WolfSSL
/
wolfssl-examples
mirror of https://github.com/wolfSSL/wolfssl-examples.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Add RSA PSS signing to PKCS11 examples

pull/456/head
Colton Willey 2024-09-04 10:08:42 -07:00
parent d56158eef6
commit ef5c8dc5bb
1 changed files with 67 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

71
pkcs11/pkcs11_rsa.c
View File

@ -231,14 +231,15 @@ static int decode_public_key(RsaKey* key, int devId)
static int rsa_sign_verify(int devId) static int rsa_sign_verify(int devId)
{ {
int ret = 0; int ret = 0;
byte hash[32], sig[2048/8]; byte hash[32], pt[32], sig[2048/8];
word32 hashSz, sigSz; word32 hashSz, ptSz, sigSz;
RsaKey priv; RsaKey priv;
RsaKey pub; RsaKey pub;
memset(hash, 9, sizeof(hash)); memset(hash, 9, sizeof(hash));
hashSz = sizeof(hash); hashSz = sizeof(hash);
sigSz = sizeof(sig); sigSz = sizeof(sig);
ptSz = sizeof(pt);
ret = decode_private_key(&priv, devId); ret = decode_private_key(&priv, devId);
if (ret == 0) { if (ret == 0) {
@ -257,7 +258,61 @@ static int rsa_sign_verify(int devId)
ret = decode_public_key(&pub, devId); ret = decode_public_key(&pub, devId);
if (ret == 0) { if (ret == 0) {
fprintf(stderr, "Verifying\n"); fprintf(stderr, "Verifying\n");
ret = wc_RsaSSL_Verify(sig, sigSz, hash, (int)hashSz, &pub); ret = wc_RsaSSL_Verify(sig, sigSz, pt, (int)ptSz, &pub);
if (ret < 0)
fprintf(stderr, "Failed to verify: %d\n", ret);
if(XMEMCMP(hash, pt, ret) != 0) {
fprintf(stderr, "Failed to verify\n");
}
wc_FreeRsaKey(&pub);
ret = 0;
}
}
return ret;
}
#ifdef WC_RSA_PSS
static int rsa_sign_verify_pss(int devId)
{
int ret = 0;
byte hash[32], pt[2048/8], sig[2048/8];
word32 hashSz, ptSz, sigSz;
RsaKey priv;
RsaKey pub;
WC_RNG rng;
memset(hash, 9, sizeof(hash));
hashSz = sizeof(hash);
sigSz = sizeof(sig);
ptSz = sizeof(pt);
ret = wc_InitRng(&rng);
if (ret != 0) {
fprintf(stderr, "Failed to initialize RNG: %d\n", ret);
}
ret = decode_private_key(&priv, devId);
if (ret == 0) {
fprintf(stderr, "PSS Signing\n");
sigSz = ret = wc_RsaPSS_Sign(hash, hashSz, sig, (int)sigSz,
WC_HASH_TYPE_SHA256, WC_MGF1SHA256, &priv, &rng);
if (ret < 0)
fprintf(stderr, "Failed to sign: %d\n", ret);
else
ret = 0;
wc_FreeRsaKey(&priv);
}
if (ret == 0) {
ret = decode_public_key(&pub, devId);
if (ret == 0) {
fprintf(stderr, "PSS Verifying\n");
ret = wc_RsaPSS_VerifyCheck(sig, sigSz, pt, ptSz, hash, hashSz,
WC_HASH_TYPE_SHA256, WC_MGF1SHA256, &pub);
if (ret < 0) if (ret < 0)
fprintf(stderr, "Failed to verify: %d\n", ret); fprintf(stderr, "Failed to verify: %d\n", ret);
else else
@ -269,7 +324,8 @@ static int rsa_sign_verify(int devId)
return ret; return ret;
} }
#endif #endif /* ifdef WC_RSA_PSS */
#endif /* ifndef NO_RSA */
int main(int argc, char* argv[]) int main(int argc, char* argv[])
{ {
@ -324,6 +380,13 @@ int main(int argc, char* argv[])
ret = rsa_sign_verify(devId); ret = rsa_sign_verify(devId);
if (ret != 0) if (ret != 0)
ret = 1; ret = 1;
#ifdef WC_RSA_PSS
if (ret == 0) {
ret = rsa_sign_verify_pss(devId);
if (ret != 0)
ret = 1;
}
#endif
#endif #endif
} }
wc_Pkcs11Token_Final(&token); wc_Pkcs11Token_Final(&token);