mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-11-27 05:04:14 +01:00
4593aeadaf
use with PKCS#1 v1.5 signing and verification. - Added extra certificates to test-ca and test code to further test functionality of SHA2 and SHA4 signing and verification. - Updated other program files accordingly
133 lines
3.5 KiB
C
133 lines
3.5 KiB
C
/*
|
|
* RSA/SHA-1 signature creation program
|
|
*
|
|
* Based on XySSL: Copyright (C) 2006-2008 Christophe Devine
|
|
*
|
|
* Copyright (C) 2009 Paul Bakker <polarssl_maintainer at polarssl dot org>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc.,
|
|
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*/
|
|
|
|
#ifndef _CRT_SECURE_NO_DEPRECATE
|
|
#define _CRT_SECURE_NO_DEPRECATE 1
|
|
#endif
|
|
|
|
#include <string.h>
|
|
#include <stdio.h>
|
|
|
|
#include "polarssl/rsa.h"
|
|
#include "polarssl/sha1.h"
|
|
|
|
int main( int argc, char *argv[] )
|
|
{
|
|
FILE *f;
|
|
int ret, i;
|
|
rsa_context rsa;
|
|
unsigned char hash[20];
|
|
unsigned char buf[512];
|
|
|
|
ret = 1;
|
|
|
|
if( argc != 2 )
|
|
{
|
|
printf( "usage: rsa_sign <filename>\n" );
|
|
|
|
#ifdef WIN32
|
|
printf( "\n" );
|
|
#endif
|
|
|
|
goto exit;
|
|
}
|
|
|
|
printf( "\n . Reading private key from rsa_priv.txt" );
|
|
fflush( stdout );
|
|
|
|
if( ( f = fopen( "rsa_priv.txt", "rb" ) ) == NULL )
|
|
{
|
|
ret = 1;
|
|
printf( " failed\n ! Could not open rsa_priv.txt\n" \
|
|
" ! Please run rsa_genkey first\n\n" );
|
|
goto exit;
|
|
}
|
|
|
|
rsa_init( &rsa, RSA_PKCS_V15, 0, NULL, NULL );
|
|
|
|
if( ( ret = mpi_read_file( &rsa.N , 16, f ) ) != 0 ||
|
|
( ret = mpi_read_file( &rsa.E , 16, f ) ) != 0 ||
|
|
( ret = mpi_read_file( &rsa.D , 16, f ) ) != 0 ||
|
|
( ret = mpi_read_file( &rsa.P , 16, f ) ) != 0 ||
|
|
( ret = mpi_read_file( &rsa.Q , 16, f ) ) != 0 ||
|
|
( ret = mpi_read_file( &rsa.DP, 16, f ) ) != 0 ||
|
|
( ret = mpi_read_file( &rsa.DQ, 16, f ) ) != 0 ||
|
|
( ret = mpi_read_file( &rsa.QP, 16, f ) ) != 0 )
|
|
{
|
|
printf( " failed\n ! mpi_read_file returned %d\n\n", ret );
|
|
goto exit;
|
|
}
|
|
|
|
rsa.len = ( mpi_msb( &rsa.N ) + 7 ) >> 3;
|
|
|
|
fclose( f );
|
|
|
|
/*
|
|
* Compute the SHA-1 hash of the input file,
|
|
* then calculate the RSA signature of the hash.
|
|
*/
|
|
printf( "\n . Generating the RSA/SHA-1 signature" );
|
|
fflush( stdout );
|
|
|
|
if( ( ret = sha1_file( argv[1], hash ) ) != 0 )
|
|
{
|
|
printf( " failed\n ! Could not open or read %s\n\n", argv[1] );
|
|
goto exit;
|
|
}
|
|
|
|
if( ( ret = rsa_pkcs1_sign( &rsa, RSA_PRIVATE, SIG_RSA_SHA1,
|
|
20, hash, buf ) ) != 0 )
|
|
{
|
|
printf( " failed\n ! rsa_pkcs1_sign returned %d\n\n", ret );
|
|
goto exit;
|
|
}
|
|
|
|
/*
|
|
* Write the signature into <filename>-sig.txt
|
|
*/
|
|
memcpy( argv[1] + strlen( argv[1] ), ".sig", 5 );
|
|
|
|
if( ( f = fopen( argv[1], "wb+" ) ) == NULL )
|
|
{
|
|
ret = 1;
|
|
printf( " failed\n ! Could not create %s\n\n", argv[1] );
|
|
goto exit;
|
|
}
|
|
|
|
for( i = 0; i < rsa.len; i++ )
|
|
fprintf( f, "%02X%s", buf[i],
|
|
( i + 1 ) % 16 == 0 ? "\r\n" : " " );
|
|
|
|
fclose( f );
|
|
|
|
printf( "\n . Done (created \"%s\")\n\n", argv[1] );
|
|
|
|
exit:
|
|
|
|
#ifdef WIN32
|
|
printf( " + Press Enter to exit this program.\n" );
|
|
fflush( stdout ); getchar();
|
|
#endif
|
|
|
|
return( ret );
|
|
}
|