blob: d2109ed83083d721ad23b4fda06d656c3fcb093e [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * Diffie-Hellman-Merkle key exchange (prime generation)
3 *
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +02004 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakkerb96f1542010-07-18 20:36:00 +000018 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000019 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakker5121ce52009-01-03 21:22:43 +000020 */
21
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020022#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000023#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020024#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020025#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020026#endif
Paul Bakker5121ce52009-01-03 21:22:43 +000027
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020028#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000029#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000030#else
Rich Evans18b78c72015-02-11 14:06:19 +000031#include <stdio.h>
Simon Butcher4982e522016-08-24 20:20:20 +030032#include <stdlib.h>
Andres Amaya Garciad6bfeff2018-04-29 19:34:09 +010033#define mbedtls_printf printf
34#define mbedtls_time_t time_t
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010035#define mbedtls_exit exit
Andres Amaya Garcia7d429652018-04-30 22:42:33 +010036#define MBEDTLS_EXIT_SUCCESS EXIT_SUCCESS
Andres Amaya Garciad6bfeff2018-04-29 19:34:09 +010037#define MBEDTLS_EXIT_FAILURE EXIT_FAILURE
38#endif /* MBEDTLS_PLATFORM_C */
Rich Evansf90016a2015-01-19 14:26:37 +000039
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020040#if !defined(MBEDTLS_BIGNUM_C) || !defined(MBEDTLS_ENTROPY_C) || \
41 !defined(MBEDTLS_FS_IO) || !defined(MBEDTLS_CTR_DRBG_C) || \
42 !defined(MBEDTLS_GENPRIME)
Rich Evans85b05ec2015-02-12 11:37:29 +000043int main( void )
Paul Bakker5690efc2011-05-26 13:16:06 +000044{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020045 mbedtls_printf("MBEDTLS_BIGNUM_C and/or MBEDTLS_ENTROPY_C and/or "
46 "MBEDTLS_FS_IO and/or MBEDTLS_CTR_DRBG_C and/or "
47 "MBEDTLS_GENPRIME not defined.\n");
Andrzej Kurek825ebd42020-05-18 11:47:25 -040048 mbedtls_exit( 0 );
Paul Bakker5690efc2011-05-26 13:16:06 +000049}
50#else
Manuel Pégourié-Gonnard77c65622015-07-03 16:57:52 +020051
52#include "mbedtls/bignum.h"
53#include "mbedtls/entropy.h"
54#include "mbedtls/ctr_drbg.h"
55
56#include <stdio.h>
57#include <string.h>
58
59#define USAGE \
60 "\n usage: dh_genprime param=<>...\n" \
61 "\n acceprable parameters:\n" \
62 " bits=%%d default: 2048\n"
63
64#define DFL_BITS 2048
65
66/*
67 * Note: G = 4 is always a quadratic residue mod P,
68 * so it is a generator of order Q (with P = 2*Q+1).
69 */
70#define GENERATOR "4"
71
Jarno Lamsa642596e2019-10-04 12:52:42 +030072#if defined(MBEDTLS_ENTROPY_HARDWARE_ALT)
73int mbedtls_hardware_poll( void *data, unsigned char *output,
74 size_t len, size_t *olen )
75{
76 size_t i;
77 (void) data;
78 for( i = 0; i < len; ++i )
79 output[i] = rand();
80 *olen = len;
81 return( 0 );
82}
83#endif
Simon Butcher63cb97e2018-12-06 17:43:31 +000084
Manuel Pégourié-Gonnard77c65622015-07-03 16:57:52 +020085int main( int argc, char **argv )
Paul Bakker5121ce52009-01-03 21:22:43 +000086{
87 int ret = 1;
Andres Amaya Garciad6bfeff2018-04-29 19:34:09 +010088 int exit_code = MBEDTLS_EXIT_FAILURE;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020089 mbedtls_mpi G, P, Q;
90 mbedtls_entropy_context entropy;
91 mbedtls_ctr_drbg_context ctr_drbg;
Paul Bakkeref3f8c72013-06-24 13:01:08 +020092 const char *pers = "dh_genprime";
Paul Bakker5121ce52009-01-03 21:22:43 +000093 FILE *fout;
Manuel Pégourié-Gonnard77c65622015-07-03 16:57:52 +020094 int nbits = DFL_BITS;
95 int i;
96 char *p, *q;
Paul Bakker5121ce52009-01-03 21:22:43 +000097
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020098 mbedtls_mpi_init( &G ); mbedtls_mpi_init( &P ); mbedtls_mpi_init( &Q );
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +020099 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200100 mbedtls_entropy_init( &entropy );
Paul Bakkercbe3d0d2014-04-17 16:00:59 +0200101
Manuel Pégourié-Gonnard77c65622015-07-03 16:57:52 +0200102 if( argc == 0 )
103 {
104 usage:
105 mbedtls_printf( USAGE );
Andrzej Kurek825ebd42020-05-18 11:47:25 -0400106 mbedtls_exit( exit_code );
Manuel Pégourié-Gonnard77c65622015-07-03 16:57:52 +0200107 }
108
109 for( i = 1; i < argc; i++ )
110 {
111 p = argv[i];
112 if( ( q = strchr( p, '=' ) ) == NULL )
113 goto usage;
114 *q++ = '\0';
115
116 if( strcmp( p, "bits" ) == 0 )
117 {
118 nbits = atoi( q );
119 if( nbits < 0 || nbits > MBEDTLS_MPI_MAX_BITS )
120 goto usage;
121 }
122 else
123 goto usage;
124 }
125
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200126 if( ( ret = mbedtls_mpi_read_string( &G, 10, GENERATOR ) ) != 0 )
Paul Bakkercbe3d0d2014-04-17 16:00:59 +0200127 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200128 mbedtls_printf( " failed\n ! mbedtls_mpi_read_string returned %d\n", ret );
Paul Bakkercbe3d0d2014-04-17 16:00:59 +0200129 goto exit;
130 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000131
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200132 mbedtls_printf( " ! Generating large primes may take minutes!\n" );
Manuel Pégourié-Gonnard5e1e6112013-11-22 21:16:10 +0100133
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200134 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakker5121ce52009-01-03 21:22:43 +0000135 fflush( stdout );
136
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +0200137 if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func, &entropy,
Paul Bakkeref3f8c72013-06-24 13:01:08 +0200138 (const unsigned char *) pers,
139 strlen( pers ) ) ) != 0 )
Paul Bakker508ad5a2011-12-04 17:09:26 +0000140 {
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +0200141 mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned %d\n", ret );
Paul Bakker508ad5a2011-12-04 17:09:26 +0000142 goto exit;
143 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000144
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200145 mbedtls_printf( " ok\n . Generating the modulus, please wait..." );
Paul Bakker5121ce52009-01-03 21:22:43 +0000146 fflush( stdout );
147
148 /*
149 * This can take a long time...
