332 lines
42 KiB
HTML
332 lines
42 KiB
HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
|
|
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
|
|
<meta name="generator" content="Doxygen 1.8.17"/>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1"/>
|
|
<title>Shaka Packager SDK: packager/media/base/rsa_key.cc Source File</title>
|
|
<link href="../../tabs.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="../../jquery.js"></script>
|
|
<script type="text/javascript" src="../../dynsections.js"></script>
|
|
<link href="../../search/search.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="../../search/searchdata.js"></script>
|
|
<script type="text/javascript" src="../../search/search.js"></script>
|
|
<link href="../../doxygen.css" rel="stylesheet" type="text/css" />
|
|
</head>
|
|
<body>
|
|
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
|
|
<div id="titlearea">
|
|
<table cellspacing="0" cellpadding="0">
|
|
<tbody>
|
|
<tr style="height: 56px;">
|
|
<td id="projectalign" style="padding-left: 0.5em;">
|
|
<div id="projectname">Shaka Packager SDK
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<!-- end header part -->
|
|
<!-- Generated by Doxygen 1.8.17 -->
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
var searchBox = new SearchBox("searchBox", "../../search",false,'Search');
|
|
/* @license-end */
|
|
</script>
|
|
<script type="text/javascript" src="../../menudata.js"></script>
|
|
<script type="text/javascript" src="../../menu.js"></script>
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
$(function() {
|
|
initMenu('../../',true,false,'search.php','Search');
|
|
$(document).ready(function() { init_search(); });
|
|
});
|
|
/* @license-end */</script>
|
|
<div id="main-nav"></div>
|
|
<!-- window showing the filter options -->
|
|
<div id="MSearchSelectWindow"
|
|
onmouseover="return searchBox.OnSearchSelectShow()"
|
|
onmouseout="return searchBox.OnSearchSelectHide()"
|
|
onkeydown="return searchBox.OnSearchSelectKey(event)">
|
|
</div>
|
|
|
|
<!-- iframe showing the search results (closed by default) -->
|
|
<div id="MSearchResultsWindow">
|
|
<iframe src="javascript:void(0)" frameborder="0"
|
|
name="MSearchResults" id="MSearchResults">
|
|
</iframe>
|
|
</div>
|
|
|
|
<div id="nav-path" class="navpath">
|
|
<ul>
|
|
<li class="navelem"><a class="el" href="../../dir_3f8eec2fc361645de4b1ec14c19fffc7.html">packager</a></li><li class="navelem"><a class="el" href="../../dir_f99dae54fe7170f791f339b952d5067a.html">media</a></li><li class="navelem"><a class="el" href="../../dir_e3bda0bde998a4d5063328245b9909be.html">base</a></li> </ul>
|
|
</div>
|
|
</div><!-- top -->
|
|
<div class="header">
|
|
<div class="headertitle">
|
|
<div class="title">rsa_key.cc</div> </div>
|
|
</div><!--header-->
|
|
<div class="contents">
|
|
<div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span> <span class="comment">// Copyright 2014 Google Inc. All rights reserved.</span></div>
|
|
<div class="line"><a name="l00002"></a><span class="lineno"> 2</span> <span class="comment">//</span></div>
|
|
<div class="line"><a name="l00003"></a><span class="lineno"> 3</span> <span class="comment">// Use of this source code is governed by a BSD-style</span></div>
|
|
<div class="line"><a name="l00004"></a><span class="lineno"> 4</span> <span class="comment">// license that can be found in the LICENSE file or at</span></div>
|
|
<div class="line"><a name="l00005"></a><span class="lineno"> 5</span> <span class="comment">// https://developers.google.com/open-source/licenses/bsd</span></div>
|
|
<div class="line"><a name="l00006"></a><span class="lineno"> 6</span> <span class="comment">//</span></div>
|
|
<div class="line"><a name="l00007"></a><span class="lineno"> 7</span> <span class="comment">// RSA signature details:</span></div>
|
|
<div class="line"><a name="l00008"></a><span class="lineno"> 8</span> <span class="comment">// Algorithm: RSASSA-PSS</span></div>
|
|
<div class="line"><a name="l00009"></a><span class="lineno"> 9</span> <span class="comment">// Hash algorithm: SHA1</span></div>
|
|
<div class="line"><a name="l00010"></a><span class="lineno"> 10</span> <span class="comment">// Mask generation function: mgf1SHA1</span></div>
|
|
<div class="line"><a name="l00011"></a><span class="lineno"> 11</span> <span class="comment">// Salt length: 20 bytes</span></div>
|
|
<div class="line"><a name="l00012"></a><span class="lineno"> 12</span> <span class="comment">// Trailer field: 0xbc</span></div>
|
|
<div class="line"><a name="l00013"></a><span class="lineno"> 13</span> <span class="comment">//</span></div>
|
|
<div class="line"><a name="l00014"></a><span class="lineno"> 14</span> <span class="comment">// RSA encryption details:</span></div>
|
|
<div class="line"><a name="l00015"></a><span class="lineno"> 15</span> <span class="comment">// Algorithm: RSA-OAEP</span></div>
|
|
<div class="line"><a name="l00016"></a><span class="lineno"> 16</span> <span class="comment">// Mask generation function: mgf1SHA1</span></div>
