1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
|
#include "../PICA_signverify.h"
#include <openssl/rand.h>
#include <openssl/pem.h>
#include <openssl/x509.h>
#include <stdio.h>
int main(int argc, char **argv)
{
char databuf[512];
void* dataptrs[2];
int datalengths[2];
unsigned char *sig;
int siglen;
int ret;
EVP_PKEY *privkey, *pubkey;
FILE *f;
X509 *x;
RSA *rsa;
OpenSSL_add_all_algorithms();
RAND_pseudo_bytes(databuf, sizeof databuf);
dataptrs[0] = databuf;
datalengths[0] = sizeof databuf;
dataptrs[1] = NULL;
datalengths[1] = 0;
f = fopen(argv[1], "r");
if (!f)
{
fprintf(stderr, "failed to open %s\n", argv[1]);
return -1;
}
privkey = EVP_PKEY_new();
x = PEM_read_X509(f, 0, 0, 0);
if (!x)
{
fprintf(stderr, "failed to read X.509 cert from file");
return -1;
}
//pubkey = x->cert_info->key->pkey;
pubkey = X509_get_pubkey(x);
if (!pubkey)
{
fprintf(stderr, "no pubkey found");
}
//fclose(f);
//f = fopen(argv[1], "r");
rsa = PEM_read_RSAPrivateKey(f, NULL, NULL, NULL);
fclose(f);
if (!rsa)
{
fprintf(stderr, "failed to read RSA private key from file");
return -1;
}
ret = EVP_PKEY_set1_RSA(privkey, rsa);
ret = PICA_do_signature(privkey, dataptrs, datalengths, &sig, &siglen);
ret = PICA_signverify(pubkey, dataptrs, datalengths, sig, siglen);
printf("signature length is %i octets\n", siglen);
if (ret != 1)
{
fprintf(stderr, "signature verification failed\n");
return -1;
}
databuf[0] += 1;//modify data
ret = PICA_signverify(pubkey, dataptrs, datalengths, sig, siglen);
if (ret == 1)
{
fprintf(stderr, "err signature matched on corrupted data!\n");
return -1;
}
free(sig);
RSA_free(rsa);
EVP_PKEY_free(pubkey);
EVP_PKEY_free(privkey);
X509_free(x);
return 0;
}
|
