mbed TLS v2.14.1
rsa.h
Go to the documentation of this file.
1 
12 /*
13  * Copyright (C) 2006-2018, Arm Limited (or its affiliates), All Rights Reserved
14  * SPDX-License-Identifier: Apache-2.0
15  *
16  * Licensed under the Apache License, Version 2.0 (the "License"); you may
17  * not use this file except in compliance with the License.
18  * You may obtain a copy of the License at
19  *
20  * http://www.apache.org/licenses/LICENSE-2.0
21  *
22  * Unless required by applicable law or agreed to in writing, software
23  * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
24  * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
25  * See the License for the specific language governing permissions and
26  * limitations under the License.
27  *
28  * This file is part of Mbed TLS (https://tls.mbed.org)
29  */
30 #ifndef MBEDTLS_RSA_H
31 #define MBEDTLS_RSA_H
32 
33 #if !defined(MBEDTLS_CONFIG_FILE)
34 #include "config.h"
35 #else
36 #include MBEDTLS_CONFIG_FILE
37 #endif
38 
39 #include "bignum.h"
40 #include "md.h"
41 
42 #if defined(MBEDTLS_THREADING_C)
43 #include "threading.h"
44 #endif
45 
46 /*
47  * RSA Error codes
48  */
49 #define MBEDTLS_ERR_RSA_BAD_INPUT_DATA -0x4080
50 #define MBEDTLS_ERR_RSA_INVALID_PADDING -0x4100
51 #define MBEDTLS_ERR_RSA_KEY_GEN_FAILED -0x4180
52 #define MBEDTLS_ERR_RSA_KEY_CHECK_FAILED -0x4200
53 #define MBEDTLS_ERR_RSA_PUBLIC_FAILED -0x4280
54 #define MBEDTLS_ERR_RSA_PRIVATE_FAILED -0x4300
55 #define MBEDTLS_ERR_RSA_VERIFY_FAILED -0x4380
56 #define MBEDTLS_ERR_RSA_OUTPUT_TOO_LARGE -0x4400
57 #define MBEDTLS_ERR_RSA_RNG_FAILED -0x4480
59 /* MBEDTLS_ERR_RSA_UNSUPPORTED_OPERATION is deprecated and should not be used.
60  */
61 #define MBEDTLS_ERR_RSA_UNSUPPORTED_OPERATION -0x4500
63 /* MBEDTLS_ERR_RSA_HW_ACCEL_FAILED is deprecated and should not be used. */
64 #define MBEDTLS_ERR_RSA_HW_ACCEL_FAILED -0x4580
66 /*
67  * RSA constants
68  */
69 #define MBEDTLS_RSA_PUBLIC 0
70 #define MBEDTLS_RSA_PRIVATE 1
72 #define MBEDTLS_RSA_PKCS_V15 0
73 #define MBEDTLS_RSA_PKCS_V21 1
75 #define MBEDTLS_RSA_SIGN 1
76 #define MBEDTLS_RSA_CRYPT 2
78 #define MBEDTLS_RSA_SALT_LEN_ANY -1
79 
80 /*
81  * The above constants may be used even if the RSA module is compile out,
82  * eg for alternative (PKCS#11) RSA implemenations in the PK layers.
