OpenSSL: 椭圆曲线签名与校验 (ECDSA)
/*
目录:
--------------------
1. 简介
2. 生成 ECDSA 密钥对
3. 签名
4. 校验
*/
/*
1. 简介
--------------------
对 PE 文件做 ECDSA 签名. 签名写入 PE 头部 DOS Stub代码后边. 使用的椭圆
曲线是 FIPS 186-2 中的 P-192. 签名长度不超过 56 字节,强度和 RSA 1024 相当.
*/
/*
2. 生成 ECDSA 密钥对
生成的私钥用 RC4 加密. 生成形式为 c 语言可用的形式.
*/
#include
#define MAXPASS 64
#define PRIVKEY "static unsigned char privkey[%d] = {"
#define PUBKEY "static const unsigned char pubkey[%d] = {"
#define ENDKEY "/n};/n"
int main(int argc, char* argv[])
{
RC4_KEY rc4;
EC_KEY *ecdsa;
char passbuf[MAXPASS + 3] = {MAXPASS};
char *pass;
byte buf[1024];
byte *pp;
int i,len;
printf("Input password: ");
pass = _cgets(passbuf);
if (*pass == '/0' || passbuf[1] == 0)
{
printf("NULL password/n");
return -1;
}
RAND_seed(passbuf,sizeof(passbuf));
if ( (ecdsa = EC_KEY_new()) == NULL)
{
printf("EC_KEY_new/n");
return 0;
}
if ((ecdsa->group = EC_GROUP_new_by_nid(NID_X9_62_prime192v1)) == NULL)
{
printf("EC_GROUP_new_by_nid/n");
goto err;
}
if (!EC_KEY_generate_key(ecdsa))
{
printf("EC_KEY_generate_key error/n");
goto err;
}
/*
* 生成 RC4 加密的ECDSA私钥
*/
pp = buf;
len = i2d_ECPrivateKey(ecdsa,&pp);
if (!len)
{
goto err;
}
RC4_set_key(&rc4,strlen(pass),(byte*)pass);
RC4(&rc4,len,buf,buf);
printf(PRIVKEY,len);
for (i=0; i
if ( !(i % 8) )
printf("/n");
printf("0x%02X , ",buf[i]);
}
printf(ENDKEY);
/*
* 生成ECDSA公钥
*/
pp = buf;
len = ECPublicKey_get_octet_string(ecdsa,&pp);
if (!len)
{
goto err;
}
printf(PUBKEY,len);
for (i=0; i
if ( !(i % 8) )
printf("/n");
printf("0x%02X , ",buf[i]);
}
printf(ENDKEY);
err:
EC_KEY_free(ecdsa);
return 0;
}
/*
3. 签名
-------------------
签名时需要输入私钥密码 (最长 512 位).
*/
#include
typedef unsigned char byte;
#define MAXSIGLEN 128
#define MAXPASS 64
#define MAGIC_CHAR 0x27
static char password[MAXPASS];
static RC4_KEY key;
/*
* RC4 加密过的ECDSA私钥 ()
*/
static unsigned char privkey[] = {
0xBE , 0x5E , 0x1D , 0x8F , 0x79 , 0xBA , 0xC7 , 0x2B ,
0x32 , 0x9D , 0x4A , 0xFC , 0xE7 , 0x62 , 0x24 , 0x8C ,
0x84 , 0x88 , 0x32 , 0x6F , 0x4C , 0x5B , 0x32 , 0xEA ,
0x46 , 0x97 , 0x71 , 0x83 , 0x84 , 0x3D , 0x91 , 0x79 ,
0x4D , 0x17 , 0xB1 , 0x28 , 0xED , 0x39 , 0xBF , 0xDF ,
0xDD , 0xF2 , 0x93 , 0x88 , 0xBF , 0xFD , 0x4D , 0x02 ,
0xC7 , 0x1A , 0x22 , 0xAB , 0x41 , 0x41 , 0x9F , 0x63 ,
0x26 , 0x7E , 0x49 , 0x08 , 0x7F , 0xB0 , 0xE3 , 0xB9 ,
0xDB , 0xC4 , 0x04 , 0xE9 , 0x01 , 0xB8 , 0xC1 , 0x71 ,
0x93 , 0xC6 , 0xD4 , 0x83 , 0xB3 , 0x08 , 0x28 , 0x18 ,
0xE1 , 0x4C , 0xE1 , 0xD7 , 0x0C , 0x66 , 0x77 , 0x3E ,
