forked from hyperledger/fabric
-
Notifications
You must be signed in to change notification settings - Fork 0
/
ecdsa.go
115 lines (91 loc) · 2.7 KB
/
ecdsa.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
/*
Copyright IBM Corp. 2016 All Rights Reserved.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package primitives
import (
"crypto/ecdsa"
"crypto/rand"
"encoding/asn1"
"math/big"
)
// ECDSASignature represents an ECDSA signature
type ECDSASignature struct {
R, S *big.Int
}
// NewECDSAKey generates a new ECDSA Key
func NewECDSAKey() (*ecdsa.PrivateKey, error) {
return ecdsa.GenerateKey(GetDefaultCurve(), rand.Reader)
}
// ECDSASignDirect signs
func ECDSASignDirect(signKey interface{}, msg []byte) (*big.Int, *big.Int, error) {
temp := signKey.(*ecdsa.PrivateKey)
h := Hash(msg)
r, s, err := ecdsa.Sign(rand.Reader, temp, h)
if err != nil {
return nil, nil, err
}
return r, s, nil
}
// ECDSASign signs
func ECDSASign(signKey interface{}, msg []byte) ([]byte, error) {
temp := signKey.(*ecdsa.PrivateKey)
h := Hash(msg)
r, s, err := ecdsa.Sign(rand.Reader, temp, h)
if err != nil {
return nil, err
}
// R, _ := r.MarshalText()
// S, _ := s.MarshalText()
//
// fmt.Printf("r [%s], s [%s]\n", R, S)
raw, err := asn1.Marshal(ECDSASignature{r, s})
if err != nil {
return nil, err
}
return raw, nil
}
// ECDSAVerify verifies
func ECDSAVerify(verKey interface{}, msg, signature []byte) (bool, error) {
ecdsaSignature := new(ECDSASignature)
_, err := asn1.Unmarshal(signature, ecdsaSignature)
if err != nil {
return false, nil
}
// R, _ := ecdsaSignature.R.MarshalText()
// S, _ := ecdsaSignature.S.MarshalText()
// fmt.Printf("r [%s], s [%s]\n", R, S)
temp := verKey.(*ecdsa.PublicKey)
h := Hash(msg)
return ecdsa.Verify(temp, h, ecdsaSignature.R, ecdsaSignature.S), nil
}
// VerifySignCapability tests signing capabilities
func VerifySignCapability(tempSK interface{}, certPK interface{}) error {
/* TODO: reactive or remove
msg := []byte("This is a message to be signed and verified by ECDSA!")
sigma, err := ECDSASign(tempSK, msg)
if err != nil {
// log.Errorf("Error signing [%s].", err.Error())
return err
}
ok, err := ECDSAVerify(certPK, msg, sigma)
if err != nil {
// log.Errorf("Error verifying [%s].", err.Error())
return err
}
if !ok {
// log.Errorf("Signature not valid.")
return errors.New("Signature not valid.")
}
// log.Infof("Verifing signature capability...done")
*/
return nil
}