15821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Copyright (c) 2012 The Chromium Authors. All rights reserved. 25821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be 35821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// found in the LICENSE file. 45821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 55821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "crypto/signature_creator.h" 65821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 75821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include <openssl/evp.h> 87dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch#include <openssl/rsa.h> 95821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "base/logging.h" 115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "base/memory/scoped_ptr.h" 125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "base/stl_util.h" 135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "crypto/openssl_util.h" 145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#include "crypto/rsa_private_key.h" 15116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch#include "crypto/scoped_openssl_types.h" 165821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace crypto { 185821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 191320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tuccinamespace { 201320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci 211320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucciconst EVP_MD* ToOpenSSLDigest(SignatureCreator::HashAlgorithm hash_alg) { 221320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci switch (hash_alg) { 231320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci case SignatureCreator::SHA1: 241320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci return EVP_sha1(); 251320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci case SignatureCreator::SHA256: 261320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci return EVP_sha256(); 271320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci } 281320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci return NULL; 291320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci} 301320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci 311320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucciint ToOpenSSLDigestType(SignatureCreator::HashAlgorithm hash_alg) { 321320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci switch (hash_alg) { 331320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci case SignatureCreator::SHA1: 341320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci return NID_sha1; 351320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci case SignatureCreator::SHA256: 361320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci return NID_sha256; 371320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci } 381320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci return NID_undef; 391320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci} 401320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci 411320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci} // namespace 421320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci 435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// static 441320f92c476a1ad9d19dba2a48c72b75566198e9Primiano TucciSignatureCreator* SignatureCreator::Create(RSAPrivateKey* key, 451320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci HashAlgorithm hash_alg) { 465821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) OpenSSLErrStackTracer err_tracer(FROM_HERE); 475821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) scoped_ptr<SignatureCreator> result(new SignatureCreator); 485821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) result->key_ = key; 491320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci const EVP_MD* const digest = ToOpenSSLDigest(hash_alg); 501320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci DCHECK(digest); 511320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci if (!digest) { 521320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci return NULL; 531320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci } 541320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci if (!EVP_SignInit_ex(result->sign_context_, digest, NULL)) 555821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return NULL; 565821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return result.release(); 575821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 585821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 597dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch// static 607dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdochbool SignatureCreator::Sign(RSAPrivateKey* key, 611320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci HashAlgorithm hash_alg, 627dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch const uint8* data, 637dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch int data_len, 647dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch std::vector<uint8>* signature) { 65116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch ScopedRSA rsa_key(EVP_PKEY_get1_RSA(key->key())); 667dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch if (!rsa_key) 677dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch return false; 68116680a4aac90f2aa7413d9095a592090648e557Ben Murdoch signature->resize(RSA_size(rsa_key.get())); 697dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch 707dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch unsigned int len = 0; 711320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci bool success = RSA_sign(ToOpenSSLDigestType(hash_alg), data, data_len, 721320f92c476a1ad9d19dba2a48c72b75566198e9Primiano Tucci vector_as_array(signature), &len, rsa_key.get()); 737dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch if (!success) { 747dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch signature->clear(); 757dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch return false; 767dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch } 777dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch signature->resize(len); 787dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch return true; 797dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch} 807dbb3d5cf0c15f500944d211057644d6a2f37371Ben Murdoch 815821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)SignatureCreator::SignatureCreator() 825821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) : sign_context_(EVP_MD_CTX_create()) { 835821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 845821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 855821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)SignatureCreator::~SignatureCreator() { 865821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) EVP_MD_CTX_destroy(sign_context_); 875821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 885821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 895821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool SignatureCreator::Update(const uint8* data_part, int data_part_len) { 905821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) OpenSSLErrStackTracer err_tracer(FROM_HERE); 915821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return EVP_SignUpdate(sign_context_, data_part, data_part_len) == 1; 925821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 935821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 945821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool SignatureCreator::Final(std::vector<uint8>* signature) { 955821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) OpenSSLErrStackTracer err_tracer(FROM_HERE); 965821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) EVP_PKEY* key = key_->key(); 975821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) signature->resize(EVP_PKEY_size(key)); 985821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 995821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) unsigned int len = 0; 1005821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) int rv = EVP_SignFinal(sign_context_, vector_as_array(signature), &len, key); 1015821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) if (!rv) { 1025821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) signature->clear(); 1035821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return false; 1045821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) } 1055821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) signature->resize(len); 1065821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) return true; 1075821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} 1085821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles) 1095821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)} // namespace crypto 110