0x65 , 0x2F , 0x12 , 0xD3 , 0x2F , 0xD4 , 0xC3 , 0xB4 ,
0x99 , 0xA2 , 0xF5 , 0x57 , 0x59 , 0xA1 , 0x20 , 0x81 ,
0xEB , 0x3F , 0xCF , 0x46 , 0xD2 , 0x45 , 0x71 , 0x06 ,
0x9C , 0x5F , 0x60 , 0x2E , 0x68 , 0xFB , 0x6C , 0xA4 ,
0xC8 , 0x94 , 0x72 , 0xA3 , 0x3B , 0xE0 , 0x10 , 0xB9 ,
0x1B , 0xAE , 0xFE , 0xD4 , 0x58 , 0x1C , 0xA9 , 0x80 ,
0x0F , 0xF0 , 0x55 , 0xDC , 0xC6 , 0x58 , 0xE0 , 0x5D ,
0x83 , 0xBB , 0x27 , 0x82 , 0x7E , 0xA1 , 0xF5 , 0x10 ,
0x2E , 0x18 , 0x9A , 0xDA , 0x61 , 0x3B , 0xD2 , 0xA2 ,
0xAB , 0x45 , 0x63 , 0xBD , 0x89 , 0xAD , 0xFB , 0x4E ,
0x2E , 0x6D , 0x23 , 0x4A , 0x55 , 0x57 , 0x28 , 0x1A ,
0xE5 , 0x5B , 0xC3 , 0x62 , 0x3B , 0x6F , 0xA5 , 0x96 ,
0x72 , 0xBD , 0x16 , 0x36 , 0xC4 , 0xB9 , 0x2B , 0x31 ,
0xE6 , 0x3B , 0x78 , 0xF0 , 0x2C , 0xBE , 0x4A , 0x70 ,
0xA0 , 0xA1 , 0x5E , 0x38 , 0x4A , 0x3F , 0xFE , 0x79 ,
0xD4 , 0xCF , 0x0C , 0x70 , 0x1B , 0xD5 , 0xE5 , 0x54 ,
0x52 , 0x44 , 0x1A , 0x47 , 0xFD , 0x59 , 0x81 , 0xBF ,
0xAE , 0x0C , 0xF4 , 0xDB , 0xC2 , 0x19 , 0xAC , 0xA9 ,
0x2F , 0x90 , 0x31 , 0xEC , 0xEA , 0xDD , 0xCE , 0x5F ,
0xA8 , 0xA7 , 0xEE , 0x79 , 0x1C , 0x20 , 0x95 , 0x93 ,
0x22 , 0x61 , 0xA2 , 0x41 , 0x40 , 0xCF , 0x26 , 0xF4 ,
0x73 , 0xFE , 0xD8 , 0x23 , 0x12 , 0x81 , 0x42 , 0x6D ,
0x32 , 0xC2 , 0xD0 , 0x64 , 0xF2 , 0x02 , 0x0A , 0x22 ,
0xFE , 0x20 , 0xB3 , 0x25 , 0x29 , 0x7B , 0x78 , 0xFA ,
0x0D , 0x9B , 0x95 , 0x61 , 0xF5 , 0x40 , 0x1B , 0x43 ,
0xEC , 0x7D , 0xEB , 0x61 ,
};
static const unsigned char dos[] = {
0x0E, 0x1F, 0xBA, 0x0E, 0x00, 0xB4, 0x09, 0xCD,
0x21, 0xB8, 0x01, 0x4C, 0xCD, 0x21, 0x69, 0x50,
0x42, 0x20, 0x73, 0x69, 0x67, 0x6E, 0x65, 0x64,
0x2E, 0x20, 0x0D, 0x0D, 0x0A, 0x24, MAGIC_CHAR,
};
/*
* ECDSA 签名
*/
static unsigned int sign(byte *sig,const byte *buf,int len)
{
unsigned int siglen = MAXSIGLEN;
EC_KEY *ecdsa = NULL;
unsigned char *pp = (unsigned char*)privkey;
RAND_seed(buf, len);
/*
* 解密私钥
*/
RC4(&key,sizeof(privkey),privkey,privkey);
ecdsa = d2i_ECPrivateKey(&ecdsa, (const unsigned char**)&pp, sizeof(privkey));
ZeroMemory(privkey,sizeof(privkey));
if ( ecdsa == NULL)
{
MessageBox(NULL,"Can't restore private key","Sign",MB_ICONERROR);
return 0;
}
if (!ECDSA_sign(0,buf, len, sig,&siglen,ecdsa))
{
MessageBox(NULL,"Sign error","Sign",MB_ICONERROR);
EC_KEY_free(ecdsa);
return 0;
}
EC_KEY_free(ecdsa);
return siglen;
}
static BOOL GetFileName(char *sFile)
{
OPENFILENAME ofn;
ZeroMemory(&ofn, sizeof(ofn));
ofn.lStructSize = sizeof(ofn);
ofn.lpstrFile = sFile;
ofn.nMaxFile = MAX_PATH;
