| /* |
| * Copyright (C) 2020 Sony Interactive Entertainment Inc. |
| * |
| * Redistribution and use in source and binary forms, with or without |
| * modification, are permitted provided that the following conditions |
| * are met: |
| * 1. Redistributions of source code must retain the above copyright |
| * notice, this list of conditions and the following disclaimer. |
| * 2. Redistributions in binary form must reproduce the above copyright |
| * notice, this list of conditions and the following disclaimer in the |
| * documentation and/or other materials provided with the distribution. |
| * |
| * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' |
| * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, |
| * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR |
| * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS |
| * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR |
| * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF |
| * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS |
| * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN |
| * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) |
| * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF |
| * THE POSSIBILITY OF SUCH DAMAGE. |
| */ |
| |
| #include "config.h" |
| #include "CryptoAlgorithmECDSA.h" |
| |
| #if ENABLE(WEB_CRYPTO) |
| |
| #include "CryptoAlgorithmEcdsaParams.h" |
| #include "CryptoKeyEC.h" |
| #include "OpenSSLUtilities.h" |
| |
| namespace WebCore { |
| |
| ExceptionOr<Vector<uint8_t>> CryptoAlgorithmECDSA::platformSign(const CryptoAlgorithmEcdsaParams& parameters, const CryptoKeyEC& key, const Vector<uint8_t>& data) |
| { |
| size_t keySizeInBytes = (key.keySizeInBits() + 7) / 8; |
| |
| const EVP_MD* md = digestAlgorithm(parameters.hashIdentifier); |
| if (!md) |
| return Exception { NotSupportedError }; |
| |
| std::optional<Vector<uint8_t>> digest = calculateDigest(md, data); |
| if (!digest) |
| return Exception { OperationError }; |
| |
| EC_KEY* ecKey = EVP_PKEY_get0_EC_KEY(key.platformKey()); |
| if (!ecKey) |
| return Exception { OperationError }; |
| |
| // We use ECDSA_do_sign rather than EVP API because the latter handles ECDSA signature in DER format |
| // while this function is supposed to return simply concatinated "r" and "s". |
| auto sig = ECDSASigPtr(ECDSA_do_sign(digest->data(), digest->size(), ecKey)); |
| if (!sig) |
| return Exception { OperationError }; |
| |
| const BIGNUM* r; |
| const BIGNUM* s; |
| ECDSA_SIG_get0(sig.get(), &r, &s); |
| |
| // Concatenate r and s, expanding r and s to keySizeInBytes. |
| Vector<uint8_t> signature = convertToBytesExpand(r, keySizeInBytes); |
| signature.appendVector(convertToBytesExpand(s, keySizeInBytes)); |
| |
| return signature; |
| } |
| |
| ExceptionOr<bool> CryptoAlgorithmECDSA::platformVerify(const CryptoAlgorithmEcdsaParams& parameters, const CryptoKeyEC& key, const Vector<uint8_t>& signature, const Vector<uint8_t>& data) |
| { |
| size_t keySizeInBytes = (key.keySizeInBits() + 7) / 8; |
| |
| // Bail if the signature size isn't double the key size (i.e. concatenated r and s components). |
| if (signature.size() != keySizeInBytes * 2) |
| return false; |
| |
| auto sig = ECDSASigPtr(ECDSA_SIG_new()); |
| auto r = BN_bin2bn(signature.data(), keySizeInBytes, nullptr); |
| auto s = BN_bin2bn(signature.data() + keySizeInBytes, keySizeInBytes, nullptr); |
| |
| if (!ECDSA_SIG_set0(sig.get(), r, s)) |
| return Exception { OperationError }; |
| |
| const EVP_MD* md = digestAlgorithm(parameters.hashIdentifier); |
| if (!md) |
| return Exception { NotSupportedError }; |
| |
| std::optional<Vector<uint8_t>> digest = calculateDigest(md, data); |
| if (!digest) |
| return Exception { OperationError }; |
| |
| EC_KEY* ecKey = EVP_PKEY_get0_EC_KEY(key.platformKey()); |
| if (!ecKey) |
| return Exception { OperationError }; |
| |
| int ret = ECDSA_do_verify(digest->data(), digest->size(), sig.get(), ecKey); |
| return ret == 1; |
| } |
| |
| } // namespace WebCore |
| |
| #endif // ENABLE(WEB_CRYPTO) |