line |
stmt |
bran |
cond |
sub |
pod |
time |
code |
1
|
|
|
|
|
|
|
#!/usr/bin/perl -sw |
2
|
|
|
|
|
|
|
## |
3
|
|
|
|
|
|
|
## Crypt::RSA::Keys |
4
|
|
|
|
|
|
|
## |
5
|
|
|
|
|
|
|
## Copyright (c) 2001, Vipul Ved Prakash. All rights reserved. |
6
|
|
|
|
|
|
|
## This code is free software; you can redistribute it and/or modify |
7
|
|
|
|
|
|
|
## it under the same terms as Perl itself. |
8
|
|
|
|
|
|
|
## |
9
|
|
|
|
|
|
|
## $Id: Key.pm,v 1.13 2001/05/25 00:20:40 vipul Exp $ |
10
|
|
|
|
|
|
|
|
11
|
|
|
|
|
|
|
package Crypt::RSA::Key; |
12
|
5
|
|
|
5
|
|
26162
|
use strict; |
|
5
|
|
|
|
|
11
|
|
|
5
|
|
|
|
|
182
|
|
13
|
5
|
|
|
5
|
|
25
|
use base 'Class::Loader'; |
|
5
|
|
|
|
|
11
|
|
|
5
|
|
|
|
|
21839
|
|
14
|
|
|
|
|
|
|
use base 'Crypt::RSA::Errorhandler'; |
15
|
|
|
|
|
|
|
use Crypt::Primes qw(rsaparams); |
16
|
|
|
|
|
|
|
use Crypt::RSA::DataFormat qw(bitsize); |
17
|
|
|
|
|
|
|
use Math::Pari qw(PARI Mod lift); |
18
|
|
|
|
|
|
|
use Crypt::RSA::Key::Private; |
19
|
|
|
|
|
|
|
use Crypt::RSA::Key::Public; |
20
|
|
|
|
|
|
|
|
21
|
|
|
|
|
|
|
$Crypt::RSA::Key::VERSION = '1.99'; |
22
|
|
|
|
|
|
|
|
23
|
|
|
|
|
|
|
my %MODMAP = ( |
24
|
|
|
|
|
|
|
Native_PKF => { Module => "Crypt::RSA::Key::Public" }, |
25
|
|
|
|
|
|
|
Native_SKF => { Module => "Crypt::RSA::Key::Private" }, |
26
|
|
|
|
|
|
|
SSH_PKF => { Module => "Crypt::RSA::Key::Public::SSH" }, |
27
|
|
|
|
|
|
|
SSH_SKF => { Module => "Crypt::RSA::Key::Private::SSH" }, |
28
|
|
|
|
|
|
|
); |
29
|
|
|
|
|
|
|
|
30
|
|
|
|
|
|
|
|
31
|
|
|
|
|
|
|
sub new { |
32
|
|
|
|
|
|
|
my $class = shift; |
33
|
|
|
|
|
|
|
my $self = {}; |
34
|
|
|
|
|
|
|
bless $self, $class; |
35
|
|
|
|
|
|
|
$self->_storemap ( %MODMAP ); |
36
|
|
|
|
|
|
|
return $self; |
37
|
|
|
|
|
|
|
} |
38
|
|
|
|
|
|
|
|
39
|
|
|
|
|
|
|
|
40
|
|
|
|
|
|
|
sub generate { |
41
|
|
|
|
|
|
|
|
42
|
|
|
|
|
|
|
my ($self, %params) = @_; |
43
|
|
|
|
|
|
|
|
44
|
|
|
|
|
|
|
my $key; |
45
|
|
|
|
|
|
|
unless ($params{q} && $params{p} && $params{e}) { |
46
|
|
|
|
|
|
|
|
47
|
|
|
|
|
|
|
return $self->error ("Missing argument.") unless $params{Size}; |
48
|
|
|
|
|
|
|
|
49
|
|
|
|
|
|
|
return $self->error ("Keysize too small.") if |
50
|
|
|
|
|
|
|
$params{Size} < 48; |
51
|
|
|
|
|
|
|
|
52
|
|
|
|
|
|
|
return $self->error ("Odd keysize.") if |
53
|
|
|
|
|
|
|
$params{Size} % 2; |
54
|
|
|
|
|
|
|
|
55
|
|
|
|
|
|
|
my $size = int($params{Size}/2); |
56
|
|
|
|
|
|
|
my $verbosity = $params{Verbosity} || 0; |
57
|
|
|
|
|
|
|
|
58
|
|
|
|
|
|
|
my $cbitsize = 0; |
59
|
|
|
|
|
|
|
while (!($cbitsize)) { |
60
|
|
|
|
|
|
