基于GMSSL的SM9签名，密钥交换，加密，解密

// // GSM9.c // DomesticCryptographyAlgorithm // // Created by zhangyazhou on 2018/12/24. // Copyright © 2018 zhangyazhou. All rights reserved. // #include "GSM9.h" //#include <stdlib.h> #include <string.h> //#include <stdio.h> //#include "./e_os.h" //# include <openssl/evp.h> #include <openssl/err.h> int sm9_test_verify(const char *id, unsigned char *sig, size_t siglen, const unsigned char *msg, size_t msglen, SM9PublicParameters *mpk){ int ret = 0; ret = SM9_verify(NID_sm3, msg, msglen, sig, siglen, mpk, id, strlen(id)); if (ret < 0) { ERR_print_errors_fp(stderr); goto end; } end: SM9PublicParameters_free(mpk); return ret; } int sm9_test_sign(const char *id, const unsigned char *msg, size_t msglen) { int ret = 0; SM9PublicParameters *mpk = NULL; SM9MasterSecret *msk = NULL; SM9PrivateKey *sk = NULL; unsigned char sig[256]; size_t siglen = sizeof(sig); if (!SM9_setup(NID_sm9bn256v1, NID_sm9sign, NID_sm9hash1_with_sm3, &mpk, &msk)) { ERR_print_errors_fp(stderr); goto end; } if (!(sk = SM9_extract_private_key(msk, id, strlen(id)))) { ERR_print_errors_fp(stderr); goto end; } if (!SM9_sign(NID_sm3, msg, msglen, sig, &siglen, sk)) { ERR_print_errors_fp(stderr); goto end; } // ret = SM9_verify(NID_sm3, msg, msglen, sig, siglen, mpk, id, strlen(id)); // if (ret < 0) { // ERR_print_errors_fp(stderr); // goto end; // } ret = sm9_test_verify(id, sig, siglen, msg, msglen,mpk); if (ret < 0) { ERR_print_errors_fp(stderr); goto end; } end: SM9MasterSecret_free(msk); SM9PrivateKey_free(sk); return ret; } int sm9_test_wrap(const char *id) { int ret = 0; SM9PublicParameters *mpk = NULL; SM9MasterSecret *msk = NULL; SM9PrivateKey *sk = NULL; unsigned char key[56] = {0}; unsigned char key2[56] = {0}; unsigned char C[65]; size_t Clen; if (!SM9_setup(NID_sm9bn256v1, NID_sm9encrypt, NID_sm9hash1_with_sm3, &mpk, &msk)) { goto end; } if (!(sk = SM9_extract_private_key(msk, id, strlen(id)))) { goto end; } if (!SM9_wrap_key(NID_sm9kdf_with_sm3, key, sizeof(key), C, &Clen, mpk, id, strlen(id))) { goto end; } if (!SM9_unwrap_key(NID_sm9kdf_with_sm3, key2, sizeof(key2), C, sizeof(C), sk)) { goto end; } if (memcmp(key, key2, sizeof(key2)) != 0) { goto end; } ret = 1; end: SM9PublicParameters_free(mpk); SM9MasterSecret_free(msk); SM9PrivateKey_free(sk); return ret; } int sm9_test_exch(const char *idA, const char *idB) { int ret = 0; SM9PublicParameters *mpk = NULL; SM9MasterSecret *msk = NULL; SM9PrivateKey *skA = NULL; SM9PrivateKey *skB = NULL; BIGNUM *rA = BN_new(); BIGNUM *rB = BN_new(); unsigned char RA[65]; unsigned char RB[65]; unsigned char gA[384]; unsigned char gB[384]; size_t RAlen = sizeof(RA); size_t RBlen = sizeof(RB); size_t gAlen = sizeof(gA); size_t gBlen = sizeof(gB); int type = NID_sm9kdf_with_sm3; unsigned char SKA[16]; unsigned char SKB[16]; unsigned char SA[32]; unsigned char SB[32]; unsigned char S2[32]; if (!SM9_setup(NID_sm9bn256v1, NID_sm9keyagreement, NID_sm9hash1_with_sm3, &mpk, &msk) || !(skA = SM9_extract_private_key(msk, idA, strlen(idA))) || !(skB = SM9_extract_private_key(msk, idB, strlen(idB)))) { ERR_print_errors_fp(stderr); goto end; } if (!SM9_generate_key_exchange(RA, &RAlen, rA, gA, &gAlen, idB, strlen(idB), skA, 1) || !SM9_generate_key_exchange(RB, &RBlen, rB, gB, &gBlen, idA, strlen(idA), skB, 0) || !SM9_compute_share_key_B(type, SKB, sizeof(SKB), SB, S2, rB, RB, RA, gB, idA, strlen(idA), skB) || !SM9_compute_share_key_A(type, SKA, sizeof(SKA), SA, SB, rA, RA, RB, gA, idB, strlen(idB), skA)) { ERR_print_errors_fp(stderr); goto end; } if (memcmp(SKA, SKA, sizeof(SKA)) != 0 || memcmp(SA, S2, sizeof(SA)) != 0) { goto end; } ret = 1; end: BN_free(rA); BN_free(rB); return ret; } unsigned char * sm9_test_dec(const unsigned char *cbuf, size_t clen, SM9PrivateKey *sk) { unsigned char *out_buf = NULL; unsigned char mbuf[1024] = {0}; size_t mlen; if (!SM9_decrypt(NID_sm9encrypt_with_sm3_xor, cbuf, clen, mbuf, &mlen, sk)) { ERR_print_errors_fp(stderr); goto end; } printf("%s\n",mbuf); out_buf = mbuf; end: SM9PrivateKey_free(sk); return out_buf; } unsigned char * sm9_test_enc(const char *id, const unsigned char *data, size_t datalen) { unsigned char *out_buf = NULL; SM9PublicParameters *mpk = NULL;//加密主公钥 SM9MasterSecret *msk = NULL;// 用户b的加密私钥 SM9PrivateKey *sk = NULL; //私钥 unsigned char *mbuf = NULL; unsigned char cbuf[1024] = {0}; //存放加密的密文 size_t clen, mlen = 0; if (!SM9_setup(NID_sm9bn256v1, NID_sm9encrypt, NID_sm9hash1_with_sm3, &mpk, &msk)) { // NID_sm9hash1_with_sm3 随机数加密主私钥 ERR_print_errors_fp(stderr); goto end; } if (!(sk = SM9_extract_private_key(msk, id, strlen(id)))) { //KGC 用加密主私钥和用户的标识生成用户的加密私钥 ERR_print_errors_fp(stderr); goto end; } if (!SM9_encrypt(NID_sm9encrypt_with_sm3_xor, data, datalen, cbuf, &clen, mpk, id, strlen(id))) {//用户主公钥加密 ERR_print_errors_fp(stderr); goto end; } printf("%s\n",cbuf); // if (!SM9_decrypt(NID_sm9encrypt_with_sm3_xor, cbuf, clen, // mbuf, &mlen, sk)) { // ERR_print_errors_fp(stderr); // goto end; // } // // if (mlen != datalen || memcmp(mbuf, data, datalen) != 0) { // goto end; // } mbuf = sm9_test_dec(cbuf, clen, sk);// 用户主私钥解密 printf("%s\n",mbuf); out_buf = mbuf; end: SM9PublicParameters_free(mpk); SM9MasterSecret_free(msk); // SM9PrivateKey_free(sk); return out_buf; }