blob: 57c096d5c7377f120d6bdc3208196a2ba2942150 [file] [log] [blame]
Paul Bakker2291f6c2011-03-25 14:07:53 +00001/*
Manuel Pégourié-Gonnard6f60cd82015-02-10 10:47:03 +00002 * RSASSA-PSS/SHA-256 signature creation program
Paul Bakker2291f6c2011-03-25 14:07:53 +00003 *
Manuel Pégourié-Gonnard6fb81872015-07-27 11:11:48 +02004 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakker2291f6c2011-03-25 14:07:53 +000018 *
Manuel Pégourié-Gonnardfe446432015-03-06 13:17:10 +000019 * This file is part of mbed TLS (https://tls.mbed.org)
Paul Bakker2291f6c2011-03-25 14:07:53 +000020 */
21
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020022#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000023#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020024#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020025#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020026#endif
Paul Bakker2291f6c2011-03-25 14:07:53 +000027
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020028#if defined(MBEDTLS_PLATFORM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000029#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000030#else
Rich Evans18b78c72015-02-11 14:06:19 +000031#include <stdio.h>
Andres Amaya Garcia3c41e562018-04-29 20:23:38 +010032#include <stdlib.h>
33#define mbedtls_snprintf snprintf
34#define mbedtls_printf printf
Andres Amaya Garcia7d429652018-04-30 22:42:33 +010035#define MBEDTLS_EXIT_SUCCESS EXIT_SUCCESS
Andres Amaya Garcia3c41e562018-04-29 20:23:38 +010036#define MBEDTLS_EXIT_FAILURE EXIT_FAILURE
37#endif /* MBEDTLS_PLATFORM_C */
Rich Evansf90016a2015-01-19 14:26:37 +000038
Manuel Pégourié-Gonnard06d5d612015-05-28 16:23:18 +020039#if !defined(MBEDTLS_MD_C) || !defined(MBEDTLS_ENTROPY_C) || \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020040 !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_SHA256_C) || \
41 !defined(MBEDTLS_PK_PARSE_C) || !defined(MBEDTLS_FS_IO) || \
42 !defined(MBEDTLS_CTR_DRBG_C)
Rich Evans85b05ec2015-02-12 11:37:29 +000043int main( void )
Paul Bakker5690efc2011-05-26 13:16:06 +000044{
Manuel Pégourié-Gonnard06d5d612015-05-28 16:23:18 +020045 mbedtls_printf("MBEDTLS_MD_C and/or MBEDTLS_ENTROPY_C and/or "
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020046 "MBEDTLS_RSA_C and/or MBEDTLS_SHA256_C and/or "
47 "MBEDTLS_PK_PARSE_C and/or MBEDTLS_FS_IO and/or "
48 "MBEDTLS_CTR_DRBG_C not defined.\n");
Paul Bakker5690efc2011-05-26 13:16:06 +000049 return( 0 );
50}
51#else
Manuel Pégourié-Gonnard06d5d612015-05-28 16:23:18 +020052
53#include "mbedtls/entropy.h"
54#include "mbedtls/ctr_drbg.h"
55#include "mbedtls/md.h"
56#include "mbedtls/rsa.h"
57#include "mbedtls/md.h"
58#include "mbedtls/x509.h"
59
60#include <stdio.h>
61#include <string.h>
62
Simon Butcher63cb97e2018-12-06 17:43:31 +000063#if defined( MBEDTLS_CHECK_PARAMS ) && defined(MBEDTLS_PLATFORM_C)
64void mbedtls_param_failed( char* failure_condition, char* file, int line )
65{
66 mbedtls_printf("%s:%i: Input param failed - %sn", file, line, failure_condition );
67 mbedtls_exit( MBEDTLS_EXIT_FAILURE );
68}
69#endif
70
Paul Bakker2291f6c2011-03-25 14:07:53 +000071int main( int argc, char *argv[] )
72{
73 FILE *f;
Paul Bakker0c226102014-04-17 16:02:36 +020074 int ret = 1;
Andres Amaya Garcia3c41e562018-04-29 20:23:38 +010075 int exit_code = MBEDTLS_EXIT_FAILURE;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020076 mbedtls_pk_context pk;
77 mbedtls_entropy_context entropy;
78 mbedtls_ctr_drbg_context ctr_drbg;
Manuel Pégourié-Gonnard102a6202015-08-27 21:51:44 +020079 unsigned char hash[32];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020080 unsigned char buf[MBEDTLS_MPI_MAX_SIZE];
Paul Bakker2291f6c2011-03-25 14:07:53 +000081 char filename[512];
Paul Bakkeref3f8c72013-06-24 13:01:08 +020082 const char *pers = "rsa_sign_pss";
Paul Bakker30520d12013-09-17 11:39:31 +020083 size_t olen = 0;
Paul Bakker2291f6c2011-03-25 14:07:53 +000084
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020085 mbedtls_entropy_init( &entropy );
86 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +020087 mbedtls_ctr_drbg_init( &ctr_drbg );
Paul Bakker2291f6c2011-03-25 14:07:53 +000088
89 if( argc != 3 )
90 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020091 mbedtls_printf( "usage: rsa_sign_pss <key_file> <filename>\n" );
Paul Bakker2291f6c2011-03-25 14:07:53 +000092
Paul Bakkercce9d772011-11-18 14:26:47 +000093#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020094 mbedtls_printf( "\n" );
Paul Bakker2291f6c2011-03-25 14:07:53 +000095#endif
96
97 goto exit;
98 }
99
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200100 mbedtls_printf( "\n . Seeding the random number generator..." );
Paul Bakker508ad5a2011-12-04 17:09:26 +0000101 fflush( stdout );
102
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +0200103 if( ( ret = mbedtls_ctr_drbg_seed( &ctr_drbg, mbedtls_entropy_func, &entropy,
Paul Bakkeref3f8c72013-06-24 13:01:08 +0200104 (const unsigned char *) pers,
