lib/silccrypt/silcpkcs.c

   1 /*
   2
   3   silcpkcs.c
   4
   5   Author: Pekka Riikonen <priikone@silcnet.org>
   6
   7   Copyright (C) 1997 - 2007 Pekka Riikonen
   8
   9   This program is free software; you can redistribute it and/or modify
  10   it under the terms of the GNU General Public License as published by
  11   the Free Software Foundation; version 2 of the License.
  12
  13   This program is distributed in the hope that it will be useful,
  14   but WITHOUT ANY WARRANTY; without even the implied warranty of
  15   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16   GNU General Public License for more details.
  17
  18 */
  19 /* $Id$ */
  20
  21 #include "silc.h"
  22 #include "silcpk_i.h"
  23 #include "silcpkcs1_i.h"
  24
  25 #ifndef SILC_SYMBIAN
  26 /* Dynamically registered list of PKCS. */
  27 SilcDList silc_pkcs_list = NULL;
  28 SilcDList silc_pkcs_alg_list = NULL;
  29 #define SILC_PKCS_LIST silc_pkcs_list
  30 #define SILC_PKCS_ALG_LIST silc_pkcs_alg_list
  31 #else
  32 #define SILC_PKCS_LIST TRUE
  33 #define SILC_PKCS_ALG_LIST TRUE
  34 #endif /* SILC_SYMBIAN */
  35
  36 /* Static list of PKCS for silc_pkcs_register_default(). */
  37 const SilcPKCSObject silc_default_pkcs[] =
  38 {
  39   /* SILC PKCS */
  40   {
  41     SILC_PKCS_SILC,
  42     silc_pkcs_silc_get_algorithm,
  43     silc_pkcs_silc_import_public_key_file,
  44     silc_pkcs_silc_import_public_key,
  45     silc_pkcs_silc_export_public_key_file,
  46     silc_pkcs_silc_export_public_key,
  47     silc_pkcs_silc_public_key_bitlen,
  48     silc_pkcs_silc_public_key_copy,
  49     silc_pkcs_silc_public_key_compare,
  50     silc_pkcs_silc_public_key_free,
  51     silc_pkcs_silc_import_private_key_file,
  52     silc_pkcs_silc_import_private_key,
  53     silc_pkcs_silc_export_private_key_file,
  54     silc_pkcs_silc_export_private_key,
  55     silc_pkcs_silc_private_key_bitlen,
  56     silc_pkcs_silc_private_key_free,
  57     silc_pkcs_silc_encrypt,
  58     silc_pkcs_silc_decrypt,
  59     silc_pkcs_silc_sign,
  60     silc_pkcs_silc_verify,
  61   },
  62
  63   {
  64     0, NULL, NULL, NULL, NULL, NULL,
  65        NULL, NULL, NULL, NULL, NULL
  66   }
  67 };
  68
  69 /* Builtin PKCS algorithms */
  70 const SilcPKCSAlgorithm silc_default_pkcs_alg[] =
  71 {
  72   /* PKCS #1, Version 1.5 without hash OIDs */
  73   {
  74     "rsa",
  75     "pkcs1-no-oid",
  76     "sha1,md5",
  77     silc_pkcs1_generate_key,
  78     silc_pkcs1_import_public_key,
  79     silc_pkcs1_export_public_key,
  80     silc_pkcs1_public_key_bitlen,
  81     silc_pkcs1_public_key_copy,
  82     silc_pkcs1_public_key_compare,
  83     silc_pkcs1_public_key_free,
  84     silc_pkcs1_import_private_key,
  85     silc_pkcs1_export_private_key,
  86     silc_pkcs1_private_key_bitlen,
  87     silc_pkcs1_private_key_free,
  88     silc_pkcs1_encrypt,
  89     silc_pkcs1_decrypt,
  90     silc_pkcs1_sign_no_oid,
  91     silc_pkcs1_verify_no_oid
  92   },
  93
  94   /* PKCS #1, Version 1.5 */
  95   {
  96     "rsa",
  97     "pkcs1",
  98     "sha1,md5",
  99     silc_pkcs1_generate_key,
 100     silc_pkcs1_import_public_key,
 101     silc_pkcs1_export_public_key,
 102     silc_pkcs1_public_key_bitlen,
 103     silc_pkcs1_public_key_copy,
 104     silc_pkcs1_public_key_compare,
 105     silc_pkcs1_public_key_free,
 106     silc_pkcs1_import_private_key,
 107     silc_pkcs1_export_private_key,
 108     silc_pkcs1_private_key_bitlen,
 109     silc_pkcs1_private_key_free,
