blob: 65fcfbe87212b9d010dc0d82d661ccaf10fa062f [file] [log] [blame]
Paul Bakker2291f6c2011-03-25 14:07:53 +00001/*
Manuel Pégourié-Gonnard6f60cd82015-02-10 10:47:03 +00002 * RSASSA-PSS/SHA-256 signature verification program
Paul Bakker2291f6c2011-03-25 14:07:53 +00003 *
Manuel Pégourié-Gonnarda658a402015-01-23 09:45:19 +00004 * Copyright (C) 2006-2011, ARM Limited, All Rights Reserved
Paul Bakker2291f6c2011-03-25 14:07:53 +00005 *
Manuel Pégourié-Gonnard860b5162015-01-28 17:12:07 +00006 * This file is part of mbed TLS (https://polarssl.org)
Paul Bakker2291f6c2011-03-25 14:07:53 +00007 *
Paul Bakker2291f6c2011-03-25 14:07:53 +00008 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License along
19 * with this program; if not, write to the Free Software Foundation, Inc.,
20 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
21 */
22
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020023#if !defined(POLARSSL_CONFIG_FILE)
Manuel Pégourié-Gonnardabd6e022013-09-20 13:30:43 +020024#include "polarssl/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020025#else
26#include POLARSSL_CONFIG_FILE
27#endif
Paul Bakker2291f6c2011-03-25 14:07:53 +000028
Rich Evansf90016a2015-01-19 14:26:37 +000029#if defined(POLARSSL_PLATFORM_C)
30#include "polarssl/platform.h"
31#else
Rich Evans18b78c72015-02-11 14:06:19 +000032#include <stdio.h>
Rich Evans783d9d12015-01-30 11:11:57 +000033#define polarssl_snprintf snprintf
Rich Evansf90016a2015-01-19 14:26:37 +000034#define polarssl_printf printf
Rich Evansf90016a2015-01-19 14:26:37 +000035#endif
36
Manuel Pégourié-Gonnard013bffe2015-02-13 14:09:44 +000037#if defined(POLARSSL_BIGNUM_C) && defined(POLARSSL_RSA_C) && \
38 defined(POLARSSL_SHA256_C) && defined(POLARSSL_PK_PARSE_C) && \
Rich Evans18b78c72015-02-11 14:06:19 +000039 defined(POLARSSL_FS_IO)
Paul Bakker2291f6c2011-03-25 14:07:53 +000040#include "polarssl/md.h"
41#include "polarssl/pem.h"
Paul Bakker30520d12013-09-17 11:39:31 +020042#include "polarssl/pk.h"
Paul Bakker2291f6c2011-03-25 14:07:53 +000043#include "polarssl/sha1.h"
44#include "polarssl/x509.h"
45
Rich Evans18b78c72015-02-11 14:06:19 +000046#include <stdio.h>
47#include <string.h>
48#endif
49
Paul Bakkeraf5c85f2011-04-18 03:47:52 +000050#if defined _MSC_VER && !defined snprintf
51#define snprintf _snprintf
52#endif
53
Paul Bakker5690efc2011-05-26 13:16:06 +000054#if !defined(POLARSSL_BIGNUM_C) || !defined(POLARSSL_RSA_C) || \
Manuel Pégourié-Gonnard6f60cd82015-02-10 10:47:03 +000055 !defined(POLARSSL_SHA256_C) || !defined(POLARSSL_PK_PARSE_C) || \
Paul Bakker5690efc2011-05-26 13:16:06 +000056 !defined(POLARSSL_FS_IO)
Rich Evans85b05ec2015-02-12 11:37:29 +000057int main( void )
Paul Bakker5690efc2011-05-26 13:16:06 +000058{
Rich Evansf90016a2015-01-19 14:26:37 +000059 polarssl_printf("POLARSSL_BIGNUM_C and/or POLARSSL_RSA_C and/or "
Manuel Pégourié-Gonnard6f60cd82015-02-10 10:47:03 +000060 "POLARSSL_SHA256_C and/or POLARSSL_PK_PARSE_C and/or "
Paul Bakker5690efc2011-05-26 13:16:06 +000061 "POLARSSL_FS_IO not defined.\n");
62 return( 0 );
63}
64#else
Paul Bakker2291f6c2011-03-25 14:07:53 +000065int main( int argc, char *argv[] )
66{
67 FILE *f;
Paul Bakker0c226102014-04-17 16:02:36 +020068 int ret = 1;
Paul Bakker23986e52011-04-24 08:57:21 +000069 size_t i;
Paul Bakker30520d12013-09-17 11:39:31 +020070 pk_context pk;
Paul Bakker2291f6c2011-03-25 14:07:53 +000071 unsigned char hash[20];
Paul Bakker1d569582012-10-03 20:35:44 +000072 unsigned char buf[POLARSSL_MPI_MAX_SIZE];
Paul Bakker2291f6c2011-03-25 14:07:53 +000073 char filename[512];
74
Paul Bakker0c226102014-04-17 16:02:36 +020075 pk_init( &pk );
76
Paul Bakker2291f6c2011-03-25 14:07:53 +000077 if( argc != 3 )
78 {
Rich Evansf90016a2015-01-19 14:26:37 +000079 polarssl_printf( "usage: rsa_verify_pss <key_file> <filename>\n" );
Paul Bakker2291f6c2011-03-25 14:07:53 +000080
Paul Bakkercce9d772011-11-18 14:26:47 +000081#if defined(_WIN32)
