I'm working on Atalla ENGINE code, and the existing bn_exp.c hooks
(initiated by ./config and the presence of SDK headers) are conflicting.
This commit is contained in:
parent
f812743544
commit
28e94dc70d
2 changed files with 10 additions and 209 deletions
14
config
14
config
|
@ -475,11 +475,17 @@ case "$GUESSOS" in
|
||||||
*) OUT=`echo $GUESSOS | awk -F- '{print $3}'`;;
|
*) OUT=`echo $GUESSOS | awk -F- '{print $3}'`;;
|
||||||
esac
|
esac
|
||||||
|
|
||||||
|
# NB: This atalla support has been superceded by the ENGINE support
|
||||||
|
# That contains its own header and definitions anyway. Support can
|
||||||
|
# be enabled or disabled on any supported platform without external
|
||||||
|
# headers, eg. by adding the "hw-atalla" switch to ./config or
|
||||||
|
# perl Configure
|
||||||
|
#
|
||||||
# See whether we can compile Atalla support
|
# See whether we can compile Atalla support
|
||||||
if [ -f /usr/include/atasi.h ]
|
#if [ -f /usr/include/atasi.h ]
|
||||||
then
|
#then
|
||||||
options="$options -DATALLA"
|
# options="$options -DATALLA"
|
||||||
fi
|
#fi
|
||||||
|
|
||||||
#get some basic shared lib support (behnke@trustcenter.de)
|
#get some basic shared lib support (behnke@trustcenter.de)
|
||||||
case "$OUT" in
|
case "$OUT" in
|
||||||
|
|
|
@ -113,13 +113,6 @@
|
||||||
#include <stdio.h>
|
#include <stdio.h>
|
||||||
#include "cryptlib.h"
|
#include "cryptlib.h"
|
||||||
#include "bn_lcl.h"
|
#include "bn_lcl.h"
|
||||||
#ifdef ATALLA
|
|
||||||
# include <alloca.h>
|
|
||||||
# include <atasi.h>
|
|
||||||
# include <assert.h>
|
|
||||||
# include <dlfcn.h>
|
|
||||||
#endif
|
|
||||||
|
|
||||||
|
|
||||||
#define TABLE_SIZE 32
|
#define TABLE_SIZE 32
|
||||||
|
|
||||||
|
@ -183,174 +176,6 @@ err:
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
#ifdef ATALLA
|
|
||||||
|
|
||||||
/*
|
|
||||||
* This routine will dynamically check for the existance of an Atalla AXL-200
|
|
||||||
* SSL accelerator module. If one is found, the variable
|
|
||||||
* asi_accelerator_present is set to 1 and the function pointers
|
|
||||||
* ptr_ASI_xxxxxx above will be initialized to corresponding ASI API calls.
|
|
||||||
*/
|
|
||||||
typedef int tfnASI_GetPerformanceStatistics(int reset_flag,
|
|
||||||
unsigned int *ret_buf);
|
|
||||||
typedef int tfnASI_GetHardwareConfig(long card_num, unsigned int *ret_buf);
|
|
||||||
typedef int tfnASI_RSAPrivateKeyOpFn(RSAPrivateKey * rsaKey,
|
|
||||||
unsigned char *output,
|
|
||||||
unsigned char *input,
|
|
||||||
unsigned int modulus_len);
|
|
||||||
|
|
||||||
static tfnASI_GetHardwareConfig *ptr_ASI_GetHardwareConfig;
|
|
||||||
static tfnASI_RSAPrivateKeyOpFn *ptr_ASI_RSAPrivateKeyOpFn;
|
|
||||||
static tfnASI_GetPerformanceStatistics *ptr_ASI_GetPerformanceStatistics;
|
|
||||||
static int asi_accelerator_present;
|
|
||||||
static int tried_atalla;
|
|
||||||
|
|
||||||
void atalla_initialize_accelerator_handle(void)
|
|
||||||
{
|
|
||||||
void *dl_handle;
|
|
||||||
int status;
|
|
||||||
unsigned int config_buf[1024];
|
|
||||||
static int tested;
|
|
||||||
|
|
||||||
if(tested)
|
|
||||||
return;
|
|
||||||
|
|
||||||
tested=1;
|
|
||||||
|
|
||||||
bzero((void *)config_buf, 1024);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Check to see if the library is present on the system
|
|
||||||
*/
|
|
||||||
dl_handle = dlopen("atasi.so", RTLD_NOW);
|
|
||||||
if (dl_handle == (void *) NULL)
|
|
||||||
{
|
|
||||||
/* printf("atasi.so library is not present on the system\n");
|
|
||||||
printf("No HW acceleration available\n");*/
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
/*
|
|
||||||
* The library is present. Now we'll check to insure that the
|
|
||||||
* LDM is up and running. First we'll get the address of the
|
|
||||||
* function in the atasi library that we need to see if the
|
|
||||||
* LDM is operating.