83  */
84 
85 #ifdef __cplusplus
86 extern "C" {
87 #endif
88 
89 #if !defined(MBEDTLS_RSA_ALT)
90 // Regular implementation
91 //
92 
100 typedef struct mbedtls_rsa_context
101 {
102  int ver;
103  size_t len;
124  int padding;
127  int hash_id;
131 #if defined(MBEDTLS_THREADING_C)
132  mbedtls_threading_mutex_t mutex;
133 #endif
134 }
136 
137 #else /* MBEDTLS_RSA_ALT */
138 #include "rsa_alt.h"
139 #endif /* MBEDTLS_RSA_ALT */
140 
168  int padding,
169  int hash_id);
170 
201  const mbedtls_mpi *N,
202  const mbedtls_mpi *P, const mbedtls_mpi *Q,
203  const mbedtls_mpi *D, const mbedtls_mpi *E );
204 
240  unsigned char const *N, size_t N_len,
241  unsigned char const *P, size_t P_len,
242  unsigned char const *Q, size_t Q_len,
243  unsigned char const *D, size_t D_len,
244  unsigned char const *E, size_t E_len );
245 
279 
317  mbedtls_mpi *D, mbedtls_mpi *E );
318 
364  unsigned char *N, size_t N_len,
365  unsigned char *P, size_t P_len,
366  unsigned char *Q, size_t Q_len,
367  unsigned char *D, size_t D_len,
368  unsigned char *E, size_t E_len );
369 
387  mbedtls_mpi *DP, mbedtls_mpi *DQ, mbedtls_mpi *QP );
388 
398 void mbedtls_rsa_set_padding( mbedtls_rsa_context *ctx, int padding,
399  int hash_id);
400 
409 size_t mbedtls_rsa_get_len( const mbedtls_rsa_context *ctx );
410 
427  int (*f_rng)(void *, unsigned char *, size_t),
428  void *p_rng,
429  unsigned int nbits, int exponent );
430 
446 
484 
497  const mbedtls_rsa_context *prv );
498 
518  const unsigned char *input,
519  unsigned char *output );
520 
549  int (*f_rng)(void *, unsigned char *, size_t),
550  void *p_rng,
551  const unsigned char *input,
552  unsigned char *output );
553 
586  int (*f_rng)(void *, unsigned char *, size_t),
587  void *p_rng,
588  int mode, size_t ilen,
589  const unsigned char *input,
590  unsigned char *output );
591 
621  int (*f_rng)(void *, unsigned char *, size_t),
622  void *p_rng,
623  int mode, size_t ilen,
624  const unsigned char *input,
625  unsigned char *output );
626 
658  int (*f_rng)(void *, unsigned char *, size_t),
659  void *p_rng,
660  int mode,
661  const unsigned char *label, size_t label_len,
662  size_t ilen,
663  const unsigned char *input,
664  unsigned char *output );
665 
705  int (*f_rng)(void *, unsigned char *, size_t),
706  void *p_rng,
707  int mode, size_t *olen,
708  const unsigned char *input,
709  unsigned char *output,
710  size_t output_max_len );
711 
749  int (*f_rng)(void *, unsigned char *, size_t),
750  void *p_rng,
751  int mode, size_t *olen,
752  const unsigned char *input,
753  unsigned char *output,
754  size_t output_max_len );
755 
795  int (*f_rng)(void *, unsigned char *, size_t),
796  void *p_rng,
797  int mode,
798  const unsigned char *label, size_t label_len,
799  size_t *olen,
800  const unsigned char *input,
801  unsigned char *output,
802  size_t output_max_len );
803 
842  int (*f_rng)(void *, unsigned char *, size_t),
843  void *p_rng,
844  int mode,
845  mbedtls_md_type_t md_alg,
846  unsigned int hashlen,
847  const unsigned char *hash,
848  unsigned char *sig );
849 
880  int (*f_rng)(void *, unsigned char *, size_t),
881  void *p_rng,
882  int mode,
883  mbedtls_md_type_t md_alg,
884  unsigned int hashlen,
885  const unsigned char *hash,
886  unsigned char *sig );
887 
936  int (*f_rng)(void *, unsigned char *, size_t),
937  void *p_rng,
938  int mode,
939  mbedtls_md_type_t md_alg,
940  unsigned int hashlen,
941  const unsigned char *hash,
942  unsigned char *sig );
943 
981  int (*f_rng)(void *, unsigned char *, size_t),
982  void *p_rng,
983  int mode,
984  mbedtls_md_type_t md_alg,
985  unsigned int hashlen,
986  const unsigned char *hash,
987  const unsigned char *sig );
988 
1019  int (*f_rng)(void *, unsigned char *, size_t),
1020  void *p_rng,
1021  int mode,
1022  mbedtls_md_type_t md_alg,
1023  unsigned int hashlen,
1024  const unsigned char *hash,
1025  const unsigned char *sig );
1026 
1068  int (*f_rng)(void *, unsigned char *, size_t),
1069  void *p_rng,
1070  int mode,
1071  mbedtls_md_type_t md_alg,
1072  unsigned int hashlen,
1073  const unsigned char *hash,
1074  const unsigned char *sig );
1075 
1106  int (*f_rng)(void *, unsigned char *, size_t),
1107  void *p_rng,
1108  int mode,
1109  mbedtls_md_type_t md_alg,
1110  unsigned int hashlen,
1111  const unsigned char *hash,
1112  mbedtls_md_type_t mgf1_hash_id,
1113  int expected_salt_len,
1114  const unsigned char *sig );
1115 
1126 
1133 
1140 int mbedtls_rsa_self_test( int verbose );
1141 
1142 #ifdef __cplusplus
1143 }
1144 #endif
1145 
1146 #endif /* rsa.h */
int mbedtls_rsa_self_test(int verbose)
The RSA checkup routine.
