mirror of
https://github.com/guanzhi/GmSSL.git
synced 2026-08-11 16:33:40 +08:00
Add sm9 and paillier pem support
This commit is contained in:
Zhi Guan
@@ -54,30 +54,6 @@
|
||||
#include <openssl/bn_hash.h>
|
||||
#include "sm9_lcl.h"
|
||||
|
||||
#if 0
|
||||
int SM9_hash1(const EVP_MD *md, BIGNUM **r,
|
||||
const char *id, size_t idlen,
|
||||
unsigned char hid,
|
||||
const BIGNUM *range,
|
||||
BN_CTX *ctx)
|
||||
{
|
||||
unsigned char *buf;
|
||||
|
||||
if (!(buf = OPENSSL_malloc(idlen + 1))) {
|
||||
return 0;
|
||||
}
|
||||
memcpy(buf, id, idlen);
|
||||
buf[idlen] = hid;
|
||||
|
||||
if (!BN_hash_to_range(md, r, buf, idlen + 1, range, ctx)) {
|
||||
OPENSSL_free(buf);
|
||||
return 0;
|
||||
}
|
||||
|
||||
OPENSSL_free(buf);
|
||||
return 1;
|
||||
}
|
||||
#endif
|
||||
|
||||
int SM9_hash1(const EVP_MD *md, BIGNUM **r, const char *id, size_t idlen,
|
||||
unsigned char hid, const BIGNUM *n, BN_CTX *ctx)
|
||||
@@ -130,12 +106,12 @@ end:
|
||||
return ret;
|
||||
}
|
||||
|
||||
|
||||
SM9PrivateKey *SM9_extract_private_key(SM9MasterSecret *msk,
|
||||
const char *id, size_t idlen)
|
||||
SM9_KEY *SM9_MASTER_KEY_extract_key(SM9_MASTER_KEY *master,
|
||||
const char *id, size_t idlen, int priv)
|
||||
{
|
||||
SM9PrivateKey *ret = NULL;
|
||||
SM9PrivateKey *sk = NULL;
|
||||
EC_GROUP *group = NULL;
|
||||
const BIGNUM *p = SM9_get0_prime();
|
||||
const BIGNUM *n = SM9_get0_order();
|
||||
int scheme;
|
||||
@@ -148,24 +124,24 @@ SM9PrivateKey *SM9_extract_private_key(SM9MasterSecret *msk,
|
||||
size_t len = sizeof(buf);
|
||||
|
||||
/* check args */
|
||||
if (!msk || !id) {
|
||||
SM9err(SM9_F_SM9_EXTRACT_PRIVATE_KEY,
|
||||
if (!master || !id) {
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY,
|
||||
ERR_R_PASSED_NULL_PARAMETER);
|
||||
return NULL;
|
||||
}
|
||||
if (strlen(id) != idlen || idlen <= 0 || idlen > SM9_MAX_ID_LENGTH) {
|
||||
SM9err(SM9_F_SM9_EXTRACT_PRIVATE_KEY,
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY,
|
||||
SM9_R_INVALID_ID);
|
||||
return NULL;
|
||||
}
|
||||
|
||||
/* check pairing */
|
||||
if (OBJ_obj2nid(msk->pairing) != NID_sm9bn256v1) {
|
||||
if (OBJ_obj2nid(master->pairing) != NID_sm9bn256v1) {
|
||||
return NULL;
|
||||
}
|
||||
|
||||
/* check scheme */
|
||||
scheme = OBJ_obj2nid(msk->scheme);
|
||||
scheme = OBJ_obj2nid(master->scheme);
|
||||
switch (scheme) {
|
||||
case NID_sm9sign:
|
||||
hid = SM9_HID_SIGN;
|
||||
@@ -180,9 +156,14 @@ SM9PrivateKey *SM9_extract_private_key(SM9MasterSecret *msk,
|
||||
return NULL;
|
||||
}
|
||||
|
||||
/* check if master */
|
||||
if (priv && master->masterSecret == NULL) {
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY, SM9_R_NO_MASTER_SECRET);
|
||||
return NULL;
|
||||
}
|
||||
|
||||
/* check hash1 and set hash1 md */
|
||||
switch (OBJ_obj2nid(msk->hash1)) {
|
||||