 110     silc_pkcs1_encrypt,
 111     silc_pkcs1_decrypt,
 112     silc_pkcs1_sign,
 113     silc_pkcs1_verify
 114   },
 115
 116   {
 117     NULL, NULL, NULL, NULL,
 118     NULL, NULL, NULL, NULL,
 119     NULL, NULL, NULL, NULL,
 120     NULL, NULL
 121   }
 122 };
 123
 124 /* Register a new PKCS */
 125
 126 SilcBool silc_pkcs_register(const SilcPKCSObject *pkcs)
 127 {
 128 #ifndef SILC_SYMBIAN
 129   SilcPKCSObject *newpkcs;
 130
 131   SILC_LOG_DEBUG(("Registering new PKCS"));
 132
 133   /* Check if exists already */
 134   if (silc_pkcs_list) {
 135     SilcPKCSObject *entry;
 136     silc_dlist_start(silc_pkcs_list);
 137     while ((entry = silc_dlist_get(silc_pkcs_list)) != SILC_LIST_END) {
 138       if (entry->type == pkcs->type)
 139         return FALSE;
 140     }
 141   }
 142
 143   newpkcs = silc_calloc(1, sizeof(*newpkcs));
 144   if (!newpkcs)
 145     return FALSE;
 146   *newpkcs = *pkcs;
 147
 148   /* Add to list */
 149   if (silc_pkcs_list == NULL)
 150     silc_pkcs_list = silc_dlist_init();
 151   silc_dlist_add(silc_pkcs_list, newpkcs);
 152
 153 #endif /* SILC_SYMBIAN */
 154   return TRUE;
 155 }
 156
 157 /* Unregister a PKCS */
 158
 159 SilcBool silc_pkcs_unregister(SilcPKCSObject *pkcs)
 160 {
 161 #ifndef SILC_SYMBIAN
 162   SilcPKCSObject *entry;
 163
 164   SILC_LOG_DEBUG(("Unregistering PKCS"));
 165
 166   if (!silc_pkcs_list)
 167     return FALSE;
 168
 169   silc_dlist_start(silc_pkcs_list);
 170   while ((entry = silc_dlist_get(silc_pkcs_list)) != SILC_LIST_END) {
 171     if (pkcs == SILC_ALL_PKCS || entry == pkcs) {
 172       silc_dlist_del(silc_pkcs_list, entry);
 173       silc_free(entry);
 174
 175       if (silc_dlist_count(silc_pkcs_list) == 0) {
 176         silc_dlist_uninit(silc_pkcs_list);
 177         silc_pkcs_list = NULL;
 178       }
 179
 180       return TRUE;
 181     }
 182   }
 183
 184 #endif /* SILC_SYMBIAN */
 185   return FALSE;
 186 }
 187
 188 /* Register algorithm */
 189
 190 SilcBool silc_pkcs_algorithm_register(const SilcPKCSAlgorithm *pkcs)
 191 {
 192 #ifndef SILC_SYMBIAN
 193   SilcPKCSAlgorithm *newalg;
 194
 195   SILC_LOG_DEBUG(("Registering new PKCS algorithm %s",
 196                   pkcs->name));
 197
 198   /* Check if exists already */
 199   if (silc_pkcs_alg_list) {
 200     SilcPKCSAlgorithm *entry;
 201     silc_dlist_start(silc_pkcs_alg_list);
 202     while ((entry = silc_dlist_get(silc_pkcs_alg_list)) != SILC_LIST_END) {
 203       if (!strcmp(entry->name, pkcs->name) &&
 204           entry->scheme && pkcs->scheme &&
 205           !strcmp(entry->scheme, pkcs->scheme))
 206         return FALSE;
 207     }
 208   }
 209
 210   newalg = silc_calloc(1, sizeof(*newalg));
 211   if (!newalg)
 212     return FALSE;
 213
 214   *newalg = *pkcs;
 215   newalg->name = strdup(pkcs->name);
 216   if (!newalg->name)
 217     return FALSE;
 218   if (pkcs->scheme) {
 219     newalg->scheme = strdup(pkcs->scheme);
 220     if (!newalg->scheme)
 221       return FALSE;
 222   }
 223   newalg->hash = strdup(pkcs->hash);
 224   if (!newalg->hash)
 225     return FALSE;
 226
 227   /* Add to list */
 228   if (silc_pkcs_alg_list == NULL)
 229     silc_pkcs_alg_list = silc_dlist_init();
 230   silc_dlist_add(silc_pkcs_alg_list, newalg);
 231
 232 #endif /* SILC_SYMBIAN */
 233   return TRUE;
 234 }
 235
 236 /* Unregister algorithm */
 237
 238 SilcBool silc_pkcs_algorithm_unregister(SilcPKCSAlgorithm *pkcs)
 239 {
 240 #ifndef SILC_SYMBIAN
 241   SilcPKCSAlgorithm*entry;
 242
 243   SILC_LOG_DEBUG(("Unregistering PKCS algorithm"));
