pkcs1_sig_padding.cpp

Go to the documentation of this file.

/*
* PKCS #1 v1.5 signature padding
* (C) 1999-2008 Jack Lloyd
*
* Botan is released under the Simplified BSD License (see license.txt)
*/
 
#include <botan/internal/pkcs1_sig_padding.h>
 
#include <botan/exceptn.h>
#include <botan/hash.h>
#include <botan/mem_ops.h>
#include <botan/internal/buffer_stuffer.h>
#include <botan/internal/fmt.h>
#include <botan/internal/hash_id.h>
 
namespace Botan {
 
namespace {
 
std::vector<uint8_t> pkcs1v15_sig_encoding(std::span<const uint8_t> msg,
                                           size_t output_bits,
                                           std::span<const uint8_t> hash_id) {
   const size_t output_length = output_bits / 8;
 
   if(output_length < hash_id.size() + msg.size() + 2 + 8) {
      throw Encoding_Error("pkcs1v15_sig_encoding: Output length is too small");
   }
 
   std::vector<uint8_t> padded(output_length);
   BufferStuffer stuffer(padded);
 
   stuffer.append(0x01);
   stuffer.append(0xFF, stuffer.remaining_capacity() - (1 + hash_id.size() + msg.size()));
   stuffer.append(0x00);
   stuffer.append(hash_id);
   stuffer.append(msg);
   BOTAN_ASSERT_NOMSG(stuffer.full());
 
   return padded;
}
 
}  // namespace
 
void PKCS1v15_SignaturePaddingScheme::update(const uint8_t input[], size_t length) {
   m_hash->update(input, length);
}
 
std::vector<uint8_t> PKCS1v15_SignaturePaddingScheme::raw_data() {
   return m_hash->final_stdvec();
}
 
std::vector<uint8_t> PKCS1v15_SignaturePaddingScheme::encoding_of(std::span<const uint8_t> msg,
                                                                  size_t output_bits,
                                                                  RandomNumberGenerator& /*rng*/) {
   if(msg.size() != m_hash->output_length()) {
      throw Encoding_Error("PKCS1v15_SignaturePaddingScheme::encoding_of: Bad input length");
   }
 
   return pkcs1v15_sig_encoding(msg, output_bits, m_hash_id);
}
 
bool PKCS1v15_SignaturePaddingScheme::verify(std::span<const uint8_t> coded,
                                             std::span<const uint8_t> raw,
                                             size_t key_bits) {
   if(raw.size() != m_hash->output_length()) {
      return false;
   }
 
   try {
      const auto pkcs1 = pkcs1v15_sig_encoding(raw, key_bits, m_hash_id);
      return constant_time_compare(coded, pkcs1);
   } catch(...) {
      return false;
   }
}
 
PKCS1v15_SignaturePaddingScheme::PKCS1v15_SignaturePaddingScheme(std::unique_ptr<HashFunction> hash) :
      m_hash(std::move(hash)) {
   m_hash_id = pkcs_hash_id(m_hash->name());
}
 
std::string PKCS1v15_SignaturePaddingScheme::hash_function() const {
   return m_hash->name();
}
 
std::string PKCS1v15_SignaturePaddingScheme::name() const {
   return fmt("PKCS1v15({})", m_hash->name());
}
 
std::string PKCS1v15_Raw_SignaturePaddingScheme::name() const {
   if(m_hash_name.empty()) {
      return "PKCS1v15(Raw)";
   } else {
      return fmt("PKCS1v15(Raw,{})", m_hash_name);
   }
}
 
PKCS1v15_Raw_SignaturePaddingScheme::PKCS1v15_Raw_SignaturePaddingScheme() : m_hash_output_len(0) {
   // m_hash_id, m_hash_name left empty
}
 
PKCS1v15_Raw_SignaturePaddingScheme::PKCS1v15_Raw_SignaturePaddingScheme(std::string_view hash_algo) {
   std::unique_ptr<HashFunction> hash(HashFunction::create_or_throw(hash_algo));
   m_hash_id = pkcs_hash_id(hash_algo);
   m_hash_name = hash->name();
   m_hash_output_len = hash->output_length();
}
 
void PKCS1v15_Raw_SignaturePaddingScheme::update(const uint8_t input[], size_t length) {
   m_message += std::make_pair(input, length);
   // A sanity check to prevent someone from accidentally feeding an entire message
   // into PKCS1v15(Raw), which would have to be buffered in memory
   if(m_message.size() > 16384 / 8) {
      throw Invalid_Argument("PKCS1v15(Raw) message too long");
   }
}
 
std::vector<uint8_t> PKCS1v15_Raw_SignaturePaddingScheme::raw_data() {
   std::vector<uint8_t> ret;
   std::swap(ret, m_message);
 
   if(m_hash_output_len > 0 && ret.size() != m_hash_output_len) {
      throw Encoding_Error("PKCS1v15_Raw_SignaturePaddingScheme::encoding_of: Bad input length");
   }
 
   return ret;
}
 
std::vector<uint8_t> PKCS1v15_Raw_SignaturePaddingScheme::encoding_of(std::span<const uint8_t> msg,
                                                                      size_t output_bits,
                                                                      RandomNumberGenerator& /*rng*/) {
   return pkcs1v15_sig_encoding(msg, output_bits, m_hash_id);
}
 
bool PKCS1v15_Raw_SignaturePaddingScheme::verify(std::span<const uint8_t> coded,
                                                 std::span<const uint8_t> raw,
                                                 size_t key_bits) {
   if(m_hash_output_len > 0 && raw.size() != m_hash_output_len) {
      return false;
   }
 
   try {
      const auto pkcs1 = pkcs1v15_sig_encoding(raw, key_bits, m_hash_id);
      return constant_time_compare(coded, pkcs1);
   } catch(...) {
      return false;
   }
}
 
}  // namespace Botan