mbedtls_mpi DP
Definition: rsa.h:112
int mbedtls_rsa_export_raw(const mbedtls_rsa_context *ctx, unsigned char *N, size_t N_len, unsigned char *P, size_t P_len, unsigned char *Q, size_t Q_len, unsigned char *D, size_t D_len, unsigned char *E, size_t E_len)
This function exports core parameters of an RSA key in raw big-endian binary format.
int mbedtls_rsa_rsassa_pkcs1_v15_sign(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, unsigned char *sig)
This function performs a PKCS#1 v1.5 signature operation (RSASSA-PKCS1-v1_5-SIGN).
int mbedtls_rsa_public(mbedtls_rsa_context *ctx, const unsigned char *input, unsigned char *output)
This function performs an RSA public key operation.
int mbedtls_rsa_rsaes_oaep_decrypt(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, const unsigned char *label, size_t label_len, size_t *olen, const unsigned char *input, unsigned char *output, size_t output_max_len)
This function performs a PKCS#1 v2.1 OAEP decryption operation (RSAES-OAEP-DECRYPT).
int mbedtls_rsa_import(mbedtls_rsa_context *ctx, const mbedtls_mpi *N, const mbedtls_mpi *P, const mbedtls_mpi *Q, const mbedtls_mpi *D, const mbedtls_mpi *E)
This function imports a set of core parameters into an RSA context.
int mbedtls_rsa_pkcs1_verify(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, const unsigned char *sig)
This function performs a public RSA operation and checks the message digest.
Configuration options (set of defines)
int mbedtls_rsa_complete(mbedtls_rsa_context *ctx)
This function completes an RSA context from a set of imported core parameters.
mbedtls_mpi DQ
Definition: rsa.h:113
int mbedtls_rsa_pkcs1_sign(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, unsigned char *sig)
This function performs a private RSA operation to sign a message digest using PKCS#1.
void mbedtls_rsa_set_padding(mbedtls_rsa_context *ctx, int padding, int hash_id)
This function sets padding for an already initialized RSA context. See mbedtls_rsa_init() for details...
Multi-precision integer library.
int mbedtls_rsa_rsassa_pss_verify_ext(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, mbedtls_md_type_t mgf1_hash_id, int expected_salt_len, const unsigned char *sig)
This function performs a PKCS#1 v2.1 PSS verification operation (RSASSA-PSS-VERIFY).
int mbedtls_rsa_pkcs1_decrypt(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, size_t *olen, const unsigned char *input, unsigned char *output, size_t output_max_len)
This function performs an RSA operation, then removes the message padding.
int mbedtls_rsa_rsassa_pss_sign(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, unsigned char *sig)
This function performs a PKCS#1 v2.1 PSS signature operation (RSASSA-PSS-SIGN).
int mbedtls_rsa_import_raw(mbedtls_rsa_context *ctx, unsigned char const *N, size_t N_len, unsigned char const *P, size_t P_len, unsigned char const *Q, size_t Q_len, unsigned char const *D, size_t D_len, unsigned char const *E, size_t E_len)
This function imports core RSA parameters, in raw big-endian binary format, into an RSA context...
mbedtls_mpi RP
Definition: rsa.h:118
int mbedtls_rsa_check_pub_priv(const mbedtls_rsa_context *pub, const mbedtls_rsa_context *prv)
This function checks a public-private RSA key pair.