 244
 245   if (!silc_pkcs_alg_list)
 246     return FALSE;
 247
 248   silc_dlist_start(silc_pkcs_alg_list);
 249   while ((entry = silc_dlist_get(silc_pkcs_alg_list)) != SILC_LIST_END) {
 250     if (pkcs == SILC_ALL_PKCS_ALG || entry == pkcs) {
 251       silc_dlist_del(silc_pkcs_alg_list, entry);
 252       silc_free(entry->name);
 253       silc_free(entry->scheme);
 254       silc_free(entry->hash);
 255       silc_free(entry);
 256
 257       if (silc_dlist_count(silc_pkcs_alg_list) == 0) {
 258         silc_dlist_uninit(silc_pkcs_alg_list);
 259         silc_pkcs_alg_list = NULL;
 260       }
 261
 262       return TRUE;
 263     }
 264   }
 265
 266 #endif /* SILC_SYMBIAN */
 267   return FALSE;
 268 }
 269
 270 /* Function that registers all the default PKCS and PKCS algorithms. */
 271
 272 SilcBool silc_pkcs_register_default(void)
 273 {
 274   /* We use builtin PKCS and algorithms */
 275   return TRUE;
 276 }
 277
 278 /* Unregister all PKCS and algorithms */
 279
 280 SilcBool silc_pkcs_unregister_all(void)
 281 {
 282 #ifndef SILC_SYMBIAN
 283   SilcPKCSObject *entry;
 284   SilcPKCSAlgorithm *alg;
 285
 286   if (silc_pkcs_list) {
 287     silc_dlist_start(silc_pkcs_list);
 288     while ((entry = silc_dlist_get(silc_pkcs_list)) != SILC_LIST_END) {
 289       silc_pkcs_unregister(entry);
 290       if (!silc_pkcs_list)
 291         break;
 292     }
 293   }
 294
 295   if (silc_pkcs_alg_list) {
 296     silc_dlist_start(silc_pkcs_alg_list);
 297     while ((alg = silc_dlist_get(silc_pkcs_alg_list)) != SILC_LIST_END) {
 298       silc_pkcs_algorithm_unregister(alg);
 299       if (!silc_pkcs_alg_list)
 300         break;
 301     }
 302   }
 303
 304 #endif /* SILC_SYMBIAN */
 305   return TRUE;
 306 }
 307
 308 /* Returns comma separated list of supported PKCS algorithms */
 309
 310 char *silc_pkcs_get_supported(void)
 311 {
 312   SilcPKCSAlgorithm *entry, *entry2;
 313   char *list = NULL;
 314   int i, len = 0;
 315
 316 #ifndef SILC_SYMBIAN
 317   if (silc_pkcs_alg_list) {
 318     silc_dlist_start(silc_pkcs_alg_list);
 319     while ((entry = silc_dlist_get(silc_pkcs_alg_list)) != SILC_LIST_END) {
 320       len += strlen(entry->name);
 321       list = silc_realloc(list, len + 1);
 322       if (!list)
 323         return NULL;
 324
 325       memcpy(list + (len - strlen(entry->name)),
 326              entry->name, strlen(entry->name));
 327       memcpy(list + len, ",", 1);
 328       len++;
 329     }
 330   }
 331 #endif /* SILC_SYMBIAN */
 332
 333   for (i = 0; silc_default_pkcs_alg[i].name; i++) {
 334     entry = (SilcPKCSAlgorithm *)&(silc_default_pkcs_alg[i]);
 335
 336     if (silc_pkcs_alg_list) {
 337       silc_dlist_start(silc_pkcs_alg_list);
 338       while ((entry2 = silc_dlist_get(silc_pkcs_alg_list)) != SILC_LIST_END) {
 339         if (!strcmp(entry2->name, entry->name))
 340           break;
 341       }
 342       if (entry2)
 343         continue;
 344     }
 345
 346     len += strlen(entry->name);
 347     list = silc_realloc(list, len + 1);
 348     if (!list)
 349       return NULL;
 350
 351     memcpy(list + (len - strlen(entry->name)),
 352            entry->name, strlen(entry->name));
 353     memcpy(list + len, ",", 1);
 354     len++;
 355   }
 356
 357   list[len - 1] = 0;
 358
 359   return list;
 360 }
 361
 362 /* Finds PKCS object */
 363
 364 const SilcPKCSObject *silc_pkcs_find_pkcs(SilcPKCSType type)
 365 {
 366   SilcPKCSObject *entry;
 367   int i;
 368
 369 #ifndef SILC_SYMBIAN
