1
0

bn_const.c 4.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154
  1. /*
  2. * Copyright 2005-2021 The OpenSSL Project Authors. All Rights Reserved.
  3. *
  4. * Licensed under the Apache License 2.0 (the "License"). You may not use
  5. * this file except in compliance with the License. You can obtain a copy
  6. * in the file LICENSE in the source distribution or at
  7. * https://www.openssl.org/source/license.html
  8. */
  9. #include <openssl/bn.h>
  10. #include "crypto/bn_dh.h"
  11. #include "bn_local.h" // WINSCP
  12. #define COPY_BN(dst, src) (dst != NULL) ? BN_copy(dst, &src) : BN_dup(&src)
  13. /*-
  14. * "First Oakley Default Group" from RFC2409, section 6.1.
  15. *
  16. * The prime is: 2^768 - 2 ^704 - 1 + 2^64 * { [2^638 pi] + 149686 }
  17. *
  18. * RFC2409 specifies a generator of 2.
  19. * RFC2412 specifies a generator of 22.
  20. */
  21. BIGNUM *BN_get_rfc2409_prime_768(BIGNUM *bn)
  22. {
  23. static const unsigned char RFC2409_PRIME_768[] = {
  24. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
  25. 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,
  26. 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,
  27. 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,
  28. 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
  29. 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,
  30. 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,
  31. 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,
  32. 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,
  33. 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
  34. 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x3A, 0x36, 0x20,
  35. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
  36. };
  37. return BN_bin2bn(RFC2409_PRIME_768, sizeof(RFC2409_PRIME_768), bn);
  38. }
  39. /*-
  40. * "Second Oakley Default Group" from RFC2409, section 6.2.
  41. *
  42. * The prime is: 2^1024 - 2^960 - 1 + 2^64 * { [2^894 pi] + 129093 }.
  43. *
  44. * RFC2409 specifies a generator of 2.
  45. * RFC2412 specifies a generator of 22.
  46. */
  47. BIGNUM *BN_get_rfc2409_prime_1024(BIGNUM *bn)
  48. {
  49. static const unsigned char RFC2409_PRIME_1024[] = {
  50. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
  51. 0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,
  52. 0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,
  53. 0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,
  54. 0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
  55. 0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,
  56. 0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,
  57. 0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,
  58. 0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,
  59. 0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
  60. 0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B,
  61. 0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED,
  62. 0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5,
  63. 0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6,
  64. 0x49, 0x28, 0x66, 0x51, 0xEC, 0xE6, 0x53, 0x81,
  65. 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
  66. };
  67. return BN_bin2bn(RFC2409_PRIME_1024, sizeof(RFC2409_PRIME_1024), bn);
  68. }
  69. /*-
  70. * "1536-bit MODP Group" from RFC3526, Section 2.
  71. *
  72. * The prime is: 2^1536 - 2^1472 - 1 + 2^64 * { [2^1406 pi] + 741804 }
  73. *
  74. * RFC3526 specifies a generator of 2.
  75. * RFC2312 specifies a generator of 22.
  76. */
  77. BIGNUM *BN_get_rfc3526_prime_1536(BIGNUM *bn)
  78. {
  79. return COPY_BN(bn, ossl_bignum_modp_1536_p);
  80. }
  81. /*-
  82. * "2048-bit MODP Group" from RFC3526, Section 3.
  83. *
  84. * The prime is: 2^2048 - 2^1984 - 1 + 2^64 * { [2^1918 pi] + 124476 }
  85. *
  86. * RFC3526 specifies a generator of 2.
  87. */
  88. BIGNUM *BN_get_rfc3526_prime_2048(BIGNUM *bn)
  89. {
  90. return COPY_BN(bn, ossl_bignum_modp_2048_p);
  91. }
  92. /*-
  93. * "3072-bit MODP Group" from RFC3526, Section 4.
  94. *
  95. * The prime is: 2^3072 - 2^3008 - 1 + 2^64 * { [2^2942 pi] + 1690314 }
  96. *
  97. * RFC3526 specifies a generator of 2.
  98. */
  99. BIGNUM *BN_get_rfc3526_prime_3072(BIGNUM *bn)
  100. {
  101. return COPY_BN(bn, ossl_bignum_modp_3072_p);
  102. }
  103. /*-
  104. * "4096-bit MODP Group" from RFC3526, Section 5.
  105. *
  106. * The prime is: 2^4096 - 2^4032 - 1 + 2^64 * { [2^3966 pi] + 240904 }
  107. *
  108. * RFC3526 specifies a generator of 2.
  109. */
  110. BIGNUM *BN_get_rfc3526_prime_4096(BIGNUM *bn)
  111. {
  112. return COPY_BN(bn, ossl_bignum_modp_4096_p);
  113. }
  114. /*-
  115. * "6144-bit MODP Group" from RFC3526, Section 6.
  116. *
  117. * The prime is: 2^6144 - 2^6080 - 1 + 2^64 * { [2^6014 pi] + 929484 }
  118. *
  119. * RFC3526 specifies a generator of 2.
  120. */
  121. BIGNUM *BN_get_rfc3526_prime_6144(BIGNUM *bn)
  122. {
  123. return COPY_BN(bn, ossl_bignum_modp_6144_p);
  124. }
  125. /*-
  126. * "8192-bit MODP Group" from RFC3526, Section 7.
  127. *
  128. * The prime is: 2^8192 - 2^8128 - 1 + 2^64 * { [2^8062 pi] + 4743158 }
  129. *
  130. * RFC3526 specifies a generator of 2.
  131. */
  132. BIGNUM *BN_get_rfc3526_prime_8192(BIGNUM *bn)
  133. {
  134. return COPY_BN(bn, ossl_bignum_modp_8192_p);
  135. }