1e1051a39Sopenharmony_ci/*
2e1051a39Sopenharmony_ci * Copyright 2005-2021 The OpenSSL Project Authors. All Rights Reserved.
3e1051a39Sopenharmony_ci *
4e1051a39Sopenharmony_ci * Licensed under the Apache License 2.0 (the "License").  You may not use
5e1051a39Sopenharmony_ci * this file except in compliance with the License.  You can obtain a copy
6e1051a39Sopenharmony_ci * in the file LICENSE in the source distribution or at
7e1051a39Sopenharmony_ci * https://www.openssl.org/source/license.html
8e1051a39Sopenharmony_ci */
9e1051a39Sopenharmony_ci
10e1051a39Sopenharmony_ci#include <openssl/bn.h>
11e1051a39Sopenharmony_ci#include "crypto/bn_dh.h"
12e1051a39Sopenharmony_ci
13e1051a39Sopenharmony_ci#define COPY_BN(dst, src) (dst != NULL) ? BN_copy(dst, &src) : BN_dup(&src)
14e1051a39Sopenharmony_ci
15e1051a39Sopenharmony_ci
16e1051a39Sopenharmony_ci/*-
17e1051a39Sopenharmony_ci * "First Oakley Default Group" from RFC2409, section 6.1.
18e1051a39Sopenharmony_ci *
19e1051a39Sopenharmony_ci * The prime is: 2^768 - 2 ^704 - 1 + 2^64 * { [2^638 pi] + 149686 }
20e1051a39Sopenharmony_ci *
21e1051a39Sopenharmony_ci * RFC2409 specifies a generator of 2.
22e1051a39Sopenharmony_ci * RFC2412 specifies a generator of of 22.
23e1051a39Sopenharmony_ci */
24e1051a39Sopenharmony_ci
25e1051a39Sopenharmony_ciBIGNUM *BN_get_rfc2409_prime_768(BIGNUM *bn)
26e1051a39Sopenharmony_ci{
27e1051a39Sopenharmony_ci    static const unsigned char RFC2409_PRIME_768[] = {
28e1051a39Sopenharmony_ci        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
29e1051a39Sopenharmony_ci        0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,
30e1051a39Sopenharmony_ci        0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,
31e1051a39Sopenharmony_ci        0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,
32e1051a39Sopenharmony_ci        0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
33e1051a39Sopenharmony_ci        0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,
34e1051a39Sopenharmony_ci        0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,
35e1051a39Sopenharmony_ci        0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,
36e1051a39Sopenharmony_ci        0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,
37e1051a39Sopenharmony_ci        0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
38e1051a39Sopenharmony_ci        0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x3A, 0x36, 0x20,
39e1051a39Sopenharmony_ci        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
40e1051a39Sopenharmony_ci    };
41e1051a39Sopenharmony_ci    return BN_bin2bn(RFC2409_PRIME_768, sizeof(RFC2409_PRIME_768), bn);
42e1051a39Sopenharmony_ci}
43e1051a39Sopenharmony_ci
44e1051a39Sopenharmony_ci/*-
45e1051a39Sopenharmony_ci * "Second Oakley Default Group" from RFC2409, section 6.2.
46e1051a39Sopenharmony_ci *
47e1051a39Sopenharmony_ci * The prime is: 2^1024 - 2^960 - 1 + 2^64 * { [2^894 pi] + 129093 }.
48e1051a39Sopenharmony_ci *
49e1051a39Sopenharmony_ci * RFC2409 specifies a generator of 2.
50e1051a39Sopenharmony_ci * RFC2412 specifies a generator of 22.
