mirror of
https://github.com/pocoproject/poco.git
synced 2025-10-27 11:06:50 +01:00
53e6d9efaa
the hash before signing. That way we can then support RSA signatures with any hash supported by OpenSSL, not only MD5 and SHA1. It was also required a new method on DigestEngine to obtain the NID (numeric ID) of the algorithm, to be used on the OpenSSL RSA_sign call.
120 lines
3.2 KiB
C++
120 lines
3.2 KiB
C++
//
|
|
// RSADigestEngine.cpp
|
|
//
|
|
// $Id: //poco/1.4/Crypto/src/RSADigestEngine.cpp#1 $
|
|
//
|
|
// Library: Crypto
|
|
// Package: RSA
|
|
// Module: RSADigestEngine
|
|
//
|
|
// Copyright (c) 2008, Applied Informatics Software Engineering GmbH.
|
|
// and Contributors.
|
|
//
|
|
// Permission is hereby granted, free of charge, to any person or organization
|
|
// obtaining a copy of the software and accompanying documentation covered by
|
|
// this license (the "Software") to use, reproduce, display, distribute,
|
|
// execute, and transmit the Software, and to prepare derivative works of the
|
|
// Software, and to permit third-parties to whom the Software is furnished to
|
|
// do so, all subject to the following:
|
|
//
|
|
// The copyright notices in the Software and this entire statement, including
|
|
// the above license grant, this restriction and the following disclaimer,
|
|
// must be included in all copies of the Software, in whole or in part, and
|
|
// all derivative works of the Software, unless such copies or derivative
|
|
// works are solely in the form of machine-executable object code generated by
|
|
// a source language processor.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
// FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT
|
|
// SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE
|
|
// FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE,
|
|
// ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
|
|
// DEALINGS IN THE SOFTWARE.
|
|
//
|
|
|
|
|
|
#include "Poco/Crypto/RSADigestEngine.h"
|
|
#include <openssl/pem.h>
|
|
#include <openssl/evp.h>
|
|
|
|
|
|
namespace Poco {
|
|
namespace Crypto {
|
|
|
|
|
|
RSADigestEngine::RSADigestEngine(const RSAKey& key, DigestType digestType):
|
|
_key(key),
|
|
_engine(digestType == DIGEST_MD5 ? "MD5" : "SHA1")
|
|
{
|
|
}
|
|
|
|
RSADigestEngine::RSADigestEngine(const RSAKey& key, const std::string &algorithm):
|
|
_key(key),
|
|
_engine(algorithm)
|
|
{
|
|
}
|
|
|
|
|
|
RSADigestEngine::~RSADigestEngine()
|
|
{
|
|
}
|
|
|
|
|
|
std::size_t RSADigestEngine::digestLength() const
|
|
{
|
|
return _engine.digestLength();
|
|
}
|
|
|
|
|
|
void RSADigestEngine::reset()
|
|
{
|
|
_engine.reset();
|
|
_digest.clear();
|
|
_signature.clear();
|
|
}
|
|
|
|
|
|
const DigestEngine::Digest& RSADigestEngine::digest()
|
|
{
|
|
if (_digest.empty())
|
|
{
|
|
_digest = _engine.digest();
|
|
}
|
|
return _digest;
|
|
}
|
|
|
|
|
|
const DigestEngine::Digest& RSADigestEngine::signature()
|
|
{
|
|
if (_signature.empty())
|
|
{
|
|
digest();
|
|
_signature.resize(_key.size());
|
|
unsigned sigLen = static_cast<unsigned>(_signature.size());
|
|
RSA_sign(_engine.nid(), &_digest[0], static_cast<unsigned>(_digest.size()), &_signature[0], &sigLen, _key.impl()->getRSA());
|
|
// truncate _sig to sigLen
|
|
if (sigLen < _signature.size())
|
|
_signature.resize(sigLen);
|
|
}
|
|
return _signature;
|
|
}
|
|
|
|
|
|
bool RSADigestEngine::verify(const DigestEngine::Digest& sig)
|
|
{
|
|
digest();
|
|
DigestEngine::Digest sigCpy = sig; // copy becausse RSA_verify can modify sigCpy
|
|
int ret = RSA_verify(_engine.nid(), &_digest[0], static_cast<unsigned>(_digest.size()), &sigCpy[0], static_cast<unsigned>(sigCpy.size()), _key.impl()->getRSA());
|
|
return ret != 0;
|
|
}
|
|
|
|
|
|
void RSADigestEngine::updateImpl(const void* data, std::size_t length)
|
|
{
|
|
_engine.update(data, length);
|
|
}
|
|
|
|
|
|
} } // namespace Poco::Crypto
|