blob: 2de6eab87c440da44c986f8f2cef538ecbd8edfe [file] [log] [blame]
Paul Bakker2291f6c2011-03-25 14:07:53 +00001/*
2 * RSASSA-PSS/SHA-1 signature verification program
3 *
Paul Bakkercce9d772011-11-18 14:26:47 +00004 * Copyright (C) 2006-2011, Brainspark B.V.
Paul Bakker2291f6c2011-03-25 14:07:53 +00005 *
6 * This file is part of PolarSSL (http://www.polarssl.org)
7 * Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org>
8 *
9 * All rights reserved.
10 *
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License as published by
13 * the Free Software Foundation; either version 2 of the License, or
14 * (at your option) any later version.
15 *
16 * This program is distributed in the hope that it will be useful,
17 * but WITHOUT ANY WARRANTY; without even the implied warranty of
18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
19 * GNU General Public License for more details.
20 *
21 * You should have received a copy of the GNU General Public License along
22 * with this program; if not, write to the Free Software Foundation, Inc.,
23 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
24 */
25
26#ifndef _CRT_SECURE_NO_DEPRECATE
27#define _CRT_SECURE_NO_DEPRECATE 1
28#endif
29
30#include <string.h>
31#include <stdio.h>
32
Paul Bakker5690efc2011-05-26 13:16:06 +000033#include "polarssl/config.h"
34
Paul Bakker2291f6c2011-03-25 14:07:53 +000035#include "polarssl/md.h"
36#include "polarssl/pem.h"
37#include "polarssl/rsa.h"
38#include "polarssl/sha1.h"
39#include "polarssl/x509.h"
40
Paul Bakkeraf5c85f2011-04-18 03:47:52 +000041#if defined _MSC_VER && !defined snprintf
42#define snprintf _snprintf
43#endif
44
Paul Bakker5690efc2011-05-26 13:16:06 +000045#if !defined(POLARSSL_BIGNUM_C) || !defined(POLARSSL_RSA_C) || \
46 !defined(POLARSSL_SHA1_C) || !defined(POLARSSL_X509_PARSE_C) || \
47 !defined(POLARSSL_FS_IO)
Paul Bakkercce9d772011-11-18 14:26:47 +000048int main( int argc, char *argv[] )
Paul Bakker5690efc2011-05-26 13:16:06 +000049{
Paul Bakkercce9d772011-11-18 14:26:47 +000050 ((void) argc);
51 ((void) argv);
52
Paul Bakker5690efc2011-05-26 13:16:06 +000053 printf("POLARSSL_BIGNUM_C and/or POLARSSL_RSA_C and/or "
54 "POLARSSL_SHA1_C and/or POLARSSL_X509_PARSE_C and/or "
55 "POLARSSL_FS_IO not defined.\n");
56 return( 0 );
57}
58#else
Paul Bakker2291f6c2011-03-25 14:07:53 +000059int main( int argc, char *argv[] )
60{
61 FILE *f;
Paul Bakker39148402014-04-17 16:02:36 +020062 int ret = 1;
Paul Bakker23986e52011-04-24 08:57:21 +000063 size_t i;
Paul Bakker2291f6c2011-03-25 14:07:53 +000064 rsa_context rsa;
65 unsigned char hash[20];
Paul Bakker1d569582012-10-03 20:35:44 +000066 unsigned char buf[POLARSSL_MPI_MAX_SIZE];
Paul Bakker2291f6c2011-03-25 14:07:53 +000067 char filename[512];
68
Paul Bakker39148402014-04-17 16:02:36 +020069 rsa_init( &rsa, RSA_PKCS_V21, POLARSSL_MD_SHA1 );
70
Paul Bakker2291f6c2011-03-25 14:07:53 +000071 if( argc != 3 )
72 {
73 printf( "usage: rsa_verify_pss <key_file> <filename>\n" );
74
Paul Bakkercce9d772011-11-18 14:26:47 +000075#if defined(_WIN32)
Paul Bakker2291f6c2011-03-25 14:07:53 +000076 printf( "\n" );
77#endif
78
79 goto exit;
80 }
81
82 printf( "\n . Reading public key from '%s'", argv[1] );
83 fflush( stdout );
84
Paul Bakker2291f6c2011-03-25 14:07:53 +000085 if( ( ret = x509parse_public_keyfile( &rsa, argv[1] ) ) != 0 )
86 {
87 printf( " failed\n ! x509parse_public_key returned %d\n\n", ret );
88 goto exit;
89 }
90
91 /*
92 * Extract the RSA signature from the text file
93 */
94 ret = 1;
95 snprintf( filename, 512, "%s.sig", argv[2] );
96
97 if( ( f = fopen( filename, "rb" ) ) == NULL )
98 {
99 printf( "\n ! Could not open %s\n\n", filename );
100 goto exit;
101 }
102
103 i = fread( buf, 1, rsa.len, f );
104
105 fclose( f );
106
107 if( i != rsa.len )
108 {
109 printf( "\n ! Invalid RSA signature format\n\n" );
110 goto exit;
111 }
112
113 /*
114 * Compute the SHA-1 hash of the input file and compare
115 * it with the hash decrypted from the RSA signature.
116 */
117 printf( "\n . Verifying the RSA/SHA-1 signature" );
118 fflush( stdout );
119
120 if( ( ret = sha1_file( argv[2], hash ) ) != 0 )
121 {
122 printf( " failed\n ! Could not open or read %s\n\n", argv[2] );
123 goto exit;
124 }
125
Paul Bakker43f97992013-09-23 11:23:31 +0200126 if( ( ret = rsa_pkcs1_verify( &rsa, NULL, NULL, RSA_PUBLIC, SIG_RSA_SHA1,
Paul Bakker2291f6c2011-03-25 14:07:53 +0000127 20, hash, buf ) ) != 0 )
128 {
129 printf( " failed\n ! rsa_pkcs1_verify returned %d\n\n", ret );
130 goto exit;
131 }
132
133 printf( "\n . OK (the decrypted SHA-1 hash matches)\n\n" );
134
135 ret = 0;
136
137exit:
138
Paul Bakkercce9d772011-11-18 14:26:47 +0000139#if defined(_WIN32)
Paul Bakker2291f6c2011-03-25 14:07:53 +0000140 printf( " + Press Enter to exit this program.\n" );
141 fflush( stdout ); getchar();
142#endif
143
144 return( ret );
145}
Paul Bakker5690efc2011-05-26 13:16:06 +0000146#endif /* POLARSSL_BIGNUM_C && POLARSSL_RSA_C && POLARSSL_SHA1_C &&
147 POLARSSL_X509_PARSE_C && POLARSSL_FS_IO */