Rich Evansf90016a2015-01-19 14:26:37 +000082 polarssl_printf( "\n" );
Paul Bakker2291f6c2011-03-25 14:07:53 +000083#endif
84
85 goto exit;
86 }
87
Rich Evansf90016a2015-01-19 14:26:37 +000088 polarssl_printf( "\n . Reading public key from '%s'", argv[1] );
Paul Bakker2291f6c2011-03-25 14:07:53 +000089 fflush( stdout );
90
Paul Bakker30520d12013-09-17 11:39:31 +020091 if( ( ret = pk_parse_public_keyfile( &pk, argv[1] ) ) != 0 )
Paul Bakker2291f6c2011-03-25 14:07:53 +000092 {
Rich Evansf90016a2015-01-19 14:26:37 +000093 polarssl_printf( " failed\n ! Could not read key from '%s'\n", argv[1] );
94 polarssl_printf( " ! pk_parse_public_keyfile returned %d\n\n", ret );
Paul Bakker30520d12013-09-17 11:39:31 +020095 goto exit;
96 }
97
98 if( !pk_can_do( &pk, POLARSSL_PK_RSA ) )
99 {
100 ret = 1;
Rich Evansf90016a2015-01-19 14:26:37 +0000101 polarssl_printf( " failed\n ! Key is not an RSA key\n" );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000102 goto exit;
103 }
104
Manuel Pégourié-Gonnard6f60cd82015-02-10 10:47:03 +0000105 rsa_set_padding( pk_rsa( pk ), RSA_PKCS_V21, POLARSSL_MD_SHA256 );
Manuel Pégourié-Gonnard844a4c02014-03-10 21:55:35 +0100106
Paul Bakker2291f6c2011-03-25 14:07:53 +0000107 /*
108 * Extract the RSA signature from the text file
109 */
110 ret = 1;
Rich Evans783d9d12015-01-30 11:11:57 +0000111 polarssl_snprintf( filename, 512, "%s.sig", argv[2] );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000112
113 if( ( f = fopen( filename, "rb" ) ) == NULL )
114 {
Rich Evansf90016a2015-01-19 14:26:37 +0000115 polarssl_printf( "\n ! Could not open %s\n\n", filename );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000116 goto exit;
117 }
118
Paul Bakker30520d12013-09-17 11:39:31 +0200119
120 i = fread( buf, 1, POLARSSL_MPI_MAX_SIZE, f );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000121
122 fclose( f );
123
Paul Bakker2291f6c2011-03-25 14:07:53 +0000124 /*
Manuel Pégourié-Gonnard6f60cd82015-02-10 10:47:03 +0000125 * Compute the SHA-256 hash of the input file and compare
Paul Bakker2291f6c2011-03-25 14:07:53 +0000126 * it with the hash decrypted from the RSA signature.
127 */
Manuel Pégourié-Gonnard6f60cd82015-02-10 10:47:03 +0000128 polarssl_printf( "\n . Verifying the RSA/SHA-256 signature" );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000129 fflush( stdout );
130
131 if( ( ret = sha1_file( argv[2], hash ) ) != 0 )
132 {
Rich Evansf90016a2015-01-19 14:26:37 +0000133 polarssl_printf( " failed\n ! Could not open or read %s\n\n", argv[2] );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000134 goto exit;
135 }
136
Manuel Pégourié-Gonnard6f60cd82015-02-10 10:47:03 +0000137 if( ( ret = pk_verify( &pk, POLARSSL_MD_SHA256, hash, 0,
Paul Bakker30520d12013-09-17 11:39:31 +0200138 buf, i ) ) != 0 )
Paul Bakker2291f6c2011-03-25 14:07:53 +0000139 {
Rich Evansf90016a2015-01-19 14:26:37 +0000140 polarssl_printf( " failed\n ! pk_verify returned %d\n\n", ret );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000141 goto exit;
142 }
143
Manuel Pégourié-Gonnard6f60cd82015-02-10 10:47:03 +0000144 polarssl_printf( "\n . OK (the decrypted SHA-256 hash matches)\n\n" );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000145
146 ret = 0;
147
148exit:
Paul Bakker30520d12013-09-17 11:39:31 +0200149 pk_free( &pk );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000150
Paul Bakkercce9d772011-11-18 14:26:47 +0000151#if defined(_WIN32)
Rich Evansf90016a2015-01-19 14:26:37 +0000152 polarssl_printf( " + Press Enter to exit this program.\n" );
Paul Bakker2291f6c2011-03-25 14:07:53 +0000153 fflush( stdout ); getchar();
154#endif
155
156 return( ret );
157}
Manuel Pégourié-Gonnard6f60cd82015-02-10 10:47:03 +0000158#endif /* POLARSSL_BIGNUM_C && POLARSSL_RSA_C && POLARSSL_SHA256_C &&
Paul Bakker30520d12013-09-17 11:39:31 +0200159 POLARSSL_PK_PARSE_C && POLARSSL_FS_IO */