kenmirrors/asterisk
1
0
Fork 0
mirror of https://github.com/asterisk/asterisk.git synced 2025-09-25 15:08:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create binary versions of signature functions

Browse Source 
git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@3607 65c4cc65-6c06-0410-ace0-fbb531ad65f3
This commit is contained in:
Mark Spencer
2004-08-14 20:19:38 +00:00
parent 94f18868f1
commit 3ff53cd50b
2 changed files with 51 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
include/asterisk/crypto.h
View File

@@ -53,6 +53,17 @@ extern int ast_key_init(int fd);
*/ */
extern int ast_check_signature(struct ast_key *key, char *msg, char *sig); extern int ast_check_signature(struct ast_key *key, char *msg, char *sig);
//! Check the authenticity of a message signature using a given public key
/*!
* \param key a public key to use to verify
* \param msg the message that has been signed
* \param sig the proposed valid signature in raw binary representation
*
* Returns 0 if the signature is valid, or -1 otherwise
*
*/
extern int ast_check_signature_bin(struct ast_key *key, char *msg, unsigned char *sig);
/*! /*!
* \param key a private key to use to create the signature * \param key a private key to use to create the signature
* \param msg the message to sign * \param msg the message to sign
@@ -63,6 +74,16 @@ extern int ast_check_signature(struct ast_key *key, char *msg, char *sig);
* *
*/ */
extern int ast_sign(struct ast_key *key, char *msg, char *sig); extern int ast_sign(struct ast_key *key, char *msg, char *sig);
/*!
* \param key a private key to use to create the signature
* \param msg the message to sign
* \param sig a pointer to a buffer of at least 128 bytes in which the
* raw encoded signature will be stored
*
* Returns 0 on success or -1 on failure.
*
*/
extern int ast_sign_bin(struct ast_key *key, char *msg, unsigned char *sig);
#if defined(__cplusplus) || defined(c_plusplus) #if defined(__cplusplus) || defined(c_plusplus)
} }

43
res/res_crypto.c
View File

@@ -296,10 +296,9 @@ static char *binary(int y, int len)
#endif #endif
int ast_sign(struct ast_key *key, char *msg, char *sig) int ast_sign_bin(struct ast_key *key, char *msg, unsigned char *dsig)
{ {
unsigned char digest[20]; unsigned char digest[20];
unsigned char dsig[128];
int siglen = sizeof(dsig); int siglen = sizeof(dsig);
int res; int res;
@@ -324,16 +323,26 @@ int ast_sign(struct ast_key *key, char *msg, char *sig)
return -1; return -1;
} }
/* Success -- encode (256 bytes max as documented) */
ast_base64encode(sig, dsig, siglen, 256);
return 0; return 0;
} }
int ast_check_signature(struct ast_key *key, char *msg, char *sig) int ast_sign(struct ast_key *key, char *msg, char *sig)
{
unsigned char dsig[128];
int siglen = sizeof(dsig);
int res;
res = ast_sign_bin(key, msg, dsig);
if (!res)
/* Success -- encode (256 bytes max as documented) */
ast_base64encode(sig, dsig, siglen, 256);
return res;
}
int ast_check_signature_bin(struct ast_key *key, char *msg, unsigned char *dsig)
{ {
unsigned char digest[20]; unsigned char digest[20];
unsigned char dsig[128];
int res; int res;
if (key->ktype != AST_KEY_PUBLIC) { if (key->ktype != AST_KEY_PUBLIC) {
@@ -343,13 +352,6 @@ int ast_check_signature(struct ast_key *key, char *msg, char *sig)
return -1; return -1;
} }
/* Decode signature */
res = ast_base64decode(dsig, sig, sizeof(dsig));
if (res != sizeof(dsig)) {
ast_log(LOG_WARNING, "Signature improper length (expect %d, got %d)\n", (int)sizeof(dsig), (int)res);
return -1;
}
/* Calculate digest of message */ /* Calculate digest of message */
SHA1((unsigned char *)msg, strlen(msg), digest); SHA1((unsigned char *)msg, strlen(msg), digest);
@@ -364,6 +366,21 @@ int ast_check_signature(struct ast_key *key, char *msg, char *sig)
return 0; return 0;
} }
int ast_check_signature(struct ast_key *key, char *msg, char *sig)
{
unsigned char dsig[128];
int res;
/* Decode signature */
res = ast_base64decode(dsig, sig, sizeof(dsig));
if (res != sizeof(dsig)) {
ast_log(LOG_WARNING, "Signature improper length (expect %d, got %d)\n", (int)sizeof(dsig), (int)res);
return -1;
}
res = ast_check_signature_bin(key, msg, dsig);
return res;
}
static void crypto_load(int ifd, int ofd) static void crypto_load(int ifd, int ofd)
{ {
struct ast_key *key, *nkey, *last; struct ast_key *key, *nkey, *last;