|
 |
c2a015 |
diff -up ./gtests/softoken_gtest/softoken_dh_vectors.h.orig ./gtests/softoken_gtest/softoken_dh_vectors.h
|
|
|
c2a015 |
--- ./gtests/softoken_gtest/softoken_dh_vectors.h.orig 2021-06-02 16:57:50.557008790 -0700
|
|
|
c2a015 |
+++ ./gtests/softoken_gtest/softoken_dh_vectors.h 2021-06-02 16:59:52.781735096 -0700
|
|
|
c2a015 |
@@ -2872,7 +2872,7 @@ static const DhTestVector DH_TEST_VECTOR
|
|
|
c2a015 |
{siBuffer, (unsigned char *)g2, sizeof(g2)},
|
|
|
c2a015 |
{siBuffer, NULL, 0},
|
|
|
c2a015 |
{siBuffer, NULL, 0},
|
|
|
c2a015 |
- IKE_APPROVED,
|
|
|
c2a015 |
+ SAFE_PRIME,
|
|
|
c2a015 |
CLASS_1536},
|
|
|
c2a015 |
{"IKE 2048",
|
|
|
c2a015 |
{siBuffer, (unsigned char *)prime_ike_2048, sizeof(prime_ike_2048)},
|
|
|
c2a015 |
@@ -2952,7 +2952,7 @@ static const DhTestVector DH_TEST_VECTOR
|
|
|
c2a015 |
{siBuffer, (unsigned char *)sub2_prime_ike_1536,
|
|
|
c2a015 |
sizeof(sub2_prime_ike_1536)},
|
|
|
c2a015 |
{siBuffer, NULL, 0},
|
|
|
c2a015 |
- IKE_APPROVED,
|
|
|
c2a015 |
+ SAFE_PRIME,
|
|
|
c2a015 |
CLASS_1536},
|
|
|
c2a015 |
{"IKE 2048 with subprime",
|
|
|
c2a015 |
{siBuffer, (unsigned char *)prime_ike_2048, sizeof(prime_ike_2048)},
|
|
|
8b3762 |
diff -up ./lib/softoken/pkcs11c.c.orig ./lib/softoken/pkcs11c.c
|
|
|
c2a015 |
--- ./lib/softoken/pkcs11c.c.orig 2021-05-28 02:50:43.000000000 -0700
|
|
|
c2a015 |
+++ ./lib/softoken/pkcs11c.c 2021-06-02 16:52:01.196932757 -0700
|
|
|
c2a015 |
@@ -5193,7 +5193,7 @@ sftk_PairwiseConsistencyCheck(CK_SESSION
|
|
|
c2a015 |
/* subprime not supplied, In this case look it up.
|
|
|
8b3762 |
* This only works with approved primes, but in FIPS mode
|
|
|
8b3762 |
* that's the only kine of prime that will get here */
|
|
|
8b3762 |
- subPrimePtr = sftk_VerifyDH_Prime(&prime);
|
|
|
8b3762 |
+ subPrimePtr = sftk_VerifyDH_Prime(&prime,isFIPS);
|
|
|
8b3762 |
if (subPrimePtr == NULL) {
|
|
|
8b3762 |
crv = CKR_GENERAL_ERROR;
|
|
|
8b3762 |
goto done;
|
|
|
c2a015 |
@@ -8351,7 +8351,7 @@ NSC_DeriveKey(CK_SESSION_HANDLE hSession
|
|
|
8b3762 |
|
|
|
8b3762 |
/* if the prime is an approved prime, we can skip all the other
|
|
|
8b3762 |
* checks. */
|
|
|
8b3762 |
- subPrime = sftk_VerifyDH_Prime(&dhPrime);
|
|
|
8b3762 |
+ subPrime = sftk_VerifyDH_Prime(&dhPrime,isFIPS);
|
|
|
8b3762 |
if (subPrime == NULL) {
|
|
|
8b3762 |
SECItem dhSubPrime;
|
|
|
c2a015 |
/* If the caller set the subprime value, it means that
|
|
|
8b3762 |
diff -up ./lib/softoken/pkcs11i.h.orig ./lib/softoken/pkcs11i.h
|
|
|
c2a015 |
