1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
/*************************************************
* EMSA1 Source File *
* (C) 1999-2005 The Botan Project *
*************************************************/
#include <botan/emsa.h>
#include <botan/lookup.h>
namespace Botan {
/*************************************************
* EMSA1 Update Operation *
*************************************************/
void EMSA1::update(const byte input[], u32bit length)
{
hash->update(input, length);
}
/*************************************************
* Return the raw (unencoded) data *
*************************************************/
SecureVector<byte> EMSA1::raw_data()
{
return hash->final();
}
/*************************************************
* EMSA1 Encode Operation *
*************************************************/
SecureVector<byte> EMSA1::encoding_of(const MemoryRegion<byte>& msg,
u32bit output_bits)
{
if(msg.size() != hash->OUTPUT_LENGTH)
throw Invalid_Argument("EMSA1::encoding_of: Invalid size for input");
if(msg.bits() <= output_bits)
return msg;
u32bit shift = msg.bits() - output_bits;
u32bit byte_shift = shift / 8, bit_shift = shift % 8;
SecureVector<byte> digest(msg.size() - byte_shift);
for(u32bit j = 0; j != msg.size() - byte_shift; j++)
digest[j] = msg[j];
if(bit_shift)
{
byte carry = 0;
for(u32bit j = 0; j != digest.size(); j++)
{
byte temp = digest[j];
digest[j] = (temp >> bit_shift) | carry;
carry = (temp << (8 - bit_shift));
}
}
return digest;
}
/*************************************************
* EMSA1 Decode/Verify Operation *
*************************************************/
bool EMSA1::verify(const MemoryRegion<byte>& coded,
const MemoryRegion<byte>& raw, u32bit key_bits) throw()
{
try {
SecureVector<byte> our_coding = encoding_of(raw, key_bits);
if(our_coding == coded) return true;
if(our_coding[0] != 0) return false;
if(our_coding.size() <= coded.size()) return false;
u32bit offset = 0;
while(our_coding[offset] == 0 && offset < our_coding.size())
offset++;
if(our_coding.size() - offset != coded.size())
return false;
for(u32bit j = 0; j != coded.size(); j++)
if(coded[j] != our_coding[j+offset])
return false;
return true;
}
catch(Invalid_Argument)
{
return false;
}
}
/*************************************************
* EMSA1 Constructor *
*************************************************/
EMSA1::EMSA1(const std::string& hash_name) :
hash(get_hash(hash_name))
{
}
}
|