|
|
<div class="line"><a name="l00017"></a><span class="lineno"> 17</span> <span class="comment">// Label (encoding paramter): empty std::string</span></div>
|
|
<div class="line"><a name="l00018"></a><span class="lineno"> 18</span>  </div>
|
|
<div class="line"><a name="l00019"></a><span class="lineno"> 19</span> <span class="preprocessor">#include "packager/media/base/rsa_key.h"</span></div>
|
|
<div class="line"><a name="l00020"></a><span class="lineno"> 20</span>  </div>
|
|
<div class="line"><a name="l00021"></a><span class="lineno"> 21</span> <span class="preprocessor">#include <openssl/err.h></span></div>
|
|
<div class="line"><a name="l00022"></a><span class="lineno"> 22</span> <span class="preprocessor">#include <openssl/rsa.h></span></div>
|
|
<div class="line"><a name="l00023"></a><span class="lineno"> 23</span> <span class="preprocessor">#include <openssl/x509.h></span></div>
|
|
<div class="line"><a name="l00024"></a><span class="lineno"> 24</span> <span class="preprocessor">#include <vector></span></div>
|
|
<div class="line"><a name="l00025"></a><span class="lineno"> 25</span>  </div>
|
|
<div class="line"><a name="l00026"></a><span class="lineno"> 26</span> <span class="preprocessor">#include "packager/base/logging.h"</span></div>
|
|
<div class="line"><a name="l00027"></a><span class="lineno"> 27</span> <span class="preprocessor">#include "packager/base/sha1.h"</span></div>
|
|
<div class="line"><a name="l00028"></a><span class="lineno"> 28</span>  </div>
|
|
<div class="line"><a name="l00029"></a><span class="lineno"> 29</span> <span class="keyword">namespace </span>{</div>
|
|
<div class="line"><a name="l00030"></a><span class="lineno"> 30</span>  </div>
|
|
<div class="line"><a name="l00031"></a><span class="lineno"> 31</span> <span class="keyword">const</span> <span class="keywordtype">size_t</span> kPssSaltLength = 20u;</div>
|
|
<div class="line"><a name="l00032"></a><span class="lineno"> 32</span>  </div>
|
|
<div class="line"><a name="l00033"></a><span class="lineno"> 33</span> <span class="comment">// Serialize rsa key from DER encoded PKCS#1 RSAPrivateKey.</span></div>
|
|
<div class="line"><a name="l00034"></a><span class="lineno"> 34</span> RSA* DeserializeRsaKey(<span class="keyword">const</span> std::string& serialized_key,</div>
|
|
<div class="line"><a name="l00035"></a><span class="lineno"> 35</span>  <span class="keywordtype">bool</span> deserialize_private_key) {</div>
|
|
<div class="line"><a name="l00036"></a><span class="lineno"> 36</span>  <span class="keywordflow">if</span> (serialized_key.empty()) {</div>
|
|
<div class="line"><a name="l00037"></a><span class="lineno"> 37</span>  LOG(ERROR) << <span class="stringliteral">"Serialized RSA Key is empty."</span>;</div>
|
|
<div class="line"><a name="l00038"></a><span class="lineno"> 38</span>  <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00039"></a><span class="lineno"> 39</span>  }</div>
|
|
<div class="line"><a name="l00040"></a><span class="lineno"> 40</span>  </div>
|
|
<div class="line"><a name="l00041"></a><span class="lineno"> 41</span>  BIO* bio = BIO_new_mem_buf(<span class="keyword">const_cast<</span><span class="keywordtype">char</span>*<span class="keyword">></span>(serialized_key.data()),</div>
|
|
<div class="line"><a name="l00042"></a><span class="lineno"> 42</span>  serialized_key.size());</div>
|
|
<div class="line"><a name="l00043"></a><span class="lineno"> 43</span>  <span class="keywordflow">if</span> (bio == NULL) {</div>
|
|
<div class="line"><a name="l00044"></a><span class="lineno"> 44</span>  LOG(ERROR) << <span class="stringliteral">"BIO_new_mem_buf returned NULL."</span>;</div>
|
|
<div class="line"><a name="l00045"></a><span class="lineno"> 45</span>  <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00046"></a><span class="lineno"> 46</span>  }</div>
|
|
<div class="line"><a name="l00047"></a><span class="lineno"> 47</span>  RSA* rsa_key = deserialize_private_key ? d2i_RSAPrivateKey_bio(bio, NULL)</div>
|
|
<div class="line"><a name="l00048"></a><span class="lineno"> 48</span>  : d2i_RSAPublicKey_bio(bio, NULL);</div>
|
|
<div class="line"><a name="l00049"></a><span class="lineno"> 49</span>  BIO_free(bio);</div>
|
|
<div class="line"><a name="l00050"></a><span class="lineno"> 50</span>  <span class="keywordflow">return</span> rsa_key;</div>
|
|
<div class="line"><a name="l00051"></a><span class="lineno"> 51</span> }</div>
|
|
<div class="line"><a name="l00052"></a><span class="lineno"> 52</span>  </div>
|
|
<div class="line"><a name="l00053"></a><span class="lineno"> 53</span> RSA* DeserializeRsaPrivateKey(<span class="keyword">const</span> std::string& serialized_key) {</div>
|
|
<div class="line"><a name="l00054"></a><span class="lineno"> 54</span>  RSA* rsa_key = DeserializeRsaKey(serialized_key, <span class="keyword">true</span>);</div>
|
|
<div class="line"><a name="l00055"></a><span class="lineno"> 55</span>  <span class="keywordflow">if</span> (!rsa_key) {</div>