ofn.lpstrFilter = "EXE/DLL/OCX files/0*.exe;*.dll;*.ocx/0All/0*.*/0";
ofn.lpstrTitle = TEXT("Please Select a File to sign");
ofn.lpstrInitialDir = ".";
ofn.Flags = OFN_PATHMUSTEXIST | OFN_FILEMUSTEXIST | OFN_EXPLORER | OFN_HIDEREADONLY;
return GetOpenFileName(&ofn);
}
INT_PTR CALLBACK DlgProc( HWND hwndDlg, UINT uMsg, WPARAM wParam, LPARAM lParam)
{
if(uMsg == WM_INITDIALOG)
{
SetFocus(GetDlgItem(hwndDlg,IDC_PASSWORD));
}
else if(uMsg == WM_COMMAND)
{
if( wParam == IDOK)
{
GetDlgItemText(hwndDlg,IDC_PASSWORD,password,MAXPASS);
if (password[0] == '/0')
{
MessageBeep(MB_ICONASTERISK);
SetFocus(GetDlgItem(hwndDlg,IDC_PASSWORD));
return TRUE;
}
else
{
EndDialog(hwndDlg,0);
}
}
}
else if( uMsg == WM_CLOSE )
{
EndDialog(hwndDlg,0);
}
return 0;
}
int APIENTRY WinMain(HINSTANCE hInstance,
HINSTANCE hPrevInstance,
LPSTR lpCmdLine,
int nCmdShow)
{
int len;
byte sig[MAXSIGLEN];
unsigned int siglen;
int fd;
byte md[SHA_DIGEST_LENGTH];
char buf[1024];
SHA_CTX ctx;
char sFile[MAX_PATH] = {0};
/*
* 得到要签名的文件名
*/
if (!GetFileName(sFile))
{
return -1;
}
if ((fd = open(sFile,O_RDWR | O_BINARY)) < 0)
{
MessageBox(NULL,"Can't open file for read-write","Open",MB_ICONERROR);
return -1;
}
/*
* 检验文件
*/
if ( (len = read(fd,buf,0x40)) != 0x40 )
{
MessageBox(NULL,"Read error","Read",MB_ICONSTOP);
goto out;
}
if (buf[0] != 'M' || buf[1] != 'Z')
{
MessageBox(NULL,"Not a valid PE file!","Sign",MB_ICONSTOP);
goto out;
}
if ( *(unsigned int *)(buf + 0x3C) < 0xA0)
{
MessageBox(NULL,"No enough file space to write signature","Sign",MB_ICONSTOP);
goto out;
}
/*
* 计算 SHA1
*/
SHA1_Init(&ctx);
SHA1_Update(&ctx,buf,len);
lseek(fd,0xA0L,SEEK_SET);
while ( (len = read(fd,buf,sizeof(buf))) > 0)
{
SHA1_Update(&ctx,buf,len);
}
if (len == -1)
{
MessageBox(NULL,"Read error","Error",MB_ICONERROR);
goto out;
}
ZeroMemory(md,sizeof(md));
SHA1_Final(md,&ctx);
/*
* 输入解密口令
*/
ZeroMemory(password,MAXPASS);
DialogBox(hInstance,MAKEINTRESOURCE(IDD_PASSWORD),NULL,(DLGPROC)DlgProc);
if (password[0] == '/0')
{
MessageBox(NULL,"You must input password!","Error",MB_ICONSTOP);
goto out;
}
RC4_set_key(&key,strlen(password),(const byte*)password);
ZeroMemory(password,MAXPASS);
/*
* ECDSA sign
*/
{
siglen = sign(sig,md,SHA_DIGEST_LENGTH);
if (siglen)
{
/*
* Write
*/
lseek(fd,0x40L,SEEK_SET);
write(fd,dos,sizeof(dos));
write(fd,(byte*)&siglen,1);
write(fd,sig,siglen);
MessageBox(NULL,"File signed","Ok",MB_OK);
}
}
out:
close(fd);
return 0;
}
/*
4. 校验
-------------------
校验不需要输入密码.