switch (OBJ_obj2nid(master->hash1)) {
|
||||
case NID_sm9hash1_with_sm3:
|
||||
md = EVP_sm3();
|
||||
break;
|
||||
@@ -190,102 +171,140 @@ SM9PrivateKey *SM9_extract_private_key(SM9MasterSecret *msk,
|
||||
md = EVP_sha256();
|
||||
break;
|
||||
default:
|
||||
SM9err(SM9_F_SM9_EXTRACT_PRIVATE_KEY, SM9_R_INVALID_HASH1);
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY, SM9_R_INVALID_HASH1);
|
||||
return NULL;
|
||||
}
|
||||
|
||||
/* malloc */
|
||||
if (!(sk = SM9PrivateKey_new())
|
||||
|| !(group = EC_GROUP_new_by_curve_name(NID_sm9bn256v1))
|
||||
|| !(ctx = BN_CTX_new())) {
|
||||
SM9err(SM9_F_SM9_EXTRACT_PRIVATE_KEY,
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY,
|
||||
ERR_R_MALLOC_FAILURE);
|
||||
goto end;
|
||||
}
|
||||
BN_CTX_start(ctx);
|
||||
|
||||
/* t1 = H1(ID||hid) + msk (mod n) */
|
||||
if (!(sk->pairing = master->pairing)
|
||||
|| !(sk->scheme = master->scheme)
|
||||
|| !(sk->hash1 = master->hash1)
|
||||
|| !(sk->pointPpub = ASN1_OCTET_STRING_dup(master->pointPpub))
|
||||
|| !(sk->identity = ASN1_OCTET_STRING_new())
|
||||
|| !ASN1_OCTET_STRING_set(sk->identity, (unsigned char *)id, idlen)
|
||||
|| !(sk->publicPoint = ASN1_OCTET_STRING_new())
|
||||
|| !(sk->privatePoint = ASN1_OCTET_STRING_new())) {
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY, ERR_R_ASN1_LIB);
|
||||
goto end;
|
||||
}
|
||||
|
||||
/* h1 = H1(id||HID) */
|
||||
if (!SM9_hash1(md, &t, id, idlen, hid, n, ctx)) {
|
||||
SM9err(SM9_F_SM9_EXTRACT_PRIVATE_KEY, ERR_R_SM9_LIB);
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY, ERR_R_SM9_LIB);
|
||||
goto end;
|
||||
}
|
||||
|
||||
if (!BN_mod_add(t, t, msk->masterSecret, n, ctx)) {
|
||||
SM9err(SM9_F_SM9_EXTRACT_PRIVATE_KEY, ERR_R_BN_LIB);
|
||||
goto end;
|
||||
}
|
||||
|
||||
/* if t1 is zero, return failed */
|
||||
if (BN_is_zero(t)) {
|
||||
SM9err(SM9_F_SM9_EXTRACT_PRIVATE_KEY, SM9_R_ZERO_ID);
|
||||
goto end;
|
||||
}
|
||||
|
||||
/* t2 = msk * t1^-1 (mod n) */
|
||||
if (!BN_mod_inverse(t, t, n, ctx)) {
|
||||
SM9err(SM9_F_SM9_EXTRACT_PRIVATE_KEY, ERR_R_BN_LIB);
|
||||
goto end;
|
||||
}
|
||||
if (!BN_mod_mul(t, msk->masterSecret, t, n, ctx)) {
|
||||
SM9err(SM9_F_SM9_EXTRACT_PRIVATE_KEY, ERR_R_BN_LIB);
|
||||
goto end;
|
||||
}
|
||||
|
||||
/* generate ds or de */
|
||||
/* generate (Ppubs, ds) or (Ppube, de) */
|
||||
if (scheme == NID_sm9sign) {
|
||||
|
||||
EC_GROUP *group = NULL;
|
||||
EC_POINT *ds = NULL;
|
||||
|
||||
/* ds = t2 * P1 */
|
||||
if (!(group = EC_GROUP_new_by_curve_name(NID_sm9bn256v1))
|
||||
|| !(ds = EC_POINT_new(group))
|
||||
|| !EC_POINT_mul(group, ds, t, NULL, NULL, ctx)
|
||||
|| !(len = EC_POINT_point2oct(group, ds, point_form, buf, len, ctx))) {
|
||||
EC_GROUP_free(group);
|
||||
EC_POINT_free(ds);
|
||||
/* publicPoint = h1 * P2 + Ppubs */
|
||||
point_t Ppubs;
|
||||
point_t point;
|