 370   if (silc_pkcs_list) {
 371     silc_dlist_start(silc_pkcs_list);
 372     while ((entry = silc_dlist_get(silc_pkcs_list)) != SILC_LIST_END) {
 373       if (entry->type == type)
 374         return (const SilcPKCSObject *)entry;
 375     }
 376   }
 377 #endif /* SILC_SYMBIAN */
 378
 379   for (i = 0; silc_default_pkcs[i].type; i++) {
 380     entry = (SilcPKCSObject *)&(silc_default_pkcs[i]);
 381     if (entry->type == type)
 382       return (const SilcPKCSObject *)entry;
 383   }
 384
 385   return NULL;
 386 }
 387
 388 /* Finds PKCS algorithms object */
 389
 390 const SilcPKCSAlgorithm *silc_pkcs_find_algorithm(const char *algorithm,
 391                                                   const char *scheme)
 392 {
 393   SilcPKCSAlgorithm *entry;
 394   int i;
 395
 396 #ifndef SILC_SYMBIAN
 397   if (silc_pkcs_alg_list) {
 398     silc_dlist_start(silc_pkcs_alg_list);
 399     while ((entry = silc_dlist_get(silc_pkcs_alg_list)) != SILC_LIST_END) {
 400       if (!strcmp(entry->name, algorithm) &&
 401           (!scheme || !entry->scheme || !strcmp(entry->scheme, scheme)))
 402         return (const SilcPKCSAlgorithm *)entry;
 403     }
 404   }
 405 #endif /* SILC_SYMBIAN */
 406
 407   for (i = 0; silc_default_pkcs_alg[i].name; i++) {
 408     entry = (SilcPKCSAlgorithm *)&(silc_default_pkcs_alg[i]);
 409     if (!strcmp(entry->name, algorithm) &&
 410         (!scheme || !entry->scheme || !strcmp(entry->scheme, scheme)))
 411       return (const SilcPKCSAlgorithm *)entry;
 412   }
 413
 414   return NULL;
 415 }
 416
 417 /* Returns PKCS context */
 418
 419 const SilcPKCSObject *silc_pkcs_get_pkcs(void *key)
 420 {
 421   SilcPublicKey public_key = key;
 422   return public_key->pkcs;
 423 }
 424
 425 /* Returns PKCS algorithm context */
 426
 427 const SilcPKCSAlgorithm *silc_pkcs_get_algorithm(void *key)
 428 {
 429   SilcPublicKey public_key = key;
 430   return public_key->pkcs->get_algorithm(public_key->pkcs,
 431                                          public_key->public_key);
 432 }
 433
 434 /* Return algorithm name */
 435
 436 const char *silc_pkcs_get_name(void *key)
 437 {
 438   const SilcPKCSAlgorithm *pkcs = silc_pkcs_get_algorithm(key);
 439   return pkcs->name;
 440 }
 441
 442 /* Returns PKCS type */
 443
 444 SilcPKCSType silc_pkcs_get_type(void *key)
 445 {
 446   SilcPublicKey public_key = key;
 447   return public_key->pkcs->type;
 448 }
 449
 450 /* Allocates new public key from the key data */
 451
 452 SilcBool silc_pkcs_public_key_alloc(SilcPKCSType type,
 453                                     unsigned char *key,
 454                                     SilcUInt32 key_len,
 455                                     SilcPublicKey *ret_public_key)
 456 {
 457   const SilcPKCSObject *pkcs;
 458   SilcPublicKey public_key;
 459
 460   if (!ret_public_key)
 461     return FALSE;
 462
 463   /* Allocate public key context */
 464   public_key = silc_calloc(1, sizeof(*public_key));
 465   if (!public_key)
 466     return FALSE;
 467
 468   public_key->pkcs = pkcs = silc_pkcs_find_pkcs(type);
 469   if (!public_key->pkcs) {
 470     silc_free(public_key);
 471     return FALSE;
 472   }
 473
 474   /* Import the PKCS public key */
 475   if (!pkcs->import_public_key(pkcs, key, key_len, &public_key->public_key)) {
 476     silc_free(public_key);
 477     return FALSE;
 478   }
 479
 480   *ret_public_key = public_key;
 481
 482   return TRUE;
 483 }
 484
 485 /* Frees the public key */
 486
 487 void silc_pkcs_public_key_free(SilcPublicKey public_key)
