File Coverage

blib/lib/Crypt/OpenSSL/RSA.pm

Criterion	Covered	Total	%
statement	44	45	97.7
branch	25	26	96.1
condition	10	12	83.3
subroutine	12	12	100.0
pod	5	5	100.0
total	96	100	96.0

package Crypt::OpenSSL::RSA;

use strict;
use warnings;

use Carp;    # Removing carp will break the XS code.
use Crypt::OpenSSL::Bignum;

our $VERSION = '0.39';

use XSLoader;
XSLoader::load 'Crypt::OpenSSL::RSA', $VERSION;

BEGIN {
    eval {
        local $SIG{__DIE__};    # prevent outer handlers from being called
        require Crypt::OpenSSL::Bignum;
    };
}    ## no critic qw(RequireCheckingReturnValueOfEval);

sub new_public_key {
    my ( $proto, $p_key_string ) = @_;
    croak "unrecognized key format: expected PEM-encoded key (starting with '-----BEGIN') "
        . "or DER-encoded key (binary ASN.1 data)"
        unless defined $p_key_string && length($p_key_string) > 0;
    if ( $p_key_string =~ /^-----BEGIN RSA PUBLIC KEY-----/ ) {
        return $proto->_new_public_key_pkcs1($p_key_string);
    }
    elsif ( $p_key_string =~ /^-----BEGIN PUBLIC KEY-----/ ) {
        return $proto->_new_public_key_x509($p_key_string);
    }
    elsif ( $p_key_string =~ /^-----/ ) {
        croak "unrecognized key format: PEM header not recognized as RSA public key. "
            . "Expected '-----BEGIN RSA PUBLIC KEY-----' (PKCS#1) or "
            . "'-----BEGIN PUBLIC KEY-----' (X.509)";
    }
    elsif ( substr($p_key_string, 0, 1) eq "\x30" ) {
        # ASN.1 SEQUENCE tag detected — likely DER-encoded key.
        # Search for the RSA OID (1.2.840.113549.1.1.1) in raw binary to distinguish
        # X.509 SubjectPublicKeyInfo from PKCS#1 RSAPublicKey.
        if (index($p_key_string, "\x06\x09\x2a\x86\x48\x86\xf7\x0d\x01\x01\x01") >= 0) {
            # RSA encryption OID found — X.509 SubjectPublicKeyInfo
            return $proto->_new_public_key_x509_der($p_key_string);
        }
        else {
            # No OID — assume PKCS#1 RSAPublicKey, let OpenSSL reject invalid data
            return $proto->_new_public_key_pkcs1_der($p_key_string);
        }
    }
    else {
        croak "unrecognized key format: expected PEM-encoded key (starting with '-----BEGIN') "
            . "or DER-encoded key (binary ASN.1 data)";
    }
}

sub new_private_key {
    my ( $proto, $p_key_string, @rest ) = @_;
    croak "unrecognized key format: expected PEM-encoded key (starting with '-----BEGIN') "
        . "or DER-encoded key (binary ASN.1 data)"
        unless defined $p_key_string && length($p_key_string) > 0;
    if ( $p_key_string =~ /^-----/ ) {
        return $proto->_new_private_key_pem($p_key_string, @rest);
    }
    elsif ( substr($p_key_string, 0, 1) eq "\x30" ) {
        # ASN.1 SEQUENCE tag detected — likely DER-encoded private key.
        return $proto->_new_private_key_der($p_key_string, @rest);
    }
    else {
        croak "unrecognized key format: expected PEM-encoded key (starting with '-----BEGIN') "
            . "or DER-encoded key (binary ASN.1 data)";
    }
}

sub new_key_from_parameters {
    my ( $proto, $n, $e, $d, $p, $q, %opts ) = @_;
    my $rsa = $proto->_new_key_from_parameters( map { $_ ? $_->pointer_copy() : 0 } $n, $e, $d, $p, $q );
    if ( $opts{check} && $rsa && $rsa->is_private() ) {
        $rsa->check_key()
            or croak("RSA key check failed: inconsistent key parameters");
    }
    return $rsa;
}

sub import_random_seed {
    until ( _random_status() ) {
        _random_seed( Crypt::OpenSSL::Random::random_bytes(20) );
    }
}

sub get_key_parameters {
    return map { $_ ? Crypt::OpenSSL::Bignum->bless_pointer($_) : undef } shift->_get_key_parameters();
}

*get_public_key_pkcs1_string = \&get_public_key_string;

unless ( defined &use_sslv23_padding ) {
    *use_sslv23_padding = sub {
        croak(  "use_sslv23_padding is not available: "
              . "SSLv23 padding was removed in OpenSSL 3.x. "
              . "Use use_pkcs1_oaep_padding() for encryption "
              . "or use_pkcs1_pss_padding() for signatures instead." );
    };
}

1;

__END__