ED25519 examples for key gen and .der output, sign/verify
kaleb-himes
parent
dcb6f3da5d
commit
7bb3cc3ad1
|
|
@ -78,8 +78,12 @@ crypto/keys/*.der
|
||||||
crypto/keys/*.x963
|
crypto/keys/*.x963
|
||||||
|
|
||||||
signature/signature
|
signature/signature
|
||||||
|
signature/ED25519/gen_key_files
|
||||||
|
signature/ED25519/sign_and_verify
|
||||||
|
|
||||||
#cergen
|
#cergen
|
||||||
certgen/test.o
|
certgen/test.o
|
||||||
certgen/newCert*
|
certgen/newCert*
|
||||||
certgen/run_certgen_example
|
certgen/run_certgen_example
|
||||||
|
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -0,0 +1,45 @@
|
||||||
|
EXECUTABLE1 := sign_and_verify
|
||||||
|
C_SOURCES1 := sign_and_verify.c
|
||||||
|
C_OBJECTS1 := ${C_SOURCES1:.c=.o}
|
||||||
|
OBJECTS1 := $(C_OBJECTS1)
|
||||||
|
|
||||||
|
EXECUTABLE2 := gen_key_files
|
||||||
|
C_SOURCES2 := gen_key_files.c
|
||||||
|
C_OBJECTS2 := ${C_SOURCES2:.c=.o}
|
||||||
|
OBJECTS2 := $(C_OBJECTS2)
|
||||||
|
|
||||||
|
INCLUDE_DIRS :=
|
||||||
|
LIBRARY_DIRS :=
|
||||||
|
LIBRARIES :=
|
||||||
|
|
||||||
|
#example: if using custom install location add the include and lib dir to the
|
||||||
|
# INCLUDE_DIRS and LIBRARY_DIRS respectively
|
||||||
|
|
||||||
|
#INCLUDE_DIRS += /Users/khimes/work/testDir/wolf-install-dir-for-testing/include
|
||||||
|
#LIBRARY_DIRS += /Users/khimes/work/testDir/wolf-install-dir-for-testing/lib
|
||||||
|
LIBRARIES += wolfssl
|
||||||
|
|
||||||
|
CPPFLAGS += $(foreach includedir,$(INCLUDE_DIRS),-I$(includedir))
|
||||||
|
#CPPFLAGS += -Werror
|
||||||
|
#CPPFLAGS += -Weverything
|
||||||
|
LDFLAGS += $(foreach librarydir,$(LIBRARY_DIRS),-L$(librarydir))
|
||||||
|
LDFLAGS += $(foreach library,$(LIBRARIES),-l$(library))
|
||||||
|
|
||||||
|
.PHONY: all clean distclean
|
||||||
|
|
||||||
|
all: $(EXECUTABLE1) $(EXECUTABLE2)
|
||||||
|
|
||||||
|
$(EXECUTABLE1): $(OBJECTS1)
|
||||||
|
$(LINK.cc) $(OBJECTS1) -o $(EXECUTABLE1)
|
||||||
|
|
||||||
|
$(EXECUTABLE2): $(OBJECTS2)
|
||||||
|
$(LINK.cc) $(OBJECTS2) -o $(EXECUTABLE2)
|
||||||
|
|
||||||
|
|
||||||
|
$(EXECUTABLE1): $(OBJECTS1)
|
||||||
|
$(EXECUTABLE2): $(OBJECTS2)
|
||||||
|
clean:
|
||||||
|
@- $(RM) $(EXECUTABLE1) $(EXECUTABLE2)
|
||||||
|
@- $(RM) $(OBJECTS1) $(OBJECTS2)
|
||||||
|
|
||||||
|
distclean: clean
|
||||||
|
|
@ -0,0 +1,21 @@
|
||||||
|
To compile without Makefile:
|
||||||
|
|
||||||
|
gcc -o gen_key_files gen_key_files.c -lwolfssl
|
||||||
|
gcc -o sign_and_verify sign_and_verify.c -lwolfssl
|
||||||
|
|
||||||
|
|
||||||
|
To re-create the ed25519 private/public key files and update the test_keys.h
|
||||||
|
header file run these commands:
|
||||||
|
|
||||||
|
./gen_key_files
|
||||||
|
./genkeybuffers.pl
|
||||||
|
|
||||||
|
To sign a message and verify the signature run:
|
||||||
|
|
||||||
|
./sign_and_verify
|
||||||
|
|
||||||
|
|
||||||
|
Best wishes in all your testing!
