Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 1 | /* |
Manuel Pégourié-Gonnard | 6f60cd8 | 2015-02-10 10:47:03 +0000 | [diff] [blame] | 2 | * RSASSA-PSS/SHA-256 signature creation program |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 3 | * |
Manuel Pégourié-Gonnard | 6fb8187 | 2015-07-27 11:11:48 +0200 | [diff] [blame] | 4 | * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved |
Manuel Pégourié-Gonnard | 37ff140 | 2015-09-04 14:21:07 +0200 | [diff] [blame] | 5 | * SPDX-License-Identifier: Apache-2.0 |
| 6 | * |
| 7 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
| 8 | * not use this file except in compliance with the License. |
| 9 | * You may obtain a copy of the License at |
| 10 | * |
| 11 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 12 | * |
| 13 | * Unless required by applicable law or agreed to in writing, software |
| 14 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 15 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 16 | * See the License for the specific language governing permissions and |
| 17 | * limitations under the License. |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 18 | * |
Manuel Pégourié-Gonnard | fe44643 | 2015-03-06 13:17:10 +0000 | [diff] [blame] | 19 | * This file is part of mbed TLS (https://tls.mbed.org) |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 20 | */ |
| 21 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 22 | #if !defined(MBEDTLS_CONFIG_FILE) |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 23 | #include "mbedtls/config.h" |
Manuel Pégourié-Gonnard | cef4ad2 | 2014-04-29 12:39:06 +0200 | [diff] [blame] | 24 | #else |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 25 | #include MBEDTLS_CONFIG_FILE |
Manuel Pégourié-Gonnard | cef4ad2 | 2014-04-29 12:39:06 +0200 | [diff] [blame] | 26 | #endif |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 27 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 28 | #if defined(MBEDTLS_PLATFORM_C) |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 29 | #include "mbedtls/platform.h" |
Rich Evans | f90016a | 2015-01-19 14:26:37 +0000 | [diff] [blame] | 30 | #else |
Rich Evans | 18b78c7 | 2015-02-11 14:06:19 +0000 | [diff] [blame] | 31 | #include <stdio.h> |
Andres Amaya Garcia | 3c41e56 | 2018-04-29 20:23:38 +0100 | [diff] [blame] | 32 | #include <stdlib.h> |
| 33 | #define mbedtls_snprintf snprintf |
| 34 | #define mbedtls_printf printf |
Andres Amaya Garcia | 7d42965 | 2018-04-30 22:42:33 +0100 | [diff] [blame] | 35 | #define MBEDTLS_EXIT_SUCCESS EXIT_SUCCESS |
Andres Amaya Garcia | 3c41e56 | 2018-04-29 20:23:38 +0100 | [diff] [blame] | 36 | #define MBEDTLS_EXIT_FAILURE EXIT_FAILURE |
| 37 | #endif /* MBEDTLS_PLATFORM_C */ |
Rich Evans | f90016a | 2015-01-19 14:26:37 +0000 | [diff] [blame] | 38 | |
Manuel Pégourié-Gonnard | 06d5d61 | 2015-05-28 16:23:18 +0200 | [diff] [blame] | 39 | #if !defined(MBEDTLS_MD_C) || !defined(MBEDTLS_ENTROPY_C) || \ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 40 | !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_SHA256_C) || \ |
| 41 | !defined(MBEDTLS_PK_PARSE_C) || !defined(MBEDTLS_FS_IO) || \ |
| 42 | !defined(MBEDTLS_CTR_DRBG_C) |
Rich Evans | 85b05ec | 2015-02-12 11:37:29 +0000 | [diff] [blame] | 43 | int main( void ) |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 44 | { |
Manuel Pégourié-Gonnard | 06d5d61 | 2015-05-28 16:23:18 +0200 | [diff] [blame] | 45 | mbedtls_printf("MBEDTLS_MD_C and/or MBEDTLS_ENTROPY_C and/or " |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 46 | "MBEDTLS_RSA_C and/or MBEDTLS_SHA256_C and/or " |
| 47 | "MBEDTLS_PK_PARSE_C and/or MBEDTLS_FS_IO and/or " |
| 48 | "MBEDTLS_CTR_DRBG_C not defined.\n"); |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 49 | return( 0 ); |
| 50 | } |
| 51 | #else |
Manuel Pégourié-Gonnard | 06d5d61 | 2015-05-28 16:23:18 +0200 | [diff] [blame] | 52 | |
| 53 | #include "mbedtls/entropy.h" |
| 54 | #include "mbedtls/ctr_drbg.h" |
| 55 | #include "mbedtls/md.h" |
| 56 | #include "mbedtls/rsa.h" |
| 57 | #include "mbedtls/md.h" |
| 58 | #include "mbedtls/x509.h" |
| 59 | |
| 60 | #include <stdio.h> |
| 61 | #include <string.h> |
| 62 | |