51e1051a39Sopenharmony_ci */
52e1051a39Sopenharmony_ci
53e1051a39Sopenharmony_ciBIGNUM *BN_get_rfc2409_prime_1024(BIGNUM *bn)
54e1051a39Sopenharmony_ci{
55e1051a39Sopenharmony_ci    static const unsigned char RFC2409_PRIME_1024[] = {
56e1051a39Sopenharmony_ci        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
57e1051a39Sopenharmony_ci        0xC9, 0x0F, 0xDA, 0xA2, 0x21, 0x68, 0xC2, 0x34,
58e1051a39Sopenharmony_ci        0xC4, 0xC6, 0x62, 0x8B, 0x80, 0xDC, 0x1C, 0xD1,
59e1051a39Sopenharmony_ci        0x29, 0x02, 0x4E, 0x08, 0x8A, 0x67, 0xCC, 0x74,
60e1051a39Sopenharmony_ci        0x02, 0x0B, 0xBE, 0xA6, 0x3B, 0x13, 0x9B, 0x22,
61e1051a39Sopenharmony_ci        0x51, 0x4A, 0x08, 0x79, 0x8E, 0x34, 0x04, 0xDD,
62e1051a39Sopenharmony_ci        0xEF, 0x95, 0x19, 0xB3, 0xCD, 0x3A, 0x43, 0x1B,
63e1051a39Sopenharmony_ci        0x30, 0x2B, 0x0A, 0x6D, 0xF2, 0x5F, 0x14, 0x37,
64e1051a39Sopenharmony_ci        0x4F, 0xE1, 0x35, 0x6D, 0x6D, 0x51, 0xC2, 0x45,
65e1051a39Sopenharmony_ci        0xE4, 0x85, 0xB5, 0x76, 0x62, 0x5E, 0x7E, 0xC6,
66e1051a39Sopenharmony_ci        0xF4, 0x4C, 0x42, 0xE9, 0xA6, 0x37, 0xED, 0x6B,
67e1051a39Sopenharmony_ci        0x0B, 0xFF, 0x5C, 0xB6, 0xF4, 0x06, 0xB7, 0xED,
68e1051a39Sopenharmony_ci        0xEE, 0x38, 0x6B, 0xFB, 0x5A, 0x89, 0x9F, 0xA5,
69e1051a39Sopenharmony_ci        0xAE, 0x9F, 0x24, 0x11, 0x7C, 0x4B, 0x1F, 0xE6,
70e1051a39Sopenharmony_ci        0x49, 0x28, 0x66, 0x51, 0xEC, 0xE6, 0x53, 0x81,
71e1051a39Sopenharmony_ci        0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF,
72e1051a39Sopenharmony_ci    };
73e1051a39Sopenharmony_ci    return BN_bin2bn(RFC2409_PRIME_1024, sizeof(RFC2409_PRIME_1024), bn);
74e1051a39Sopenharmony_ci}
75e1051a39Sopenharmony_ci
76e1051a39Sopenharmony_ci/*-
77e1051a39Sopenharmony_ci * "1536-bit MODP Group" from RFC3526, Section 2.
78e1051a39Sopenharmony_ci *
79e1051a39Sopenharmony_ci * The prime is: 2^1536 - 2^1472 - 1 + 2^64 * { [2^1406 pi] + 741804 }
80e1051a39Sopenharmony_ci *
81e1051a39Sopenharmony_ci * RFC3526 specifies a generator of 2.
82e1051a39Sopenharmony_ci * RFC2312 specifies a generator of 22.
83e1051a39Sopenharmony_ci */
84e1051a39Sopenharmony_ci
85e1051a39Sopenharmony_ciBIGNUM *BN_get_rfc3526_prime_1536(BIGNUM *bn)
86e1051a39Sopenharmony_ci{
87e1051a39Sopenharmony_ci    return COPY_BN(bn, ossl_bignum_modp_1536_p);
88e1051a39Sopenharmony_ci}
89e1051a39Sopenharmony_ci
90e1051a39Sopenharmony_ci/*-
91e1051a39Sopenharmony_ci * "2048-bit MODP Group" from RFC3526, Section 3.
92e1051a39Sopenharmony_ci *
93e1051a39Sopenharmony_ci * The prime is: 2^2048 - 2^1984 - 1 + 2^64 * { [2^1918 pi] + 124476 }
94e1051a39Sopenharmony_ci *
95e1051a39Sopenharmony_ci * RFC3526 specifies a generator of 2.