|
|
<div class="line"><a name="l00056"></a><span class="lineno"> 56</span>  LOG(ERROR) << <span class="stringliteral">"Private RSA key deserialization failure."</span>;</div>
|
|
<div class="line"><a name="l00057"></a><span class="lineno"> 57</span>  <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00058"></a><span class="lineno"> 58</span>  }</div>
|
|
<div class="line"><a name="l00059"></a><span class="lineno"> 59</span>  <span class="keywordflow">if</span> (RSA_check_key(rsa_key) != 1) {</div>
|
|
<div class="line"><a name="l00060"></a><span class="lineno"> 60</span>  LOG(ERROR) << <span class="stringliteral">"Invalid RSA Private key: "</span> << ERR_error_string(</div>
|
|
<div class="line"><a name="l00061"></a><span class="lineno"> 61</span>  ERR_get_error(), NULL);</div>
|
|
<div class="line"><a name="l00062"></a><span class="lineno"> 62</span>  RSA_free(rsa_key);</div>
|
|
<div class="line"><a name="l00063"></a><span class="lineno"> 63</span>  <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00064"></a><span class="lineno"> 64</span>  }</div>
|
|
<div class="line"><a name="l00065"></a><span class="lineno"> 65</span>  <span class="keywordflow">return</span> rsa_key;</div>
|
|
<div class="line"><a name="l00066"></a><span class="lineno"> 66</span> }</div>
|
|
<div class="line"><a name="l00067"></a><span class="lineno"> 67</span>  </div>
|
|
<div class="line"><a name="l00068"></a><span class="lineno"> 68</span> RSA* DeserializeRsaPublicKey(<span class="keyword">const</span> std::string& serialized_key) {</div>
|
|
<div class="line"><a name="l00069"></a><span class="lineno"> 69</span>  RSA* rsa_key = DeserializeRsaKey(serialized_key, <span class="keyword">false</span>);</div>
|
|
<div class="line"><a name="l00070"></a><span class="lineno"> 70</span>  <span class="keywordflow">if</span> (!rsa_key) {</div>
|
|
<div class="line"><a name="l00071"></a><span class="lineno"> 71</span>  LOG(ERROR) << <span class="stringliteral">"Private RSA key deserialization failure."</span>;</div>
|
|
<div class="line"><a name="l00072"></a><span class="lineno"> 72</span>  <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00073"></a><span class="lineno"> 73</span>  }</div>
|
|
<div class="line"><a name="l00074"></a><span class="lineno"> 74</span>  <span class="keywordflow">if</span> (RSA_size(rsa_key) <= 0) {</div>
|
|
<div class="line"><a name="l00075"></a><span class="lineno"> 75</span>  LOG(ERROR) << <span class="stringliteral">"Invalid RSA Public key: "</span> << ERR_error_string(</div>
|
|
<div class="line"><a name="l00076"></a><span class="lineno"> 76</span>  ERR_get_error(), NULL);</div>
|
|
<div class="line"><a name="l00077"></a><span class="lineno"> 77</span>  RSA_free(rsa_key);</div>
|
|
<div class="line"><a name="l00078"></a><span class="lineno"> 78</span>  <span class="keywordflow">return</span> NULL;</div>
|
|
<div class="line"><a name="l00079"></a><span class="lineno"> 79</span>  }</div>
|
|
<div class="line"><a name="l00080"></a><span class="lineno"> 80</span>  <span class="keywordflow">return</span> rsa_key;</div>
|
|
<div class="line"><a name="l00081"></a><span class="lineno"> 81</span> }</div>
|
|
<div class="line"><a name="l00082"></a><span class="lineno"> 82</span>  </div>
|
|
<div class="line"><a name="l00083"></a><span class="lineno"> 83</span> } <span class="comment">// namespace</span></div>
|
|
<div class="line"><a name="l00084"></a><span class="lineno"> 84</span>  </div>
|
|
<div class="line"><a name="l00085"></a><span class="lineno"> 85</span> <span class="keyword">namespace </span><a class="code" href="../../d8/daf/namespaceshaka.html">shaka</a> {</div>
|
|
<div class="line"><a name="l00086"></a><span class="lineno"> 86</span> <span class="keyword">namespace </span>media {</div>
|
|
<div class="line"><a name="l00087"></a><span class="lineno"> 87</span>  </div>
|
|
<div class="line"><a name="l00088"></a><span class="lineno"> 88</span> RsaPrivateKey::RsaPrivateKey(RSA* rsa_key) : rsa_key_(rsa_key) {</div>
|
|
<div class="line"><a name="l00089"></a><span class="lineno"> 89</span>  DCHECK(rsa_key);</div>
|
|
<div class="line"><a name="l00090"></a><span class="lineno"> 90</span> }</div>
|
|
<div class="line"><a name="l00091"></a><span class="lineno"> 91</span> RsaPrivateKey::~RsaPrivateKey() {</div>
|
|
<div class="line"><a name="l00092"></a><span class="lineno"> 92</span>  <span class="keywordflow">if</span> (rsa_key_ != NULL)</div>
|
|
<div class="line"><a name="l00093"></a><span class="lineno"> 93</span>  RSA_free(rsa_key_);</div>
|
|
<div class="line"><a name="l00094"></a><span class="lineno"> 94</span> }</div>
|
|
<div class="line"><a name="l00095"></a><span class="lineno"> 95</span>  </div>
|
|