|
|
||||||
*/
|
|
||||||
|
|
||||||
ptr_ASI_GetHardwareConfig =
|
|
||||||
(tfnASI_GetHardwareConfig *)dlsym(dl_handle,"ASI_GetHardwareConfig");
|
|
||||||
|
|
||||||
if (ptr_ASI_GetHardwareConfig)
|
|
||||||
{
|
|
||||||
/*
|
|
||||||
* We found the call, now we'll get our config
|
|
||||||
* status. If we get a non 0 result, the LDM is not
|
|
||||||
* running and we cannot use the Atalla ASI *
|
|
||||||
* library.
|
|
||||||
*/
|
|
||||||
status = (*ptr_ASI_GetHardwareConfig)(0L, config_buf);
|
|
||||||
if (status != 0)
|
|
||||||
{
|
|
||||||
printf("atasi.so library is present but not initialized\n");
|
|
||||||
printf("No HW acceleration available\n");
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
else
|
|
||||||
{
|
|
||||||
/* printf("We found the library, but not the function. Very Strange!\n");*/
|
|
||||||
return ;
|
|
||||||
}
|
|
||||||
|
|
||||||
/*
|
|
||||||
* It looks like we have acceleration capabilities. Load up the
|
|
||||||
* pointers to our ASI API calls.
|
|
||||||
*/
|
|
||||||
ptr_ASI_RSAPrivateKeyOpFn=
|
|
||||||
(tfnASI_RSAPrivateKeyOpFn *)dlsym(dl_handle, "ASI_RSAPrivateKeyOpFn");
|
|
||||||
if (ptr_ASI_RSAPrivateKeyOpFn == NULL)
|
|
||||||
{
|
|
||||||
/* printf("We found the library, but no RSA function. Very Strange!\n");*/
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
ptr_ASI_GetPerformanceStatistics =
|
|
||||||
(tfnASI_GetPerformanceStatistics *)dlsym(dl_handle, "ASI_GetPerformanceStatistics");
|
|
||||||
if (ptr_ASI_GetPerformanceStatistics == NULL)
|
|
||||||
{
|
|
||||||
/* printf("We found the library, but no stat function. Very Strange!\n");*/
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Indicate that acceleration is available
|
|
||||||
*/
|
|
||||||
asi_accelerator_present = 1;
|
|
||||||
|
|
||||||
/* printf("This system has acceleration!\n");*/
|
|
||||||
|
|
||||||
return;
|
|
||||||
}
|
|
||||||
|
|
||||||
/* make sure this only gets called once when bn_mod_exp calls bn_mod_exp_mont */
|
|
||||||
int BN_mod_exp_atalla(BIGNUM *r, BIGNUM *a, const BIGNUM *p, const BIGNUM *m)
|
|
||||||
{
|
|
||||||
unsigned char *abin;
|
|
||||||
unsigned char *pbin;
|
|
||||||
unsigned char *mbin;
|
|
||||||
unsigned char *rbin;
|
|
||||||
int an,pn,mn,ret;
|
|
||||||
RSAPrivateKey keydata;
|
|
||||||
|
|
||||||
atalla_initialize_accelerator_handle();
|
|
||||||
if(!asi_accelerator_present)
|
|
||||||
return 0;
|
|
||||||
|
|
||||||
|
|
||||||
/* We should be able to run without size testing */
|
|
||||||
# define ASIZE 128
|
|
||||||
an=BN_num_bytes(a);
|
|
||||||
pn=BN_num_bytes(p);
|
|
||||||
mn=BN_num_bytes(m);
|
|
||||||
|
|
||||||
if(an <= ASIZE && pn <= ASIZE && mn <= ASIZE)
|
|
||||||
{
|
|
||||||
int size=mn;
|
|
||||||
|
|
||||||
assert(an <= mn);
|
|
||||||
abin=alloca(size);
|
|
||||||
memset(abin,'\0',mn);
|
|
||||||
BN_bn2bin(a,abin+size-an);
|
|
||||||
|
|
||||||
pbin=alloca(pn);
|
|
||||||
BN_bn2bin(p,pbin);
|
|
||||||
|
|
||||||
mbin=alloca(size);
|
|
||||||
memset(mbin,'\0',mn);
|
|
||||||
BN_bn2bin(m,mbin+size-mn);
|
|
||||||
|
|
||||||
rbin=alloca(size);
|
|
||||||
|
|
||||||
memset(&keydata,'\0',sizeof keydata);
|
|
||||||
keydata.privateExponent.data=pbin;
|
|
||||||