--- ./lib/softoken/pkcs11i.h.orig 2021-06-02 16:52:01.196932757 -0700
|
|
|
c2a015 |
+++ ./lib/softoken/pkcs11i.h 2021-06-02 16:52:54.281248207 -0700
|
|
|
c2a015 |
@@ -946,7 +946,7 @@ char **NSC_ModuleDBFunc(unsigned long fu
|
|
|
8b3762 |
/* dh verify functions */
|
|
|
8b3762 |
/* verify that dhPrime matches one of our known primes, and if so return
|
|
|
8b3762 |
* it's subprime value */
|
|
|
c2a015 |
-const SECItem *sftk_VerifyDH_Prime(SECItem *dhPrime);
|
|
|
c2a015 |
+const SECItem *sftk_VerifyDH_Prime(SECItem *dhPrime, PRBool isFIPS);
|
|
|
8b3762 |
/* check if dhSubPrime claims dhPrime is a safe prime. */
|
|
|
8b3762 |
SECStatus sftk_IsSafePrime(SECItem *dhPrime, SECItem *dhSubPrime, PRBool *isSafe);
|
|
|
c2a015 |
/* map an operation Attribute to a Mechanism flag */
|
|
|
c2a015 |
diff -up ./lib/softoken/pkcs11u.c.orig ./lib/softoken/pkcs11u.c
|
|
|
c2a015 |
--- ./lib/softoken/pkcs11u.c.orig 2021-06-02 16:54:23.387777705 -0700
|
|
|
c2a015 |
+++ ./lib/softoken/pkcs11u.c 2021-06-02 16:54:51.012941866 -0700
|
|
|
c2a015 |
@@ -2312,7 +2312,7 @@ sftk_handleSpecial(SFTKSlot *slot, CK_ME
|
|
|
c2a015 |
if (crv != CKR_OK) {
|
|
|
c2a015 |
return PR_FALSE;
|
|
|
c2a015 |
}
|
|
|
c2a015 |
- dhSubPrime = sftk_VerifyDH_Prime(&dhPrime);
|
|
|
c2a015 |
+ dhSubPrime = sftk_VerifyDH_Prime(&dhPrime, PR_TRUE);
|
|
|
c2a015 |
SECITEM_ZfreeItem(&dhPrime, PR_FALSE);
|
|
|
c2a015 |
return (dhSubPrime) ? PR_TRUE : PR_FALSE;
|
|
|
c2a015 |
}
|
|
|
8b3762 |
diff -up ./lib/softoken/sftkdhverify.c.orig ./lib/softoken/sftkdhverify.c
|
|
|
c2a015 |
--- ./lib/softoken/sftkdhverify.c.orig 2021-05-28 02:50:43.000000000 -0700
|
|
|
c2a015 |
+++ ./lib/softoken/sftkdhverify.c 2021-06-02 16:52:01.196932757 -0700
|
|
|
c2a015 |
@@ -1171,11 +1171,15 @@ static const SECItem subprime_tls_8192 =
|
|
|
8b3762 |
* verify that dhPrime matches one of our known primes
|
|
|
8b3762 |
*/
|
|
|
8b3762 |
const SECItem *
|
|
|
8b3762 |
-sftk_VerifyDH_Prime(SECItem *dhPrime)
|
|
|
8b3762 |
+sftk_VerifyDH_Prime(SECItem *dhPrime, PRBool isFIPS)
|
|
|
8b3762 |
{
|
|
|
8b3762 |
/* use the length to decide which primes to check */
|
|
|
8b3762 |
switch (dhPrime->len) {
|
|
|
8b3762 |
case 1536 / PR_BITS_PER_BYTE:
|
|
|
8b3762 |
+ /* don't accept 1536 bit primes in FIPS mode */
|
|
|
8b3762 |
+ if (isFIPS) {
|
|
|
8b3762 |
+ break;
|
|
|
8b3762 |
+ }
|
|
|
8b3762 |
if (PORT_Memcmp(dhPrime->data, prime_ike_1536,
|
|
|
8b3762 |
sizeof(prime_ike_1536)) == 0) {
|
|
|
8b3762 |
return &subprime_ike_1536;
|