*/
#include
typedef unsigned char byte;
#define MAXSIGLEN 64
#define MAGIC_CHAR 0x27
/*
* ECDSA 公钥
*/
static const unsigned char pubkey[] = {
0x04 , 0xDA , 0x4C , 0x77 , 0xEB , 0x7A , 0x8C , 0x12 ,
0x87 , 0xF3 , 0x6C , 0x10 , 0x87 , 0xA1 , 0xB1 , 0x2D ,
0x96 , 0xE6 , 0x85 , 0xE0 , 0x40 , 0xD0 , 0x19 , 0x14 ,
0xE3 , 0x1F , 0xF0 , 0x1A , 0x76 , 0x8D , 0x3A , 0x5D ,
0x57 , 0x33 , 0xE6 , 0xD5 , 0x5D , 0x23 , 0x75 , 0x1E ,
0x54 , 0x60 , 0x67 , 0xC9 , 0xA9 , 0x60 , 0x74 , 0xC5 ,
0x3F ,
};
/*
* DOS stub 代码
*/
static const unsigned char dos[] = {
0x0E, 0x1F, 0xBA, 0x0E, 0x00, 0xB4, 0x09, 0xCD,
0x21, 0xB8, 0x01, 0x4C, 0xCD, 0x21, 0x69, 0x50,
0x42, 0x20, 0x73, 0x69, 0x67, 0x6E, 0x65, 0x64,
0x2E, 0x20, 0x0D, 0x0D, 0x0A, 0x24, MAGIC_CHAR,
};
/*
* 校验 ECDSA 签名
*/
static int verify(const byte *sig,int siglen,const byte *buf,int buflen)
{
int ret;
EC_KEY *pub = NULL;
byte *pp = (byte*)pubkey;
if ( (pub = EC_KEY_new()) == NULL)
{
return 0;
}
if ((pub->group = EC_GROUP_new_by_nid(NID_X9_62_prime192v1)) == NULL)
{
EC_KEY_free(pub);
return 0;
}
pub = ECPublicKey_set_octet_string(&pub,(const byte**)&pp,sizeof(pubkey));
if (pub == NULL)
{
EC_KEY_free(pub);
return 0;
}
ret = ECDSA_verify(0,(const byte*)buf, buflen, sig, siglen,pub);
EC_KEY_free(pub);
return ret == 1 ? 1 : 0;
}
static BOOL GetFileName(char *sFile)
{
OPENFILENAME ofn;
ZeroMemory(&ofn, sizeof(ofn));
ofn.lStructSize = sizeof(ofn);
ofn.lpstrFile = sFile;
ofn.nMaxFile = MAX_PATH;
ofn.lpstrFilter = "EXE/DLL/OCX files/0*.exe;*.dll;*.ocx/0All/0*.*/0";
ofn.lpstrTitle = TEXT("Please Select a File to verify");
ofn.lpstrInitialDir = ".";
ofn.Flags = OFN_PATHMUSTEXIST | OFN_FILEMUSTEXIST | OFN_EXPLORER | OFN_READONLY;
return GetOpenFileName(&ofn);
}
int APIENTRY WinMain(HINSTANCE hInstance,
HINSTANCE hPrevInstance,
LPSTR lpCmdLine,
int nCmdShow)
{
int len;
byte sig[MAXSIGLEN];
unsigned int siglen = 0xFF;
int fd;
byte md[SHA_DIGEST_LENGTH];
char buf[1024];
SHA_CTX ctx;
char sFile[MAX_PATH] = {0};
if (!GetFileName(sFile))
{
return -1;
}
if ((fd = open(sFile,O_RDONLY | O_BINARY)) < 0)
{
MessageBox(NULL,"Can't open file for read","Open",MB_ICONERROR);
return -1;
}
/*
* 读入签名并检查
*/
lseek(fd,0x40L,SEEK_SET);
if ( (len = read(fd,buf,0x60)) != 0x60)
{
MessageBox(NULL,"Read error","Read",MB_ICONSTOP);
close(fd);
return -1;
}
if (memcmp(buf,dos,sizeof(dos)) ||
(byte)buf[sizeof(dos) - 1] != MAGIC_CHAR ||
buf[sizeof(dos)] > MAXSIGLEN)
{
MessageBox(NULL,"Not signed or incorrect!","Verify",MB_ICONSTOP);
close(fd);
return -1;
}
siglen = buf[sizeof(dos)];
memcpy(sig,buf + sizeof(dos) + 1,siglen);
/*
* 计算 SHA1
*/
SHA1_Init(&ctx);
lseek(fd,0L,SEEK_SET);
if ( (len = read(fd,buf,0x40)) != 0x40)
{
MessageBox(NULL,"Read error","Read",MB_ICONSTOP);
close(fd);
return -1;
}
SHA1_Update(&ctx,buf,len);
lseek(fd,0xA0L,SEEK_SET);
while ( (len = read(fd,buf,sizeof(buf))) > 0)
{
SHA1_Update(&ctx,buf,len);
}
if (len == -1)
{
MessageBox(NULL,"Read error","Error",MB_ICONERROR);
close(fd);
return -1;
}
close(fd);
memset(md,0,sizeof(md));
SHA1_Final(md,&ctx);
if ( verify(sig,siglen,md,SHA_DIGEST_LENGTH) )
MessageBox(NULL,"Verify Ok!","Verify",MB_OK);
else
MessageBox(NULL,"Verify Error!","Verify",MB_ICONERROR);
return 0;
}