 488 {
 489   public_key->pkcs->public_key_free(public_key->pkcs, public_key->public_key);
 490   silc_free(public_key);
 491 }
 492
 493 /* Exports public key */
 494
 495 unsigned char *silc_pkcs_public_key_encode(SilcStack stack,
 496                                            SilcPublicKey public_key,
 497                                            SilcUInt32 *ret_len)
 498 {
 499   return public_key->pkcs->export_public_key(public_key->pkcs, stack,
 500                                              public_key->public_key, ret_len);
 501 }
 502
 503 /* Return key length */
 504
 505 SilcUInt32 silc_pkcs_public_key_get_len(SilcPublicKey public_key)
 506 {
 507   return public_key->pkcs->public_key_bitlen(public_key->pkcs,
 508                                              public_key->public_key);
 509 }
 510
 511 /* Returns internal PKCS public key context */
 512
 513 void *silc_pkcs_get_context(SilcPKCSType type, SilcPublicKey public_key)
 514 {
 515   if (public_key->pkcs->type != type)
 516     return NULL;
 517   return public_key->public_key;
 518 }
 519
 520
 521 /* Allocates new private key from key data */
 522
 523 SilcBool silc_pkcs_private_key_alloc(SilcPKCSType type,
 524                                      unsigned char *key,
 525                                      SilcUInt32 key_len,
 526                                      SilcPrivateKey *ret_private_key)
 527 {
 528   const SilcPKCSObject *pkcs;
 529   SilcPrivateKey private_key;
 530
 531   if (!ret_private_key)
 532     return FALSE;
 533
 534   /* Allocate private key context */
 535   private_key = silc_calloc(1, sizeof(*private_key));
 536   if (!private_key)
 537     return FALSE;
 538
 539   private_key->pkcs = pkcs = silc_pkcs_find_pkcs(type);
 540   if (!private_key->pkcs) {
 541     silc_free(private_key);
 542     return FALSE;
 543   }
 544
 545   /* Import the PKCS private key */
 546   if (!pkcs->import_private_key(pkcs, key, key_len,
 547                                 &private_key->private_key)) {
 548     silc_free(private_key);
 549     return FALSE;
 550   }
 551
 552   *ret_private_key = private_key;
 553
 554   return TRUE;
 555 }
 556
 557 /* Return key length */
 558
 559 SilcUInt32 silc_pkcs_private_key_get_len(SilcPrivateKey private_key)
 560 {
 561   return private_key->pkcs->private_key_bitlen(private_key->pkcs,
 562                                                private_key->private_key);
 563 }
 564
 565 /* Frees the private key */
 566
 567 void silc_pkcs_private_key_free(SilcPrivateKey private_key)
 568 {
 569   private_key->pkcs->private_key_free(private_key->pkcs,
 570                                       private_key->private_key);
 571   silc_free(private_key);
 572 }
 573
 574 /* Encrypts */
 575
 576 SilcAsyncOperation silc_pkcs_encrypt(SilcPublicKey public_key,
 577                                      unsigned char *src, SilcUInt32 src_len,
 578                                      SilcRng rng,
 579                                      SilcPKCSEncryptCb encrypt_cb,
 580                                      void *context)
 581 {
 582   return public_key->pkcs->encrypt(public_key->pkcs,
 583                                    public_key->public_key, src, src_len,
 584                                    rng, encrypt_cb, context);
 585 }
 586
 587 /* Decrypts */
 588
 589 SilcAsyncOperation silc_pkcs_decrypt(SilcPrivateKey private_key,
 590                                      unsigned char *src, SilcUInt32 src_len,
 591                                      SilcPKCSDecryptCb decrypt_cb,