Simon Butcher | 63cb97e | 2018-12-06 17:43:31 +0000 | [diff] [blame^] | 63 | #if defined( MBEDTLS_CHECK_PARAMS ) && defined(MBEDTLS_PLATFORM_C) |
| 64 | void mbedtls_param_failed( char* failure_condition, char* file, int line ) |
| 65 | { |
| 66 | mbedtls_printf("%s:%i: Input param failed - %sn", file, line, failure_condition ); |
| 67 | mbedtls_exit( MBEDTLS_EXIT_FAILURE ); |
| 68 | } |
| 69 | #endif |
| 70 | |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 71 | int main( int argc, char *argv[] ) |
| 72 | { |
| 73 | FILE *f; |
Paul Bakker | 0c22610 | 2014-04-17 16:02:36 +0200 | [diff] [blame] | 74 | int ret = 1; |
Andres Amaya Garcia | 3c41e56 | 2018-04-29 20:23:38 +0100 | [diff] [blame] | 75 | int exit_code = MBEDTLS_EXIT_FAILURE; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 76 | mbedtls_pk_context pk; |
| 77 | mbedtls_entropy_context entropy; |
| 78 | mbedtls_ctr_drbg_context ctr_drbg; |
Manuel Pégourié-Gonnard | 102a620 | 2015-08-27 21:51:44 +0200 | [diff] [blame] | 79 | unsigned char hash[32]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 80 | unsigned char buf[MBEDTLS_MPI_MAX_SIZE]; |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 81 | char filename[512]; |
Paul Bakker | ef3f8c7 | 2013-06-24 13:01:08 +0200 | [diff] [blame] | 82 | const char *pers = "rsa_sign_pss"; |
Paul Bakker | 30520d1 | 2013-09-17 11:39:31 +0200 | [diff] [blame] | 83 | size_t olen = 0; |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 84 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 85 | mbedtls_entropy_init( &entropy ); |
| 86 | mbedtls_pk_init( &pk ); |
Manuel Pégourié-Gonnard | ec160c0 | 2015-04-28 22:52:30 +0200 | [diff] [blame] | 87 | mbedtls_ctr_drbg_init( &ctr_drbg ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 88 | |
| 89 | if( argc != 3 ) |
| 90 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 91 | mbedtls_printf( "usage: rsa_sign_pss <key_file> <filename>\n" ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 92 | |
Paul Bakker | cce9d77 | 2011-11-18 14:26:47 +0000 | [diff] [blame] | 93 | #if defined(_WIN32) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 94 | mbedtls_printf( "\n" ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 95 | #endif |
| 96 | |
| 97 | goto exit; |
| 98 | } |
| 99 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 100 | mbedtls_printf( "\n . Seeding the random number generator..." ); |
Paul Bakker | 508ad5a | 2011-12-04 17:09:26 +0000 | [diff] [blame] | 101 | fflush( stdout ); |
| 102 | |
Manuel Pégourié-Gonnard | ec160c0 | 2015-04-28 22:52:30 +0200 | [diff] [blame] | 103 | if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func, &entropy, |
Paul Bakker | ef3f8c7 | 2013-06-24 13:01:08 +0200 | [diff] [blame] | 104 | (const unsigned char *) pers, |
| 105 | strlen( pers ) ) ) != 0 ) |
Paul Bakker | 508ad5a | 2011-12-04 17:09:26 +0000 | [diff] [blame] | 106 | { |
Manuel Pégourié-Gonnard | ec160c0 | 2015-04-28 22:52:30 +0200 | [diff] [blame] | 107 | mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned %d\n", ret ); |
Paul Bakker | 508ad5a | 2011-12-04 17:09:26 +0000 | [diff] [blame] | 108 | goto exit; |
| 109 | } |
| 110 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 111 | mbedtls_printf( "\n . Reading private key from '%s'", argv[1] ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 112 | fflush( stdout ); |
| 113 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 114 | if( ( ret = mbedtls_pk_parse_keyfile( &pk, argv[1], "" ) ) != 0 ) |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 115 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 116 | mbedtls_printf( " failed\n ! Could not read key from '%s'\n", argv[1] ); |
| 117 | mbedtls_printf( " ! mbedtls_pk_parse_public_keyfile returned %d\n\n", ret ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 118 | goto exit; |
| 119 | } |
| 120 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 121 | if( !mbedtls_pk_can_do( &pk, MBEDTLS_PK_RSA ) ) |
Paul Bakker | 30520d1 | 2013-09-17 11:39:31 +0200 | [diff] [blame] | 122 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 123 | mbedtls_printf( " failed\n ! Key is not an RSA key\n" ); |
Paul Bakker | 30520d1 | 2013-09-17 11:39:31 +0200 | [diff] [blame] | 124 | goto exit; |
| 125 | } |