150 */
Manuel Pégourié-Gonnard77c65622015-07-03 16:57:52 +0200151 if( ( ret = mbedtls_mpi_gen_prime( &P, nbits, 1,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200152 mbedtls_ctr_drbg_random, &ctr_drbg ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +0000153 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200154 mbedtls_printf( " failed\n ! mbedtls_mpi_gen_prime returned %d\n\n", ret );
Paul Bakker5121ce52009-01-03 21:22:43 +0000155 goto exit;
156 }
157
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200158 mbedtls_printf( " ok\n . Verifying that Q = (P-1)/2 is prime..." );
Paul Bakker5121ce52009-01-03 21:22:43 +0000159 fflush( stdout );
160
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200161 if( ( ret = mbedtls_mpi_sub_int( &Q, &P, 1 ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +0000162 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200163 mbedtls_printf( " failed\n ! mbedtls_mpi_sub_int returned %d\n\n", ret );
Paul Bakker5121ce52009-01-03 21:22:43 +0000164 goto exit;
165 }
166
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200167 if( ( ret = mbedtls_mpi_div_int( &Q, NULL, &Q, 2 ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +0000168 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200169 mbedtls_printf( " failed\n ! mbedtls_mpi_div_int returned %d\n\n", ret );
Paul Bakker5121ce52009-01-03 21:22:43 +0000170 goto exit;
171 }
172
Janos Follatha0b67c22018-09-18 14:48:23 +0100173 if( ( ret = mbedtls_mpi_is_prime_ext( &Q, 50, mbedtls_ctr_drbg_random, &ctr_drbg ) ) != 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +0000174 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200175 mbedtls_printf( " failed\n ! mbedtls_mpi_is_prime returned %d\n\n", ret );
Paul Bakker5121ce52009-01-03 21:22:43 +0000176 goto exit;
177 }
178
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200179 mbedtls_printf( " ok\n . Exporting the value in dh_prime.txt..." );
Paul Bakker5121ce52009-01-03 21:22:43 +0000180 fflush( stdout );
181
182 if( ( fout = fopen( "dh_prime.txt", "wb+" ) ) == NULL )
183 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200184 mbedtls_printf( " failed\n ! Could not create dh_prime.txt\n\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000185 goto exit;
186 }
187
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200188 if( ( ret = mbedtls_mpi_write_file( "P = ", &P, 16, fout ) != 0 ) ||
189 ( ret = mbedtls_mpi_write_file( "G = ", &G, 16, fout ) != 0 ) )
Paul Bakker5121ce52009-01-03 21:22:43 +0000190 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200191 mbedtls_printf( " failed\n ! mbedtls_mpi_write_file returned %d\n\n", ret );
Janos Follath98e28a72016-05-31 14:03:54 +0100192 fclose( fout );
Paul Bakker5121ce52009-01-03 21:22:43 +0000193 goto exit;
194 }
195
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200196 mbedtls_printf( " ok\n\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000197 fclose( fout );
198
Andres Amaya Garciad6bfeff2018-04-29 19:34:09 +0100199 exit_code = MBEDTLS_EXIT_SUCCESS;
200
Paul Bakker5121ce52009-01-03 21:22:43 +0000201exit:
202
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200203 mbedtls_mpi_free( &G ); mbedtls_mpi_free( &P ); mbedtls_mpi_free( &Q );
204 mbedtls_ctr_drbg_free( &ctr_drbg );
205 mbedtls_entropy_free( &entropy );
Paul Bakker5121ce52009-01-03 21:22:43 +0000206
Paul Bakkercce9d772011-11-18 14:26:47 +0000207#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200208 mbedtls_printf( " Press Enter to exit this program.\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000209 fflush( stdout ); getchar();
210#endif
211
Andrzej Kurek825ebd42020-05-18 11:47:25 -0400212 mbedtls_exit( exit_code );
Paul Bakker5121ce52009-01-03 21:22:43 +0000213}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200214#endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C && MBEDTLS_FS_IO &&
215 MBEDTLS_CTR_DRBG_C && MBEDTLS_GENPRIME */