OpenDDS::Security::SSL::ecdh_shared_secret_from_octets Class Reference

Collaboration diagram for OpenDDS::Security::SSL::ecdh_shared_secret_from_octets:

Public Member Functions
	ecdh_shared_secret_from_octets (EVP_PKEY *pkey)
	~ecdh_shared_secret_from_octets ()
int	operator() (const DDS::OctetSeq &src, DDS::OctetSeq &dst)

Private Attributes
EC_Handle	keypair
const EC_GROUP *	group
EC_POINT *	pubkey
BN_CTX *	bignum_ctx

Detailed Description

Definition at line 543 of file DiffieHellman.cpp.

Constructor & Destructor Documentation

ecdh_shared_secret_from_octets()

OpenDDS::Security::SSL::ecdh_shared_secret_from_octets::ecdh_shared_secret_from_octets ( EVP_PKEY *  pkey )

inlineexplicit

Definition at line 546 of file DiffieHellman.cpp.

References OPENDDS_SSL_LOG_ERR.

    : keypair(pkey)
#ifdef OPENSSL_V_3_0
    , ec_ctx(0)
    , fd_ctx(0)
    , peer(0)
    , param_bld(0)
    , params(0)
#else
    , group(0)
#endif
    , pubkey(0)
    , bignum_ctx(0)
  {
    if (!keypair) {
      OPENDDS_SSL_LOG_ERR("EVP_PKEY_get0_EC_KEY failed");
    }
  }

~ecdh_shared_secret_from_octets()

OpenDDS::Security::SSL::ecdh_shared_secret_from_octets::~ecdh_shared_secret_from_octets ( )

inline

Definition at line 565 of file DiffieHellman.cpp.

  {
    EC_POINT_free(pubkey);
    BN_CTX_free(bignum_ctx);
#ifdef OPENSSL_V_3_0
    EVP_PKEY_CTX_free(ec_ctx);
    EVP_PKEY_CTX_free(fd_ctx);
    EVP_PKEY_free(peer);
    OSSL_PARAM_BLD_free(param_bld);
    OSSL_PARAM_free(params);
#endif
  }

Member Function Documentation

operator()()

int OpenDDS::Security::SSL::ecdh_shared_secret_from_octets::operator() ( const DDS::OctetSeq &  src, DDS::OctetSeq &  dst  )

inline

Definition at line 578 of file DiffieHellman.cpp.

References OPENDDS_SSL_LOG_ERR, and strcmp().

  {
    if (!keypair) return 1;

    if (0 == (bignum_ctx = BN_CTX_new())) {
      OPENDDS_SSL_LOG_ERR("BN_CTX_new failed");
      return 1;
    }
#ifndef OPENSSL_V_3_0
    if (0 == (group = EC_KEY_get0_group(keypair))) {
      OPENDDS_SSL_LOG_ERR("EC_KEY_get0_group failed");
      return 1;
    }

    pubkey = EC_POINT_new(group);
    if (1 != EC_POINT_oct2point(group, pubkey, src.get_buffer(),
                                src.length(), bignum_ctx)) {
      OPENDDS_SSL_LOG_ERR("EC_POINT_point2oct failed");
      return 1;
    }

    const int numbits = EC_GROUP_get_degree(group);
    dst.length((numbits + 7) / 8);

    const int len = ECDH_compute_key(dst.get_buffer(), dst.length(), pubkey,
                                     keypair, 0);

    if (0 == len) {
      OPENDDS_SSL_LOG_ERR("ECDH_compute_key failed");
      return 1;
    }
#else
    const char* grp = 0;
    if (EVP_PKEY_todata(keypair, EVP_PKEY_PUBLIC_KEY, &params) <= 0) {
      OPENDDS_SSL_LOG_ERR("pkey to data failed");
      return 1;
    } else {
      for (OSSL_PARAM* p = params; grp == 0 && p != 0 && p->key != 0; p++) {
        if (strcmp(p->key, "group") == 0) {
          grp = static_cast<const char*>(p->data);
        }
      }
      if (grp == 0) {
        OPENDDS_SSL_LOG_ERR("could not find group id");
        return 1;
      }
    }

    if ((param_bld = OSSL_PARAM_BLD_new()) == 0) {
      OPENDDS_SSL_LOG_ERR("OSSL_PARAM_BLD_new failed");
      return 1;
    }

    if ((OSSL_PARAM_BLD_push_utf8_string(param_bld, "group", grp, 0) == 0)) {
      OPENDDS_SSL_LOG_ERR("Building prarms list failed");
      return 1;
    }

    if ((OSSL_PARAM_BLD_push_octet_string(param_bld, "pub", src.get_buffer(),src.length()) == 0)) {
      OPENDDS_SSL_LOG_ERR("Building prarms list failed");
      return 1;
    }

    OSSL_PARAM* old_params = params;
    params = OSSL_PARAM_BLD_to_param(param_bld);
    OSSL_PARAM_free(old_params);

    if ((fd_ctx = EVP_PKEY_CTX_new(keypair,0)) == 0) {
      OPENDDS_SSL_LOG_ERR("new ctx from name ECBH failed.");
      return 1;
    }

    EVP_PKEY_fromdata_init(fd_ctx);

    if (EVP_PKEY_fromdata(fd_ctx, &peer, EVP_PKEY_PUBLIC_KEY, params) != 1) {
      OPENDDS_SSL_LOG_ERR("EVP_PKEY_fromdata Failed");
      return 1;
    }

    if ((ec_ctx = EVP_PKEY_CTX_new(keypair,0)) == 0) {
      OPENDDS_SSL_LOG_ERR("new ctx from name ECBH failed.");
      return 1;
    }

    if (!EVP_PKEY_derive_init(ec_ctx)) {
      OPENDDS_SSL_LOG_ERR("EVP_PKEY_derive_init failed");
      return 1;
    }

    if (EVP_PKEY_derive_set_peer(ec_ctx, peer) <= 0) {
      OPENDDS_SSL_LOG_ERR("EVP_PKEY_derive_set peer failed");
      return 1;
    }

    size_t len = 0;
    if (EVP_PKEY_derive(ec_ctx, 0, &len) <= 0) {
      OPENDDS_SSL_LOG_ERR("DH compute_key error getting length");
      return 1;
    }
    dst.length(static_cast<ACE_CDR::ULong>(len));
    if (EVP_PKEY_derive(ec_ctx, dst.get_buffer(), &len) <= 0) {
      OPENDDS_SSL_LOG_ERR("EVP_PKEY_derive failed");
      dst.length(0u);
      return 1;
    }
#endif
    return 0;
  }

Member Data Documentation

bignum_ctx

BN_CTX* OpenDDS::Security::SSL::ecdh_shared_secret_from_octets::bignum_ctx

private

Definition at line 700 of file DiffieHellman.cpp.

group

const EC_GROUP* OpenDDS::Security::SSL::ecdh_shared_secret_from_octets::group

private

Definition at line 690 of file DiffieHellman.cpp.

keypair

EC_Handle OpenDDS::Security::SSL::ecdh_shared_secret_from_octets::keypair

private

Definition at line 689 of file DiffieHellman.cpp.

pubkey

EC_POINT* OpenDDS::Security::SSL::ecdh_shared_secret_from_octets::pubkey

private

Definition at line 699 of file DiffieHellman.cpp.

---

The documentation for this class was generated from the following file:

• DiffieHellman.cpp