/usr/share/gocode/src/github.com/dvsekhvalnov/jose2go/ecdsa_using_sha.go is in golang-github-dvsekhvalnov-jose2go-dev 1.2-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 | package jose
import (
"crypto/rand"
"math/big"
"crypto/ecdsa"
"errors"
"github.com/dvsekhvalnov/jose2go/arrays"
"github.com/dvsekhvalnov/jose2go/padding"
"fmt"
)
func init() {
RegisterJws(&EcdsaUsingSha{keySizeBits: 256, hashSizeBits: 256})
RegisterJws(&EcdsaUsingSha{keySizeBits: 384, hashSizeBits: 384})
RegisterJws(&EcdsaUsingSha{keySizeBits: 521, hashSizeBits: 512})
}
// ECDSA signing algorithm implementation
type EcdsaUsingSha struct{
keySizeBits int
hashSizeBits int
}
func (alg *EcdsaUsingSha) Name() string {
switch alg.keySizeBits {
case 256: return ES256
case 384: return ES384
default: return ES512
}
}
func (alg *EcdsaUsingSha) Verify(securedInput, signature []byte, key interface{}) error {
if pubKey,ok:=key.(*ecdsa.PublicKey);ok {
if sizeBits:=pubKey.Curve.Params().BitSize;sizeBits!=alg.keySizeBits {
return errors.New(fmt.Sprintf("EcdsaUsingSha.Verify(): expected key of size %v bits, but was given %v bits.",alg.keySizeBits,sizeBits))
}
r:=new(big.Int).SetBytes(signature[:len(signature)/2])
s:=new(big.Int).SetBytes(signature[len(signature)/2:])
if ok:=ecdsa.Verify(pubKey, sha(alg.hashSizeBits, securedInput), r,s); ok {
return nil
}
return errors.New("EcdsaUsingSha.Verify(): Signature is not valid.")
}
return errors.New("EcdsaUsingSha.Verify(): expects key to be '*ecdsa.PublicKey'")
}
func (alg *EcdsaUsingSha) Sign(securedInput []byte, key interface{}) (signature []byte, err error) {
if privKey,ok := key.(*ecdsa.PrivateKey);ok {
if sizeBits:=privKey.Curve.Params().BitSize;sizeBits!=alg.keySizeBits {
return nil,errors.New(fmt.Sprintf("EcdsaUsingSha.Sign(): expected key of size %v bits, but was given %v bits.",alg.keySizeBits,sizeBits))
}
var r,s *big.Int
if r,s,err = ecdsa.Sign(rand.Reader, privKey, sha(alg.hashSizeBits, securedInput));err==nil {
rBytes:=padding.Align(r.Bytes(), alg.keySizeBits)
sBytes:=padding.Align(s.Bytes(), alg.keySizeBits)
return arrays.Concat(rBytes,sBytes),nil
}
return nil, err
}
return nil,errors.New("EcdsaUsingSha.Sign(): expects key to be '*ecdsa.PrivateKey'")
}
|