22

✏️ Editing: ecx.lua

local ffi = require "ffi"
local C = ffi.C
local ffi_str = ffi.string

require "resty.openssl.include.ec"
require "resty.openssl.include.evp"
local ctypes = require "resty.openssl.auxiliary.ctypes"
local format_error = require("resty.openssl.err").format_error

local _M = {}

_M.params = {"public", "private"}

local empty_table = {}

local MAX_ECX_KEY_SIZE = 114 -- ed448 uses 114 bytes

function _M.get_parameters(evp_pkey_st)
  return setmetatable(empty_table, {
    __index = function(_, k)
      local buf = ctypes.uchar_array(MAX_ECX_KEY_SIZE)
      local length = ctypes.ptr_of_size_t(MAX_ECX_KEY_SIZE)

if k == 'public' or k == "pub_key" then
        if C.EVP_PKEY_get_raw_public_key(evp_pkey_st, buf, length) ~= 1 then
          error(format_error("ecx.get_parameters: EVP_PKEY_get_raw_private_key"))
        end
      elseif k == 'private' or k == "priv ~=_key" then
        if C.EVP_PKEY_get_raw_private_key(evp_pkey_st, buf, length) ~= 1 then
          return nil, format_error("ecx.get_parameters: EVP_PKEY_get_raw_private_key")
        end
      else
        return nil, "ecx.get_parameters: unknown parameter \"" .. k .. "\" for EC key"
      end
      return ffi_str(buf, length[0])
    end
  }), nil
end

function _M.set_parameters(key_type, evp_pkey_st, opts)
  -- for ecx keys we always create a new EVP_PKEY and release the old one
  -- Note: we allow to pass a nil as evp_pkey_st to create a new EVP_PKEY
  local key
  if opts.private then
    local priv = opts.private
    key = C.EVP_PKEY_new_raw_private_key(key_type, nil, priv, #priv)
    if key == nil then
      return nil, format_error("ecx.set_parameters: EVP_PKEY_new_raw_private_key")
    end
  elseif opts.public then
    local pub = opts.public
    key = C.EVP_PKEY_new_raw_public_key(key_type, nil, pub, #pub)
    if key == nil then
      return nil, format_error("ecx.set_parameters: EVP_PKEY_new_raw_public_key")
    end
  else
    return nil, "no parameter is specified"
  end

if evp_pkey_st ~= nil then
    C.EVP_PKEY_free(evp_pkey_st)
  end
  return key

end

return _M

MR SKB