|
$key = rsaparams ( Size => $size, Verbosity => $verbosity ); |
61
|
|
|
|
|
|
|
my $n = $$key{p} * $$key{q}; |
62
|
|
|
|
|
|
|
$cbitsize = 1 if bitsize($n) == $params{Size} |
63
|
|
|
|
|
|
|
} |
64
|
|
|
|
|
|
|
|
65
|
|
|
|
|
|
|
} |
66
|
|
|
|
|
|
|
|
67
|
|
|
|
|
|
|
if ($params{KF}) { |
68
|
|
|
|
|
|
|
$params{PKF} = { Name => "$params{KF}_PKF" }; |
69
|
|
|
|
|
|
|
$params{SKF} = { Name => "$params{KF}_SKF" } |
70
|
|
|
|
|
|
|
} |
71
|
|
|
|
|
|
|
|
72
|
|
|
|
|
|
|
my $pubload = $params{PKF} ? $params{PKF} : { Name => "Native_PKF" }; |
73
|
|
|
|
|
|
|
my $priload = $params{SKF} ? $params{SKF} : { Name => "Native_SKF" }; |
74
|
|
|
|
|
|
|
|
75
|
|
|
|
|
|
|
my $pubkey = $self->_load (%$pubload) || |
76
|
|
|
|
|
|
|
return $self->error ("Couldn't load the public key module."); |
77
|
|
|
|
|
|
|
my $prikey = $self->_load ((%$priload), Args => ['Cipher' => $params{Cipher}, 'Password', $params{Password} ]) || |
78
|
|
|
|
|
|
|
return $self->error ("Couldn't load the private key module."); |
79
|
|
|
|
|
|
|
$pubkey->Identity ($params{Identity}); |
80
|
|
|
|
|
|
|
$prikey->Identity ($params{Identity}); |
81
|
|
|
|
|
|
|
|
82
|
|
|
|
|
|
|
$pubkey->e ($$key{e} || $params{e}); |
83
|
|
|
|
|
|
|
$prikey->e ($$key{e} || $params{e}); |
84
|
|
|
|
|
|
|
$prikey->p ($$key{p} || $params{p}); |
85
|
|
|
|
|
|
|
$prikey->q ($$key{q} || $params{q}); |
86
|
|
|
|
|
|
|
|
87
|
|
|
|
|
|
|
$prikey->phi (($prikey->p - 1) * ($prikey->q - 1)); |
88
|
|
|
|
|
|
|
my $m = Mod (1, $prikey->phi); |
89
|
|
|
|
|
|
|
|
90
|
|
|
|
|
|
|
$prikey->d (lift($m/$pubkey->e)); |
91
|
|
|
|
|
|
|
$prikey->n ($prikey->p * $prikey->q); |
92
|
|
|
|
|
|
|
$pubkey->n ($prikey->n); |
93
|
|
|
|
|
|
|
|
94
|
|
|
|
|
|
|
$prikey->dp ($prikey->d % ($prikey->p - 1)); |
95
|
|
|
|
|
|
|
$prikey->dq ($prikey->d % ($prikey->q - 1)); |
96
|
|
|
|
|
|
|
$prikey->u (mod_inverse($prikey->p, $prikey->q)); |
97
|
|
|
|
|
|
|
|
98
|
|
|
|
|
|
|
return $self->error ("d is too small. Regenerate.") if |
99
|
|
|
|
|
|
|
bitsize($prikey->d) < 0.25 * bitsize($prikey->n); |
100
|
|
|
|
|
|
|
|
101
|
|
|
|
|
|
|
$$key{p} = 0; $$key{q} = 0; $$key{e} = 0; $m = 0; |
102
|
|
|
|
|
|
|
|
103
|
|
|
|
|
|
|
if ($params{Filename}) { |
104
|
|
|
|
|
|
|
$pubkey->write (Filename => "$params{Filename}.public"); |
105
|
|
|
|
|
|
|
$prikey->write (Filename => "$params{Filename}.private"); |
106
|
|
|
|
|
|
|
} |
107
|
|
|
|
|
|
|
|
108
|
|
|
|
|
|
|
return ($pubkey, $prikey); |
109
|
|
|
|
|
|
|
|
110
|
|
|
|
|
|
|
} |
111
|
|
|
|
|
|
|
|
112
|
|
|
|
|
|
|
|
113
|
|
|
|
|
|
|
sub mod_inverse { |
114
|
|
|
|
|
|
|
my($a, $n) = @_; |
