abc/GmSSL
1
0
Fork 0
mirror of https://github.com/guanzhi/GmSSL.git synced 2026-05-07 08:56:17 +08:00
Code Issues Packages Projects Releases Wiki Activity

add java-wrapper

Browse Source
This commit is contained in:
Zhi Guan
2017-02-16 09:22:13 +08:00
parent 07d577e880
commit 9272cdb6e7
6 changed files with 2969 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

183
java/.gitignore vendored Normal file
View File

@@ -0,0 +1,183 @@
# Ignore editor artefacts
/.dir-locals.el
# Top level excludes
/Makefile.orig
/MINFO
/TABLE
/*.a
/*.pc
/rehash.time
/inc.*
/makefile.*
/out.*
/tmp.*
/configdata.pm
/GmSSL.h
/*.so
/*.dylib
/*.jnilib
# *all* Makefiles
#Makefile
# Links under apps
/apps/CA.pl
/apps/tsget
/apps/tsget.pl
/apps/md4.c
# Auto generated headers
/crypto/buildinf.h
/crypto/include/internal/*_conf.h
/openssl/include/opensslconf.h
/util/domd
# Executables
/apps/openssl
/test/sha256t
/test/sha512t
/test/gost2814789t
/test/ssltest_old
/test/*test
/test/fips_aesavs
/test/fips_desmovs
/test/fips_dhvs
/test/fips_drbgvs
/test/fips_dssvs
/test/fips_ecdhvs
/test/fips_ecdsavs
/test/fips_rngvs
/test/fips_test_suite
/test/ssltest_old
/test/x509aux
/test/v3ext
# Certain files that get created by tests on the fly
/test/*.ss
/test/*.srl
/test/.rnd
/test/test*.pem
/test/newkey.pem
/test/*.log
/test/buildtest_*
# Fuzz stuff.
# Anything without an extension is an executable on Unix, so we keep files
# with extensions. And we keep the corpora subddir versioned as well.
# Anything more generic with extensions that should be ignored will be taken
# care of by general ignores for those extensions (*.o, *.obj, *.exe, ...)
/fuzz/*
!/fuzz/README*
!/fuzz/corpora
!/fuzz/*.*
# Misc auto generated files
/include/openssl/opensslconf.h
/tools/c_rehash
/tools/c_rehash.pl
/tags
/TAGS
/crypto.map
/ssl.map
# Windows (legacy)
/tmp32
/tmp32.dbg
/tmp32dll
/tmp32dll.dbg
/out32
/out32.dbg
/out32dll
/out32dll.dbg
/inc32
/MINFO
/ms/.rnd
/ms/bcb.mak
/ms/libeay32.def
/ms/nt.mak
/ms/ntdll.mak
/ms/ssleay32.def
/ms/version32.rc
# Files created on other branches that are not held in git, and are not
# needed on this branch
/include/openssl/asn1_mac.h
/include/openssl/des_old.h
/include/openssl/fips.h
/include/openssl/fips_rand.h
/include/openssl/krb5_asn.h
/include/openssl/kssl.h
/include/openssl/pq_compat.h
/include/openssl/ssl23.h
/include/openssl/tmdiff.h
/include/openssl/ui_compat.h
/test/fips_aesavs.c
/test/fips_desmovs.c
/test/fips_dsatest.c
/test/fips_dssvs.c
/test/fips_hmactest.c
/test/fips_randtest.c
/test/fips_rngvs.c
/test/fips_rsagtest.c
/test/fips_rsastest.c
/test/fips_rsavtest.c
/test/fips_shatest.c
/test/fips_test_suite.c
/test/shatest.c
##### Generic patterns
# Auto generated assembly language source files
*.s
!/crypto/*/asm/*.s
/crypto/arm*.S
/crypto/*/*.S
*.asm
!/crypto/*/asm/*.asm
# Object files
*.o
*.obj
# editor artefacts
*.swp
.#*
\#*#
*~
# Certificate symbolic links
*.0
# All kinds of executables
*.so
*.so.*
*.dylib
*.dylib.*
*.dll
*.dll.*
*.exe
*.pyc
*.exp
*.lib
*.pdb
*.ilk
*.def
*.rc
*.res
*.class
# Misc generated stuff
Makefile.save
/crypto/**/lib
/engines/**/lib
/ssl/**/lib
*.bak
cscope.*
*.d
# add by LiTianjue for GmSSL
# auto create by Configure
crypto/opensslconf.h
tool/c_rehash
# exec file
apps/gmssl

708
java/GmSSL.c Executable file
View File

@@ -0,0 +1,708 @@
/* ====================================================================
* Copyright (c) 2014 - 2017 The GmSSL Project. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. All advertising materials mentioning features or use of this
* software must display the following acknowledgment:
* "This product includes software developed by the GmSSL Project.
