09:00
parent fdd938a5bb
commit 21dab64030
4 changed files with 10 additions and 40 deletions

View File

@ -68,21 +68,17 @@ get_keygrip (int pubkey_algo, gcry_mpi_t *pkey, unsigned char *grip)
break; break;
case GCRY_PK_ELG: case GCRY_PK_ELG:
case GCRY_PK_ELG_E:
err = gcry_sexp_build (&s_pkey, NULL, err = gcry_sexp_build (&s_pkey, NULL,
"(public-key(elg(p%m)(g%m)(y%m)))", "(public-key(elg(p%m)(g%m)(y%m)))",
pkey[0], pkey[1], pkey[2]); pkey[0], pkey[1], pkey[2]);
break; break;
case GCRY_PK_RSA: case GCRY_PK_RSA:
case GCRY_PK_RSA_E:
case GCRY_PK_RSA_S:
err = gcry_sexp_build (&s_pkey, NULL, err = gcry_sexp_build (&s_pkey, NULL,
"(public-key(rsa(n%m)(e%m)))", pkey[0], pkey[1]); "(public-key(rsa(n%m)(e%m)))", pkey[0], pkey[1]);
break; break;
case GCRY_PK_ECDSA: case GCRY_PK_ECC:
case GCRY_PK_ECDH:
err = gcry_sexp_build (&s_pkey, NULL, err = gcry_sexp_build (&s_pkey, NULL,
"(public-key(ecc(p%m)(a%m)(b%m)(g%m)(n%m)(q%m)))", "(public-key(ecc(p%m)(a%m)(b%m)(g%m)(n%m)(q%m)))",
pkey[0], pkey[1], pkey[2], pkey[3], pkey[4], pkey[0], pkey[1], pkey[2], pkey[3], pkey[4],
@ -138,14 +134,10 @@ convert_secret_key (gcry_sexp_t *r_key, int pubkey_algo, gcry_mpi_t *skey)
skey[5]); skey[5]);
break; break;
case GCRY_PK_ECDSA: case GCRY_PK_ECC:
case GCRY_PK_ECDH:
/* Although our code would work with "ecc" we explicitly use
"ecdh" or "ecdsa" to implicitly set the key capabilities. */
err = gcry_sexp_build (&s_skey, NULL, err = gcry_sexp_build (&s_skey, NULL,
"(private-key(%s(p%m)(a%m)(b%m)(g%m)(n%m)(q%m)" "(private-key(ecc(p%m)(a%m)(b%m)(g%m)(n%m)(q%m)"
"(d%m)))", "(d%m)))",
pubkey_algo == GCRY_PK_ECDSA?"ecdsa":"ecdh",
skey[0], skey[1], skey[2], skey[3], skey[4], skey[0], skey[1], skey[2], skey[3], skey[4],
skey[5], skey[6]); skey[5], skey[6]);
break; break;
@ -186,7 +178,6 @@ convert_transfer_key (gcry_sexp_t *r_key, int pubkey_algo, gcry_mpi_t *skey,
break; break;
case GCRY_PK_ELG: case GCRY_PK_ELG:
case GCRY_PK_ELG_E:
err = gcry_sexp_build err = gcry_sexp_build
(&s_skey, NULL, (&s_skey, NULL,
"(protected-private-key(elg(p%m)(g%m)(y%m)" "(protected-private-key(elg(p%m)(g%m)(y%m)"
@ -196,8 +187,6 @@ convert_transfer_key (gcry_sexp_t *r_key, int pubkey_algo, gcry_mpi_t *skey,
case GCRY_PK_RSA: case GCRY_PK_RSA:
case GCRY_PK_RSA_E:
case GCRY_PK_RSA_S:
err = gcry_sexp_build err = gcry_sexp_build
(&s_skey, NULL, (&s_skey, NULL,
"(protected-private-key(rsa(n%m)(e%m)", "(protected-private-key(rsa(n%m)(e%m)",
@ -205,15 +194,11 @@ convert_transfer_key (gcry_sexp_t *r_key, int pubkey_algo, gcry_mpi_t *skey,
skey[0], skey[1], transfer_key ); skey[0], skey[1], transfer_key );
break; break;
case GCRY_PK_ECDSA: case GCRY_PK_ECC:
case GCRY_PK_ECDH:
/* Although our code would work with "ecc" we explicitly use
"ecdh" or "ecdsa" to implicitly set the key capabilities. */
err = gcry_sexp_build err = gcry_sexp_build
(&s_skey, NULL, (&s_skey, NULL,
"(protected-private-key(%s(p%m)(a%m)(b%m)(g%m)(n%m)(q%m)" "(protected-private-key(ecc(p%m)(a%m)(b%m)(g%m)(n%m)(q%m)"
"(protected openpgp-native%S)))", "(protected openpgp-native%S)))",
pubkey_algo == GCRY_PK_ECDSA?"ecdsa":"ecdh",
skey[0], skey[1], skey[2], skey[3], skey[4], skey[5], transfer_key); skey[0], skey[1], skey[2], skey[3], skey[4], skey[5], transfer_key);
break; break;
@ -359,10 +344,6 @@ do_unprotect (const char *passphrase,
*r_key = NULL; *r_key = NULL;
/* Unfortunately, the OpenPGP PK algorithm numbers need to be
re-mapped for Libgcrypt. */
pubkey_algo = map_pk_openpgp_to_gcry (pubkey_algo);
err = prepare_unprotect (pubkey_algo, skey, skeysize, s2k_mode, err = prepare_unprotect (pubkey_algo, skey, skeysize, s2k_mode,
&npkey, &nskey, &skeylen); &npkey, &nskey, &skeylen);
if (err) if (err)
@ -864,14 +845,12 @@ convert_from_openpgp_main (ctrl_t ctrl, gcry_sexp_t s_pgp,
if (unattended && !from_native) if (unattended && !from_native)
{ {
int pubkey_g_algo = map_pk_openpgp_to_gcry (pubkey_algo); err = prepare_unprotect (pubkey_algo, skey, DIM(skey), s2k_mode,
err = prepare_unprotect (pubkey_g_algo, skey, DIM(skey), s2k_mode,
NULL, NULL, NULL); NULL, NULL, NULL);
if (err) if (err)
goto leave; goto leave;
err = convert_transfer_key (&s_skey, pubkey_g_algo, skey, s_pgp); err = convert_transfer_key (&s_skey, pubkey_algo, skey, s_pgp);
if (err) if (err)
goto leave; goto leave;
} }
@ -1195,7 +1174,7 @@ convert_to_openpgp (ctrl_t ctrl, gcry_sexp_t s_key, const char *passphrase,
else if (!strcmp (name, "ecc")) else if (!strcmp (name, "ecc"))
{ {
/* FIXME: We need to use the curve parameter. */ /* FIXME: We need to use the curve parameter. */
algoname = "?"; /* Decide later by checking the usage. */ algoname = "ecc"; /* Decide later by checking the usage. */
npkey = 6; npkey = 6;
nskey = 7; nskey = 7;
err = gcry_sexp_extract_param (list, NULL, "pabgnqd", err = gcry_sexp_extract_param (list, NULL, "pabgnqd",