Threading abstraction layer.
mbedtls_mpi P
Definition: rsa.h:109
struct mbedtls_rsa_context mbedtls_rsa_context
The RSA context structure.
int mbedtls_rsa_export(const mbedtls_rsa_context *ctx, mbedtls_mpi *N, mbedtls_mpi *P, mbedtls_mpi *Q, mbedtls_mpi *D, mbedtls_mpi *E)
This function exports the core parameters of an RSA key.
int mbedtls_rsa_private(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, const unsigned char *input, unsigned char *output)
This function performs an RSA private key operation.
int mbedtls_rsa_rsaes_pkcs1_v15_decrypt(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, size_t *olen, const unsigned char *input, unsigned char *output, size_t output_max_len)
This function performs a PKCS#1 v1.5 decryption operation (RSAES-PKCS1-v1_5-DECRYPT).
int mbedtls_rsa_rsassa_pkcs1_v15_verify(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, const unsigned char *sig)
This function performs a PKCS#1 v1.5 verification operation (RSASSA-PKCS1-v1_5-VERIFY).
mbedtls_mpi E
Definition: rsa.h:106
int mbedtls_rsa_export_crt(const mbedtls_rsa_context *ctx, mbedtls_mpi *DP, mbedtls_mpi *DQ, mbedtls_mpi *QP)
This function exports CRT parameters of a private RSA key.
size_t len
Definition: rsa.h:103
mbedtls_mpi Vf
Definition: rsa.h:122
int mbedtls_rsa_pkcs1_encrypt(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, size_t ilen, const unsigned char *input, unsigned char *output)
This function adds the message padding, then performs an RSA operation.
mbedtls_mpi QP
Definition: rsa.h:114
mbedtls_mpi D
Definition: rsa.h:108
This file contains the generic message-digest wrapper.
int mbedtls_rsa_rsassa_pss_verify(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, const unsigned char *hash, const unsigned char *sig)
This function performs a PKCS#1 v2.1 PSS verification operation (RSASSA-PSS-VERIFY).
int mbedtls_rsa_rsaes_pkcs1_v15_encrypt(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, size_t ilen, const unsigned char *input, unsigned char *output)
This function performs a PKCS#1 v1.5 encryption operation (RSAES-PKCS1-v1_5-ENCRYPT).
size_t mbedtls_rsa_get_len(const mbedtls_rsa_context *ctx)
This function retrieves the length of RSA modulus in Bytes.
MPI structure.
Definition: bignum.h:180
mbedtls_mpi N
Definition: rsa.h:105
int mbedtls_rsa_check_pubkey(const mbedtls_rsa_context *ctx)
This function checks if a context contains at least an RSA public key.
mbedtls_mpi RN
Definition: rsa.h:116
void mbedtls_rsa_free(mbedtls_rsa_context *ctx)
This function frees the components of an RSA key.
mbedtls_mpi RQ
Definition: rsa.h:119
int mbedtls_rsa_gen_key(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, unsigned int nbits, int exponent)
This function generates an RSA keypair.
int mbedtls_rsa_copy(mbedtls_rsa_context *dst, const mbedtls_rsa_context *src)
This function copies the components of an RSA context.
int mbedtls_rsa_check_privkey(const mbedtls_rsa_context *ctx)
This function checks if a context contains an RSA private key and perform basic consistency checks...
mbedtls_mpi Vi
Definition: rsa.h:121
mbedtls_md_type_t
Supported message digests.
Definition: md.h:58
mbedtls_mpi Q
Definition: rsa.h:110
The RSA context structure.
Definition: rsa.h:100
int mbedtls_rsa_rsaes_oaep_encrypt(mbedtls_rsa_context *ctx, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng, int mode, const unsigned char *label, size_t label_len, size_t ilen, const unsigned char *input, unsigned char *output)
This function performs a PKCS#1 v2.1 OAEP encryption operation (RSAES-OAEP-ENCRYPT).
void mbedtls_rsa_init(mbedtls_rsa_context *ctx, int padding, int hash_id)
This function initializes an RSA context.