2 * RSA implementation just sufficient for ssh client-side
5 * Rewritten for more speed by Joris van Rantwijk, Jun 1999.
12 #if defined TESTMODE || defined RSADEBUG
16 #define debug(x) bndebug(#x,x)
18 static void bndebug(char *name, Bignum b) {
20 int w = 50-level-strlen(name)-5*b[0];
24 dprintf("%*s%s%*s", level, "", name, w, "");
25 for (i=b[0]; i>0; i--)
26 dprintf(" %04x", b[i]);
29 #define dmsg(x) do {if(level<DLVL){dprintf("%*s",level,"");printf x;}} while(0)
30 #define enter(x) do { dmsg(x); level += 4; } while(0)
31 #define leave(x) do { level -= 4; dmsg(x); } while(0)
41 int makekey(unsigned char *data, struct RSAKey *result,
42 unsigned char **keystr, int order) {
43 unsigned char *p = data;
48 result->bits = (result->bits << 8) + *p++;
51 * order=0 means exponent then modulus (the keys sent by the
52 * server). order=1 means modulus then exponent (the keys
53 * stored in a keyfile).
57 p += ssh1_read_bignum(p, &result->exponent);
58 result->bytes = (((p[0] << 8) + p[1]) + 7) / 8;
59 if (keystr) *keystr = p+2;
60 p += ssh1_read_bignum(p, &result->modulus);
62 p += ssh1_read_bignum(p, &result->exponent);
67 int makeprivate(unsigned char *data, struct RSAKey *result) {
68 return ssh1_read_bignum(data, &result->private_exponent);
71 void rsaencrypt(unsigned char *data, int length, struct RSAKey *key) {
78 memmove(data+key->bytes-length, data, length);
82 for (i = 2; i < key->bytes-length-1; i++) {
84 data[i] = random_byte();
85 } while (data[i] == 0);
87 data[key->bytes-length-1] = 0;
97 for (i=key->bytes; i-- ;) {
98 unsigned char byte = *p++;
100 b1[1+i/2] |= byte<<8;
107 modpow(b1, key->exponent, key->modulus, b2);
112 for (i=key->bytes; i-- ;) {
117 b = b2[1+i/2] & 0xFF;
125 Bignum rsadecrypt(Bignum input, struct RSAKey *key) {
127 ret = newbn(key->modulus[0]);
128 modpow(input, key->private_exponent, key->modulus, ret);
132 int rsastr_len(struct RSAKey *key) {
137 return 4 * (ex[0]+md[0]) + 10;
140 void rsastr_fmt(char *str, struct RSAKey *key) {
147 for (i=1; i<=ex[0]; i++) {
148 sprintf(str+len, "%04x", ex[i]);
149 len += strlen(str+len);
152 for (i=1; i<=md[0]; i++) {
153 sprintf(str+len, "%04x", md[i]);
154 len += strlen(str+len);
171 unsigned short P1[2] = { 1, p1 };
172 unsigned short P2[2] = { 1, p2 };
173 unsigned short P3[2] = { 1, p3 };
174 unsigned short bigmod[5] = { 4, 0, 0, 0, 32768U };
175 unsigned short mod[5] = { 4, 0, 0, 0, 0 };
176 unsigned short a[5] = { 4, 0, 0, 0, 0 };
177 unsigned short b[5] = { 4, 0, 0, 0, 0 };
178 unsigned short c[5] = { 4, 0, 0, 0, 0 };
179 unsigned short One[2] = { 1, 1 };
180 unsigned short Two[2] = { 1, 2 };
183 modmult(P1, P2, bigmod, a); debug(a);
184 modmult(a, P3, bigmod, mod); debug(mod);
186 sub(P1, One, a); debug(a);
187 sub(P2, One, b); debug(b);
188 modmult(a, b, bigmod, c); debug(c);
189 sub(P3, One, a); debug(a);
190 modmult(a, c, bigmod, b); debug(b);
192 modpow(Two, b, mod, a); debug(a);