* (http://gmssl.org/)"
*
* 4. The name "GmSSL Project" must not be used to endorse or promote
* products derived from this software without prior written
* permission. For written permission, please contact
* guanzhi1980@gmail.com.
*
* 5. Products derived from this software may not be called "GmSSL"
* nor may "GmSSL" appear in their names without prior written
* permission of the GmSSL Project.
*
* 6. Redistributions of any form whatsoever must retain the following
* acknowledgment:
* "This product includes software developed by the GmSSL Project
* (http://gmssl.org/)"
*
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
* OF THE POSSIBILITY OF SUCH DAMAGE.
* ====================================================================
*/
#include <stdio.h>
#include <stdlib.h>
#include <strings.h>
#include <openssl/err.h>
#include <openssl/evp.h>
#include <openssl/rand.h>
#include <openssl/hmac.h>
#include <openssl/cmac.h>
#include <openssl/x509.h>
#include "GmSSL.h"
JNIEXPORT jint JNICALL JNI_onload(JavaVM *vm, void *reserved)
{
return JNI_VERSION_1_2;
}
JNIEXPORT void JNICALL JNI_onunload(JavaVM *vm, void *reserved)
{
}
JNIEXPORT jstring JNICALL Java_GmSSL_getVersion(
JNIEnv *env, jobject this, jint type)
{
return (*env)->NewStringUTF(env, OpenSSL_version(type));
}
JNIEXPORT jbyteArray JNICALL Java_GmSSL_generateRandom(
JNIEnv *env, jobject this, jint outlen)
{
jbyteArray ret = NULL;
jbyte outbuf[outlen];
if (!RAND_bytes((unsigned char *)outbuf, outlen)) {
return NULL;
}
if ((ret = (*env)->NewByteArray(env, outlen))) {
(*env)->SetByteArrayRegion(env, ret, 0, outlen, (jbyte *)outbuf);
}
return ret;
}
JNIEXPORT jobjectArray JNICALL Java_GmSSL_getCiphers(
JNIEnv *env, jobject this, jboolean aliases)
{
char *algors = "sms4-ecb:sms4-cbc:sms4-ofb:sms4-cfb:sms4-ctr";
return (*env)->NewStringUTF(env, algors);
}
JNIEXPORT jint JNICALL Java_GmSSL_getCipherIVLength(
JNIEnv *env, jobject this, jstring algor)
{
jint ret = -1;
const char *alg = NULL;
const EVP_CIPHER *cipher;
alg = (*env)->GetStringUTFChars(env, algor, 0);
if ((cipher = EVP_get_cipherbyname(alg))) {
ret = EVP_CIPHER_iv_length(cipher);
}
(*env)->ReleaseStringUTFChars(env, algor, alg);
return ret;
}
JNIEXPORT jint JNICALL Java_GmSSL_getCipherKeyLength(
JNIEnv *env, jobject this, jstring algor)
{
jint ret = -1;
const char *alg = NULL;
const EVP_CIPHER *cipher;
alg = (*env)->GetStringUTFChars(env, algor, 0);
cipher = EVP_get_cipherbyname(alg);
if (cipher) {
ret = EVP_CIPHER_key_length(cipher);
}
(*env)->ReleaseStringUTFChars(env, algor, alg);
return ret;
}
JNIEXPORT jint JNICALL Java_GmSSL_getCipherBlockSize(
JNIEnv *env, jobject this, jstring algor)
{
jint ret = -1;
const char *alg = NULL;
const EVP_CIPHER *cipher;
alg = (*env)->GetStringUTFChars(env, algor, 0);
if ((cipher = EVP_get_cipherbyname(alg))) {
ret = EVP_CIPHER_block_size(cipher);
}
(*env)->ReleaseStringUTFChars(env, algor, alg);
return ret;
}
JNIEXPORT jbyteArray JNICALL Java_GmSSL_symmetricEncrypt(
JNIEnv *env, jobject this, jstring algor, jint flag,
jbyteArray in, jbyteArray key, jbyteArray iv)
{
jbyteArray ret = NULL;
const char *alg = NULL;
const unsigned char *keybuf = NULL;
const unsigned char *ivbuf = NULL;
const unsigned char *inbuf = NULL;
unsigned char *outbuf = NULL;