 592                                      void *context)
 593 {
 594   return private_key->pkcs->decrypt(private_key->pkcs,
 595                                     private_key->private_key, src, src_len,
 596                                     decrypt_cb, context);
 597 }
 598
 599 /* Generates signature */
 600
 601 SilcAsyncOperation silc_pkcs_sign(SilcPrivateKey private_key,
 602                                   unsigned char *src,
 603                                   SilcUInt32 src_len,
 604                                   SilcBool compute_hash,
 605                                   SilcHash hash,
 606                                   SilcPKCSSignCb sign_cb,
 607                                   void *context)
 608 {
 609   return private_key->pkcs->sign(private_key->pkcs,
 610                                  private_key->private_key, src, src_len,
 611                                  compute_hash, hash, sign_cb, context);
 612 }
 613
 614 /* Verifies signature */
 615
 616 SilcAsyncOperation silc_pkcs_verify(SilcPublicKey public_key,
 617                                     unsigned char *signature,
 618                                     SilcUInt32 signature_len,
 619                                     unsigned char *data,
 620                                     SilcUInt32 data_len,
 621                                     SilcHash hash,
 622                                     SilcPKCSVerifyCb verify_cb,
 623                                     void *context)
 624 {
 625   return public_key->pkcs->verify(public_key->pkcs,
 626                                   public_key->public_key, signature,
 627                                   signature_len, data, data_len, hash,
 628                                   verify_cb, context);
 629 }
 630
 631 /* Compares two public keys and returns TRUE if they are same key, and
 632    FALSE if they are not same. */
 633
 634 SilcBool silc_pkcs_public_key_compare(SilcPublicKey key1, SilcPublicKey key2)
 635 {
 636   if (key1->pkcs->type != key2->pkcs->type)
 637     return FALSE;
 638
 639   return key1->pkcs->public_key_compare(key1->pkcs,
 640                                         key1->public_key, key2->public_key);
 641 }
 642
 643 /* Copies the public key indicated by `public_key' and returns new allocated
 644    public key which is indentical to the `public_key'. */
 645
 646 SilcPublicKey silc_pkcs_public_key_copy(SilcPublicKey public_key)
 647 {
 648   SilcPublicKey key = silc_calloc(1, sizeof(*key));
 649   if (!key)
 650     return NULL;
 651
 652   key->pkcs = public_key->pkcs;
 653   key->public_key = public_key->pkcs->public_key_copy(public_key->pkcs,
 654                                                       public_key->public_key);
 655   if (!key->public_key) {
 656     silc_free(key);
 657     return NULL;
 658   }
 659
 660   return key;
 661 }
 662
 663 /* Loads any kind of public key */
 664
 665 SilcBool silc_pkcs_load_public_key(const char *filename,
 666                                    SilcPublicKey *ret_public_key)
 667 {
 668   unsigned char *data;
 669   SilcUInt32 data_len;
 670   SilcPublicKey public_key;
 671   SilcPKCSType type;
 672
 673   SILC_LOG_DEBUG(("Loading public key file '%s'", filename));
 674
 675   if (!ret_public_key)
 676     return FALSE;
 677
 678   data = silc_file_readfile(filename, &data_len, NULL);
 679   if (!data)
 680     return FALSE;
 681
 682   /* Allocate public key context */
 683   *ret_public_key = public_key = silc_calloc(1, sizeof(*public_key));