115
|
|
|
|
|
|
|
my $m = Mod(1, $n); |
116
|
|
|
|
|
|
|
lift($m / $a); |
117
|
|
|
|
|
|
|
} |
118
|
|
|
|
|
|
|
|
119
|
|
|
|
|
|
|
|
120
|
|
|
|
|
|
|
1; |
121
|
|
|
|
|
|
|
|
122
|
|
|
|
|
|
|
=head1 NAME |
123
|
|
|
|
|
|
|
|
124
|
|
|
|
|
|
|
Crypt::RSA::Key - RSA Key Pair Generator. |
125
|
|
|
|
|
|
|
|
126
|
|
|
|
|
|
|
=head1 SYNOPSIS |
127
|
|
|
|
|
|
|
|
128
|
|
|
|
|
|
|
my $keychain = new Crypt::RSA::Key; |
129
|
|
|
|
|
|
|
my ($public, $private) = $keychain->generate ( |
130
|
|
|
|
|
|
|
Identity => 'Lord Macbeth ', |
131
|
|
|
|
|
|
|
Size => 2048, |
132
|
|
|
|
|
|
|
Password => 'A day so foul & fair', |
133
|
|
|
|
|
|
|
Verbosity => 1, |
134
|
|
|
|
|
|
|
) or die $keychain->errstr(); |
135
|
|
|
|
|
|
|
|
136
|
|
|
|
|
|
|
=head1 DESCRIPTION |
137
|
|
|
|
|
|
|
|
138
|
|
|
|
|
|
|
This module provides a method to generate an RSA key pair. |
139
|
|
|
|
|
|
|
|
140
|
|
|
|
|
|
|
=head1 METHODS |
141
|
|
|
|
|
|
|
|
142
|
|
|
|
|
|
|
=head2 new() |
143
|
|
|
|
|
|
|
|
144
|
|
|
|
|
|
|
Constructor. |
145
|
|
|
|
|
|
|
|
146
|
|
|
|
|
|
|
=head2 generate() |
147
|
|
|
|
|
|
|
|
148
|
|
|
|
|
|
|
generate() generates an RSA key of specified bitsize. It returns a list of |
149
|
|
|
|
|
|
|
two elements, a Crypt::RSA::Key::Public object that holds the public part |
150
|
|
|
|
|
|
|
of the key pair and a Crypt::RSA::Key::Private object that holds that |
151
|
|
|
|
|
|
|
private part. On failure, it returns undef and sets $self->errstr to |
152
|
|
|
|
|
|
|
appropriate error string. generate() takes a hash argument with the |
153
|
|
|
|
|
|
|
following keys: |
154
|
|
|
|
|
|
|
|
155
|
|
|
|
|
|
|
=over 4 |
156
|
|
|
|
|
|
|
|
157
|
|
|
|
|
|
|
=item B |
158
|
|
|
|
|
|
|
|
159
|
|
|
|
|
|
|
Bitsize of the key to be generated. This should be an even integer > 48. |
160
|
|
|
|
|
|
|
Bitsize is a mandatory argument. |
161
|
|
|
|
|
|
|
|
162
|
|
|
|
|
|
|
=item B |
163
|
|
|
|
|
|
|
|
164
|
|
|
|
|
|
|
String with which the private key will be encrypted. If Password is not |
165
|
|
|
|
|
|
|
provided the key will be stored unencrypted. |
166
|
|
|
|
|
|
|
|
167
|
|
|
|
|
|
|
=item B |
168
|
|
|
|
|
|
|
|
169
|
|
|
|
|
|
|
A string that identifies the owner of the key. This string usually takes |
170
|
|
|
|
|
|
|
the form of a name and an email address. The identity is not bound to the |
171
|
|
|
|
|
|
|
key with a signature. However, a future release or another module will |
172
|
|
|
|
|
|
|
provide this facility. |
173
|
|
|
|
|
|
|
|
174
|
|
|
|
|
|
|
=item B |
175
|
|
|
|
|
|
|
|
176
|
|
|
|
|
|
|
The block cipher which is used for encrypting the private key. Defaults to |