|
||||||
|
|
||||||
|
- The wolfSSL Team
|
||||||
|
|
||||||
|
|
@ -0,0 +1 @@
|
||||||
|
M2ёље§лЖЋб ыЫЃ_<D083>PKЭq<D0AD>пBОїЎx<D08E>^<5E>И<EFBFBD>m
йд<D0B9>Ѓ|<7C>Hшь.вdй/я<>чCДШ
c8ё<38>
|
||||||
|
|
@ -0,0 +1 @@
|
||||||
|
™Έ‹m
ΩΤƒ£|‚Hθμ.<2E>dΩ/ο<>ηC΄Θ
c8ρ<38>
|
||||||
|
|
@ -0,0 +1,81 @@
|
||||||
|
#include <stdio.h>
|
||||||
|
#include <wolfssl/options.h>
|
||||||
|
#include <wolfssl/wolfcrypt/ed25519.h>
|
||||||
|
#include <wolfssl/ssl.h>
|
||||||
|
|
||||||
|
int create_and_output_ed_key(void);
|
||||||
|
static int err_sys(const char* msg, int es);
|
||||||
|
|
||||||
|
static int err_sys(const char* msg, int es)
|
||||||
|
{
|
||||||
|
printf("%s error = %d\n", msg, es);
|
||||||
|
|
||||||
|
exit(-1);
|
||||||
|
}
|
||||||
|
|
||||||
|
int
|
||||||
|
main(int argc, char* argv[])
|
||||||
|
{
|
||||||
|
int ret = -1001;
|
||||||
|
FILE* file;
|
||||||
|
char edPrivFName[] = "./ed_priv_test_key.der";
|
||||||
|
char edPubFName[] = "./ed_pub_test_key.der";
|
||||||
|
byte exportPrivKey[ED25519_KEY_SIZE*2];
|
||||||
|
byte exportPubKey[ED25519_KEY_SIZE];
|
||||||
|
word32 exportPrivSz;
|
||||||
|
word32 exportPubSz;
|
||||||
|
WC_RNG rng;
|
||||||
|
ed25519_key edKeyOut;
|
||||||
|
|
||||||
|
|
||||||
|
wolfSSL_Debugging_ON();
|
||||||
|
/*--------------- INIT ---------------------*/
|
||||||
|
ret = wc_InitRng(&rng);
|
||||||
|
if (ret != 0) err_sys("wc_InitRng err: ", ret); /* replace all go-to's with err_sys */
|
||||||
|
|
||||||
|
ret = wc_ed25519_init(&edKeyOut);
|
||||||
|
if (ret != 0) err_sys("wc_ed25519_init err: ", ret);
|
||||||
|
|
||||||
|
/*--------------- MAKE KEY ---------------------*/
|
||||||
|
ret = wc_ed25519_make_key(&rng, ED25519_KEY_SIZE, &edKeyOut);
|
||||||
|
if (ret != 0) err_sys("wc_ed25519_make_key err: ", ret);
|
||||||
|
|
||||||
|
/*--------------- GET KEY SIZES ---------------------*/
|
||||||
|
exportPrivSz = wc_ed25519_priv_size(&edKeyOut);
|
||||||
|
if (exportPrivSz <= 0) err_sys("wc_ed25519_priv_size err: ", exportPrivSz);
|
||||||
|
|
||||||
|
exportPubSz = wc_ed25519_pub_size(&edKeyOut);
|
||||||
|
if (exportPubSz <= 0) err_sys("wc_ed25519_pub_size err: ", exportPubSz);
|
||||||
|
|
||||||
|
/*--------------- EXPORT KEYS TO BUFFERS ---------------------*/
|
||||||
|
ret = wc_ed25519_export_key(&edKeyOut, exportPrivKey, &exportPrivSz,
|
||||||
|
exportPubKey, &exportPubSz);
|
||||||
|
if (ret != 0) err_sys("wc_ed25519_export_key err: ", ret);
|
||||||
|
|
||||||
|
/*--------------- OUTPUT KEYS TO FILES ---------------------*/
|
||||||
|
file = fopen(edPrivFName, "wb");
|
||||||
|
if (!file) err_sys("error opening edPrivFName file", -1002);
|
||||||
|
|
||||||
|
ret = (int) fwrite(exportPrivKey, 1, exportPrivSz, file);
|
||||||
|
if (ret <= 0) {
|
||||||
|
fclose(file);
|
||||||
|
err_sys("Failed to write to edPrivFName file", -1003);
|
||||||
|
}
|
||||||
|
|
||||||
|
fclose(file);
|
||||||
|
|
||||||
|
file = fopen(edPubFName, "wb");
|
||||||
|
if (!file) err_sys("error opening edPubFName file", -1004);
|
||||||
|
|
||||||
|
ret = (int) fwrite(exportPubKey, 1, exportPubSz, file);
|
||||||
|
if (ret <= 0) {
|
||||||
|
fclose(file);
|
||||||
|
err_sys("Failed to write to edPubFName file", -1005);
|
||||||
|
}
|
||||||
|
|
||||||
|
fclose(file);
|
||||||
|
|
||||||
|
if (ret > 0) ret = 0;
|
||||||
|
|
||||||
|
return ret;