||||
if (!point_init(&point, ctx)
|
||||
|| !point_init(&Ppubs, ctx)
|
||||
|| ASN1_STRING_length(master->pointPpub) != sizeof(buf)
|
||||
|| !point_from_octets(&Ppubs, ASN1_STRING_get0_data(master->pointPpub), p, ctx)
|
||||
|| !point_mul_generator(&point, t, p, ctx)
|
||||
|| !point_add(&point, &point, &Ppubs, p, ctx)
|
||||
|| !point_to_octets(&point, buf, ctx)
|
||||
|| !ASN1_OCTET_STRING_set(sk->publicPoint, buf, sizeof(buf))) {
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY, ERR_R_SM9_LIB);
|
||||
point_cleanup(&Ppubs);
|
||||
point_cleanup(&point);
|
||||
goto end;
|
||||
}
|
||||
|
||||
EC_GROUP_free(group);
|
||||
EC_POINT_free(ds);
|
||||
point_cleanup(&Ppubs);
|
||||
point_cleanup(&point);
|
||||
|
||||
} else {
|
||||
point_t de;
|
||||
|
||||
/* de = t2 * P2 */
|
||||
if (!point_init(&de, ctx)
|
||||
|| !point_mul_generator(&de, t, p, ctx)
|
||||
|| !point_to_octets(&de, buf, ctx)) {
|
||||
point_cleanup(&de);
|
||||
/* publicPoint = h1 * P1 + Ppube */
|
||||
EC_POINT *Ppube = NULL;
|
||||
EC_POINT *point = NULL;
|
||||
if (!(group = EC_GROUP_new_by_curve_name(NID_sm9bn256v1))
|
||||
|| !(point = EC_POINT_new(group))
|
||||
|| !(Ppube = EC_POINT_new(group))
|
||||
|| !EC_POINT_oct2point(group, Ppube,
|
||||
ASN1_STRING_get0_data(master->pointPpub),
|
||||
ASN1_STRING_length(master->pointPpub), ctx)
|
||||
|| !EC_POINT_mul(group, point, t, NULL, NULL, ctx)
|
||||
|| !EC_POINT_add(group, point, point, Ppube, ctx)
|
||||
|| !(len = EC_POINT_point2oct(group, point, point_form, buf, len, ctx))
|
||||
|| !ASN1_OCTET_STRING_set(sk->publicPoint, buf, len)) {
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY, ERR_R_SM9_LIB);
|
||||
EC_POINT_free(Ppube);
|
||||
EC_POINT_free(point);
|
||||
goto end;
|
||||
}
|
||||
EC_POINT_free(Ppube);
|
||||
EC_POINT_free(point);
|
||||
}
|
||||
|
||||
if (priv) {
|
||||
|
||||
/* t1 = H1(ID||hid) + master (mod n) */
|
||||
if (!BN_mod_add(t, t, master->masterSecret, n, ctx)) {
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY, ERR_R_BN_LIB);
|
||||
goto end;
|
||||
}
|
||||
|
||||
point_cleanup(&de);
|
||||
/* if t1 is zero, return failed */
|
||||
if (BN_is_zero(t)) {
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY, SM9_R_ZERO_ID);
|
||||
goto end;
|
||||
}
|
||||
|
||||
}
|
||||
/* t2 = master * t1^-1 (mod n) */
|
||||
if (!BN_mod_inverse(t, t, n, ctx)) {
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY, ERR_R_BN_LIB);
|
||||
goto end;
|
||||
}
|
||||
if (!BN_mod_mul(t, master->masterSecret, t, n, ctx)) {
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY, ERR_R_BN_LIB);
|
||||
goto end;
|
||||
}
|
||||
|
||||
ASN1_OBJECT_free(sk->pairing);
|
||||
ASN1_OBJECT_free(sk->scheme);
|
||||
ASN1_OBJECT_free(sk->hash1);
|
||||
sk->pairing = NULL;
|
||||
sk->scheme = NULL;
|
||||
sk->hash1 = NULL;
|
||||
|
||||
if (!(sk->pairing = msk->pairing)
|
||||
|| !(sk->scheme = msk->scheme)
|
||||
|| !(sk->hash1 = msk->hash1)
|
||||
|| !ASN1_STRING_copy(sk->pointPpub, msk->pointPpub)
|
||||
|| !ASN1_STRING_set(sk->identity, id, idlen)
|
||||
/* FIXME: create publicPoint */
|
||||
|| !ASN1_STRING_set(sk->privatePoint, buf, len)) {
|
||||
SM9err(SM9_F_SM9_EXTRACT_PRIVATE_KEY, ERR_R_ASN1_LIB);
|
||||
goto end;
|
||||
if (scheme == NID_sm9sign) {
|
||||
/* ds = t2 * P1 */
|
||||
EC_POINT *ds = NULL;
|
||||
if (!(ds = EC_POINT_new(group))
|
||||
|| !EC_POINT_mul(group, ds, t, NULL, NULL, ctx)
|
||||
|| !(len = EC_POINT_point2oct(group, ds, point_form, buf, len, ctx))
|
||||
|| !ASN1_OCTET_STRING_set(sk->privatePoint, buf, len)) {
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY, ERR_R_SM9_LIB);
|
||||
EC_POINT_free(ds);
|
||||
goto end;
|
||||
}
|
||||
EC_POINT_free(ds);
|
||||
} else {
|
||||
/* de = t2 * P2 */
|
||||
point_t de;
|
||||
if (!point_init(&de, ctx)
|
||||
|| !point_mul_generator(&de, t, p, ctx)
|
||||
|| !point_to_octets(&de, buf, ctx)
|
||||
|| !ASN1_OCTET_STRING_set(sk->privatePoint, buf, sizeof(buf))) {
|
||||
SM9err(SM9_F_SM9_MASTER_KEY_EXTRACT_KEY, ERR_R_SM9_LIB);
|
||||
point_cleanup(&de);
|
||||
goto end;
|
||||
}
|
||||
point_cleanup(&de);
|
||||
}
|
||||
}
|
||||
|
||||
ret = sk;
|
||||
sk = NULL;
|
||||
|
||||
|
||||
end:
|
||||
EC_GROUP_free(group);
|
||||
if (ctx) {
|
||||
BN_CTX_end(ctx);
|
||||
}
|
||||
@@ -295,133 +314,16 @@ end:
|
||||
return ret;
|
||||
}
|
||||
|
||||
SM9PublicKey *SM9_extract_public_key(SM9PublicParameters *mpk,
|
||||
SM9PublicKey *SM9_extract_public_key(SM9PublicParameters *master,
|
||||
const char *id, size_t idlen)
|
||||
{
|
||||
SM9PublicKey *ret = NULL;
|
||||
SM9PublicKey *pk = NULL;
|
||||
BN_CTX *ctx = NULL;
|
||||
BIGNUM *h1 = NULL;
|
||||
int scheme;
|
||||
unsigned char hid;
|
||||
const EVP_MD *md;
|
||||
const BIGNUM *p = SM9_get0_prime();
|
||||
const BIGNUM *n = SM9_get0_order();
|
||||
int point_form = POINT_CONVERSION_UNCOMPRESSED;
|
||||
unsigned char buf[129];
|
||||
size_t len = sizeof(buf);
|
||||
return SM9_MASTER_KEY_extract_key(master, id, idlen, 0);
|
||||
}
|
||||
|
||||
if (!(pk = SM9PublicKey_new())
|
||||
|| !(ctx = BN_CTX_new())) {
|
||||
goto end;
|
||||
}
|
||||
|
||||
/* check pairing */
|
||||
if (OBJ_obj2nid(mpk->pairing) != NID_sm9bn256v1) {
|
||||
goto end;
|
||||
}
|
||||
|
||||
/* check scheme and set hash1 hid */
|
||||
scheme = OBJ_obj2nid(mpk->scheme);
|
||||
switch (scheme) {
|
||||
case NID_sm9sign:
|
||||
hid = SM9_HID_SIGN;
|
||||
break;
|
||||
case NID_sm9encrypt:
|
||||
hid = SM9_HID_ENC;
|
||||
break;
|
||||
case NID_sm9keyagreement:
|
||||
hid = SM9_HID_EXCH;
|
||||
break;
|
||||
default:
|
||||
goto end;
|
||||
}
|
||||
|
||||
/* check hash1 and set hash1 md */
|
||||
switch (OBJ_obj2nid(mpk->hash1)) {
|
||||
case NID_sm9hash1_with_sm3:
|
||||
md = EVP_sm3();
|
||||
break;
|
||||
case NID_sm9hash1_with_sha256:
|
||||
md = EVP_sha256();
|
||||
break;
|
||||
default:
|
||||
goto end;
|
||||
}
|
||||
|
||||
/* h1 = H1(ID || hid) in [1, n-1] */
|
||||
if (!SM9_hash1(md, &h1, id, idlen, hid, n, ctx)) {
|
||||
goto end;
|
||||
}
|
||||
|
||||
if (scheme == NID_sm9sign) {
|
||||
/* publicPoint = h1 * P2 + Ppubs */
|
||||
point_t point;
|
||||
point_t Ppubs;
|
||||
|
||||
|
||||
if (!point_init(&point, ctx)
|
||||
|| !point_init(&Ppubs, ctx)
|
||||
|| ASN1_STRING_length(mpk->pointPpub) != sizeof(buf)
|
||||
|| !point_from_octets(&Ppubs, ASN1_STRING_get0_data(mpk->pointPpub), p, ctx)
|
||||
|| !point_mul_generator(&point, h1, p, ctx)
|
||||
|| !point_add(&point, &point, &Ppubs, p, ctx)
|
||||
|| !point_to_octets(&point, buf, ctx)) {
|
||||
point_cleanup(&point);
|
||||
point_cleanup(&Ppubs);
|
||||
goto end;
|
||||
}
|
||||
point_cleanup(&point);
|
||||
point_cleanup(&Ppubs);
|
||||
|
||||
} else if (OBJ_obj2nid(mpk->scheme) == NID_sm9encrypt) {
|
||||
/* publicPoint = h1 * P1 + Ppube */
|
||||
EC_GROUP *group = NULL;
|
||||
EC_POINT *point = NULL;
|
||||
EC_POINT *Ppube = NULL;
|
||||
|
||||
if (!(group = EC_GROUP_new_by_curve_name(NID_sm9bn256v1))
|
||||
|| !(point = EC_POINT_new(group))
|
||||
|| !(Ppube = EC_POINT_new(group))
|
||||
|| !EC_POINT_oct2point(group, Ppube,
|
||||
ASN1_STRING_get0_data(mpk->pointPpub),
|
||||
ASN1_STRING_length(mpk->pointPpub), ctx)
|
||||
|| !EC_POINT_mul(group, point, h1, NULL, NULL, ctx)
|
||||
|| !EC_POINT_add(group, point, point, Ppube, ctx)
|
||||
|| !(len = EC_POINT_point2oct(group, point, point_form, buf, len, ctx))) {
|
||||
EC_GROUP_free(group);
|
||||
EC_POINT_free(point);
|
||||
EC_POINT_free(Ppube);
|
||||
goto end;
|
||||
}
|
||||
EC_GROUP_free(group);
|
||||
EC_POINT_free(point);
|
||||
EC_POINT_free(Ppube);
|
||||
}
|
||||
|
||||
/* init object */
|
||||
ASN1_OBJECT_free(pk->pairing);
|
||||
ASN1_OBJECT_free(pk->scheme);
|
||||
ASN1_OBJECT_free(pk->hash1);
|
||||
pk->pairing = NULL;
|
||||
pk->scheme = NULL;
|
||||
pk->hash1 = NULL;
|
||||
|
||||
if (!(pk->pairing = OBJ_dup(mpk->pairing))
|
||||
|| !(pk->scheme = OBJ_dup(mpk->scheme))
|
||||
|| !(pk->hash1 = OBJ_dup(mpk->hash1))
|
||||
|| !ASN1_STRING_copy(pk->pointPpub, mpk->pointPpub)
|
||||
|| !ASN1_STRING_set(pk->publicPoint, buf, len)
|
||||
|| !ASN1_STRING_set(pk->identity, id, idlen)) {
|
||||
goto end;
|
||||
}
|
||||
|
||||
ret = pk;
|
||||
pk = NULL;
|
||||
|
||||
end:
|
||||
SM9PublicKey_free(pk);
|
||||
return ret;
|
||||
SM9PrivateKey *SM9_extract_private_key(SM9MasterSecret *master,
|
||||
const char *id, size_t idlen)
|
||||
{
|
||||
return SM9_MASTER_KEY_extract_key(master, id, idlen, 1);
|
||||
}
|
||||
|
||||
SM9PublicKey *SM9PrivateKey_get_public_key(SM9PrivateKey *sk)
|
||||
|
||||
Reference in New Issue
Block a user