View File

@ -2546,12 +2546,3 @@ check_for_running_agent (int silent, int mode)
assuan_release (ctx); assuan_release (ctx);
return 0; return 0;
} }
/* TODO: it is also in misc, which is not linked with the agent */
/* FIXME: The agent should not know about openpgp internals - weel
except for some stuff in cvt-openpgp. */
int
map_pk_openpgp_to_gcry (int algo)
{
return (algo==PUBKEY_ALGO_ECDSA ? GCRY_PK_ECDSA : (algo==PUBKEY_ALGO_ECDH ? GCRY_PK_ECDH : algo));
}

View File

@ -1991,7 +1991,7 @@ agent_pkdecrypt (ctrl_t ctrl, const char *keygrip, const char *desc,
xfree (buf); xfree (buf);
return gpg_error (GPG_ERR_INV_SEXP); return gpg_error (GPG_ERR_INV_SEXP);
} }
len -= 11; /* Count only the data of the second part. */ len -= 10; /* Count only the data of the second part. */
p = buf + 8; /* Skip leading parenthesis and the value tag. */ p = buf + 8; /* Skip leading parenthesis and the value tag. */
n = strtoul (p, &endp, 10); n = strtoul (p, &endp, 10);

View File

@ -185,7 +185,7 @@ get_it (PKT_pubkey_enc *enc, DEK *dek, PKT_public_key *sk, u32 *keyid)
err = gpg_error (GPG_ERR_BAD_MPI); err = gpg_error (GPG_ERR_BAD_MPI);
else else
err = gcry_sexp_build (&s_data, NULL, "(enc-val(ecdh(s%m)(e%m)))", err = gcry_sexp_build (&s_data, NULL, "(enc-val(ecdh(s%m)(e%m)))",
enc->data[0], enc->data[1]); enc->data[1], enc->data[0]);
} }
else else
err = gpg_error (GPG_ERR_BUG); err = gpg_error (GPG_ERR_BUG);