|
||||||
|
}
|
||||||
|
|
@ -0,0 +1,92 @@
|
||||||
|
#!/usr/bin/perl
|
||||||
|
|
||||||
|
# gencertbuf.pl
|
||||||
|
# version 1.1
|
||||||
|
# Updated 04/11/2017
|
||||||
|
#
|
||||||
|
# Copyright (C) 2006-2017 wolfSSL Inc.
|
||||||
|
#
|
||||||
|
|
||||||
|
use strict;
|
||||||
|
use warnings;
|
||||||
|
|
||||||
|
# ---- SCRIPT SETTINGS -------------------------------------------------------
|
||||||
|
|
||||||
|
# output C header file to write cert/key buffers to
|
||||||
|
my $outputFile = "./test_keys.h";
|
||||||
|
|
||||||
|
# 2048-bit certs/keys to be converted
|
||||||
|
# Used with USE_CERT_BUFFERS_2048 define.
|
||||||
|
|
||||||
|
my @fileList_2048 = (
|
||||||
|
[ "./ed_pub_test_key.der", "ed_pub_key_der_32" ],
|
||||||
|
[ "./ed_priv_test_key.der", "ed_priv_key_der_64" ],
|
||||||
|
);
|
||||||
|
|
||||||
|
# ----------------------------------------------------------------------------
|
||||||
|
|
||||||
|
my $num_2048 = @fileList_2048;
|
||||||
|
|
||||||
|
# open our output file, "+>" creates and/or truncates
|
||||||
|
open OUT_FILE, "+>", $outputFile or die $!;
|
||||||
|
|
||||||
|
print OUT_FILE "/* certs_test.h */\n\n";
|
||||||
|
print OUT_FILE "#ifndef WOLFSSL_CERTS_TEST_H\n";
|
||||||
|
print OUT_FILE "#define WOLFSSL_CERTS_TEST_H\n\n";
|
||||||
|
|
||||||
|
|
||||||
|
# convert and print 32/64-bit certs/keys
|
||||||
|
print OUT_FILE "#ifdef USE_CERT_BUFFERS_ED\n\n";
|
||||||
|
for (my $i = 0; $i < $num_2048; $i++) {
|
||||||
|
|
||||||
|
my $fname = $fileList_2048[$i][0];
|
||||||
|
my $sname = $fileList_2048[$i][1];
|
||||||
|
|
||||||
|
print OUT_FILE "/* $fname, (32/64)-bit */\n";
|
||||||
|
print OUT_FILE "static const unsigned char $sname\[] =\n";
|
||||||
|
print OUT_FILE "{\n";
|
||||||
|
file_to_hex($fname);
|
||||||
|
print OUT_FILE "};\n";
|
||||||
|
print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
print OUT_FILE "#endif /* USE_CERT_BUFFERS_ED */\n\n";
|
||||||
|
print OUT_FILE "#endif /* WOLFSSL_CERTS_TEST_H */\n\n";
|
||||||
|
# close certs_test.h file
|
||||||
|
close OUT_FILE or die $!;
|
||||||
|
|
||||||
|
# print file as hex, comma-separated, as needed by C buffer
|
||||||
|
sub file_to_hex {
|
||||||
|
my $fileName = $_[0];
|
||||||
|
|
||||||
|
open my $fp, "<", $fileName or die $!;
|
||||||
|
binmode($fp);
|
||||||
|
|
||||||
|
my $fileLen = -s $fileName;
|
||||||
|
my $byte;
|
||||||
|
|
||||||
|
for (my $i = 0, my $j = 1; $i < $fileLen; $i++, $j++)
|
||||||
|
{
|
||||||
|
if ($j == 1) {
|
||||||
|
print OUT_FILE "\t";
|
||||||
|
}
|
||||||
|
read($fp, $byte, 1) or die "Error reading $fileName";
|
||||||
|
my $output = sprintf("0x%02X", ord($byte));
|
||||||
|
print OUT_FILE $output;
|
||||||
|
|
||||||
|
if ($i != ($fileLen - 1)) {
|
||||||
|
print OUT_FILE ", ";