keydata.privateExponent.len=pn;
|
|
||||||
keydata.modulus.data=mbin;
|
|
||||||
keydata.modulus.len=size;
|
|
||||||
|
|
||||||
ret=(*ptr_ASI_RSAPrivateKeyOpFn)(&keydata,rbin,abin,keydata.modulus.len);
|
|
||||||
/*fprintf(stderr,"!%s\n",BN_bn2hex(a));*/
|
|
||||||
if(!ret)
|
|
||||||
{
|
|
||||||
BN_bin2bn(rbin,keydata.modulus.len,r);
|
|
||||||
/*fprintf(stderr,"?%s\n",BN_bn2hex(r));*/
|
|
||||||
return 1;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
#endif /* def ATALLA */
|
|
||||||
|
|
||||||
|
|
||||||
int BN_mod_exp(BIGNUM *r, BIGNUM *a, const BIGNUM *p, const BIGNUM *m,
|
int BN_mod_exp(BIGNUM *r, BIGNUM *a, const BIGNUM *p, const BIGNUM *m,
|
||||||
BN_CTX *ctx)
|
BN_CTX *ctx)
|
||||||
{
|
{
|
||||||
|
@ -360,13 +185,6 @@ int BN_mod_exp(BIGNUM *r, BIGNUM *a, const BIGNUM *p, const BIGNUM *m,
|
||||||
bn_check_top(p);
|
bn_check_top(p);
|
||||||
bn_check_top(m);
|
bn_check_top(m);
|
||||||
|
|
||||||
#ifdef ATALLA
|
|
||||||
if(BN_mod_exp_atalla(r,a,p,m))
|
|
||||||
return 1;
|
|
||||||
/* If it fails, try the other methods (but don't try atalla again) */
|
|
||||||
tried_atalla=1;
|
|
||||||
#endif
|
|
||||||
|
|
||||||
#ifdef MONT_MUL_MOD
|
#ifdef MONT_MUL_MOD
|
||||||
/* I have finally been able to take out this pre-condition of
|
/* I have finally been able to take out this pre-condition of
|
||||||
* the top bit being set. It was caused by an error in BN_div
|
* the top bit being set. It was caused by an error in BN_div
|
||||||
|
@ -392,10 +210,6 @@ int BN_mod_exp(BIGNUM *r, BIGNUM *a, const BIGNUM *p, const BIGNUM *m,
|
||||||
{ ret=BN_mod_exp_simple(r,a,p,m,ctx); }
|
{ ret=BN_mod_exp_simple(r,a,p,m,ctx); }
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
#ifdef ATALLA
|
|
||||||
tried_atalla=0;
|
|
||||||
#endif
|
|
||||||
|
|
||||||
return(ret);
|
return(ret);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -525,12 +339,6 @@ int BN_mod_exp_mont(BIGNUM *rr, BIGNUM *a, const BIGNUM *p,
|
||||||
bn_check_top(p);
|
bn_check_top(p);
|
||||||
bn_check_top(m);
|
bn_check_top(m);
|
||||||
|
|
||||||
#ifdef ATALLA
|
|
||||||
if(!tried_atalla && BN_mod_exp_atalla(rr,a,p,m))
|
|
||||||
return 1;
|
|
||||||
/* If it fails, try the other methods */
|
|
||||||
#endif
|
|
||||||
|
|
||||||
if (!(m->d[0] & 1))
|
if (!(m->d[0] & 1))
|
||||||
{
|
{
|
||||||
BNerr(BN_F_BN_MOD_EXP_MONT,BN_R_CALLED_WITH_EVEN_MODULUS);
|
BNerr(BN_F_BN_MOD_EXP_MONT,BN_R_CALLED_WITH_EVEN_MODULUS);
|
||||||
|
@ -687,19 +495,6 @@ int BN_mod_exp_mont_word(BIGNUM *rr, BN_ULONG a, const BIGNUM *p,
|
||||||
t = BN_CTX_get(ctx);
|
t = BN_CTX_get(ctx);
|
||||||
if (d == NULL || r == NULL || t == NULL) goto err;
|
if (d == NULL || r == NULL || t == NULL) goto err;
|
||||||
|
|
||||||
#ifdef ATALLA
|
|
||||||
if (!tried_atalla)
|
|
||||||
{
|
|
||||||
BN_set_word(t, a);
|
|
||||||
if (BN_mod_exp_atalla(rr, t, p, m))
|
|
||||||
{
|
|
||||||
BN_CTX_end(ctx);
|
|
||||||
return 1;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
/* If it fails, try the other methods */
|
|
||||||
#endif
|
|
||||||
|
|
||||||
if (in_mont != NULL)
|
if (in_mont != NULL)
|
||||||
mont=in_mont;
|
mont=in_mont;
|
||||||
else
|
else
|
||||||
|
|
Loading…
Reference in a new issue