<div class="line"><a name="l00096"></a><span class="lineno"><a class="line" href="../../d0/dce/classshaka_1_1media_1_1RsaPrivateKey.html#aef45d0014d7971b936ce3d0109935ba8"> 96</a></span> <a class="code" href="../../d0/dce/classshaka_1_1media_1_1RsaPrivateKey.html">RsaPrivateKey</a>* <a class="code" href="../../d0/dce/classshaka_1_1media_1_1RsaPrivateKey.html#aef45d0014d7971b936ce3d0109935ba8">RsaPrivateKey::Create</a>(<span class="keyword">const</span> std::string& serialized_key) {</div>
|
|
<div class="line"><a name="l00097"></a><span class="lineno"> 97</span>  RSA* rsa_key = DeserializeRsaPrivateKey(serialized_key);</div>
|
|
<div class="line"><a name="l00098"></a><span class="lineno"> 98</span>  <span class="keywordflow">return</span> rsa_key == NULL ? NULL : <span class="keyword">new</span> <a class="code" href="../../d0/dce/classshaka_1_1media_1_1RsaPrivateKey.html">RsaPrivateKey</a>(rsa_key);</div>
|
|
<div class="line"><a name="l00099"></a><span class="lineno"> 99</span> }</div>
|
|
<div class="line"><a name="l00100"></a><span class="lineno"> 100</span>  </div>
|
|
<div class="line"><a name="l00101"></a><span class="lineno"><a class="line" href="../../d0/dce/classshaka_1_1media_1_1RsaPrivateKey.html#a89a475ffe2d96bfab09536b864038ca4"> 101</a></span> <span class="keywordtype">bool</span> <a class="code" href="../../d0/dce/classshaka_1_1media_1_1RsaPrivateKey.html#a89a475ffe2d96bfab09536b864038ca4">RsaPrivateKey::Decrypt</a>(<span class="keyword">const</span> std::string& encrypted_message,</div>
|
|
<div class="line"><a name="l00102"></a><span class="lineno"> 102</span>  std::string* decrypted_message) {</div>
|
|
<div class="line"><a name="l00103"></a><span class="lineno"> 103</span>  DCHECK(decrypted_message);</div>
|
|
<div class="line"><a name="l00104"></a><span class="lineno"> 104</span>  </div>
|
|
<div class="line"><a name="l00105"></a><span class="lineno"> 105</span>  <span class="keywordtype">size_t</span> rsa_size = RSA_size(rsa_key_);</div>
|
|
<div class="line"><a name="l00106"></a><span class="lineno"> 106</span>  <span class="keywordflow">if</span> (encrypted_message.size() != rsa_size) {</div>
|
|
<div class="line"><a name="l00107"></a><span class="lineno"> 107</span>  LOG(ERROR) << <span class="stringliteral">"Encrypted RSA message has the wrong size (expected "</span></div>
|
|
<div class="line"><a name="l00108"></a><span class="lineno"> 108</span>  << rsa_size << <span class="stringliteral">", actual "</span> << encrypted_message.size() << <span class="stringliteral">")."</span>;</div>
|
|
<div class="line"><a name="l00109"></a><span class="lineno"> 109</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00110"></a><span class="lineno"> 110</span>  }</div>
|
|
<div class="line"><a name="l00111"></a><span class="lineno"> 111</span>  </div>
|
|
<div class="line"><a name="l00112"></a><span class="lineno"> 112</span>  decrypted_message->resize(rsa_size);</div>
|
|
<div class="line"><a name="l00113"></a><span class="lineno"> 113</span>  <span class="keywordtype">int</span> decrypted_size = RSA_private_decrypt(</div>
|
|
<div class="line"><a name="l00114"></a><span class="lineno"> 114</span>  rsa_size, <span class="keyword">reinterpret_cast<</span><span class="keyword">const </span>uint8_t*<span class="keyword">></span>(encrypted_message.data()),</div>
|
|
<div class="line"><a name="l00115"></a><span class="lineno"> 115</span>  <span class="keyword">reinterpret_cast<</span>uint8_t*<span class="keyword">></span>(&(*decrypted_message)[0]), rsa_key_,</div>
|
|
<div class="line"><a name="l00116"></a><span class="lineno"> 116</span>  RSA_PKCS1_OAEP_PADDING);</div>
|
|
<div class="line"><a name="l00117"></a><span class="lineno"> 117</span>  </div>
|
|
<div class="line"><a name="l00118"></a><span class="lineno"> 118</span>  <span class="keywordflow">if</span> (decrypted_size == -1) {</div>
|
|
<div class="line"><a name="l00119"></a><span class="lineno"> 119</span>  LOG(ERROR) << <span class="stringliteral">"RSA private decrypt failure: "</span> << ERR_error_string(</div>
|
|
<div class="line"><a name="l00120"></a><span class="lineno"> 120</span>  ERR_get_error(), NULL);</div>
|
|
<div class="line"><a name="l00121"></a><span class="lineno"> 121</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00122"></a><span class="lineno"> 122</span>  }</div>
|
|
<div class="line"><a name="l00123"></a><span class="lineno"> 123</span>  decrypted_message->resize(decrypted_size);</div>
|
|
<div class="line"><a name="l00124"></a><span class="lineno"> 124</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
<div class="line"><a name="l00125"></a><span class="lineno"> 125</span> }</div>
|
|
<div class="line"><a name="l00126"></a><span class="lineno"> 126</span>  </div>
|
|
<div class="line"><a name="l00127"></a><span class="lineno"><a class="line" href="../../d0/dce/classshaka_1_1media_1_1RsaPrivateKey.html#ad05d8951dfe3a8af754490022e95e5f2"> 127</a></span> <span class="keywordtype">bool</span> <a class="code" href="../../d0/dce/classshaka_1_1media_1_1RsaPrivateKey.html#ad05d8951dfe3a8af754490022e95e5f2">RsaPrivateKey::GenerateSignature</a>(<span class="keyword">const</span> std::string& message,</div>
|
|