| 126 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 127 | mbedtls_rsa_set_padding( mbedtls_pk_rsa( pk ), MBEDTLS_RSA_PKCS_V21, MBEDTLS_MD_SHA256 ); |
Manuel Pégourié-Gonnard | 844a4c0 | 2014-03-10 21:55:35 +0100 | [diff] [blame] | 128 | |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 129 | /* |
Manuel Pégourié-Gonnard | 6f60cd8 | 2015-02-10 10:47:03 +0000 | [diff] [blame] | 130 | * Compute the SHA-256 hash of the input file, |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 131 | * then calculate the RSA signature of the hash. |
| 132 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 133 | mbedtls_printf( "\n . Generating the RSA/SHA-256 signature" ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 134 | fflush( stdout ); |
| 135 | |
Manuel Pégourié-Gonnard | 06d5d61 | 2015-05-28 16:23:18 +0200 | [diff] [blame] | 136 | if( ( ret = mbedtls_md_file( |
| 137 | mbedtls_md_info_from_type( MBEDTLS_MD_SHA256 ), |
| 138 | argv[2], hash ) ) != 0 ) |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 139 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 140 | mbedtls_printf( " failed\n ! Could not open or read %s\n\n", argv[2] ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 141 | goto exit; |
| 142 | } |
| 143 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 144 | if( ( ret = mbedtls_pk_sign( &pk, MBEDTLS_MD_SHA256, hash, 0, buf, &olen, |
| 145 | mbedtls_ctr_drbg_random, &ctr_drbg ) ) != 0 ) |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 146 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 147 | mbedtls_printf( " failed\n ! mbedtls_pk_sign returned %d\n\n", ret ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 148 | goto exit; |
| 149 | } |
| 150 | |
| 151 | /* |
Manuel Pégourié-Gonnard | 1d8f2da | 2015-08-27 21:42:27 +0200 | [diff] [blame] | 152 | * Write the signature into <filename>.sig |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 153 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 154 | mbedtls_snprintf( filename, 512, "%s.sig", argv[2] ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 155 | |
| 156 | if( ( f = fopen( filename, "wb+" ) ) == NULL ) |
| 157 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 158 | mbedtls_printf( " failed\n ! Could not create %s\n\n", filename ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 159 | goto exit; |
| 160 | } |
| 161 | |
Paul Bakker | 30520d1 | 2013-09-17 11:39:31 +0200 | [diff] [blame] | 162 | if( fwrite( buf, 1, olen, f ) != olen ) |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 163 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 164 | mbedtls_printf( "failed\n ! fwrite failed\n\n" ); |
Janos Follath | 98e28a7 | 2016-05-31 14:03:54 +0100 | [diff] [blame] | 165 | fclose( f ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 166 | goto exit; |
| 167 | } |
| 168 | |
| 169 | fclose( f ); |
| 170 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 171 | mbedtls_printf( "\n . Done (created \"%s\")\n\n", filename ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 172 | |
Andres Amaya Garcia | 3c41e56 | 2018-04-29 20:23:38 +0100 | [diff] [blame] | 173 | exit_code = MBEDTLS_EXIT_SUCCESS; |
| 174 | |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 175 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 176 | mbedtls_pk_free( &pk ); |
| 177 | mbedtls_ctr_drbg_free( &ctr_drbg ); |
| 178 | mbedtls_entropy_free( &entropy ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 179 | |
Paul Bakker | cce9d77 | 2011-11-18 14:26:47 +0000 | [diff] [blame] | 180 | #if defined(_WIN32) |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 181 | mbedtls_printf( " + Press Enter to exit this program.\n" ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 182 | fflush( stdout ); getchar(); |
| 183 | #endif |
| 184 | |
Andres Amaya Garcia | 3c41e56 | 2018-04-29 20:23:38 +0100 | [diff] [blame] | 185 | return( exit_code ); |
Paul Bakker | 2291f6c | 2011-03-25 14:07:53 +0000 | [diff] [blame] | 186 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 187 | #endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C && MBEDTLS_RSA_C && |
| 188 | MBEDTLS_SHA256_C && MBEDTLS_PK_PARSE_C && MBEDTLS_FS_IO && |
| 189 | MBEDTLS_CTR_DRBG_C */ |