1 /*
2  *  RSA/SHA-256 signature creation program
3  *
4  *  Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
5  *  SPDX-License-Identifier: Apache-2.0
6  *
7  *  Licensed under the Apache License, Version 2.0 (the "License"); you may
8  *  not use this file except in compliance with the License.
9  *  You may obtain a copy of the License at
10  *
11  *  http://www.apache.org/licenses/LICENSE-2.0
12  *
13  *  Unless required by applicable law or agreed to in writing, software
14  *  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15  *  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16  *  See the License for the specific language governing permissions and
17  *  limitations under the License.
18  *
19  *  This file is part of mbed TLS (https://tls.mbed.org)
20  */
21 
22 #if !defined(MBEDTLS_CONFIG_FILE)
23 #include "mbedtls/config.h"
24 #else
25 #include MBEDTLS_CONFIG_FILE
26 #endif
27 
28 #if defined(MBEDTLS_PLATFORM_C)
29 #include "mbedtls/platform.h"
30 #else
31 #include <stdio.h>
32 #include <stdlib.h>
33 #define mbedtls_fprintf         fprintf
34 #define mbedtls_printf          printf
35 #define mbedtls_snprintf        snprintf
36 #define mbedtls_exit            exit
37 #define MBEDTLS_EXIT_SUCCESS    EXIT_SUCCESS
38 #define MBEDTLS_EXIT_FAILURE    EXIT_FAILURE
39 #endif /* MBEDTLS_PLATFORM_C */
40 
41 #if !defined(MBEDTLS_BIGNUM_C) || !defined(MBEDTLS_RSA_C) ||  \
42     !defined(MBEDTLS_SHA256_C) || !defined(MBEDTLS_MD_C) || \
43     !defined(MBEDTLS_FS_IO)
main(void)44 int main( void )
45 {
46     mbedtls_printf("MBEDTLS_BIGNUM_C and/or MBEDTLS_RSA_C and/or "
47             "MBEDTLS_MD_C and/or "
48             "MBEDTLS_SHA256_C and/or MBEDTLS_FS_IO not defined.\n");
49     return( 0 );
50 }
51 #else
52 
53 #include "mbedtls/rsa.h"
54 #include "mbedtls/md.h"
55 
56 #include <stdio.h>
57 #include <string.h>
58 
59 #if defined(MBEDTLS_CHECK_PARAMS)
60 #include "mbedtls/platform_util.h"
mbedtls_param_failed(const char * failure_condition,const char * file,int line)61 void mbedtls_param_failed( const char *failure_condition,
62                            const char *file,
63                            int line )
64 {
65     mbedtls_printf( "%s:%i: Input param failed - %s\n",
66                     file, line, failure_condition );
67     mbedtls_exit( MBEDTLS_EXIT_FAILURE );
68 }
69 #endif
70 
main(int argc,char * argv[])71 int main( int argc, char *argv[] )
72 {
73     FILE *f;
74     int ret = 1;
75     int exit_code = MBEDTLS_EXIT_FAILURE;
76     size_t i;
77     mbedtls_rsa_context rsa;
78     unsigned char hash[32];
79     unsigned char buf[MBEDTLS_MPI_MAX_SIZE];
80     char filename[512];
81     mbedtls_mpi N, P, Q, D, E, DP, DQ, QP;
82 
83     mbedtls_rsa_init( &rsa, MBEDTLS_RSA_PKCS_V15, 0 );
84 
85     mbedtls_mpi_init( &N ); mbedtls_mpi_init( &P ); mbedtls_mpi_init( &Q );
86     mbedtls_mpi_init( &D ); mbedtls_mpi_init( &E ); mbedtls_mpi_init( &DP );
87     mbedtls_mpi_init( &DQ ); mbedtls_mpi_init( &QP );
88 
89     if( argc != 2 )
90     {
91         mbedtls_printf( "usage: rsa_sign <filename>\n" );
92 
93 #if defined(_WIN32)
94         mbedtls_printf( "\n" );
95 #endif
96 
97         goto exit;
98     }
99 
100     mbedtls_printf( "\n  . Reading private key from rsa_priv.txt" );
101     fflush( stdout );
102 
103     if( ( f = fopen( "rsa_priv.txt", "rb" ) ) == NULL )
104     {
105         mbedtls_printf( " failed\n  ! Could not open rsa_priv.txt\n" \
106                 "  ! Please run rsa_genkey first\n\n" );
107         goto exit;