105 strlen( pers ) ) ) != 0 )
Paul Bakker508ad5a2011-12-04 17:09:26 +0000106 {
Manuel Pégourié-Gonnardec160c02015-04-28 22:52:30 +0200107 mbedtls_printf( " failed\n ! mbedtls_ctr_drbg_seed returned %d\n", ret );
Paul Bakker508ad5a2011-12-04 17:09:26 +0000108 goto exit;
109 }
110
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200111 mbedtls_printf( "\n . Reading private key from '%s'", argv[1] );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000112 fflush( stdout );
113
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200114 if( ( ret = mbedtls_pk_parse_keyfile( &pk, argv[1], "" ) ) != 0 )
Paul Bakker2291f6c2011-03-25 14:07:53 +0000115 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200116 mbedtls_printf( " failed\n ! Could not read key from '%s'\n", argv[1] );
117 mbedtls_printf( " ! mbedtls_pk_parse_public_keyfile returned %d\n\n", ret );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000118 goto exit;
119 }
120
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200121 if( !mbedtls_pk_can_do( &pk, MBEDTLS_PK_RSA ) )
Paul Bakker30520d12013-09-17 11:39:31 +0200122 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200123 mbedtls_printf( " failed\n ! Key is not an RSA key\n" );
Paul Bakker30520d12013-09-17 11:39:31 +0200124 goto exit;
125 }
126
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200127 mbedtls_rsa_set_padding( mbedtls_pk_rsa( pk ), MBEDTLS_RSA_PKCS_V21, MBEDTLS_MD_SHA256 );
Manuel Pégourié-Gonnard844a4c02014-03-10 21:55:35 +0100128
Paul Bakker2291f6c2011-03-25 14:07:53 +0000129 /*
Manuel Pégourié-Gonnard6f60cd82015-02-10 10:47:03 +0000130 * Compute the SHA-256 hash of the input file,
Paul Bakker2291f6c2011-03-25 14:07:53 +0000131 * then calculate the RSA signature of the hash.
132 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200133 mbedtls_printf( "\n . Generating the RSA/SHA-256 signature" );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000134 fflush( stdout );
135
Manuel Pégourié-Gonnard06d5d612015-05-28 16:23:18 +0200136 if( ( ret = mbedtls_md_file(
137 mbedtls_md_info_from_type( MBEDTLS_MD_SHA256 ),
138 argv[2], hash ) ) != 0 )
Paul Bakker2291f6c2011-03-25 14:07:53 +0000139 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200140 mbedtls_printf( " failed\n ! Could not open or read %s\n\n", argv[2] );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000141 goto exit;
142 }
143
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200144 if( ( ret = mbedtls_pk_sign( &pk, MBEDTLS_MD_SHA256, hash, 0, buf, &olen,
145 mbedtls_ctr_drbg_random, &ctr_drbg ) ) != 0 )
Paul Bakker2291f6c2011-03-25 14:07:53 +0000146 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200147 mbedtls_printf( " failed\n ! mbedtls_pk_sign returned %d\n\n", ret );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000148 goto exit;
149 }
150
151 /*
Manuel Pégourié-Gonnard1d8f2da2015-08-27 21:42:27 +0200152 * Write the signature into <filename>.sig
Paul Bakker2291f6c2011-03-25 14:07:53 +0000153 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200154 mbedtls_snprintf( filename, 512, "%s.sig", argv[2] );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000155
156 if( ( f = fopen( filename, "wb+" ) ) == NULL )
157 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200158 mbedtls_printf( " failed\n ! Could not create %s\n\n", filename );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000159 goto exit;
160 }
161
Paul Bakker30520d12013-09-17 11:39:31 +0200162 if( fwrite( buf, 1, olen, f ) != olen )
Paul Bakker2291f6c2011-03-25 14:07:53 +0000163 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200164 mbedtls_printf( "failed\n ! fwrite failed\n\n" );
Janos Follath98e28a72016-05-31 14:03:54 +0100165 fclose( f );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000166 goto exit;
167 }
168
169 fclose( f );
170
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200171 mbedtls_printf( "\n . Done (created \"%s\")\n\n", filename );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000172
Andres Amaya Garcia3c41e562018-04-29 20:23:38 +0100173 exit_code = MBEDTLS_EXIT_SUCCESS;
174
Paul Bakker2291f6c2011-03-25 14:07:53 +0000175exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200176 mbedtls_pk_free( &pk );
177 mbedtls_ctr_drbg_free( &ctr_drbg );
178 mbedtls_entropy_free( &entropy );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000179
Paul Bakkercce9d772011-11-18 14:26:47 +0000180#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200181 mbedtls_printf( " + Press Enter to exit this program.\n" );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000182 fflush( stdout ); getchar();
183#endif
184
Andres Amaya Garcia3c41e562018-04-29 20:23:38 +0100185 return( exit_code );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000186}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200187#endif /* MBEDTLS_BIGNUM_C && MBEDTLS_ENTROPY_C && MBEDTLS_RSA_C &&
188 MBEDTLS_SHA256_C && MBEDTLS_PK_PARSE_C && MBEDTLS_FS_IO &&
189 MBEDTLS_CTR_DRBG_C */