int inlen, keylen, ivlen, outlen, lastlen;
const EVP_CIPHER *cipher;
EVP_CIPHER_CTX *cctx = NULL;
if (!(alg = (*env)->GetStringUTFChars(env, algor, 0))
|| !(inbuf = (unsigned char *)(*env)->GetByteArrayElements(env, in, 0))
|| (inlen = (*env)->GetArrayLength(env, in)) <= 0
|| !(keybuf = (unsigned char *)(*env)->GetByteArrayElements(env, key, 0))
|| (keylen = (*env)->GetArrayLength(env, key)) <= 0) {
goto end;
}
ivbuf = (unsigned char *)(*env)->GetByteArrayElements(env, iv, 0);
ivlen = (*env)->GetArrayLength(env, iv);
if (!(cipher = EVP_get_cipherbyname(alg))
|| keylen != EVP_CIPHER_key_length(cipher)
|| ivlen != EVP_CIPHER_iv_length(cipher)
|| !(outbuf = OPENSSL_malloc(inlen + 2 * EVP_CIPHER_block_size(cipher)))
|| !(cctx = EVP_CIPHER_CTX_new())
|| !EVP_EncryptInit_ex(cctx, cipher, NULL, keybuf, ivbuf)
|| !EVP_EncryptUpdate(cctx, outbuf, &outlen, inbuf, inlen)
|| !EVP_EncryptFinal_ex(cctx, outbuf + outlen, &lastlen)) {
goto end;
}
outlen += lastlen;
if ((ret = (*env)->NewByteArray(env, outlen))) {
(*env)->SetByteArrayRegion(env, ret, 0, outlen, (jbyte *)outbuf);
}
end:
(*env)->ReleaseStringUTFChars(env, algor, alg);
(*env)->ReleaseByteArrayElements(env, key, (jbyte *)keybuf, JNI_ABORT);
(*env)->ReleaseByteArrayElements(env, in, (jbyte *)inbuf, JNI_ABORT);
(*env)->ReleaseByteArrayElements(env, iv, (jbyte *)ivbuf, JNI_ABORT);
OPENSSL_free(outbuf);
EVP_CIPHER_CTX_free(cctx);
return ret;
}
JNIEXPORT jbyteArray JNICALL Java_GmSSL_symmetricDecrypt(
JNIEnv *env, jobject this, jstring algor, jint flag,
jbyteArray in, jbyteArray key, jbyteArray iv)
{
jbyteArray ret = NULL;
const char *alg = NULL;
const unsigned char *inbuf = NULL;
const unsigned char *keybuf = NULL;
const unsigned char *ivbuf = NULL;
unsigned char *outbuf = NULL;
int inlen, keylen, ivlen, outlen, lastlen;
const EVP_CIPHER *cipher;
EVP_CIPHER_CTX *cctx = NULL;
if (!(alg = (*env)->GetStringUTFChars(env, algor, 0))
|| !(inbuf = (unsigned char *)(*env)->GetByteArrayElements(env, in, 0))
|| (inlen = (*env)->GetArrayLength(env, in)) <= 0
|| !(keybuf = (unsigned char *)(*env)->GetByteArrayElements(env, key, 0))
|| (keylen = (*env)->GetArrayLength(env, key)) <= 0) {
goto end;
}
ivbuf = (unsigned char *)(*env)->GetByteArrayElements(env, iv, 0);
ivlen = (*env)->GetArrayLength(env, iv);
if (!(cipher = EVP_get_cipherbyname(alg))
|| keylen != EVP_CIPHER_key_length(cipher)
|| ivlen != EVP_CIPHER_iv_length(cipher)
|| !(outbuf = OPENSSL_malloc(inlen))
|| !(cctx = EVP_CIPHER_CTX_new())
|| !EVP_EncryptInit_ex(cctx, cipher, NULL, keybuf, ivbuf)
|| !EVP_EncryptUpdate(cctx, outbuf, &outlen, inbuf, inlen)
|| !EVP_EncryptFinal_ex(cctx, outbuf + outlen, &lastlen)) {
goto end;
}
outlen += lastlen;
if ((ret = (*env)->NewByteArray(env, outlen))) {
(*env)->SetByteArrayRegion(env, ret, 0, outlen, (jbyte *)outbuf);
}
end:
(*env)->ReleaseStringUTFChars(env, algor, alg);
(*env)->ReleaseByteArrayElements(env, key, (jbyte *)keybuf, JNI_ABORT);
(*env)->ReleaseByteArrayElements(env, in, (jbyte *)inbuf, JNI_ABORT);
(*env)->ReleaseByteArrayElements(env, iv, (jbyte *)ivbuf, JNI_ABORT);
EVP_CIPHER_CTX_free(cctx);
return ret;
}
JNIEXPORT jobjectArray JNICALL Java_GmSSL_getDigests(
JNIEnv *env, jobject this, jboolean aliases)
{
char *digests = "sm3:sha1:sha256:sha512";
return (*env)->NewStringUTF(env, digests);
}
JNIEXPORT jint JNICALL Java_GmSSL_getDigestLength(
JNIEnv *env, jobject this, jstring algor)
{
jint ret = -1;
const char *alg = NULL;
const EVP_MD *md;
alg = (*env)->GetStringUTFChars(env, algor, 0);
if ((md = EVP_get_digestbyname(alg))) {
ret = EVP_MD_size(md);
}
(*env)->ReleaseStringUTFChars(env, algor, alg);
return ret;
}
JNIEXPORT jint JNICALL Java_GmSSL_getDigestBlockSize(
JNIEnv *env, jobject this, jstring algor)
{
jint ret = -1;
const char *alg = NULL;
const EVP_MD *md;
alg = (*env)->GetStringUTFChars(env, algor, 0);
if ((md = EVP_get_digestbyname(alg))) {
ret = EVP_MD_block_size(md);
}
(*env)->ReleaseStringUTFChars(env, algor, alg);
return ret;
}
JNIEXPORT jbyteArray JNICALL Java_GmSSL_digest(JNIEnv *env, jobject this,
jstring algor, jint flag, jbyteArray in)
{
jbyteArray ret = NULL;
const char *alg = NULL;
const unsigned char *inbuf = NULL;
unsigned char outbuf[EVP_MAX_MD_SIZE];
int inlen;
unsigned int outlen = sizeof(outbuf);
const EVP_MD *md;
if (!(alg = (*env)->GetStringUTFChars(env, algor, 0))
|| !(inbuf = (unsigned char *)(*env)->GetByteArrayElements(env, in, 0))
|| (inlen = (size_t)(*env)->GetArrayLength(env, in)) <= 0) {
goto end;
}
if (!(md = EVP_get_digestbyname(alg))
|| !EVP_Digest(inbuf, inlen, outbuf, &outlen, md, NULL)) {
goto end;
}
if ((ret = (*env)->NewByteArray(env, outlen))) {
(*env)->SetByteArrayRegion(env, ret, 0, outlen, (jbyte *)outbuf);
}
end:
(*env)->ReleaseStringUTFChars(env, algor, alg);
(*env)->ReleaseByteArrayElements(env, in, (jbyte *)inbuf, JNI_ABORT);
return ret;
}
JNIEXPORT jobjectArray JNICALL Java_GmSSL_getMacs(
JNIEnv *env, jobject this, jboolean aliases)
{
char *macs = "cmac-sms4:hmac-sm3:hmac-sha1:hmac-sha256:hmac-sha512";
return (*env)->NewStringUTF(env, macs);
}
JNIEXPORT jbyteArray JNICALL Java_GmSSL_mac(JNIEnv *env, jobject this,
jstring algor, jint flag, jbyteArray in, jbyteArray key)
{
jbyteArray ret = NULL;
const char *alg = NULL;
const unsigned char *inbuf = NULL;
const unsigned char *keybuf = NULL;
unsigned char outbuf[EVP_MAX_MD_SIZE];
int inlen, keylen, outlen = sizeof(outbuf);
if (!(alg = (*env)->GetStringUTFChars(env, algor, 0))
|| !(inbuf = (unsigned char *)(*env)->GetByteArrayElements(env, in, 0))
|| (inlen = (*env)->GetArrayLength(env, in)) <= 0
|| !(keybuf = (unsigned char *)(*env)->GetByteArrayElements(env, key, 0))
|| (keylen = (*env)->GetArrayLength(env, key)) <= 0) {
goto end;
}
if (memcmp(alg, "cmac-", strlen("cmac-")) == 0) {
const EVP_CIPHER *cipher;
CMAC_CTX *cctx = NULL;
size_t len = sizeof(outbuf);
if (!(cipher = EVP_get_cipherbyname(alg + strlen("cmac-")))
|| !(cctx = CMAC_CTX_new())
|| !CMAC_Init(cctx, keybuf, keylen, cipher, NULL)
|| !CMAC_Update(cctx, inbuf, inlen)
|| !CMAC_Final(cctx, outbuf, &len)) {
CMAC_CTX_free(cctx);
goto end;
}
outlen = len;
CMAC_CTX_free(cctx);
} else if (memcmp(alg, "hmac-", strlen("hmac-")) == 0) {
const EVP_MD *md;
unsigned int len = sizeof(outbuf);
if (!(md = EVP_get_digestbyname(alg + strlen("hmac-")))
|| !HMAC(md, keybuf, keylen, inbuf, inlen, outbuf, &len)) {
goto end;
}
outlen = len;
} else {
goto end;
}
if ((ret = (*env)->NewByteArray(env, outlen))) {
(*env)->SetByteArrayRegion(env, ret, 0, outlen, (jbyte *)outbuf);
}
end:
(*env)->ReleaseStringUTFChars(env, algor, alg);
(*env)->ReleaseByteArrayElements(env, key, (jbyte *)keybuf, JNI_ABORT);
(*env)->ReleaseByteArrayElements(env, in, (jbyte *)inbuf, JNI_ABORT);
return ret;
}
JNIEXPORT jobjectArray JNICALL Java_GmSSL_getSignAlgorithms(
JNIEnv *env, jobject this, jboolean aliases)
{
char *sign_algors = "sm2sign:ecdsa:dsa:rsa";
return (*env)->NewStringUTF(env, sign_algors);
}
JNIEXPORT jbyteArray JNICALL Java_GmSSL_sign(JNIEnv *env, jobject this,
jstring algor, jint flag, jbyteArray in, jbyteArray key)
{
jbyteArray ret = NULL;
const char *alg = NULL;
const unsigned char *inbuf = NULL;
const unsigned char *keybuf = NULL;
unsigned char outbuf[1024];
int inlen, keylen;
size_t outlen = sizeof(outbuf);
int pkey_type;
const unsigned char *cp;
EVP_PKEY *pkey = NULL;
EVP_PKEY_CTX *pkctx = NULL;
if (!(alg = (*env)->GetStringUTFChars(env, algor, 0))
|| !(keybuf = (unsigned char *)(*env)->GetByteArrayElements(env, key, 0))
|| (keylen = (*env)->GetArrayLength(env, key)) <= 0
|| !(inbuf = (unsigned char *)(*env)->GetByteArrayElements(env, in, 0))
|| (inlen = (*env)->GetArrayLength(env, in)) <= 0) {
goto end;
}
if (!strcmp(alg, "sm2")) {
pkey_type = EVP_PKEY_EC;
} else if (!strcmp(alg, "ecdsa")) {
pkey_type = EVP_PKEY_EC;
} else if (!strcmp(alg, "dsa")) {
pkey_type = EVP_PKEY_DSA;
} else if (!strcmp(alg, "rsa")) {
pkey_type = EVP_PKEY_RSA;
} else {
goto end;
}
cp = keybuf;
if (!(pkey = d2i_PrivateKey(pkey_type, NULL, &cp, keylen))
|| !(pkctx = EVP_PKEY_CTX_new(pkey, NULL))
|| !EVP_PKEY_sign_init(pkctx)
|| !EVP_PKEY_sign(pkctx, outbuf, &outlen, inbuf, inlen)) {
goto end;
}
if ((ret = (*env)->NewByteArray(env, outlen))) {
(*env)->SetByteArrayRegion(env, ret, 0, outlen, (jbyte *)outbuf);
}
end:
(*env)->ReleaseStringUTFChars(env, algor, alg);
(*env)->ReleaseByteArrayElements(env, in, (jbyte *)inbuf, JNI_ABORT);
(*env)->ReleaseByteArrayElements(env, key, (jbyte *)keybuf, JNI_ABORT);
EVP_PKEY_free(pkey);
EVP_PKEY_CTX_free(pkctx);
return ret;
}
JNIEXPORT jint JNICALL Java_GmSSL_verify(JNIEnv *env, jobject this,
jstring algor, jint flag, jbyteArray in, jbyteArray sig, jbyteArray key)
{
jint ret = 0;
const char *alg = NULL;
const unsigned char *inbuf = NULL;
const unsigned char *sigbuf = NULL;
const unsigned char *keybuf = NULL;
int inlen, siglen, keylen;
const unsigned char *cp;
int pkey_type;
EVP_PKEY *pkey = NULL;
EVP_PKEY_CTX *pkctx = NULL;
if (!(alg = (*env)->GetStringUTFChars(env, algor, 0))
|| !(inbuf = (unsigned char *)(*env)->GetByteArrayElements(env, in, 0))
|| (inlen = (*env)->GetArrayLength(env, in)) <= 0
|| !(sigbuf = (unsigned char *)(*env)->GetByteArrayElements(env, sig, 0))
|| (siglen = (*env)->GetArrayLength(env, sig)) <= 0
|| !(keybuf = (unsigned char *)(*env)->GetByteArrayElements(env, key, 0))
|| (keylen = (*env)->GetArrayLength(env, key)) <= 0) {
goto end;
}
if (!strcmp(alg, "sm2")) {
pkey_type = EVP_PKEY_EC;
} else if (!strcmp(alg, "ecdsa")) {
pkey_type = EVP_PKEY_EC;
} else if (!strcmp(alg, "dsa")) {
pkey_type = EVP_PKEY_DSA;
} else if (!strcmp(alg, "rsa")) {
pkey_type = EVP_PKEY_RSA;
} else {
goto end;
}
cp = keybuf;
if (!(pkey = d2i_PUBKEY(NULL, &cp, (long)keylen))
|| EVP_PKEY_id(pkey) != pkey_type
|| !(pkctx = EVP_PKEY_CTX_new(pkey, NULL))
|| !EVP_PKEY_verify_init(pkctx)
|| !EVP_PKEY_verify(pkctx, sigbuf, siglen, inbuf, inlen)) {
goto end;
}
ret = 1;
end:
(*env)->ReleaseStringUTFChars(env, algor, alg);
(*env)->ReleaseByteArrayElements(env, in, (jbyte *)inbuf, JNI_ABORT);
(*env)->ReleaseByteArrayElements(env, sig, (jbyte *)sigbuf, JNI_ABORT);
(*env)->ReleaseByteArrayElements(env, key, (jbyte *)keybuf, JNI_ABORT);
EVP_PKEY_free(pkey);
EVP_PKEY_CTX_free(pkctx);
return ret;
}
JNIEXPORT jobjectArray JNICALL Java_GmSSL_getPublicKeyEncryptions(
JNIEnv *env, jobject this, jboolean aliases)
{
char *algors = "sm2:ecies:rsa";
return (*env)->NewStringUTF(env, algors);
}
JNIEXPORT jbyteArray JNICALL Java_GmSSL_publicKeyEncrypt(
JNIEnv *env, jobject this, jstring algor, jint flag,
jbyteArray in, jbyteArray key)
{
jbyteArray ret = NULL;
const char *alg = NULL;
const unsigned char *inbuf = NULL;
const unsigned char *keybuf = NULL;
unsigned char *outbuf = NULL;
int inlen, keylen;
size_t outlen;
int pkey_type;
const unsigned char *cp;
EVP_PKEY *pkey = NULL;
EVP_PKEY_CTX *pkctx = NULL;
if (!(alg = (*env)->GetStringUTFChars(env, algor, 0))
|| !(inbuf = (unsigned char *)(*env)->GetByteArrayElements(env, in, 0))
|| (inlen = (*env)->GetArrayLength(env, in)) <= 0
|| (inlen = (*env)->GetArrayLength(env, in)) > 256
|| !(keybuf = (unsigned char *)(*env)->GetByteArrayElements(env, key, 0))
|| (keylen = (*env)->GetArrayLength(env, key)) <= 0) {
goto end;
}
cp = keybuf;
outlen = inlen + 1024;
if (!strcmp(alg, "sm2")) {
pkey_type = EVP_PKEY_EC;
} else if (!strcmp(alg, "ecies")) {
pkey_type = EVP_PKEY_EC;
} else if (!strcmp(alg, "rsa")) {
pkey_type = EVP_PKEY_RSA;
} else {
goto end;
}
if (!(outbuf = OPENSSL_malloc(outlen))
|| !(pkey = d2i_PUBKEY(NULL, &cp, (long)keylen))
|| EVP_PKEY_id(pkey) != pkey_type
|| !(pkctx = EVP_PKEY_CTX_new(pkey, NULL))
|| !EVP_PKEY_encrypt_init(pkctx)
|| !EVP_PKEY_encrypt(pkctx, outbuf, &outlen, inbuf, inlen)) {
goto end;
}
if ((ret = (*env)->NewByteArray(env, outlen))) {
(*env)->SetByteArrayRegion(env, ret, 0, outlen, (jbyte *)outbuf);
}
end:
(*env)->ReleaseStringUTFChars(env, algor, alg);
(*env)->ReleaseByteArrayElements(env, in, (jbyte *)inbuf, JNI_ABORT);
(*env)->ReleaseByteArrayElements(env, key, (jbyte *)keybuf, JNI_ABORT);
OPENSSL_free(outbuf);
EVP_PKEY_free(pkey);
EVP_PKEY_CTX_free(pkctx);
return ret;
}
JNIEXPORT jbyteArray JNICALL Java_GmSSL_publicKeyDecrypt(
JNIEnv *env, jobject this, jstring algor, jint flag,
jbyteArray in, jbyteArray key)
{
jbyteArray ret = NULL;
const char *alg = NULL;
const unsigned char *inbuf = NULL;
const unsigned char *keybuf = NULL;
unsigned char *outbuf = NULL;
int inlen, keylen;
size_t outlen;
int pkey_type;
const unsigned char *cp;
EVP_PKEY *pkey = NULL;
EVP_PKEY_CTX *pkctx = NULL;
if (!(alg = (*env)->GetStringUTFChars(env, algor, 0))
|| !(inbuf = (unsigned char *)(*env)->GetByteArrayElements(env, in, 0))
|| (inlen = (*env)->GetArrayLength(env, in)) <= 0
|| !(keybuf = (unsigned char *)(*env)->GetByteArrayElements(env, key, 0))
|| (keylen = (*env)->GetArrayLength(env, key)) <= 0) {
goto end;
}
cp = keybuf;
outlen = inlen;
if (!strcmp(alg, "sm2")) {
pkey_type = EVP_PKEY_EC;
} else if (!strcmp(alg, "ecies")) {
pkey_type = EVP_PKEY_EC;
} else if (!strcmp(alg, "rsa")) {
pkey_type = EVP_PKEY_RSA;
} else {
goto end;
}
if (!(outbuf = OPENSSL_malloc(outlen))
|| !(pkey = d2i_PrivateKey(pkey_type, NULL, &cp, (long)keylen))
|| !(pkctx = EVP_PKEY_CTX_new(pkey, NULL))
|| !EVP_PKEY_decrypt_init(pkctx)
|| !EVP_PKEY_decrypt(pkctx, outbuf, &outlen, inbuf, inlen)) {
goto end;
}
if ((ret = (*env)->NewByteArray(env, outlen))) {
(*env)->SetByteArrayRegion(env, ret, 0, outlen, (jbyte *)outbuf);
}
end:
(*env)->ReleaseStringUTFChars(env, algor, alg);
(*env)->ReleaseByteArrayElements(env, in, (jbyte *)inbuf, JNI_ABORT);
(*env)->ReleaseByteArrayElements(env, key, (jbyte *)keybuf, JNI_ABORT);
OPENSSL_free(outbuf);
EVP_PKEY_free(pkey);
EVP_PKEY_CTX_free(pkctx);
return ret;
}
JNIEXPORT jobjectArray JNICALL Java_GmSSL_getDeriveKeyAlgorithms(
JNIEnv *env, jobject this, jboolean aliases)
{
char *algors = "sm2:ecdh:dh";
return (*env)->NewStringUTF(env, algors);
}
JNIEXPORT jbyteArray JNICALL Java_GmSSL_deriveKey(
JNIEnv *env, jobject this, jstring algor, jint flag,
jint outkeylen, jbyteArray peerkey, jbyteArray key)
{
jbyteArray ret = NULL;
const char *alg = NULL;
const unsigned char *inbuf = NULL;
const unsigned char *keybuf = NULL;
unsigned char outbuf[256];
int inlen, keylen;
size_t outlen = outkeylen;
int pkey_type;
const unsigned char *cpin, *cpkey;
EVP_PKEY *peerpkey = NULL;
EVP_PKEY *pkey = NULL;
EVP_PKEY_CTX *pkctx = NULL;
if (!(alg = (*env)->GetStringUTFChars(env, algor, 0))
|| (outkeylen <= 0 || outkeylen > sizeof(outbuf))
|| !(inbuf = (unsigned char *)(*env)->GetByteArrayElements(env, peerkey, 0))
|| (inlen = (*env)->GetArrayLength(env, peerkey)) <= 0
|| !(keybuf = (unsigned char *)(*env)->GetByteArrayElements(env, key, 0))
|| (keylen = (*env)->GetArrayLength(env, key)) <= 0) {
goto end;
}
cpin = inbuf;
cpkey = keybuf;
if (!strcmp(alg, "sm2")) {
pkey_type = EVP_PKEY_EC;
} else if (!strcmp(alg, "ecdh")) {
pkey_type = EVP_PKEY_EC;
} else if (!strcmp(alg, "dh")) {
pkey_type = EVP_PKEY_DH;
} else {
goto end;
}
if (!(peerpkey = d2i_PUBKEY(NULL, &cpin, (long)inlen))
|| EVP_PKEY_id(peerpkey) != pkey_type
|| !(pkey = d2i_PrivateKey(pkey_type, NULL, &cpkey, (long)keylen))
|| !(pkctx = EVP_PKEY_CTX_new(pkey, NULL))
|| !EVP_PKEY_derive_init(pkctx)
|| !EVP_PKEY_derive_set_peer(pkctx, peerpkey)
|| !EVP_PKEY_derive(pkctx, outbuf, &outlen)) {
goto end;
}
if ((ret = (*env)->NewByteArray(env, outlen))) {
(*env)->SetByteArrayRegion(env, ret, 0, outlen, (jbyte *)outbuf);
}
end:
(*env)->ReleaseStringUTFChars(env, algor, alg);
(*env)->ReleaseByteArrayElements(env, peerkey, (jbyte *)inbuf, JNI_ABORT);
(*env)->ReleaseByteArrayElements(env, key, (jbyte *)keybuf, JNI_ABORT);
EVP_PKEY_free(peerpkey);
EVP_PKEY_free(pkey);
EVP_PKEY_CTX_free(pkctx);
return ret;
}
JNIEXPORT jstring JNICALL Java_GmSSL_getErrorString(JNIEnv *env, jobject this)
{
int err;
if (!(err = ERR_get_error())) {
return NULL;
}
return (*env)->NewStringUTF(env, ERR_error_string(err, NULL));
}

87
java/GmSSL.java Executable file
View File

@@ -0,0 +1,87 @@
/* ====================================================================
* Copyright (c) 2015 - 2017 The GmSSL Project. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. All advertising materials mentioning features or use of this
* software must display the following acknowledgment:
* "This product includes software developed by the GmSSL Project.
* (http://gmssl.org/)"
*
* 4. The name "GmSSL Project" must not be used to endorse or promote
* products derived from this software without prior written
* permission. For written permission, please contact
* guanzhi1980@gmail.com.
*
* 5. Products derived from this software may not be called "GmSSL"
* nor may "GmSSL" appear in their names without prior written
* permission of the GmSSL Project.
*
* 6. Redistributions of any form whatsoever must retain the following
* acknowledgment:
* "This product includes software developed by the GmSSL Project
* (http://gmssl.org/)"
*
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
* OF THE POSSIBILITY OF SUCH DAMAGE.
* ====================================================================
*/
public class GmSSL {
public native String getVersion(int type);
public native byte [] generateRandom(int length);
public native String [] getCiphers(boolean aliases);
public native int getCipherIVLength(String cipher);
public native int getCipherKeyLength(String cipher);
public native int getCipherBlockSize(String cipher);
public native byte [] symmetricEncrypt(String cipher, int flag, byte [] in, byte [] key, byte [] iv);
public native byte [] symmetricDecrypt(String cipher, int flag, byte [] in, byte [] key, byte [] iv);
public native String [] getDigests(boolean aliases);
public native int getDigestLength(String digestAlgor);
public native int getDigestBlockSize(String digestAlgor);
public native byte [] digest(String algor, int flag, byte [] data);
public native String [] getMacs(boolean aliases);
public native String [] getMacLength(String algor);
public native byte [] mac(String algor, int flag, byte [] data, byte [] key);
public native String [] getSignAlgorithms(boolean aliases);
public native byte [] sign(String algor, int flag, byte [] data, byte [] privateKey);
public native int verify(String algor, int flag, byte [] digest, byte [] signature, byte [] publicKey);
public native String [] getPublicKeyEncryptions(boolean aliases);
public native byte [] publicKeyEncrypt(String algor, int flag, byte [] in, byte [] publicKey);
public native byte [] publicKeyDecrypt(String algor, int falg, byte [] in, byte [] privateKey);
public native String [] getDeriveKeyAlgorithms(boolean aliases);
public native byte [] deriveKey(String algor, int flag, int keyLength, byte [] peerPublicKey, byte [] privateKey);
public native String getErrorString();
public static void main(String[] args) {
final GmSSL gmssl = new GmSSL();
System.out.println(gmssl.getVersion(0));
System.out.println("IV length = " + gmssl.getCipherIVLength("aes-128-cbc"));
}
static {
System.loadLibrary("gmssl");
}
}

7
java/README.md Executable file
View File

@@ -0,0 +1,7 @@
# GmSSL Java Wrapper
The purpose of this module is to provide a simple Java API to access GmSSL crypto library. To be simple, no key schedule or context is used. So the functions will not be very efficient for processing large files or stream data. And this module is not intend to be integrated with Java crypto frameworks such
as JCE.
The implementation is based on the Java Native Interface (JNI). The JNI header files are also included, but you can replace them with version from you own compiling environment.

1961
java/jni/jni.h Executable file
View File

File diff suppressed because it is too large Load Diff

23
java/jni/jni_md.h Executable file
View File

@@ -0,0 +1,23 @@
/*
* @(#)jni_md.h 1.19 05/11/17
*
* Copyright 2006 Sun Microsystems, Inc. All rights reserved.
* SUN PROPRIETARY/CONFIDENTIAL. Use is subject to license terms.
*/
#ifndef _JAVASOFT_JNI_MD_H_
#define _JAVASOFT_JNI_MD_H_
#define JNIEXPORT __attribute__((visibility("default")))
#define JNIIMPORT
#define JNICALL
#if __LP64__
typedef int jint;
#else
typedef long jint;
#endif
typedef long long jlong;
typedef signed char jbyte;
#endif /* !_JAVASOFT_JNI_MD_H_ */