177
|
|
|
|
|
|
|
`Blowfish'. Cipher could be set to any value that works with Crypt::CBC(3) |
178
|
|
|
|
|
|
|
and Tie::EncryptedHash(3). |
179
|
|
|
|
|
|
|
|
180
|
|
|
|
|
|
|
=item B |
181
|
|
|
|
|
|
|
|
182
|
|
|
|
|
|
|
When set to 1, generate() will draw a progress display on STDOUT. |
183
|
|
|
|
|
|
|
|
184
|
|
|
|
|
|
|
=item B |
185
|
|
|
|
|
|
|
|
186
|
|
|
|
|
|
|
The generated key pair will be written to disk, in $Filename.public and |
187
|
|
|
|
|
|
|
$Filename.private files, if this argument is provided. Disk writes can be |
188
|
|
|
|
|
|
|
deferred by skipping this argument and achieved later with the write() |
189
|
|
|
|
|
|
|
method of Crypt::RSA::Key::Public(3) and Crypt::RSA::Key::Private(3). |
190
|
|
|
|
|
|
|
|
191
|
|
|
|
|
|
|
=item B |
192
|
|
|
|
|
|
|
|
193
|
|
|
|
|
|
|
A string that specifies the key format. As of this writing, two key |
194
|
|
|
|
|
|
|
formats, `Native' and `SSH', are supported. KF defaults to `Native'. |
195
|
|
|
|
|
|
|
|
196
|
|
|
|
|
|
|
=item B |
197
|
|
|
|
|
|
|
|
198
|
|
|
|
|
|
|
Secret (Private) Key Format. Instead of specifying KF, the user could |
199
|
|
|
|
|
|
|
choose to specify secret and public key formats separately. The value for |
200
|
|
|
|
|
|
|
SKF can be a string ("Native" or "SSH") or a hash reference that specifies |
201
|
|
|
|
|
|
|
a module name, its constructor and constructor arguments. The specified |
202
|
|
|
|
|
|
|
module is loaded with Class::Loader(3) and must be interface compatible |
203
|
|
|
|
|
|
|
with Crypt::RSA::Key::Private(3). |
204
|
|
|
|
|
|
|
|
205
|
|
|
|
|
|
|
=item B |
206
|
|
|
|
|
|
|
|
207
|
|
|
|
|
|
|
Public Key Format. This option is like SKF but for the public key. |
208
|
|
|
|
|
|
|
|
209
|
|
|
|
|
|
|
=back |
210
|
|
|
|
|
|
|
|
211
|
|
|
|
|
|
|
=head1 ERROR HANDLING |
212
|
|
|
|
|
|
|
|
213
|
|
|
|
|
|
|
See B in Crypt::RSA(3) manpage. |
214
|
|
|
|
|
|
|
|
215
|
|
|
|
|
|
|
=head1 BUGS |
216
|
|
|
|
|
|
|
|
217
|
|
|
|
|
|
|
There's an inefficiency in the way generate() ensures the key pair is |
218
|
|
|
|
|
|
|
exactly Size bits long. This will be fixed in a future release. |
219
|
|
|
|
|
|
|
|
220
|
|
|
|
|
|
|
=head1 AUTHOR |
221
|
|
|
|
|
|
|
|
222
|
|
|
|
|
|
|
Vipul Ved Prakash, Email@vipul.netE |
223
|
|
|
|
|
|
|
|
224
|
|
|
|
|
|
|
=head1 SEE ALSO |
225
|
|
|
|
|
|
|
|
226
|
|
|
|
|
|
|
Crypt::RSA(3), Crypt::RSA::Key::Public(3), Crypt::RSA::Key::Private(3), |
227
|
|
|
|
|
|
|
Crypt::Primes(3), Tie::EncryptedHash(3), Class::Loader(3) |
228
|
|
|
|
|
|
|
|
229
|
|
|
|
|
|
|
=cut |
230
|
|
|
|
|
|
|
|
231
|
|
|
|
|
|
|
|