|
||||||
|
}
|
||||||
|
|
||||||
|
if ($j == 10) {
|
||||||
|
$j = 0;
|
||||||
|
print OUT_FILE "\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
print OUT_FILE "\n";
|
||||||
|
|
||||||
|
close($fp);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
@ -0,0 +1,68 @@
|
||||||
|
#include <stdio.h>
|
||||||
|
|
||||||
|
#include <wolfssl/options.h>
|
||||||
|
//#include <wolfssl/wolfcrypt/dsa.h>
|
||||||
|
#include <wolfssl/wolfcrypt/asn_public.h>
|
||||||
|
#include <wolfssl/wolfcrypt/ed25519.h>
|
||||||
|
#include <wolfssl/ssl.h>
|
||||||
|
#define USE_CERT_BUFFERS_ED
|
||||||
|
#include "test_keys.h"
|
||||||
|
|
||||||
|
static int err_sys(const char* msg, int es);
|
||||||
|
|
||||||
|
static int err_sys(const char* msg, int es)
|
||||||
|
{
|
||||||
|
printf("%s error = %d\n", msg, es);
|
||||||
|
|
||||||
|
exit(-1);
|
||||||
|
}
|
||||||
|
|
||||||
|
int
|
||||||
|
main(int argc, char* argv[])
|
||||||
|
{
|
||||||
|
|
||||||
|
int ret = -1000;
|
||||||
|
int verify;
|
||||||
|
ed25519_key edPublicKey;
|
||||||
|
ed25519_key edPrivateKey;
|
||||||
|
|
||||||
|
byte message[] = "Hi how are you?\n";
|
||||||
|
byte sigOut[ED25519_SIG_SIZE];
|
||||||
|
word32 sigOutSz = sizeof(sigOut);
|
||||||
|
|
||||||
|
wolfSSL_Debugging_ON();
|
||||||
|
|
||||||
|
|
||||||
|
/*--------------- INIT KEYS ---------------------*/
|
||||||
|
ret = wc_ed25519_init(&edPublicKey);
|
||||||
|
ret = wc_ed25519_init(&edPrivateKey);
|
||||||
|
|
||||||
|
if (ret != 0) {
|
||||||
|
printf("Error: wc_ed25519_init: %d\n", ret);
|
||||||
|
}
|
||||||
|
|
||||||
|
/*--------------- IMPORT KEYS FROM HEADER ---------------------*/
|
||||||
|
ret = wc_ed25519_import_public(ed_pub_key_der_32, sizeof_ed_pub_key_der_32,
|
||||||
|
&edPublicKey);
|
||||||
|
if (ret != 0) err_sys("Error: ED public key import failed: ", ret);
|
||||||
|
|
||||||
|
ret = wc_ed25519_import_private_key(ed_priv_key_der_64,
|
||||||
|
ED25519_KEY_SIZE,
|
||||||
|
ed_priv_key_der_64 + ED25519_KEY_SIZE,
|
||||||
|
ED25519_KEY_SIZE, &edPrivateKey);
|
||||||
|
if (ret != 0) err_sys("Error: ED private key import failed: ", ret);
|
||||||
|
|
||||||
|
/*--------------- SIGN THE MESSAGE ---------------------*/
|
||||||
|
ret = wc_ed25519_sign_msg(message, sizeof(message), sigOut, &sigOutSz,
|
||||||
|
&edPrivateKey);
|
||||||
|
if (ret != 0) err_sys("Error: ED sign failed: ", ret);
|
||||||
|
|
||||||
|
/*--------------- VERIFY THE MESSAGE ---------------------*/
|
||||||
|
ret = wc_ed25519_verify_msg(sigOut, sigOutSz, message, sizeof(message),
|
||||||
|
&verify, &edPublicKey);
|
||||||
|
if (ret != 0) err_sys("Error: Could not verify signature: ", ret);
|
||||||
|
|
||||||
|
printf("Successfully validated signature\n");
|
||||||
|
