openwrt/upstream - upstream openwrt

diff options

author	Hauke Mehrtens <hauke@hauke-m.de>	2023-10-11 23:06:24 +0200
committer	Hauke Mehrtens <hauke@hauke-m.de>	2023-10-11 23:06:24 +0200
commit	bd4f415efacfc03bbe5b79ae1d39c1451f5f7385 (patch)
tree	c3f975521b1bb2631edfaa90678011d144d52342 /target/linux/ar71xx/patches-2.6.30/802-ag71xx-use-netdev-ops.patch
parent	6637af95aa9085c8367ce8184b0fe6917365c3d3 (diff)
download	upstream-23.05.0.tar.gz upstream-23.05.0.tar.bz2 upstream-23.05.0.zip

OpenWrt v23.05.0: adjust config defaultsv23.05.0

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

Diffstat (limited to 'target/linux/ar71xx/patches-2.6.30/802-ag71xx-use-netdev-ops.patch')

0 files changed, 0 insertions, 0 deletions

/** * */ package com.trilead.ssh2.signature; import java.io.ByteArrayOutputStream; import java.io.IOException; import java.io.OutputStream; import java.math.BigInteger; import java.security.InvalidKeyException; import java.security.KeyFactory; import java.security.NoSuchAlgorithmException; import java.security.Signature; import java.security.SignatureException; import java.security.interfaces.ECPrivateKey; import java.security.interfaces.ECPublicKey; import java.security.spec.ECFieldFp; import java.security.spec.ECParameterSpec; import java.security.spec.ECPoint; import java.security.spec.ECPublicKeySpec; import java.security.spec.EllipticCurve; import java.security.spec.InvalidKeySpecException; import java.security.spec.KeySpec; import java.util.Map; import java.util.TreeMap; import com.trilead.ssh2.log.Logger; import com.trilead.ssh2.packets.TypesReader; import com.trilead.ssh2.packets.TypesWriter; /** * @author Kenny Root * */ public class ECDSASHA2Verify { private static final Logger log = Logger.getLogger(ECDSASHA2Verify.class); public static final String ECDSA_SHA2_PREFIX = "ecdsa-sha2-"; private static final String NISTP256 = "nistp256"; private static final String NISTP256_OID = "1.2.840.10045.3.1.7"; private static final String NISTP384 = "nistp384"; private static final String NISTP384_OID = "1.3.132.0.34"; private static final String NISTP521 = "nistp521"; private static final String NISTP521_OID = "1.3.132.0.35"; private static final Map<String, ECParameterSpec> CURVES = new TreeMap<String, ECParameterSpec>(); static { CURVES.put(NISTP256, EllipticCurves.nistp256); CURVES.put(NISTP384, EllipticCurves.nistp384); CURVES.put(NISTP521, EllipticCurves.nistp521); } private static final Map<Integer, String> CURVE_SIZES = new TreeMap<Integer, String>(); static { CURVE_SIZES.put(256, NISTP256); CURVE_SIZES.put(384, NISTP384); CURVE_SIZES.put(521, NISTP521); } private static final Map<String, String> CURVE_OIDS = new TreeMap<String, String>(); static { CURVE_OIDS.put(NISTP256_OID, NISTP256); CURVE_OIDS.put(NISTP384_OID, NISTP256); CURVE_OIDS.put(NISTP521_OID, NISTP256); } public static int[] getCurveSizes() { int[] keys = new int[CURVE_SIZES.size()]; int i = 0; for (Integer n : CURVE_SIZES.keySet().toArray(new Integer[keys.length])) { keys[i++] = n; } return keys; } public static ECParameterSpec getCurveForSize(int size) { final String name = CURVE_SIZES.get(size); if (name == null) { return null; } return CURVES.get(name); } public static ECPublicKey decodeSSHECDSAPublicKey(byte[] key) throws IOException { TypesReader tr = new TypesReader(key); String key_format = tr.readString(); if (key_format.startsWith(ECDSA_SHA2_PREFIX) == false) throw new IllegalArgumentException("This is not an ECDSA public key"); String curveName = tr.readString(); byte[] groupBytes = tr.readByteString(); if (tr.remain() != 0) throw new IOException("Padding in ECDSA public key!"); if (key_format.equals(ECDSA_SHA2_PREFIX + curveName) == false) { throw new IOException("Key format is inconsistent with curve name: " + key_format + " != " + curveName); } ECParameterSpec params = CURVES.get(curveName); if (params == null) { throw