1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
|
/*
* Copyright (C) 2020 Sony Interactive Entertainment Inc.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
* THE POSSIBILITY OF SUCH DAMAGE.
*/
#include "config.h"
#include "CryptoAlgorithmECDSA.h"
#if ENABLE(WEB_CRYPTO)
#include "CryptoAlgorithmEcdsaParams.h"
#include "CryptoKeyEC.h"
#include "OpenSSLUtilities.h"
namespace WebCore {
ExceptionOr<Vector<uint8_t>> CryptoAlgorithmECDSA::platformSign(const CryptoAlgorithmEcdsaParams& parameters, const CryptoKeyEC& key, const Vector<uint8_t>& data)
{
size_t keySizeInBytes = (key.keySizeInBits() + 7) / 8;
const EVP_MD* md = digestAlgorithm(parameters.hashIdentifier);
if (!md)
return Exception { NotSupportedError };
std::optional<Vector<uint8_t>> digest = calculateDigest(md, data);
if (!digest)
return Exception { OperationError };
EC_KEY* ecKey = EVP_PKEY_get0_EC_KEY(key.platformKey());
if (!ecKey)
return Exception { OperationError };
// We use ECDSA_do_sign rather than EVP API because the latter handles ECDSA signature in DER format
// while this function is supposed to return simply concatinated "r" and "s".
auto sig = ECDSASigPtr(ECDSA_do_sign(digest->data(), digest->size(), ecKey));
if (!sig)
return Exception { OperationError };
const BIGNUM* r;
const BIGNUM* s;
ECDSA_SIG_get0(sig.get(), &r, &s);
// Concatenate r and s, expanding r and s to keySizeInBytes.
Vector<uint8_t> signature = convertToBytesExpand(r, keySizeInBytes);
signature.appendVector(convertToBytesExpand(s, keySizeInBytes));
return signature;
}
ExceptionOr<bool> CryptoAlgorithmECDSA::platformVerify(const CryptoAlgorithmEcdsaParams& parameters, const CryptoKeyEC& key, const Vector<uint8_t>& signature, const Vector<uint8_t>& data)
{
size_t keySizeInBytes = (key.keySizeInBits() + 7) / 8;
// Bail if the signature size isn't double the key size (i.e. concatenated r and s components).
if (signature.size() != keySizeInBytes * 2)
return false;
auto sig = ECDSASigPtr(ECDSA_SIG_new());
auto r = BN_bin2bn(signature.data(), keySizeInBytes, nullptr);
auto s = BN_bin2bn(signature.data() + keySizeInBytes, keySizeInBytes, nullptr);
if (!ECDSA_SIG_set0(sig.get(), r, s))
return Exception { OperationError };
const EVP_MD* md = digestAlgorithm(parameters.hashIdentifier);
if (!md)
return Exception { NotSupportedError };
std::optional<Vector<uint8_t>> digest = calculateDigest(md, data);
if (!digest)
return Exception { OperationError };
EC_KEY* ecKey = EVP_PKEY_get0_EC_KEY(key.platformKey());
if (!ecKey)
return Exception { OperationError };
int ret = ECDSA_do_verify(digest->data(), digest->size(), sig.get(), ecKey);
return ret == 1;
}
} // namespace WebCore
#endif // ENABLE(WEB_CRYPTO)
|