96e1051a39Sopenharmony_ci */
97e1051a39Sopenharmony_ci
98e1051a39Sopenharmony_ciBIGNUM *BN_get_rfc3526_prime_2048(BIGNUM *bn)
99e1051a39Sopenharmony_ci{
100e1051a39Sopenharmony_ci    return COPY_BN(bn, ossl_bignum_modp_2048_p);
101e1051a39Sopenharmony_ci}
102e1051a39Sopenharmony_ci
103e1051a39Sopenharmony_ci/*-
104e1051a39Sopenharmony_ci * "3072-bit MODP Group" from RFC3526, Section 4.
105e1051a39Sopenharmony_ci *
106e1051a39Sopenharmony_ci * The prime is: 2^3072 - 2^3008 - 1 + 2^64 * { [2^2942 pi] + 1690314 }
107e1051a39Sopenharmony_ci *
108e1051a39Sopenharmony_ci * RFC3526 specifies a generator of 2.
109e1051a39Sopenharmony_ci */
110e1051a39Sopenharmony_ci
111e1051a39Sopenharmony_ciBIGNUM *BN_get_rfc3526_prime_3072(BIGNUM *bn)
112e1051a39Sopenharmony_ci{
113e1051a39Sopenharmony_ci    return COPY_BN(bn, ossl_bignum_modp_3072_p);
114e1051a39Sopenharmony_ci}
115e1051a39Sopenharmony_ci
116e1051a39Sopenharmony_ci/*-
117e1051a39Sopenharmony_ci * "4096-bit MODP Group" from RFC3526, Section 5.
118e1051a39Sopenharmony_ci *
119e1051a39Sopenharmony_ci * The prime is: 2^4096 - 2^4032 - 1 + 2^64 * { [2^3966 pi] + 240904 }
120e1051a39Sopenharmony_ci *
121e1051a39Sopenharmony_ci * RFC3526 specifies a generator of 2.
122e1051a39Sopenharmony_ci */
123e1051a39Sopenharmony_ci
124e1051a39Sopenharmony_ciBIGNUM *BN_get_rfc3526_prime_4096(BIGNUM *bn)
125e1051a39Sopenharmony_ci{
126e1051a39Sopenharmony_ci    return COPY_BN(bn, ossl_bignum_modp_4096_p);
127e1051a39Sopenharmony_ci}
128e1051a39Sopenharmony_ci
129e1051a39Sopenharmony_ci/*-
130e1051a39Sopenharmony_ci * "6144-bit MODP Group" from RFC3526, Section 6.
131e1051a39Sopenharmony_ci *
132e1051a39Sopenharmony_ci * The prime is: 2^6144 - 2^6080 - 1 + 2^64 * { [2^6014 pi] + 929484 }
133e1051a39Sopenharmony_ci *
134e1051a39Sopenharmony_ci * RFC3526 specifies a generator of 2.
135e1051a39Sopenharmony_ci */
136e1051a39Sopenharmony_ci
137e1051a39Sopenharmony_ciBIGNUM *BN_get_rfc3526_prime_6144(BIGNUM *bn)
138e1051a39Sopenharmony_ci{
139e1051a39Sopenharmony_ci    return COPY_BN(bn, ossl_bignum_modp_6144_p);
140e1051a39Sopenharmony_ci}
141e1051a39Sopenharmony_ci
142e1051a39Sopenharmony_ci/*-
143e1051a39Sopenharmony_ci * "8192-bit MODP Group" from RFC3526, Section 7.
144e1051a39Sopenharmony_ci *
145e1051a39Sopenharmony_ci * The prime is: 2^8192 - 2^8128 - 1 + 2^64 * { [2^8062 pi] + 4743158 }
146e1051a39Sopenharmony_ci *
147e1051a39Sopenharmony_ci * RFC3526 specifies a generator of 2.
148e1051a39Sopenharmony_ci */
149e1051a39Sopenharmony_ci
150e1051a39Sopenharmony_ciBIGNUM *BN_get_rfc3526_prime_8192(BIGNUM *bn)
151e1051a39Sopenharmony_ci{
152e1051a39Sopenharmony_ci    return COPY_BN(bn, ossl_bignum_modp_8192_p);
153e1051a39Sopenharmony_ci}
154