mirror of
https://github.com/guanzhi/GmSSL.git
synced 2026-05-19 14:56:30 +08:00
140 lines
3.5 KiB
C
140 lines
3.5 KiB
C
/*
|
|
* Copyright (c) 2014 - 2020 The GmSSL Project. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in
|
|
* the documentation and/or other materials provided with the
|
|
* distribution.
|
|
*
|
|
* 3. All advertising materials mentioning features or use of this
|
|
* software must display the following acknowledgment:
|
|
* "This product includes software developed by the GmSSL Project.
|
|
* (http://gmssl.org/)"
|
|
*
|
|
* 4. The name "GmSSL Project" must not be used to endorse or promote
|
|
* products derived from this software without prior written
|
|
* permission. For written permission, please contact
|
|
* guanzhi1980@gmail.com.
|
|
*
|
|
* 5. Products derived from this software may not be called "GmSSL"
|
|
* nor may "GmSSL" appear in their names without prior written
|
|
* permission of the GmSSL Project.
|
|
*
|
|
* 6. Redistributions of any form whatsoever must retain the following
|
|
* acknowledgment:
|
|
* "This product includes software developed by the GmSSL Project
|
|
* (http://gmssl.org/)"
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
|
|
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
|
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE GmSSL PROJECT OR
|
|
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
|
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
|
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
|
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
|
|
int sm9_sign_setup(SM9_SIGN_MASTER_KEY *msk)
|
|
{
|
|
|
|
// rand ks in [1, N-1]
|
|
fn_rand(ks);
|
|
|
|
// Ppubs = ks * P2
|
|
twist_point_mul_generator(Ppubs, ks);
|
|
}
|
|
|
|
|
|
|
|
int sm9_sign_keygen(SM9_SIGN_MASTER_KEY *msk, const char *id, size_t idlen, SM9_POINT *ds)
|
|
{
|
|
|
|
}
|
|
|
|
|
|
int sm9_sign_init(SM3_CTX *ctx)
|
|
{
|
|
uint8_t prefix[1] = {0x02};
|
|
if (!ctx) {
|
|
return -1;
|
|
}
|
|
|
|
sm3_init(ctx);
|
|
sm3_update(ctx, prefix, sizeof(prefix));
|
|
return 0;
|
|
}
|
|
|
|
int sm9_sign_update(SM3_CTX *ctx, const uint8_t *data, size_t datalen)
|
|
{
|
|
sm3_update(ctx, data, datalen);
|
|
return 1;
|
|
}
|
|
|
|
int sm9_sign_finish(SM3_CTX *ctx, SM9_SIGNATURE *sig)
|
|
{
|
|
|
|
fp12_t g;
|
|
|
|
sm9_pairing(g, SM9_P1, Ppubs);
|
|
|
|
fn_rand(r);
|
|
|
|
fp12_pow(w, g, r);
|
|
|
|
|
|
fn_sub(l, r, h);
|
|
if (fn_is_zero(l)) {
|
|
}
|
|
|
|
|
|
point_mul(S, l, ds);
|
|
|
|
}
|
|
|
|
int sm9_verify_init(SM9_SIGN_CTX *ctx)
|
|
{
|
|
sm3_init(&ctx->sm3_ctx);
|
|
sm3_update(&ctx->sm3_ctx, SM9_HASH1_PREFIX, sizeof(SM9_HASH1_PREFIX));
|
|
return 0;
|
|
}
|
|
|
|
int sm9_verify_update(SM9_SIGN_CTX *ctx, const uint8_t *data, size_t datalen)
|
|
{
|
|
sm3_update(&ctx->sm3_ctx, data, datalen);
|
|
}
|
|
|
|
int sm9_verify_finish(SM9_SIGN_CTX *ctx, const char *id, size_t idlen, const SM9_SIGNATURE *sig)
|
|
{
|
|
|
|
if (bn_is_zero(h) || bn_cmp(h, SM9_N) >= 0) {
|
|
}
|
|
|
|
if (!point_is_on_curve(S)) {
|
|
}
|
|
|
|
sm9_pairing(g, SM9_P1, Ppubs);
|
|
|
|
fp12_pow(t, g, h);
|
|
|
|
|
|
sm9_hash1(h1, id, idlen);
|
|
|
|
twist_point_mul_generator(P, h1);
|
|
twist_point_add(P, P, Ppubs);
|
|
pairing(u, S, P);
|
|
}
|
|
|
|
|