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
@ -0,0 +1,34 @@
|
||||||
|
/* certs_test.h */
|
||||||
|
|
||||||
|
#ifndef WOLFSSL_CERTS_TEST_H
|
||||||
|
#define WOLFSSL_CERTS_TEST_H
|
||||||
|
|
||||||
|
#ifdef USE_CERT_BUFFERS_ED
|
||||||
|
|
||||||
|
/* ./ed_pub_test_key.der, (32/64)-bit */
|
||||||
|
static const unsigned char ed_pub_key_der_32[] =
|
||||||
|
{
|
||||||
|
0x99, 0xB8, 0x8B, 0x6D, 0x14, 0x0D, 0xD9, 0xD4, 0x83, 0xA3,
|
||||||
|
0x7C, 0x82, 0x48, 0xE8, 0x01, 0xEC, 0x2E, 0xD2, 0x64, 0xD9,
|
||||||
|
0x2F, 0xEF, 0x8D, 0xE7, 0x43, 0xB4, 0xC8, 0x0D, 0x63, 0x38,
|
||||||
|
0xF1, 0x8F
|
||||||
|
};
|
||||||
|
static const int sizeof_ed_pub_key_der_32 = sizeof(ed_pub_key_der_32);
|
||||||
|
|
||||||
|
/* ./ed_priv_test_key.der, (32/64)-bit */
|
||||||
|
static const unsigned char ed_priv_key_der_64[] =
|
||||||
|
{
|
||||||
|
0x4D, 0x32, 0xF1, 0xF9, 0xD5, 0xFD, 0xDB, 0xB6, 0x01, 0xAB,
|
||||||
|
0xD1, 0x1F, 0xEB, 0x10, 0xCB, 0xA3, 0x5F, 0x92, 0x7F, 0x50,
|
||||||
|
0x4B, 0xCD, 0x71, 0x83, 0xDF, 0x42, 0xBE, 0xF7, 0xAE, 0x78,
|
||||||
|
0x90, 0x5E, 0x99, 0xB8, 0x8B, 0x6D, 0x14, 0x0D, 0xD9, 0xD4,
|
||||||
|
0x83, 0xA3, 0x7C, 0x82, 0x48, 0xE8, 0x01, 0xEC, 0x2E, 0xD2,
|
||||||
|
0x64, 0xD9, 0x2F, 0xEF, 0x8D, 0xE7, 0x43, 0xB4, 0xC8, 0x0D,
|
||||||
|
0x63, 0x38, 0xF1, 0x8F
|
||||||
|
};
|
||||||
|
static const int sizeof_ed_priv_key_der_64 = sizeof(ed_priv_key_der_64);
|
||||||
|
|
||||||
|
#endif /* USE_CERT_BUFFERS_ED */
|
||||||
|
|
||||||
|
#endif /* WOLFSSL_CERTS_TEST_H */
|
||||||
|
|
||||||
|
|
@ -19,3 +19,22 @@ $ ./firmware [filename] [sig] [hash]
|
||||||
Usage: signature <filename> <sig> <hash>
|
Usage: signature <filename> <sig> <hash>
|
||||||
<sig>: 1=ECC (def), 2=RSA, 3=RSA (w/DER Encoding)
|
<sig>: 1=ECC (def), 2=RSA, 3=RSA (w/DER Encoding)
|
||||||
<hash>: 1=MD2, 2=MD4, 3=MD5, 4=SHA, 5=SHA256 (def), 6=SHA384, 7=SHA512, 8=MD5+SHA
|
<hash>: 1=MD2, 2=MD4, 3=MD5, 4=SHA, 5=SHA256 (def), 6=SHA384, 7=SHA512, 8=MD5+SHA
|
||||||
|
|
||||||
|
------------------ UPDATE -----------------
|
||||||
|
April 11 2017:
|
||||||
|
|
||||||
|
Added ED25519 directory
|
||||||
|
|
||||||
|
ED25519 directory contains:
|
||||||
|
|
||||||
|
1. App "gen_key_files.c" to generate public/private keys and output keys to .der
|
||||||
|
formatted files.
|
||||||
|
|
||||||
|
2. genkeybuffers.pl - a perl script to write the header file "test_keys.h" using
|
||||||
|
the .der formatted files output from applicaton "gen_key_files.c"
|
||||||
|
|
||||||
|
3. App "sign_and_verify.c" to use the "test_keys.h" header file buffers for
|
||||||
|
importing the public and private keys. App will then sign a msg with the
|
||||||
|
private key and verify that signature using the public key
|
||||||
|
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue