mirror of https://github.com/poanetwork/gecko.git
132 lines
2.9 KiB
Go
132 lines
2.9 KiB
Go
|
// (c) 2019-2020, Ava Labs, Inc. All rights reserved.
|
||
|
// See the file LICENSE for licensing terms.
|
||
|
|
||
|
package crypto
|
||
|
|
||
|
import (
|
||
|
"crypto"
|
||
|
"crypto/rand"
|
||
|
"crypto/rsa"
|
||
|
"crypto/x509"
|
||
|
|
||
|
"github.com/ava-labs/gecko/ids"
|
||
|
"github.com/ava-labs/gecko/utils/hashing"
|
||
|
)
|
||
|
|
||
|
const rsaPSSSize = 3072
|
||
|
|
||
|
// FactoryRSAPSS ...
|
||
|
type FactoryRSAPSS struct{}
|
||
|
|
||
|
// NewPrivateKey implements the Factory interface
|
||
|
func (*FactoryRSAPSS) NewPrivateKey() (PrivateKey, error) {
|
||
|
k, err := rsa.GenerateKey(rand.Reader, rsaPSSSize)
|
||
|
if err != nil {
|
||
|
return nil, err
|
||
|
}
|
||
|
return &PrivateKeyRSAPSS{sk: k}, nil
|
||
|
}
|
||
|
|
||
|
// ToPublicKey implements the Factory interface
|
||
|
func (*FactoryRSAPSS) ToPublicKey(b []byte) (PublicKey, error) {
|
||
|
key, err := x509.ParsePKIXPublicKey(b)
|
||
|
if err != nil {
|
||
|
return nil, err
|
||
|
}
|
||
|
switch key := key.(type) {
|
||
|
case *rsa.PublicKey:
|
||
|
return &PublicKeyRSAPSS{
|
||
|
pk: key,
|
||
|
bytes: b,
|
||
|
}, nil
|
||
|
default:
|
||
|
return nil, errWrongKeyType
|
||
|
}
|
||
|
}
|
||
|
|
||
|
// ToPrivateKey implements the Factory interface
|
||
|
func (*FactoryRSAPSS) ToPrivateKey(b []byte) (PrivateKey, error) {
|
||
|
key, err := x509.ParsePKCS1PrivateKey(b)
|
||
|
if err != nil {
|
||
|
return nil, err
|
||
|
}
|
||
|
return &PrivateKeyRSAPSS{
|
||
|
sk: key,
|
||
|
bytes: b,
|
||
|
}, nil
|
||
|
}
|
||
|
|
||
|
// PublicKeyRSAPSS ...
|
||
|
type PublicKeyRSAPSS struct {
|
||
|
pk *rsa.PublicKey
|
||
|
addr ids.ShortID
|
||
|
bytes []byte
|
||
|
}
|
||
|
|
||
|
// Verify implements the PublicKey interface
|
||
|
func (k *PublicKeyRSAPSS) Verify(msg, sig []byte) bool {
|
||
|
return k.VerifyHash(hashing.ComputeHash256(msg), sig)
|
||
|
}
|
||
|
|
||
|
// VerifyHash implements the PublicKey interface
|
||
|
func (k *PublicKeyRSAPSS) VerifyHash(hash, sig []byte) bool {
|
||
|
return rsa.VerifyPSS(k.pk, crypto.SHA256, hash, sig, nil) == nil
|
||
|
}
|
||
|
|
||
|
// Address implements the PublicKey interface
|
||
|
func (k *PublicKeyRSAPSS) Address() ids.ShortID {
|
||
|
if k.addr.IsZero() {
|
||
|
addr, err := ids.ToShortID(hashing.PubkeyBytesToAddress(k.Bytes()))
|
||
|
if err != nil {
|
||
|
panic(err)
|
||
|
}
|
||
|
k.addr = addr
|
||
|
}
|
||
|
return k.addr
|
||
|
}
|
||
|
|
||
|
// Bytes implements the PublicKey interface
|
||
|
func (k *PublicKeyRSAPSS) Bytes() []byte {
|
||
|
if k.bytes == nil {
|
||
|
b, err := x509.MarshalPKIXPublicKey(k.pk)
|
||
|
if err != nil {
|
||
|
panic(err)
|
||
|
}
|
||
|
k.bytes = b
|
||
|
}
|
||
|
return k.bytes
|
||
|
}
|
||
|
|
||
|
// PrivateKeyRSAPSS ...
|
||
|
type PrivateKeyRSAPSS struct {
|
||
|
sk *rsa.PrivateKey
|
||
|
pk *PublicKeyRSAPSS
|
||
|
bytes []byte
|
||
|
}
|
||
|
|
||
|
// PublicKey implements the PrivateKey interface
|
||
|
func (k *PrivateKeyRSAPSS) PublicKey() PublicKey {
|
||
|
if k.pk == nil {
|
||
|
k.pk = &PublicKeyRSAPSS{pk: &k.sk.PublicKey}
|
||
|
}
|
||
|
return k.pk
|
||
|
}
|
||
|
|
||
|
// Sign implements the PrivateKey interface
|
||
|
func (k *PrivateKeyRSAPSS) Sign(msg []byte) ([]byte, error) {
|
||
|
return k.SignHash(hashing.ComputeHash256(msg))
|
||
|
}
|
||
|
|
||
|
// SignHash implements the PrivateKey interface
|
||
|
func (k *PrivateKeyRSAPSS) SignHash(hash []byte) ([]byte, error) {
|
||
|
return rsa.SignPSS(rand.Reader, k.sk, crypto.SHA256, hash, nil)
|
||
|
}
|
||
|
|
||
|
// Bytes implements the PrivateKey interface
|
||
|
func (k *PrivateKeyRSAPSS) Bytes() []byte {
|
||
|
if k.bytes == nil {
|
||
|
k.bytes = x509.MarshalPKCS1PrivateKey(k.sk)
|
||
|
}
|
||
|
return k.bytes
|
||
|
}
|