<div class="line"><a name="l00128"></a><span class="lineno"> 128</span>  std::string* signature) {</div>
|
|
<div class="line"><a name="l00129"></a><span class="lineno"> 129</span>  DCHECK(signature);</div>
|
|
<div class="line"><a name="l00130"></a><span class="lineno"> 130</span>  <span class="keywordflow">if</span> (message.empty()) {</div>
|
|
<div class="line"><a name="l00131"></a><span class="lineno"> 131</span>  LOG(ERROR) << <span class="stringliteral">"Message to be signed is empty."</span>;</div>
|
|
<div class="line"><a name="l00132"></a><span class="lineno"> 132</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00133"></a><span class="lineno"> 133</span>  }</div>
|
|
<div class="line"><a name="l00134"></a><span class="lineno"> 134</span>  </div>
|
|
<div class="line"><a name="l00135"></a><span class="lineno"> 135</span>  std::string message_digest = base::SHA1HashString(message);</div>
|
|
<div class="line"><a name="l00136"></a><span class="lineno"> 136</span>  </div>
|
|
<div class="line"><a name="l00137"></a><span class="lineno"> 137</span>  <span class="comment">// Add PSS padding.</span></div>
|
|
<div class="line"><a name="l00138"></a><span class="lineno"> 138</span>  <span class="keywordtype">size_t</span> rsa_size = RSA_size(rsa_key_);</div>
|
|
<div class="line"><a name="l00139"></a><span class="lineno"> 139</span>  std::vector<uint8_t> padded_digest(rsa_size);</div>
|
|
<div class="line"><a name="l00140"></a><span class="lineno"> 140</span>  <span class="keywordflow">if</span> (!RSA_padding_add_PKCS1_PSS_mgf1(</div>
|
|
<div class="line"><a name="l00141"></a><span class="lineno"> 141</span>  rsa_key_, &padded_digest[0],</div>
|
|
<div class="line"><a name="l00142"></a><span class="lineno"> 142</span>  <span class="keyword">reinterpret_cast<</span>uint8_t*<span class="keyword">></span>(&message_digest[0]), EVP_sha1(),</div>
|
|
<div class="line"><a name="l00143"></a><span class="lineno"> 143</span>  EVP_sha1(), kPssSaltLength)) {</div>
|
|
<div class="line"><a name="l00144"></a><span class="lineno"> 144</span>  LOG(ERROR) << <span class="stringliteral">"RSA padding failure: "</span> << ERR_error_string(ERR_get_error(),</div>
|
|
<div class="line"><a name="l00145"></a><span class="lineno"> 145</span>  NULL);</div>
|
|
<div class="line"><a name="l00146"></a><span class="lineno"> 146</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00147"></a><span class="lineno"> 147</span>  }</div>
|
|
<div class="line"><a name="l00148"></a><span class="lineno"> 148</span>  </div>
|
|
<div class="line"><a name="l00149"></a><span class="lineno"> 149</span>  <span class="comment">// Encrypt PSS padded digest.</span></div>
|
|
<div class="line"><a name="l00150"></a><span class="lineno"> 150</span>  signature->resize(rsa_size);</div>
|
|
<div class="line"><a name="l00151"></a><span class="lineno"> 151</span>  <span class="keywordtype">int</span> signature_size = RSA_private_encrypt(</div>
|
|
<div class="line"><a name="l00152"></a><span class="lineno"> 152</span>  padded_digest.size(), &padded_digest[0],</div>
|
|
<div class="line"><a name="l00153"></a><span class="lineno"> 153</span>  <span class="keyword">reinterpret_cast<</span>uint8_t*<span class="keyword">></span>(&(*signature)[0]), rsa_key_, RSA_NO_PADDING);</div>
|
|
<div class="line"><a name="l00154"></a><span class="lineno"> 154</span>  </div>
|
|
<div class="line"><a name="l00155"></a><span class="lineno"> 155</span>  <span class="keywordflow">if</span> (signature_size != <span class="keyword">static_cast<</span><span class="keywordtype">int</span><span class="keyword">></span>(rsa_size)) {</div>
|
|
<div class="line"><a name="l00156"></a><span class="lineno"> 156</span>  LOG(ERROR) << <span class="stringliteral">"RSA private encrypt failure: "</span> << ERR_error_string(</div>
|
|
<div class="line"><a name="l00157"></a><span class="lineno"> 157</span>  ERR_get_error(), NULL);</div>
|
|
<div class="line"><a name="l00158"></a><span class="lineno"> 158</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00159"></a><span class="lineno"> 159</span>  }</div>
|
|
<div class="line"><a name="l00160"></a><span class="lineno"> 160</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
<div class="line"><a name="l00161"></a><span class="lineno"> 161</span> }</div>
|
|
<div class="line"><a name="l00162"></a><span class="lineno"> 162</span>  </div>
|
|
<div class="line"><a name="l00163"></a><span class="lineno"> 163</span> RsaPublicKey::RsaPublicKey(RSA* rsa_key) : rsa_key_(rsa_key) {</div>
|
|
<div class="line"><a name="l00164"></a><span class="lineno"> 164</span>  DCHECK(rsa_key);</div>
|
|
<div class="line"><a name="l00165"></a><span class="lineno"> 165</span> }</div>
|
|
<div class="line"><a name="l00166"></a><span class="lineno"> 166</span> RsaPublicKey::~RsaPublicKey() {</div>
|
|
<div class="line"><a name="l00167"></a><span class="lineno"> 167</span>  <span class="keywordflow">if</span> (rsa_key_ != NULL)</div>
|
|
<div class="line"><a name="l00168"></a><span class="lineno"> 168</span>  RSA_free(rsa_key_);</div>
|
|
<div class="line"><a name="l00169"></a><span class="lineno"> 169</span> }</div>
|
|
<div class="line"><a name="l00170"></a><span class="lineno"> 170</span>  </div>
|
|
<div class="line"><a name="l00171"></a><span class="lineno"><a class="line" href="../../d9/d0c/classshaka_1_1media_1_1RsaPublicKey.html#aabe4a2f1541ca1e741305f58329e3881"> 171</a></span> <a class="code" href="../../d9/d0c/classshaka_1_1media_1_1RsaPublicKey.html">RsaPublicKey</a>* <a class="code" href="../../d9/d0c/classshaka_1_1media_1_1RsaPublicKey.html#aabe4a2f1541ca1e741305f58329e3881">RsaPublicKey::Create</a>(<span class="keyword">const</span> std::string& serialized_key) {</div>
|
|
<div class="line"><a name="l00172"></a><span class="lineno"> 172</span>  RSA* rsa_key = DeserializeRsaPublicKey(serialized_key);</div>
|
|
<div class="line"><a name="l00173"></a><span class="lineno"> 173</span>  <span class="keywordflow">return</span> rsa_key == NULL ? NULL : <span class="keyword">new</span> <a class="code" href="../../d9/d0c/classshaka_1_1media_1_1RsaPublicKey.html">RsaPublicKey</a>(rsa_key);</div>
|
|
<div class="line"><a name="l00174"></a><span class="lineno"> 174</span> }</div>
|
|
<div class="line"><a name="l00175"></a><span class="lineno"> 175</span>  </div>
|
|
<div class="line"><a name="l00176"></a><span class="lineno"><a class="line" href="../../d9/d0c/classshaka_1_1media_1_1RsaPublicKey.html#ab9dcf591f3235b8f4eaa02886f9845e3"> 176</a></span> <span class="keywordtype">bool</span> <a class="code" href="../../d9/d0c/classshaka_1_1media_1_1RsaPublicKey.html#ab9dcf591f3235b8f4eaa02886f9845e3">RsaPublicKey::Encrypt</a>(<span class="keyword">const</span> std::string& clear_message,</div>
|
|
<div class="line"><a name="l00177"></a><span class="lineno"> 177</span>  std::string* encrypted_message) {</div>
|
|
<div class="line"><a name="l00178"></a><span class="lineno"> 178</span>  DCHECK(encrypted_message);</div>
|
|
<div class="line"><a name="l00179"></a><span class="lineno"> 179</span>  <span class="keywordflow">if</span> (clear_message.empty()) {</div>
|
|
<div class="line"><a name="l00180"></a><span class="lineno"> 180</span>  LOG(ERROR) << <span class="stringliteral">"Message to be encrypted is empty."</span>;</div>
|
|
<div class="line"><a name="l00181"></a><span class="lineno"> 181</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00182"></a><span class="lineno"> 182</span>  }</div>
|
|
<div class="line"><a name="l00183"></a><span class="lineno"> 183</span>  </div>
|
|
<div class="line"><a name="l00184"></a><span class="lineno"> 184</span>  <span class="keywordtype">size_t</span> rsa_size = RSA_size(rsa_key_);</div>
|
|
<div class="line"><a name="l00185"></a><span class="lineno"> 185</span>  encrypted_message->resize(rsa_size);</div>
|
|
<div class="line"><a name="l00186"></a><span class="lineno"> 186</span>  <span class="keywordtype">int</span> encrypted_size =</div>
|
|
<div class="line"><a name="l00187"></a><span class="lineno"> 187</span>  RSA_public_encrypt(clear_message.size(),</div>
|
|
<div class="line"><a name="l00188"></a><span class="lineno"> 188</span>  <span class="keyword">reinterpret_cast<</span><span class="keyword">const </span>uint8_t*<span class="keyword">></span>(clear_message.data()),</div>
|
|
<div class="line"><a name="l00189"></a><span class="lineno"> 189</span>  <span class="keyword">reinterpret_cast<</span>uint8_t*<span class="keyword">></span>(&(*encrypted_message)[0]),</div>
|
|
<div class="line"><a name="l00190"></a><span class="lineno"> 190</span>  rsa_key_, RSA_PKCS1_OAEP_PADDING);</div>
|
|
<div class="line"><a name="l00191"></a><span class="lineno"> 191</span>  </div>
|
|
<div class="line"><a name="l00192"></a><span class="lineno"> 192</span>  <span class="keywordflow">if</span> (encrypted_size != <span class="keyword">static_cast<</span><span class="keywordtype">int</span><span class="keyword">></span>(rsa_size)) {</div>
|
|
<div class="line"><a name="l00193"></a><span class="lineno"> 193</span>  LOG(ERROR) << <span class="stringliteral">"RSA public encrypt failure: "</span> << ERR_error_string(</div>
|
|
<div class="line"><a name="l00194"></a><span class="lineno"> 194</span>  ERR_get_error(), NULL);</div>
|
|
<div class="line"><a name="l00195"></a><span class="lineno"> 195</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00196"></a><span class="lineno"> 196</span>  }</div>
|
|
<div class="line"><a name="l00197"></a><span class="lineno"> 197</span>  <span class="keywordflow">return</span> <span class="keyword">true</span>;</div>
|
|
<div class="line"><a name="l00198"></a><span class="lineno"> 198</span> }</div>
|
|
<div class="line"><a name="l00199"></a><span class="lineno"> 199</span>  </div>
|
|
<div class="line"><a name="l00200"></a><span class="lineno"><a class="line" href="../../d9/d0c/classshaka_1_1media_1_1RsaPublicKey.html#a146cc97c8fcacadde1b08c373b766fe4"> 200</a></span> <span class="keywordtype">bool</span> <a class="code" href="../../d9/d0c/classshaka_1_1media_1_1RsaPublicKey.html#a146cc97c8fcacadde1b08c373b766fe4">RsaPublicKey::VerifySignature</a>(<span class="keyword">const</span> std::string& message,</div>
|
|
<div class="line"><a name="l00201"></a><span class="lineno"> 201</span>  <span class="keyword">const</span> std::string& signature) {</div>
|
|
<div class="line"><a name="l00202"></a><span class="lineno"> 202</span>  <span class="keywordflow">if</span> (message.empty()) {</div>
|
|
<div class="line"><a name="l00203"></a><span class="lineno"> 203</span>  LOG(ERROR) << <span class="stringliteral">"Signed message is empty."</span>;</div>
|
|
<div class="line"><a name="l00204"></a><span class="lineno"> 204</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00205"></a><span class="lineno"> 205</span>  }</div>
|
|
<div class="line"><a name="l00206"></a><span class="lineno"> 206</span>  </div>
|
|
<div class="line"><a name="l00207"></a><span class="lineno"> 207</span>  <span class="keywordtype">size_t</span> rsa_size = RSA_size(rsa_key_);</div>
|
|
<div class="line"><a name="l00208"></a><span class="lineno"> 208</span>  <span class="keywordflow">if</span> (signature.size() != rsa_size) {</div>
|
|
<div class="line"><a name="l00209"></a><span class="lineno"> 209</span>  LOG(ERROR) << <span class="stringliteral">"Message signature is of the wrong size (expected "</span></div>
|
|
<div class="line"><a name="l00210"></a><span class="lineno"> 210</span>  << rsa_size << <span class="stringliteral">", actual "</span> << signature.size() << <span class="stringliteral">")."</span>;</div>
|
|
<div class="line"><a name="l00211"></a><span class="lineno"> 211</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00212"></a><span class="lineno"> 212</span>  }</div>
|
|
<div class="line"><a name="l00213"></a><span class="lineno"> 213</span>  </div>
|
|
<div class="line"><a name="l00214"></a><span class="lineno"> 214</span>  <span class="comment">// Decrypt the signature.</span></div>
|
|
<div class="line"><a name="l00215"></a><span class="lineno"> 215</span>  std::vector<uint8_t> padded_digest(signature.size());</div>
|
|
<div class="line"><a name="l00216"></a><span class="lineno"> 216</span>  <span class="keywordtype">int</span> decrypted_size =</div>
|
|
<div class="line"><a name="l00217"></a><span class="lineno"> 217</span>  RSA_public_decrypt(signature.size(),</div>
|
|
<div class="line"><a name="l00218"></a><span class="lineno"> 218</span>  <span class="keyword">reinterpret_cast<</span><span class="keyword">const </span>uint8_t*<span class="keyword">></span>(signature.data()),</div>
|
|
<div class="line"><a name="l00219"></a><span class="lineno"> 219</span>  &padded_digest[0],</div>
|
|
<div class="line"><a name="l00220"></a><span class="lineno"> 220</span>  rsa_key_,</div>
|
|
<div class="line"><a name="l00221"></a><span class="lineno"> 221</span>  RSA_NO_PADDING);</div>
|
|
<div class="line"><a name="l00222"></a><span class="lineno"> 222</span>  </div>
|
|
<div class="line"><a name="l00223"></a><span class="lineno"> 223</span>  <span class="keywordflow">if</span> (decrypted_size != <span class="keyword">static_cast<</span><span class="keywordtype">int</span><span class="keyword">></span>(rsa_size)) {</div>
|
|
<div class="line"><a name="l00224"></a><span class="lineno"> 224</span>  LOG(ERROR) << <span class="stringliteral">"RSA public decrypt failure: "</span> << ERR_error_string(</div>
|
|
<div class="line"><a name="l00225"></a><span class="lineno"> 225</span>  ERR_get_error(), NULL);</div>
|
|
<div class="line"><a name="l00226"></a><span class="lineno"> 226</span>  <span class="keywordflow">return</span> <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00227"></a><span class="lineno"> 227</span>  }</div>
|
|
<div class="line"><a name="l00228"></a><span class="lineno"> 228</span>  </div>
|
|
<div class="line"><a name="l00229"></a><span class="lineno"> 229</span>  std::string message_digest = base::SHA1HashString(message);</div>
|
|
<div class="line"><a name="l00230"></a><span class="lineno"> 230</span>  </div>
|
|
<div class="line"><a name="l00231"></a><span class="lineno"> 231</span>  <span class="comment">// Verify PSS padding.</span></div>
|
|
<div class="line"><a name="l00232"></a><span class="lineno"> 232</span>  <span class="keywordflow">return</span> RSA_verify_PKCS1_PSS_mgf1(</div>
|
|
<div class="line"><a name="l00233"></a><span class="lineno"> 233</span>  rsa_key_,</div>
|
|
<div class="line"><a name="l00234"></a><span class="lineno"> 234</span>  <span class="keyword">reinterpret_cast<</span><span class="keyword">const </span>uint8_t*<span class="keyword">></span>(message_digest.data()),</div>
|
|
<div class="line"><a name="l00235"></a><span class="lineno"> 235</span>  EVP_sha1(),</div>
|
|
<div class="line"><a name="l00236"></a><span class="lineno"> 236</span>  EVP_sha1(),</div>
|
|
<div class="line"><a name="l00237"></a><span class="lineno"> 237</span>  &padded_digest[0],</div>
|
|
