mbedtls ecdsa使用样例

Nafisa ·
更新时间:2024-09-20
· 985 次阅读

该code是基于最新的mbedtls所列出的,样例的代码路径如下所示
mbedtls/crypto/programs/pkey/ecdsa.c
具体的code如下所示

#if !defined(MBEDTLS_CONFIG_FILE) #include "mbedtls/config.h" #else #include MBEDTLS_CONFIG_FILE #endif #if defined(MBEDTLS_PLATFORM_C) #include "mbedtls/platform.h" #else #include #include #define mbedtls_printf printf #define mbedtls_exit exit #define MBEDTLS_EXIT_SUCCESS EXIT_SUCCESS #define MBEDTLS_EXIT_FAILURE EXIT_FAILURE #endif /* MBEDTLS_PLATFORM_C */ #if defined(MBEDTLS_ECDSA_C) && \ defined(MBEDTLS_ENTROPY_C) && defined(MBEDTLS_CTR_DRBG_C) #include "mbedtls/entropy.h" #include "mbedtls/ctr_drbg.h" #include "mbedtls/ecdsa.h" #include "mbedtls/sha256.h" #include #endif /* * Uncomment to show key and signature details */ #define VERBOSE /* * Uncomment to force use of a specific curve */ #define ECPARAMS MBEDTLS_ECP_DP_SECP192R1 #if !defined(ECPARAMS) #define ECPARAMS mbedtls_ecp_curve_list()->grp_id #endif #if !defined(MBEDTLS_ECDSA_C) || !defined(MBEDTLS_SHA256_C) || \ !defined(MBEDTLS_ENTROPY_C) || !defined(MBEDTLS_CTR_DRBG_C) int main( void ) { mbedtls_printf("MBEDTLS_ECDSA_C and/or MBEDTLS_SHA256_C and/or " "MBEDTLS_ENTROPY_C and/or MBEDTLS_CTR_DRBG_C not defined\n"); return( 0 ); } #else #if defined(VERBOSE) static void dump_buf( const char *title, unsigned char *buf, size_t len ) { size_t i; mbedtls_printf( "%s", title ); for( i = 0; i grp, &key->Q, MBEDTLS_ECP_PF_UNCOMPRESSED, &len, buf, sizeof buf ) != 0 ) { mbedtls_printf("internal error\n"); return; } dump_buf( title, buf, len ); } #else #define dump_buf( a, b, c ) #define dump_pubkey( a, b ) #endif int main( int argc, char *argv[] ) { int ret = 1; int exit_code = MBEDTLS_EXIT_FAILURE; mbedtls_ecdsa_context ctx_sign, ctx_verify; mbedtls_entropy_context entropy; mbedtls_ctr_drbg_context ctr_drbg; unsigned char message[100]; unsigned char hash[32]; unsigned char sig[MBEDTLS_ECDSA_MAX_LEN]; size_t sig_len; const char *pers = "ecdsa"; ((void) argv); mbedtls_ecdsa_init( &ctx_sign ); /*初始化ecdsa sign结构体*/ mbedtls_ecdsa_init( &ctx_verify ); /*初始化ecdsa verify结构体*/ mbedtls_ctr_drbg_init( &ctr_drbg );/*初始化ctr drbg结构体,用于随机数的生成*/ memset( sig, 0, sizeof( sig ) ); memset( message, 0x25, sizeof( message ) ); if( argc != 1 ) { mbedtls_printf( "usage: ecdsa\n" ); #if defined(_WIN32) mbedtls_printf( "\n" ); #endif goto exit; } /* * Generate a key pair for signing */ mbedtls_printf( "\n . Seeding the random number generator..." ); fflush( stdout ); /*用于随机数的生成*/ mbedtls_entropy_init( &entropy ); if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func, &entropy, (const unsigned char *) pers, strlen( pers ) ) ) != 0 ) { mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned %d\n", ret ); goto exit; } mbedtls_printf( " ok\n . Generating key pair..." ); fflush( stdout ); /*生成一对公私钥*/ if( ( ret = mbedtls_ecdsa_genkey( &ctx_sign, ECPARAMS, mbedtls_ctr_drbg_random, &ctr_drbg ) ) != 0 ) { mbedtls_printf( " failed\n ! mbedtls_ecdsa_genkey returned %d\n", ret ); goto exit; } mbedtls_printf( " ok (key size: %d bits)\n", (int) ctx_sign.grp.pbits ); /*dump 公钥的数据*/ dump_pubkey( " + Public key: ", &ctx_sign ); /* * Compute message hash */ mbedtls_printf( " . Computing message hash..." ); fflush( stdout ); /*生成一段数据的hash值*/ if( ( ret = mbedtls_sha256_ret( message, sizeof( message ), hash, 0 ) ) != 0 ) { mbedtls_printf( " failed\n ! mbedtls_sha256_ret returned %d\n", ret ); goto exit; } mbedtls_printf( " ok\n" ); dump_buf( " + Hash: ", hash, sizeof( hash ) ); /* * Sign message hash */ mbedtls_printf( " . Signing message hash..." ); fflush( stdout ); /*生成签名*/ if( ( ret = mbedtls_ecdsa_write_signature( &ctx_sign, MBEDTLS_MD_SHA256, hash, sizeof( hash ), sig, &sig_len, mbedtls_ctr_drbg_random, &ctr_drbg ) ) != 0 ) { mbedtls_printf( " failed\n ! mbedtls_ecdsa_genkey returned %d\n", ret ); goto exit; } mbedtls_printf( " ok (signature length = %u)\n", (unsigned int) sig_len ); /*dump签名数据的信息*/ dump_buf( " + Signature: ", sig, sig_len ); /* * Transfer public information to verifying context * * We could use the same context for verification and signatures, but we * chose to use a new one in order to make it clear that the verifying * context only needs the public key (Q), and not the private key (d). */ mbedtls_printf( " . Preparing verification context..." ); fflush( stdout ); if( ( ret = mbedtls_ecp_group_copy( &ctx_verify.grp, &ctx_sign.grp ) ) != 0 ) { mbedtls_printf( " failed\n ! mbedtls_ecp_group_copy returned %d\n", ret ); goto exit; } if( ( ret = mbedtls_ecp_copy( &ctx_verify.Q, &ctx_sign.Q ) ) != 0 ) { mbedtls_printf( " failed\n ! mbedtls_ecp_copy returned %d\n", ret ); goto exit; } /* * Verify signature */ mbedtls_printf( " ok\n . Verifying signature..." ); fflush( stdout ); if( ( ret = mbedtls_ecdsa_read_signature( &ctx_verify, hash, sizeof( hash ), sig, sig_len ) ) != 0 ) { mbedtls_printf( " failed\n ! mbedtls_ecdsa_read_signature returned %d\n", ret ); goto exit; } mbedtls_printf( " ok\n" ); exit_code = MBEDTLS_EXIT_SUCCESS; exit: #if defined(_WIN32) mbedtls_printf( " + Press Enter to exit this program.\n" ); fflush( stdout ); getchar(); #endif mbedtls_ecdsa_free( &ctx_verify ); mbedtls_ecdsa_free( &ctx_sign ); mbedtls_ctr_drbg_free( &ctr_drbg ); mbedtls_entropy_free( &entropy ); return( exit_code ); } #endif /* MBEDTLS_ECDSA_C && MBEDTLS_ENTROPY_C && MBEDTLS_CTR_DRBG_C && ECPARAMS */
作者:田园诗人之园



样例

需要 登录 后方可回复, 如果你还没有账号请 注册新账号