 684   if (!public_key) {
 685     silc_free(data);
 686     return FALSE;
 687   }
 688
 689   /* Try loading all types until one succeeds. */
 690   for (type = SILC_PKCS_SILC; type <= SILC_PKCS_SPKI; type++) {
 691     public_key->pkcs = silc_pkcs_find_pkcs(type);
 692     if (!public_key->pkcs)
 693       continue;
 694
 695     if (public_key->pkcs->import_public_key_file(public_key->pkcs,
 696                                                  data, data_len,
 697                                                  SILC_PKCS_FILE_BASE64,
 698                                                  &public_key->public_key)) {
 699       silc_free(data);
 700       return TRUE;
 701     }
 702
 703     if (public_key->pkcs->import_public_key_file(public_key->pkcs,
 704                                                  data, data_len,
 705                                                  SILC_PKCS_FILE_BIN,
 706                                                  &public_key->public_key)) {
 707       silc_free(data);
 708       return TRUE;
 709     }
 710   }
 711
 712   silc_free(data);
 713   silc_free(public_key);
 714   *ret_public_key = NULL;
 715   return FALSE;
 716 }
 717
 718 /* Saves public key into a file */
 719
 720 SilcBool silc_pkcs_save_public_key(const char *filename,
 721                                    SilcPublicKey public_key,
 722                                    SilcPKCSFileEncoding encoding)
 723 {
 724   unsigned char *data;
 725   SilcUInt32 data_len;
 726   SilcStack stack;
 727
 728   stack = silc_stack_alloc(2048, silc_crypto_stack());
 729
 730   /* Export the public key file */
 731   data = public_key->pkcs->export_public_key_file(public_key->pkcs,
 732                                                   stack,
 733                                                   public_key->public_key,
 734                                                   encoding, &data_len);
 735   if (!data) {
 736     silc_stack_free(stack);
 737     return FALSE;
 738   }
 739
 740   /* Write to file */
 741   if (silc_file_writefile(filename, data, data_len)) {
 742     silc_sfree(stack, data);
 743     silc_stack_free(stack);
 744     return FALSE;
 745   }
 746
 747   silc_sfree(stack, data);
 748   silc_stack_free(stack);
 749   return TRUE;
 750 }
 751
 752 /* Loads any kind of private key */
 753
 754 SilcBool silc_pkcs_load_private_key(const char *filename,
 755                                     const unsigned char *passphrase,
 756                                     SilcUInt32 passphrase_len,
 757                                     SilcPrivateKey *ret_private_key)
 758 {
 759   unsigned char *data;
 760   SilcUInt32 data_len;
 761   SilcPrivateKey private_key;
 762   SilcPKCSType type;
 763
 764   SILC_LOG_DEBUG(("Loading private key file '%s'", filename));
 765
 766   if (!ret_private_key)
 767     return FALSE;
 768
 769   data = silc_file_readfile(filename, &data_len, NULL);
 770   if (!data)
 771     return FALSE;
 772
 773   /* Allocate private key context */
 774   *ret_private_key = private_key = silc_calloc(1, sizeof(*private_key));
 775   if (!private_key) {
 776     silc_free(data);
 777     return FALSE;
 778   }
 779
 780   /* Try loading all types until one succeeds. */
 781   for (type = SILC_PKCS_SILC; type <= SILC_PKCS_SPKI; type++) {
 782     private_key->pkcs = silc_pkcs_find_pkcs(type);
 783     if (!private_key->pkcs)
 784       continue;
 785
 786     if (private_key->pkcs->import_private_key_file(