108     }
109 
110     if( ( ret = mbedtls_mpi_read_file( &N , 16, f ) ) != 0 ||
111         ( ret = mbedtls_mpi_read_file( &E , 16, f ) ) != 0 ||
112         ( ret = mbedtls_mpi_read_file( &D , 16, f ) ) != 0 ||
113         ( ret = mbedtls_mpi_read_file( &P , 16, f ) ) != 0 ||
114         ( ret = mbedtls_mpi_read_file( &Q , 16, f ) ) != 0 ||
115         ( ret = mbedtls_mpi_read_file( &DP , 16, f ) ) != 0 ||
116         ( ret = mbedtls_mpi_read_file( &DQ , 16, f ) ) != 0 ||
117         ( ret = mbedtls_mpi_read_file( &QP , 16, f ) ) != 0 )
118     {
119         mbedtls_printf( " failed\n  ! mbedtls_mpi_read_file returned %d\n\n", ret );
120         fclose( f );
121         goto exit;
122     }
123     fclose( f );
124 
125     if( ( ret = mbedtls_rsa_import( &rsa, &N, &P, &Q, &D, &E ) ) != 0 )
126     {
127         mbedtls_printf( " failed\n  ! mbedtls_rsa_import returned %d\n\n",
128                         ret );
129         goto exit;
130     }
131 
132     if( ( ret = mbedtls_rsa_complete( &rsa ) ) != 0 )
133     {
134         mbedtls_printf( " failed\n  ! mbedtls_rsa_complete returned %d\n\n",
135                         ret );
136         goto exit;
137     }
138 
139     mbedtls_printf( "\n  . Checking the private key" );
140     fflush( stdout );
141     if( ( ret = mbedtls_rsa_check_privkey( &rsa ) ) != 0 )
142     {
143         mbedtls_printf( " failed\n  ! mbedtls_rsa_check_privkey failed with -0x%0x\n", -ret );
144         goto exit;
145     }
146 
147     /*
148      * Compute the SHA-256 hash of the input file,
149      * then calculate the RSA signature of the hash.
150      */
151     mbedtls_printf( "\n  . Generating the RSA/SHA-256 signature" );
152     fflush( stdout );
153 
154     if( ( ret = mbedtls_md_file(
155                     mbedtls_md_info_from_type( MBEDTLS_MD_SHA256 ),
156                     argv[1], hash ) ) != 0 )
157     {
158         mbedtls_printf( " failed\n  ! Could not open or read %s\n\n", argv[1] );
159         goto exit;
160     }
161 
162     if( ( ret = mbedtls_rsa_pkcs1_sign( &rsa, NULL, NULL, MBEDTLS_RSA_PRIVATE, MBEDTLS_MD_SHA256,
163                                 20, hash, buf ) ) != 0 )
164     {
165         mbedtls_printf( " failed\n  ! mbedtls_rsa_pkcs1_sign returned -0x%0x\n\n", -ret );
166         goto exit;
167     }
168 
169     /*
170      * Write the signature into <filename>.sig
171      */
172     mbedtls_snprintf( filename, sizeof(filename), "%s.sig", argv[1] );
173 
174     if( ( f = fopen( filename, "wb+" ) ) == NULL )
175     {
176         mbedtls_printf( " failed\n  ! Could not create %s\n\n", argv[1] );
177         goto exit;
178     }
179 
180     for( i = 0; i < rsa.len; i++ )
181         mbedtls_fprintf( f, "%02X%s", buf[i],
182                  ( i + 1 ) % 16 == 0 ? "\r\n" : " " );
183 
184     fclose( f );
185 
186     mbedtls_printf( "\n  . Done (created \"%s\")\n\n", filename );
187 
188     exit_code = MBEDTLS_EXIT_SUCCESS;
189 
190 exit:
191 
192     mbedtls_rsa_free( &rsa );
193     mbedtls_mpi_free( &N ); mbedtls_mpi_free( &P ); mbedtls_mpi_free( &Q );
194     mbedtls_mpi_free( &D ); mbedtls_mpi_free( &E ); mbedtls_mpi_free( &DP );
195     mbedtls_mpi_free( &DQ ); mbedtls_mpi_free( &QP );
196 
197 #if defined(_WIN32)
198     mbedtls_printf( "  + Press Enter to exit this program.\n" );
199     fflush( stdout ); getchar();
200 #endif
201 
202     return( exit_code );
203 }
204 #endif /* MBEDTLS_BIGNUM_C && MBEDTLS_RSA_C && MBEDTLS_SHA256_C &&
205           MBEDTLS_FS_IO */
206