1bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch// Copyright 2013 The Chromium Authors. All rights reserved. 2bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch// Use of this source code is governed by a BSD-style license that can be 3bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch// found in the LICENSE file. 4bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch 5bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch#include "net/cert/jwk_serializer.h" 6bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch 75f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#include <openssl/bn.h> 85f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#include <openssl/ec.h> 95f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#include <openssl/ec_key.h> 105f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#include <openssl/evp.h> 115f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#include <openssl/x509.h> 125f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 135f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#include "base/base64.h" 14ba5b9a6411cb1792fd21f0a078d7a25cd1ceec16Ben Murdoch#include "base/logging.h" 155f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#include "base/strings/string_util.h" 165f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#include "base/values.h" 175f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#include "crypto/openssl_util.h" 185f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#include "crypto/scoped_openssl_types.h" 19ba5b9a6411cb1792fd21f0a078d7a25cd1ceec16Ben Murdoch 20bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdochnamespace net { 21bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch 22bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdochnamespace JwkSerializer { 23bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch 245f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)namespace { 255f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 265f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)bool ConvertEcKeyToJwk(EVP_PKEY* pkey, 275f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) base::DictionaryValue* public_key_jwk, 285f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) const crypto::OpenSSLErrStackTracer& err_tracer) { 295f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) crypto::ScopedEC_KEY ec_key(EVP_PKEY_get1_EC_KEY(pkey)); 305f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) if (!ec_key) 315f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) return false; 325f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) const EC_GROUP* ec_group = EC_KEY_get0_group(ec_key.get()); 335f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) if (!ec_group) 345f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) return false; 355f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 365f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) std::string curve_name; 375f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) int nid = EC_GROUP_get_curve_name(ec_group); 385f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) if (nid == NID_X9_62_prime256v1) { 395f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) curve_name = "P-256"; 405f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) } else if (nid == NID_secp384r1) { 415f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) curve_name = "P-384"; 425f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) } else if (nid == NID_secp521r1) { 435f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) curve_name = "P-521"; 445f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) } else { 455f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) return false; 465f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) } 475f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 485f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) int degree_bytes = (EC_GROUP_get_degree(ec_group) + 7) / 8; 495f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 505f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) const EC_POINT* ec_point = EC_KEY_get0_public_key(ec_key.get()); 515f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) if (!ec_point) 525f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) return false; 535f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 545f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) crypto::ScopedBIGNUM x(BN_new()); 555f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) crypto::ScopedBIGNUM y(BN_new()); 565f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) if (!EC_POINT_get_affine_coordinates_GFp(ec_group, ec_point, 575f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) x.get(), y.get(), NULL)) { 585f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) return false; 595f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) } 605f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 615f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) // The coordinates are encoded with leading zeros included. 625f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) std::string x_bytes; 635f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) std::string y_bytes; 645f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) if (!BN_bn2bin_padded(reinterpret_cast<uint8_t*>( 655f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) WriteInto(&x_bytes, degree_bytes + 1)), degree_bytes, x.get()) || 665f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) !BN_bn2bin_padded(reinterpret_cast<uint8_t*>( 675f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) WriteInto(&y_bytes, degree_bytes + 1)), degree_bytes, y.get())) { 685f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) return false; 695f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) } 705f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 715f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) public_key_jwk->SetString("kty", "EC"); 725f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) public_key_jwk->SetString("crv", curve_name); 735f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 745f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) std::string x_b64; 755f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) base::Base64Encode(x_bytes, &x_b64); 765f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) public_key_jwk->SetString("x", x_b64); 775f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 785f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) std::string y_b64; 795f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) base::Base64Encode(y_bytes, &y_b64); 805f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) public_key_jwk->SetString("y", y_b64); 815f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 825f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) return true; 835f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)} 845f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 855f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)} // namespace 865f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 87bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdochbool ConvertSpkiFromDerToJwk( 88bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch const base::StringPiece& spki_der, 89bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch base::DictionaryValue* public_key_jwk) { 905f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) public_key_jwk->Clear(); 915f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 925f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) crypto::EnsureOpenSSLInit(); 935f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) crypto::OpenSSLErrStackTracer err_tracer(FROM_HERE); 945f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 955f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) const uint8_t *data = reinterpret_cast<const uint8_t*>(spki_der.data()); 965f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) const uint8_t *ptr = data; 975f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) crypto::ScopedEVP_PKEY pubkey(d2i_PUBKEY(NULL, &ptr, spki_der.size())); 985f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) if (!pubkey || ptr != data + spki_der.size()) 995f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) return false; 1005f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) 1015f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) if (pubkey->type == EVP_PKEY_EC) { 1025f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) return ConvertEcKeyToJwk(pubkey.get(), public_key_jwk, err_tracer); 1035f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) } else { 1045f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) // TODO(juanlang): other algorithms 1055f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) return false; 1065f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles) } 107bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch} 108bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch 109bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch} // namespace JwkSerializer 110bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch 111bb1529ce867d8845a77ec7cdf3e3003ef1771a40Ben Murdoch} // namespace net 112