 787                                               private_key->pkcs,
 788                                               data, data_len,
 789                                               passphrase,
 790                                               passphrase_len,
 791                                               SILC_PKCS_FILE_BIN,
 792                                               &private_key->private_key)) {
 793       silc_free(data);
 794       return TRUE;
 795     }
 796
 797     if (private_key->pkcs->import_private_key_file(
 798                                               private_key->pkcs,
 799                                               data, data_len,
 800                                               passphrase,
 801                                               passphrase_len,
 802                                               SILC_PKCS_FILE_BASE64,
 803                                               &private_key->private_key)) {
 804       silc_free(data);
 805       return TRUE;
 806     }
 807   }
 808
 809   silc_free(data);
 810   silc_free(private_key);
 811   *ret_private_key = NULL;
 812   return FALSE;
 813 }
 814
 815 /* Saves private key into a file */
 816
 817 SilcBool silc_pkcs_save_private_key(const char *filename,
 818                                     SilcPrivateKey private_key,
 819                                     const unsigned char *passphrase,
 820                                     SilcUInt32 passphrase_len,
 821                                     SilcPKCSFileEncoding encoding,
 822                                     SilcRng rng)
 823 {
 824   unsigned char *data;
 825   SilcUInt32 data_len;
 826   SilcStack stack;
 827
 828   stack = silc_stack_alloc(2048, silc_crypto_stack());
 829
 830   /* Export the private key file */
 831   data = private_key->pkcs->export_private_key_file(private_key->pkcs, stack,
 832                                                     private_key->private_key,
 833                                                     passphrase,
 834                                                     passphrase_len,
 835                                                     encoding, rng, &data_len);
 836   if (!data) {
 837     silc_stack_free(stack);
 838     return FALSE;
 839   }
 840
 841   /* Write to file */
 842   if (silc_file_writefile(filename, data, data_len)) {
 843     silc_sfree(stack, data);
 844     silc_stack_free(stack);
 845     return FALSE;
 846   }
 847
 848   silc_sfree(stack, data);
 849   silc_stack_free(stack);
 850   return TRUE;
 851 }
 852
 853 /* Hash public key of any type. */
 854
 855 SilcUInt32 silc_hash_public_key(void *key, void *user_context)
 856 {
 857   SilcPublicKey public_key = key;
 858   unsigned char *pk;
 859   SilcUInt32 pk_len;
 860   SilcUInt32 hash = 0;
 861   SilcStack stack = NULL;
 862
 863   if (silc_crypto_stack())
 864     stack = silc_stack_alloc(2048, silc_crypto_stack());
 865
 866   pk = silc_pkcs_public_key_encode(stack, public_key, &pk_len);
 867   if (!pk) {
 868     silc_stack_free(stack);
 869     return hash;
 870   }
 871
 872   hash = silc_hash_data(pk, SILC_32_TO_PTR(pk_len));
 873
 874   silc_sfree(stack, pk);
 875   silc_stack_free(stack);
 876
 877   return hash;
 878 }
 879
 880 /* Compares two SILC Public keys. It may be used as SilcHashTable
 881    comparison function. */
 882
 883 SilcBool silc_hash_public_key_compare(void *key1, void *key2,
 884                                       void *user_context)
 885 {
 886   return silc_pkcs_public_key_compare(key1, key2);
 887 }