<div class="line"><a name="l00238"></a><span class="lineno"> 238</span>  kPssSaltLength) != 0;</div>
|
|
<div class="line"><a name="l00239"></a><span class="lineno"> 239</span> }</div>
|
|
<div class="line"><a name="l00240"></a><span class="lineno"> 240</span>  </div>
|
|
<div class="line"><a name="l00241"></a><span class="lineno"> 241</span> } <span class="comment">// namespace media</span></div>
|
|
<div class="line"><a name="l00242"></a><span class="lineno"> 242</span> } <span class="comment">// namespace shaka</span></div>
|
|
</div><!-- fragment --></div><!-- contents -->
|
|
<div class="ttc" id="aclassshaka_1_1media_1_1RsaPrivateKey_html"><div class="ttname"><a href="../../d0/dce/classshaka_1_1media_1_1RsaPrivateKey.html">shaka::media::RsaPrivateKey</a></div><div class="ttdoc">Rsa private key, used for message signing and decryption.</div><div class="ttdef"><b>Definition:</b> <a href="../../d5/dcf/rsa__key_8h_source.html#l00024">rsa_key.h:24</a></div></div>
|
|
<div class="ttc" id="anamespaceshaka_html"><div class="ttname"><a href="../../d8/daf/namespaceshaka.html">shaka</a></div><div class="ttdoc">All the methods that are virtual are virtual for mocking.</div><div class="ttdef"><b>Definition:</b> <a href="../../d4/d15/gflags__hex__bytes_8cc_source.html#l00011">gflags_hex_bytes.cc:11</a></div></div>
|
|
<div class="ttc" id="aclassshaka_1_1media_1_1RsaPrivateKey_html_aef45d0014d7971b936ce3d0109935ba8"><div class="ttname"><a href="../../d0/dce/classshaka_1_1media_1_1RsaPrivateKey.html#aef45d0014d7971b936ce3d0109935ba8">shaka::media::RsaPrivateKey::Create</a></div><div class="ttdeci">static RsaPrivateKey * Create(const std::string &serialized_key)</div><div class="ttdef"><b>Definition:</b> <a href="../../dc/dd9/rsa__key_8cc_source.html#l00096">rsa_key.cc:96</a></div></div>
|
|
<div class="ttc" id="aclassshaka_1_1media_1_1RsaPublicKey_html"><div class="ttname"><a href="../../d9/d0c/classshaka_1_1media_1_1RsaPublicKey.html">shaka::media::RsaPublicKey</a></div><div class="ttdoc">Rsa public key, used for signature verification and encryption.</div><div class="ttdef"><b>Definition:</b> <a href="../../d5/dcf/rsa__key_8h_source.html#l00053">rsa_key.h:53</a></div></div>
|
|
<div class="ttc" id="aclassshaka_1_1media_1_1RsaPublicKey_html_a146cc97c8fcacadde1b08c373b766fe4"><div class="ttname"><a href="../../d9/d0c/classshaka_1_1media_1_1RsaPublicKey.html#a146cc97c8fcacadde1b08c373b766fe4">shaka::media::RsaPublicKey::VerifySignature</a></div><div class="ttdeci">bool VerifySignature(const std::string &message, const std::string &signature)</div><div class="ttdef"><b>Definition:</b> <a href="../../dc/dd9/rsa__key_8cc_source.html#l00200">rsa_key.cc:200</a></div></div>
|
|
<div class="ttc" id="aclassshaka_1_1media_1_1RsaPrivateKey_html_ad05d8951dfe3a8af754490022e95e5f2"><div class="ttname"><a href="../../d0/dce/classshaka_1_1media_1_1RsaPrivateKey.html#ad05d8951dfe3a8af754490022e95e5f2">shaka::media::RsaPrivateKey::GenerateSignature</a></div><div class="ttdeci">bool GenerateSignature(const std::string &message, std::string *signature)</div><div class="ttdef"><b>Definition:</b> <a href="../../dc/dd9/rsa__key_8cc_source.html#l00127">rsa_key.cc:127</a></div></div>
|
|
<div class="ttc" id="aclassshaka_1_1media_1_1RsaPublicKey_html_ab9dcf591f3235b8f4eaa02886f9845e3"><div class="ttname"><a href="../../d9/d0c/classshaka_1_1media_1_1RsaPublicKey.html#ab9dcf591f3235b8f4eaa02886f9845e3">shaka::media::RsaPublicKey::Encrypt</a></div><div class="ttdeci">bool Encrypt(const std::string &clear_message, std::string *encrypted_message)</div><div class="ttdef"><b>Definition:</b> <a href="../../dc/dd9/rsa__key_8cc_source.html#l00176">rsa_key.cc:176</a></div></div>
|
|
<div class="ttc" id="aclassshaka_1_1media_1_1RsaPublicKey_html_aabe4a2f1541ca1e741305f58329e3881"><div class="ttname"><a href="../../d9/d0c/classshaka_1_1media_1_1RsaPublicKey.html#aabe4a2f1541ca1e741305f58329e3881">shaka::media::RsaPublicKey::Create</a></div><div class="ttdeci">static RsaPublicKey * Create(const std::string &serialized_key)</div><div class="ttdef"><b>Definition:</b> <a href="../../dc/dd9/rsa__key_8cc_source.html#l00171">rsa_key.cc:171</a></div></div>
|
|
<div class="ttc" id="aclassshaka_1_1media_1_1RsaPrivateKey_html_a89a475ffe2d96bfab09536b864038ca4"><div class="ttname"><a href="../../d0/dce/classshaka_1_1media_1_1RsaPrivateKey.html#a89a475ffe2d96bfab09536b864038ca4">shaka::media::RsaPrivateKey::Decrypt</a></div><div class="ttdeci">bool Decrypt(const std::string &encrypted_message, std::string *decrypted_message)</div><div class="ttdef"><b>Definition:</b> <a href="../../dc/dd9/rsa__key_8cc_source.html#l00101">rsa_key.cc:101</a></div></div>
|
|
<!-- start footer part -->
|
|
<hr class="footer"/><address class="footer"><small>
|
|
Generated on Tue Jun 22 2021 00:16:04 for Shaka Packager SDK by  <a href="http://www.doxygen.org/index.html">
|
|
<img class="footer" src="../../doxygen.png" alt="doxygen"/>
|
|
</a> 1.8.17
|
|
</small></address>
|
|
</body>
|
|
</html>
|