new IOException("Curve is not supported: " + curveName); } ECPoint group = ECDSASHA2Verify.decodeECPoint(groupBytes, params.getCurve()); if (group == null) { throw new IOException("Invalid ECDSA group"); } KeySpec keySpec = new ECPublicKeySpec(group, params); try { KeyFactory kf = KeyFactory.getInstance("EC"); return (ECPublicKey) kf.generatePublic(keySpec); } catch (NoSuchAlgorithmException nsae) { IOException ioe = new IOException("No EC KeyFactory available"); ioe.initCause(nsae); throw ioe; } catch (InvalidKeySpecException ikse) { IOException ioe = new IOException("No EC KeyFactory available"); ioe.initCause(ikse); throw ioe; } } public static byte[] encodeSSHECDSAPublicKey(ECPublicKey key) throws IOException { TypesWriter tw = new TypesWriter(); String curveName = getCurveName(key.getParams()); String keyFormat = ECDSA_SHA2_PREFIX + curveName; tw.writeString(keyFormat); tw.writeString(curveName); byte[] encoded = encodeECPoint(key.getW(), key.getParams().getCurve()); tw.writeString(encoded, 0, encoded.length); return tw.getBytes(); } public static String getCurveName(ECParameterSpec params) throws IOException { int fieldSize = getCurveSize(params); final String curveName = getCurveName(fieldSize); if (curveName == null) { throw new IOException("invalid curve size " + fieldSize); } return curveName; } public static String getCurveName(int fieldSize) { String curveName = CURVE_SIZES.get(fieldSize); if (curveName == null) { return null; } return curveName; } public static int getCurveSize(ECParameterSpec params) { return params.getCurve().getField().getFieldSize(); } public static ECParameterSpec getCurveForOID(String oid) { String name = CURVE_OIDS.get(oid); if (name == null) return null; return CURVES.get(name); } public static byte[] decodeSSHECDSASignature(byte[] sig) throws IOException { byte[] rsArray = null; TypesReader tr = new TypesReader(sig); String sig_format = tr.readString(); if (sig_format.startsWith(ECDSA_SHA2_PREFIX) == false) throw new IOException("Peer sent wrong signature format"); String curveName = sig_format.substring(ECDSA_SHA2_PREFIX.length()); if (CURVES.containsKey(curveName) == false) { throw new IOException("Unsupported curve: " + curveName); } rsArray = tr.readByteString(); if (tr.remain() != 0) throw new IOException("Padding in ECDSA signature!"); byte[] rArray; byte[] sArray; { TypesReader rsReader = new TypesReader(rsArray); rArray = rsReader.readMPINT().toByteArray(); sArray = rsReader.readMPINT().toByteArray(); } int first = rArray.length; int second = sArray.length; /* We can't have the high bit set, so add an extra zero at the beginning if so. */ if ((rArray[0] & 0x80) != 0) { first++; } if ((sArray[0] & 0x80) != 0) { second++; } /* Calculate total output length */ ByteArrayOutputStream os = new ByteArrayOutputStream(6 + first + second); /* ASN.1 SEQUENCE tag */ os.write(0x30); /* Size of SEQUENCE */ writeLength(4 + first + second, os); /* ASN.1 INTEGER tag */ os.write(0x02); /* "r" INTEGER length */ writeLength(first, os); /* Copy in the "r" INTEGER */ if (first != rArray.length) { os.write(0x00); } os.write(rArray); /* ASN.1 INTEGER tag */ os.write(0x02); /* "s" INTEGER length */ writeLength(second, os); /* Copy in the "s" INTEGER */ if (second != sArray.length) { os.write(0x00); } os.write(sArray); return os.toByteArray(); } private static final void writeLength(int length, OutputStream os) throws IOException { if (length <= 0x7F) { os.write(length); return; } int numOctets = 0; int lenCopy = length; while (lenCopy != 0) { lenCopy >>>= 8; numOctets++; } os.write(0x80 | numOctets); for (int i = (numOctets - 1) * 8; i >= 0; i -= 8) { os.write((byte) (length >> i)); } } public static byte[] encodeSSHECDSASignature(byte[] sig, ECParameterSpec params) throws IOException { TypesWriter tw = new TypesWriter(); String curveName = getCurveName(params); tw.writeString(ECDSA_SHA2_PREFIX + curveName); if ((sig[0] != 0x30) || (sig[1] != sig.length - 2) || (sig[2] != 0x02)) { throw new IOException("Invalid signature format"); } int rLength = sig[3]; if ((rLength + 6 > sig.length) || (sig[4 + rLength] != 0x02)) { throw new IOException("Invalid signature format"); } int sLength = sig[5 + rLength]; if (6 + rLength + sLength > sig.length) { throw new IOException("Invalid signature format"); } byte[] rArray = new byte[rLength]; byte[] sArray = new byte[sLength]; System.arraycopy(sig, 4, rArray, 0, rLength); System.arraycopy(sig, 6 + rLength, sArray, 0, sLength); BigInteger r = new BigInteger(1, rArray); BigInteger s = new BigInteger(1, sArray); // Write the <r,s> to its own types writer. TypesWriter rsWriter = new TypesWriter(); rsWriter.writeMPInt(r); rsWriter.writeMPInt(s); byte[] encoded = rsWriter.getBytes(); tw.writeString(encoded, 0, encoded.length); return tw.getBytes(); } public static byte[] generateSignature(byte[] message, ECPrivateKey pk) throws IOException { final String algo = getSignatureAlgorithmForParams(pk.getParams()); try { Signature s = Signature.getInstance(algo); s.initSign(pk); s.update(message); return s.sign(); } catch (NoSuchAlgorithmException e) { IOException ex = new IOException(); ex.initCause(e); throw ex; } catch (InvalidKeyException e) { IOException ex = new IOException(); ex.initCause(e); throw ex; } catch (SignatureException e) { IOException ex = new IOException(); ex.initCause(e); throw ex; } } public static boolean verifySignature(byte[] message, byte[] ds, ECPublicKey dpk) throws IOException { final String algo = getSignatureAlgorithmForParams(dpk.getParams()); try { Signature s = Signature.getInstance(algo); s.initVerify(dpk); s.update(message); return s.verify(ds); } catch (NoSuchAlgorithmException e) { IOException ex = new IOException("No such algorithm"); ex.initCause(e); throw ex; } catch (InvalidKeyException e) { IOException ex = new IOException("No such algorithm"); ex.initCause(e); throw ex; } catch (SignatureException e) { IOException ex = new IOException(); ex.initCause(e); throw ex; } } private static String getSignatureAlgorithmForParams(ECParameterSpec params) { int size = getCurveSize(params); if (size <= 256) { return "SHA256withECDSA"; } else if (size <= 384) { return "SHA384withECDSA"; } else { return "SHA512withECDSA"; } } public static String getDigestAlgorithmForParams(ECParameterSpec params) { int size = getCurveSize(params); if (size <= 256) { return "SHA-256"; } else if (size <= 384) { return "SHA-384"; } else { return "SHA-512"; } } /** * Decode an OctetString to EllipticCurvePoint according to SECG 2.3.4 */ public static ECPoint decodeECPoint(byte[] M, EllipticCurve curve) { if (M.length == 0) { return null; } // M has len 2 ceil(log_2(q)/8) + 1 ? int elementSize = (curve.getField().getFieldSize() + 7) / 8; if (M.length != 2 * elementSize + 1) { return null; } // step 3.2 if (M[0] != 0x04) { return null; } // Step 3.3 byte[] xp = new byte[elementSize]; System.arraycopy(M, 1, xp, 0, elementSize); // Step 3.4 byte[] yp = new byte[elementSize]; System.arraycopy(M, 1 + elementSize, yp, 0, elementSize); ECPoint P = new ECPoint(new BigInteger(1, xp), new BigInteger(1, yp)); // TODO check point 3.5 // Step 3.6 return P; } /** * Encode EllipticCurvePoint to an OctetString */ public static byte[] encodeECPoint(ECPoint group, EllipticCurve curve) { // M has len 2 ceil(log_2(q)/8) + 1 ? int elementSize = (curve.getField().getFieldSize() + 7) / 8; byte[] M = new byte[2 * elementSize + 1]; // Uncompressed format M[0] = 0x04; { byte[] affineX = removeLeadingZeroes(group.getAffineX().toByteArray()); System.arraycopy(affineX, 0, M, 1 + elementSize - affineX.length, affineX.length); } { byte[] affineY = removeLeadingZeroes(group.getAffineY().toByteArray()); System.arraycopy(affineY, 0, M, 1 + elementSize + elementSize - affineY.length,


context:
space:
mode: