abc/GmSSL
1
0
Fork 0
mirror of https://github.com/guanzhi/GmSSL.git synced 2026-05-31 23:14:15 +08:00
Code Issues Packages Projects Releases Wiki Activity

First SM9 release

Browse Source 
SM9 setup/keygen/sign/verify has been tested. See example codes `demos/sm9/`.
This commit is contained in:
Zhi Guan
2018-10-10 20:42:07 +08:00
parent 9ca519edfa
commit 989bc7638d
16 changed files with 6255 additions and 5380 deletions
Download Patch File Download Diff File Expand all files Collapse all files

97
demos/sm9/sm9-keygen.c Normal file
View File

@@ -0,0 +1,97 @@
/* ====================================================================
* Copyright (c) 2016 - 2018 The GmSSL Project. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. All advertising materials mentioning features or use of this
* software must display the following acknowledgment:
* "This product includes software developed by the GmSSL Project.
* (http://gmssl.org/)"
*
* 4. The name "GmSSL Project" must not be used to endorse or promote
* products derived from this software without prior written
* permission. For written permission, please contact
* guanzhi1980@gmail.com.
*
* 5. Products derived from this software may not be called "GmSSL"
* nor may "GmSSL" appear in their names without prior written
* permission of the GmSSL Project.
*
* 6. Redistributions of any form whatsoever must retain the following
* acknowledgment:
* "This product includes software developed by the GmSSL Project
* (http://gmssl.org/)"
*
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
* OF THE POSSIBILITY OF SUCH DAMAGE.
* ====================================================================
*/
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <libgen.h>
#include <openssl/sm9.h>
#include <openssl/err.h>
#include <openssl/objects.h>
int main(int argc, char **argv)
{
int ret = -1;
char *prog = basename(argv[0]);
SM9MasterSecret *msk = NULL;
SM9PrivateKey *sk = NULL;
FILE *msk_fp = NULL;
FILE *sk_fp = NULL;
if (argc != 4) {
printf("usage: %s <msk-file> <id> <sk-file>\n", prog);
return -1;
}
if (!(msk_fp = fopen(argv[1], "r"))
|| !(msk = d2i_SM9MasterSecret_fp(msk_fp, NULL))) {
fprintf(stderr, "%s: read msk failed\n", prog);
goto end;
}
if (!(sk = SM9_extract_private_key(msk, argv[2], strlen(argv[2])))) {
fprintf(stderr, "%s: generate private key failed\n", prog);
goto end;
}
if (!(sk_fp = fopen(argv[3], "w"))
|| !i2d_SM9PrivateKey_fp(sk_fp, sk)) {
fprintf(stderr, "%s: output sk file failed\n", prog);
goto end;
}
printf("generate private key file '%s'\n", argv[3]);
ret = 0;
end:
SM9MasterSecret_free(msk);
SM9PrivateKey_free(sk);
fclose(msk_fp);
fclose(sk_fp);
return ret;
}

95
demos/sm9/sm9-setup.c Normal file
View File

@@ -0,0 +1,95 @@
/* ====================================================================
* Copyright (c) 2016 - 2018 The GmSSL Project. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. All advertising materials mentioning features or use of this
* software must display the following acknowledgment:
* "This product includes software developed by the GmSSL Project.
* (http://gmssl.org/)"
*
* 4. The name "GmSSL Project" must not be used to endorse or promote
* products derived from this software without prior written
* permission. For written permission, please contact
* guanzhi1980@gmail.com.
*
* 5. Products derived from this software may not be called "GmSSL"
* nor may "GmSSL" appear in their names without prior written
* permission of the GmSSL Project.
*
* 6. Redistributions of any form whatsoever must retain the following
* acknowledgment:
* "This product includes software developed by the GmSSL Project
* (http://gmssl.org/)"
*
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
* OF THE POSSIBILITY OF SUCH DAMAGE.
* ====================================================================
*/
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <libgen.h>
#include <openssl/sm9.h>
#include <openssl/err.h>
#include <openssl/objects.h>
int main(int argc, char **argv)
{
int ret = -1;
char *prog = basename(argv[0]);
char *msk_file;
char *mpk_file;
SM9MasterSecret *msk = NULL;
SM9PublicParameters *mpk = NULL;
FILE *msk_fp = NULL;
FILE *mpk_fp = NULL;
if (argc != 4) {
printf("usage: %s <sm9sign|sm9encrypt> <mpk-file> <msk-file>\n", prog);
return -1;
}
if (!SM9_setup(NID_sm9bn256v1, OBJ_txt2nid(argv[1]), NID_sm9hash1_with_sm3, &mpk, &msk)) {
ERR_print_errors_fp(stderr);
goto end;
}
if (!(msk_fp = fopen(argv[3], "w"))
|| !(mpk_fp = fopen(argv[2], "w"))
|| !i2d_SM9MasterSecret_fp(msk_fp, msk)
|| !i2d_SM9PublicParameters_fp(mpk_fp, mpk)) {
fprintf(stderr, "%s: failed to output files\n", prog);
goto end;
}
printf("generate '%s'\n", argv[2]);
printf("generate '%s'\n", argv[3]);
ret = 0;
end:
SM9MasterSecret_free(msk);
SM9PublicParameters_free(mpk);
fclose(msk_fp);
fclose(mpk_fp);
return ret;
}

129
demos/sm9/sm9-sign.c Normal file
View File

@@ -0,0 +1,129 @@
/* ====================================================================
* Copyright (c) 2016 - 2018 The GmSSL Project. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. All advertising materials mentioning features or use of this
* software must display the following acknowledgment:
* "This product includes software developed by the GmSSL Project.
* (http://gmssl.org/)"
*
* 4. The name "GmSSL Project" must not be used to endorse or promote
* products derived from this software without prior written
* permission. For written permission, please contact
* guanzhi1980@gmail.com.
*
* 5. Products derived from this software may not be called "GmSSL"
* nor may "GmSSL" appear in their names without prior written
* permission of the GmSSL Project.
*
* 6. Redistributions of any form whatsoever must retain the following
* acknowledgment:
* "This product includes software developed by the GmSSL Project
* (http://gmssl.org/)"
*
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
* OF THE POSSIBILITY OF SUCH DAMAGE.
* ====================================================================
*/
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <libgen.h>
#include <openssl/sm9.h>
#include <openssl/err.h>
#include <openssl/objects.h>
int main(int argc, char **argv)
{
int ret = -1;
char *prog = basename(argv[0]);
EVP_MD_CTX *ctx = NULL;
FILE *msg_fp = NULL;
FILE *sk_fp = NULL;
FILE *sig_fp = NULL;
SM9PrivateKey *sk = NULL;
SM9Signature *sig = NULL;
unsigned char buf[2048];
int len;
if (argc != 4) {
printf("usage: %s <msg-file> <sk-file> <sig-file>\n", prog);
return 0;
}
if (!(ctx = EVP_MD_CTX_new())) {
ERR_print_errors_fp(stderr);
goto end;
}
if (!SM9_SignInit(ctx, EVP_sm3(), NULL)) {
ERR_print_errors_fp(stderr);
goto end;
}
if (!(msg_fp = fopen(argv[1], "r"))) {
fprintf(stderr, "%s: can not open file '%s'\n", prog, argv[1]);
goto end;
}
while ((len = fread(buf, 1, sizeof(buf), msg_fp)) > 0) {
if (!SM9_SignUpdate(ctx, buf, len)) {
ERR_print_errors_fp(stderr);
goto end;
}
}
if (!(sk_fp = fopen(argv[2], "r"))) {
fprintf(stderr, "%s: can not open file '%s'\n", prog, argv[2]);
goto end;
}
if (!(sk = d2i_SM9PrivateKey_fp(sk_fp, NULL))) {
ERR_print_errors_fp(stderr);
fprintf(stderr, "%s: parse private key failed\n", prog);
goto end;
}
if (!(sig = SM9_SignFinal(ctx, sk))) {
ERR_print_errors_fp(stderr);
fprintf(stderr, "%s: failed to generate siganture\n", prog);
goto end;
}
if (!(sig_fp = fopen(argv[3], "w"))) {
fprintf(stderr, "%s: can not open file '%s'\n", prog, argv[3]);
goto end;
}
if (!i2d_SM9Signature_fp(sig_fp, sig)) {
ERR_print_errors_fp(stderr);
goto end;
}
ret = 0;
end:
EVP_MD_CTX_free(ctx);
fclose(msg_fp);
fclose(sk_fp);
fclose(sig_fp);
SM9PrivateKey_free(sk);
SM9Signature_free(sig);
return ret;
}

138
demos/sm9/sm9-verify.c Normal file
View File

@@ -0,0 +1,138 @@
/* ====================================================================
* Copyright (c) 2016 - 2018 The GmSSL Project. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in
* the documentation and/or other materials provided with the
* distribution.
*
* 3. All advertising materials mentioning features or use of this
* software must display the following acknowledgment:
* "This product includes software developed by the GmSSL Project.
* (http://gmssl.org/)"
*
* 4. The name "GmSSL Project" must not be used to endorse or promote
* products derived from this software without prior written
* permission. For written permission, please contact
* guanzhi1980@gmail.com.
*
* 5. Products derived from this software may not be called "GmSSL"
* nor may "GmSSL" appear in their names without prior written
* permission of the GmSSL Project.
*
* 6. Redistributions of any form whatsoever must retain the following
* acknowledgment:
* "This product includes software developed by the GmSSL Project
* (http://gmssl.org/)"
*
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
* OF THE POSSIBILITY OF SUCH DAMAGE.
* ====================================================================
*/
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <libgen.h>
#include <openssl/sm9.h>
#include <openssl/err.h>
#include <openssl/objects.h>
int main(int argc, char **argv)
{
int ret = -1;
char *prog = basename(argv[0]);
EVP_MD_CTX *ctx = NULL;
FILE *msg_fp = NULL;
FILE *sig_fp = NULL;
FILE *mpk_fp = NULL;
SM9Signature *sig = NULL;
SM9PublicParameters *mpk = NULL;
SM9PublicKey *pk = NULL;
unsigned char buf[2048];
int len;
if (argc != 5) {
printf("usage: %s <msg-file> <sig-file> <mpk-file> <id>\n", prog);
return 0;
}
if (!(ctx = EVP_MD_CTX_new())) {
ERR_print_errors_fp(stderr);
goto end;
}
if (!SM9_VerifyInit(ctx, EVP_sm3(), NULL)) {
ERR_print_errors_fp(stderr);
goto end;
}
if (!(msg_fp = fopen(argv[1], "r"))) {
fprintf(stderr, "%s: can not open file '%s'\n", prog, argv[1]);
goto end;
}
while ((len = fread(buf, 1, sizeof(buf), msg_fp)) > 0) {
if (!SM9_VerifyUpdate(ctx, buf, len)) {
ERR_print_errors_fp(stderr);
goto end;
}
}
if (!(sig_fp = fopen(argv[2], "r"))) {
fprintf(stderr, "%s: can not open file '%s'\n", prog, argv[2]);
goto end;
}
if (!(sig = d2i_SM9Signature_fp(sig_fp, NULL))) {
ERR_print_errors_fp(stderr);
fprintf(stderr, "%s: parse signature failed\n", prog);
goto end;
}
if (!(mpk_fp = fopen(argv[3], "r"))) {
fprintf(stderr, "%s: can not open file '%s'\n", prog, argv[2]);
goto end;
}
if (!(mpk = d2i_SM9PublicParameters_fp(mpk_fp, NULL))) {
ERR_print_errors_fp(stderr);
fprintf(stderr, "%s: parse public parameters failed\n", prog);
goto end;
}
if (!(pk = SM9_extract_public_key(mpk, argv[4], strlen(argv[4])))) {
ERR_print_errors_fp(stderr);
goto end;
}
if (1 != SM9_VerifyFinal(ctx, sig, pk)) {
ERR_print_errors_fp(stderr);
printf("%s: verify failure\n", argv[2]);
goto end;
}
printf("%s: verify success\n", argv[2]);
ret = 0;
end:
EVP_MD_CTX_free(ctx);
fclose(msg_fp);
fclose(sig_fp);
fclose(mpk_fp);
SM9PublicParameters_free(mpk);
SM9PublicKey_free(pk);
SM9Signature_free(sig);
return ret;
}